This Privacy Policy explains what personal data hit77 collects when you use our platform, how we use and protect that data, and what rights you hold as a player. We are committed to handling your information with the transparency and care it deserves.
Six core commitments that underpin the way hit77 handles the personal data of every player on our platform.
Every data transaction on hit77 — from account registration to payment processing — travels over a TLS-encrypted connection. Your personal details, banking credentials, and KYC documents are never transmitted or stored in plain text.
hit77 does not sell, rent, or trade your personal information to third-party marketers or data brokers under any circumstances. Your data is used solely for the operational, security, and regulatory purposes described in this policy.
You have the right to access, correct, export, and request deletion of your personal data at any time. Submit a data request to our support team and we will respond within 30 days in line with applicable data protection standards.
hit77 uses cookies and similar tracking technologies strictly for platform functionality, session security, and aggregate analytics. We do not use third-party advertising cookies or behavioral retargeting pixels on our platform.
Identity documents submitted for KYC verification are stored in an encrypted, access-controlled document vault. Only authorized compliance team members can access your documents, and all access events are logged and audited.
hit77 processes player data in accordance with internationally recognized Anti-Money Laundering (AML) and Know Your Customer (KYC) standards. Data shared with regulators or law-enforcement agencies is limited to the minimum required by applicable law.
hit77 ("we", "us", "our") operates the online betting and gaming platform accessible at https://hit77.cam. This Privacy Policy describes the types of personal data we collect from players and visitors, the purposes for which we use that data, the circumstances under which we may share it, and the rights available to you as a data subject.
This policy applies to all personal data processed by hit77 in connection with your use of the Platform — including data collected during account registration, identity verification (KYC), financial transactions, gameplay, customer-support interactions, and general browsing of the hit77 website.
By creating a hit77 account or by continuing to use the Platform after this policy has been published, you acknowledge that you have read and understood its contents. If you do not accept this policy, you must discontinue your use of the Platform and may request account closure by contacting our support team.
The following definitions apply throughout this Privacy Policy:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information that identifies or can reasonably identify a living individual, including name, email address, mobile number, national ID number, device identifiers, and IP address. |
| "Processing" | Any operation performed on Personal Data, including collection, storage, use, disclosure, transfer, or deletion. |
| "Controller" | hit77, the entity that determines the purposes and means by which Personal Data is processed. |
| "Processor" | A third party that processes Personal Data on behalf of hit77 under a written data-processing agreement (e.g., payment gateways, cloud hosting providers, KYC verification vendors). |
| "Player" / "You" | Any individual who has registered for or is using a hit77 player account. |
| "KYC Documents" | Identity documents submitted by a Player for age and identity verification, including government-issued photo ID, proof of address, and payment source confirmation. |
| "Sensitive Data" | A subset of Personal Data requiring enhanced protection, including financial account details, national identification numbers, and biometric data where applicable. |
hit77 collects personal data through several channels. The categories below describe what we collect and the context in which each category arises.
3.1 Registration Data
When you create a hit77 account, we collect your full legal name, date of birth, email address, Indonesian mobile number, and a password of your choosing. This information is mandatory — without it, we cannot create or maintain an account on your behalf.
3.2 Identity Verification (KYC) Data
To comply with our licensing obligations and to verify that you meet the 21+ age requirement, we collect scanned copies or photographs of your government-issued photo ID (Indonesian KTP, passport, or SIM), a live selfie photograph, and proof of your payment method. These documents constitute Sensitive Data and are subject to the enhanced protections described in Section 10.
3.3 Financial Data
We record details of every deposit and withdrawal transaction you make, including the payment method used (e.g., BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja), the transaction amount in IDR, timestamps, and reference codes. We do not store full bank account numbers or e-wallet PINs — these are handled directly by the relevant payment processor under their own security and privacy frameworks.
3.4 Gameplay & Betting Data
We maintain a full record of your wagering activity on the Platform, including bet selections, stake amounts, odds accepted, game sessions, win/loss outcomes, and bonus usage. This data is necessary for account management, dispute resolution, responsible gaming monitoring, and regulatory reporting.
3.5 Device & Technical Data
When you access the Platform, we automatically collect certain technical information: your IP address, browser type and version, operating system, device model, screen resolution, referring URL, session duration, and pages visited. This data is collected through server logs and first-party cookies and is used primarily for security, fraud prevention, and aggregate analytics.
3.6 Customer Support Data
If you contact our support team via live chat, email ([email protected]), or WhatsApp, we retain a record of the conversation, including any personal data you share within it, for quality assurance, dispute resolution, and compliance purposes.
