Privacy Policy

1 Definitions

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• "ras77", "we", "us", or "our" refers to the operators of the ras77 online gaming platform at ras77.bio.
• "Personal Data" means any information that identifies or can reasonably be used to identify a living natural person, directly or in combination with other data.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, alteration, or deletion.
• "User", "you", or "your" refers to any individual who accesses or has registered an account on the ras77 platform.
• "KYC" (Know Your Customer) refers to the identity-verification process that ras77 undertakes to confirm a User's identity before processing withdrawals or as otherwise required.
• "Cookies" refers to small data files placed on your device by the ras77 website that help us recognise your browser and remember certain preferences or session states.
• "Third-Party Service Providers" means companies engaged by ras77 to process data on our behalf under strict contractual obligations, including payment processors, KYC verification partners, and analytics providers.

2 Data Controller

ras77 acts as the data controller in respect of all Personal Data collected through the ras77.bio platform. As data controller, ras77 determines the purposes and means of processing your Personal Data and is responsible for ensuring that such processing is carried out lawfully, fairly, and transparently.

All enquiries relating to data privacy, requests to exercise your rights, or concerns regarding this Privacy Policy should be directed to our privacy team at [email protected]. We aim to acknowledge all data-related requests within five (5) business days and to resolve them within thirty (30) calendar days of receipt.

3 Data We Collect

ras77 collects the following categories of Personal Data, depending on how you interact with our platform:

We do not collect sensitive special-category data such as racial or ethnic origin, religious beliefs, biometric data (beyond document photos required for KYC), political opinions, or health records, except where the User voluntarily discloses such information in a support communication.

4 How We Collect Data

ras77 collects Personal Data through the following methods:

• Direct submission: Data you enter into account registration forms, KYC document upload screens, deposit and withdrawal request forms, live-chat windows, and support email correspondences.
• Automated technical collection: Server logs, session cookies, pixel tags, and device-fingerprinting technologies that record technical and usage data each time you visit ras77.bio or interact with the platform.
• Third-party KYC partners: Identity and document verification services that cross-reference the details you provide against official databases to confirm your age (21+) and residential address within Indonesia.
• Payment processors: Financial institutions and e-wallet operators that relay transaction confirmation data, including deposit and withdrawal status, to our platform in real time.
• Analytics providers: Aggregated and anonymised usage statistics supplied by analytics tools to help us understand how Users navigate the platform and where performance improvements are needed.

5 Legal Basis for Processing

ras77 processes your Personal Data on one or more of the following legal bases:

• Contractual necessity: Processing is required to create and manage your ras77 account, to process IDR deposits and withdrawals via your chosen payment methods, to settle bets and game outcomes, and to deliver customer support.
• Legal obligation: Processing is required to comply with internationally recognised anti-money-laundering (AML) regulations, Know Your Customer (KYC) standards, and responsible gaming obligations, including age-verification requirements (21+).
• Legitimate interests: Processing is necessary for ras77's legitimate interests in preventing fraud, protecting platform security, preventing account abuse, and improving the quality of our services — provided such interests are not overridden by your privacy rights.
• Consent: Where ras77 seeks your consent before processing (for example, for optional marketing communications or non-essential analytics cookies), we will obtain that consent through a clear, affirmative action and you may withdraw it at any time without affecting the lawfulness of prior processing.

6 How We Use Your Data

ras77 uses the Personal Data we collect for the following specific purposes:

• Account management: Creating, maintaining, and securing your ras77 account; authenticating your login sessions; sending account-related notifications including deposit confirmations, withdrawal approvals, and password-reset links.
• Payment processing: Facilitating IDR deposits and withdrawals through your selected payment method (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja, Visa, Mastercard); reconciling transaction records; and issuing refunds where applicable.
• KYC and compliance: Verifying your identity, age, and eligibility to use ras77; fulfilling our obligations under international AML frameworks; and retaining records as required by our gaming licence conditions.
• Platform delivery: Serving game content from our third-party studio partners (including Pragmatic Play, Evolution Gaming, PG Soft, NetEnt, and Spribe); personalising your game lobby based on your play history; and delivering sportsbook markets relevant to your interests, including BRI Liga 1 matches and international competitions.
• Responsible gaming: Enforcing the deposit limits, loss limits, session reminders, and self-exclusion periods that you have set; identifying patterns of play that may indicate problem gambling behaviour; and proactively reaching out where our monitoring systems flag a concern.
• Fraud prevention and security: Detecting and investigating suspicious account activity, multi-accounting, bonus abuse, and payment fraud; protecting our platform from automated bots and scripted betting tools.
• Customer support: Responding to your queries, complaints, and account requests through live chat and email; maintaining records of support interactions for quality assurance and dispute resolution.
• Marketing communications (consent-based only): Sending you promotional offers, bonus announcements, and seasonal promotions — such as those aligned with Ramadhan, Idul Fitri, or Indonesian Independence Day (17 August) — where you have opted in to receive such communications. You may opt out at any time.
• Platform improvement: Analysing aggregated and anonymised usage data to identify technical issues, improve navigation, and develop new features for Indonesian players.

7 Data Sharing & Disclosure

ras77 may share your Personal Data with the following categories of recipients, strictly on a need-to-know basis and subject to binding confidentiality and data-processing agreements:

• KYC and identity verification partners: Third-party services engaged to verify the authenticity of the identity documents you submit during the KYC process. These partners process your document data solely for verification purposes and are prohibited from using it for any other purpose.
• Payment processors and financial institutions: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata) and e-wallet operators (OVO, DANA, GoPay, ShopeePay, LinkAja) and international card networks (Visa, Mastercard) as required to execute your deposit and withdrawal instructions.
• Game content providers: Third-party game studios (including Pragmatic Play, Evolution Gaming, PG Soft, NetEnt, Microgaming, and Spribe) receive limited technical session data required to authenticate your access to their games. These studios do not receive your full identity or financial data.
• Analytics and performance providers: Services that process anonymised and aggregated usage data to help ras77 measure platform performance. No personally identifiable data is shared for analytics purposes.
• Regulatory and law enforcement authorities: Where ras77 is required by its gaming licence conditions, a court order, or applicable international law to disclose information to