3.7 Voluntary Survey & Feedback Data
From time to time, we may invite you to complete optional satisfaction surveys or provide feedback on Platform features. Participation is entirely voluntary. Responses are collected in aggregate and are not linked to your individual player profile unless you expressly choose to identify yourself.
hit77 uses the personal data we collect only for the purposes set out below. We do not use your data for purposes incompatible with those stated here without first obtaining your consent or establishing a new lawful basis.
| Purpose | Data Used | Lawful Basis |
|---|---|---|
| Account creation & management | Registration data, device data | Contract performance |
| Age & identity verification (KYC) | KYC documents, registration data | Legal obligation |
| Payment processing & fraud prevention | Financial data, device data | Contract performance, legal obligation |
| Gameplay delivery & bet settlement | Gameplay data, financial data | Contract performance |
| Responsible gaming monitoring | Gameplay data, financial data | Legal obligation, legitimate interest |
| AML & regulatory compliance | All categories as required | Legal obligation |
| Customer support & dispute resolution | Support data, account data | Contract performance, legitimate interest |
| Platform security & technical integrity | Device data, gameplay data | Legitimate interest |
| Aggregate analytics & product improvement | Anonymized device & gameplay data | Legitimate interest |
| Promotional communications (opt-in only) | Registration data, gameplay data | Consent |
Where we rely on legitimate interests as our lawful basis, we have assessed that our interests are not overridden by your rights and freedoms. You may object to processing based on legitimate interests at any time — see Section 9 for how to exercise this right.
hit77 processes your personal data under one or more of the following legal bases, depending on the specific processing activity involved:
hit77 does not sell, rent, or trade your personal data to any third party. We may share your data only in the circumstances described below, and only to the extent strictly necessary for each purpose.
6.1 Service Providers (Processors)
We engage carefully vetted third-party service providers to support Platform operations. These include cloud infrastructure providers, payment gateway operators (processing IDR transactions via BCA, BRI, BNI, Mandiri, and the major Indonesian e-wallets), KYC document verification vendors, fraud-detection platform providers, and customer-support software providers. Each Processor is bound by a written data-processing agreement that restricts their use of your data to the specific service they provide to hit77.
6.2 Game Content Providers
Certain games available on the hit77 Platform are supplied by licensed third-party studios — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft. These providers may receive a player identifier and session token to facilitate gameplay. They do not receive your full name, contact details, or financial data unless required for their own regulatory obligations under a separate, explicit disclosure.
6.3 Regulatory & Law-Enforcement Authorities
We may disclose personal data to regulators, tax authorities, law-enforcement agencies, or courts where we are legally required to do so. In all such cases, we disclose the minimum data necessary to satisfy the legal obligation and, where permitted by law, we will notify you of the disclosure.
6.4 Corporate Transactions
In the event that hit77 undergoes a merger, acquisition, restructuring, or sale of assets, your personal data may be transferred to the successor entity as part of that transaction. We will provide advance notice of any such transfer and ensure the receiving entity is bound by data-protection obligations at least equivalent to those in this policy.
6.5 Aggregate & Anonymized Data
We may share aggregated, de-identified statistical data (from which individual players cannot be identified) with industry research partners, analytics providers, or potential business partners. This data does not constitute personal data and is not subject to the restrictions in this section.
hit77 uses cookies and similar technologies (local storage, session tokens) on the Platform. The table below summarizes the categories of cookies we deploy and their respective purposes.
| Cookie Type | Purpose | Duration | Can Be Disabled? |
|---|---|---|---|
| Strictly Necessary | Session management, authentication, security tokens, fraud-prevention signals | Session / up to 24 hrs | No — required for Platform function |
| Functional | Remembering language preference, last-visited game category, responsible gaming settings | Up to 90 days | Yes, but may affect experience |
| Analytics | Aggregate page-view counts, feature usage metrics (no personally identifiable data shared externally) | Up to 13 months | Yes via account settings |
hit77 does not deploy third-party advertising cookies, social-media pixel trackers, or behavioral retargeting technologies on the Platform. You can manage functional and analytics cookies through your account preferences at any time. Disabling strictly necessary cookies will impair or prevent access to the Platform.
hit77 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law and licensing obligations. The table below sets out our standard retention periods by data category.
| Data Category | Retention Period | Basis |
|---|---|---|
| Account & Registration Data | Duration of account + 5 years after closure | Legal obligation (AML / KYC regulations) |
| KYC Documents | Duration of account + 5 years after closure | Legal obligation |
| Transaction & Financial Records | Duration of account + 7 years after closure | Legal obligation (financial record-keeping) |
| Gameplay & Betting History | Duration of account + 5 years after closure | Legal obligation, dispute resolution |
| Customer Support Records | 3 years from last interaction | Legitimate interest (dispute resolution) |
| Device & Technical Logs | 90 days (rolling) | Legitimate interest (security) |
| Marketing Preference Records | Until consent withdrawn + 2 years | Consent, legitimate interest |
When the applicable retention period expires, personal data is either permanently deleted from our systems or irrevocably anonymized so that it can no longer be associated with any individual. Where deletion is not immediately practicable due to backup cycles, the data is isolated and protected from further active processing until it can be deleted.
Depending on the laws applicable to your circumstances, you may hold one or more of the rights described below with respect to the personal data hit77 holds about you. To exercise any of these rights, please contact our support team at [email protected] with the subject line "Data Rights Request". We will acknowledge your request within 3 business days and respond in full within 30 calendar days.
Request a copy of all personal data hit77 holds about you, along with details of how it is used.
Ask us to correct any inaccurate or incomplete personal data in your player profile.
Request deletion of your personal data where it is no longer necessary for the purpose it was collected and no legal obligation requires us to retain it.
Ask us to limit how we use your data while a dispute about its accuracy or our lawful basis is being resolved.
Receive a structured, machine-readable copy of the personal data you provided to us, for transfer to another service.
Object to processing based on our legitimate interests, including direct marketing and certain analytics activities.
Where processing relies on your consent (e.g., promotional emails), withdraw it at any time without affecting prior lawful processing.
Request human review of any fully automated decision that significantly affects your account or access to our services.
We will not charge a fee for handling your request unless it is manifestly unfounded or excessive. If we are unable to comply with your request — for example, because a legal obligation requires us to retain the data — we will explain the reason in writing. If you are dissatisfied with our response, you have the right to lodge a complaint with the relevant data-protection authority in your jurisdiction.
hit77 implements a layered security framework designed to protect your personal data against unauthorized access, accidental loss, alteration, or destruction. Our technical and organizational measures include, but are not limited to:
hit77 is an internationally operated platform. Some of the service providers we use — including cloud infrastructure and KYC verification vendors — may process your data on servers located outside Indonesia. Where such transfers occur, hit77 ensures that appropriate safeguards are in place to protect your data to a standard at least equivalent to that applied within Indonesia.
Safeguards we employ for international transfers include contractual data-protection clauses in all Processor agreements, selection of vendors who maintain internationally recognized security certifications (such as ISO 27001), and ongoing transfer impact assessments where required.
By using the hit77 Platform, you acknowledge that your personal data may be transferred to, stored in, and processed in jurisdictions outside your country of residence. We take all reasonable steps to ensure that such transfers are lawful and that your data remains adequately protected throughout.
The hit77 Platform is strictly intended for adults aged 21 and over. hit77 does not knowingly collect personal data from any person under the age of 21. If we become aware that we have inadvertently collected data from an under-age individual, we will take immediate steps to close the account, delete the associated personal data, and return any deposited funds to the source payment method.
If you are a parent or guardian and believe that a minor has created a hit77 account using your or their personal details, please contact our support team immediately at [email protected]. We will investigate the matter promptly and take appropriate action.
We encourage parents and guardians to make use of parental-control software to prevent minors from accessing gambling websites. For guidance on available tools, please visit our Responsible Gaming page.
hit77 may update this Privacy Policy from time to time to reflect changes in our data-processing practices, new legal or regulatory requirements, or improvements to the Platform. When we make material changes, we will post a revised version on this page with an updated "Last Updated" date and, where the changes are significant, notify you by email to your registered address.
We encourage you to review this page periodically so that you remain informed about how we protect your personal data. Your continued use of the Platform following the publication of any amendment constitutes your acceptance of the revised policy. If you do not agree with the changes, you should cease using the Platform and may request account closure by contacting our support team.
The version of this Privacy Policy in effect at the time of any data-processing activity shall govern that activity. Prior versions of this policy are available on request from our support team.
For any questions about this Privacy Policy, to exercise your data rights, or to raise a privacy concern, please contact hit77 through the following channels:
For broader information about the hit77 platform, our player commitments, and our operational background, please visit the About Us page. For answers to common account and gameplay questions, see our FAQ.
Our support team is available around the clock to answer privacy questions, handle data rights requests, and help you manage your account preferences.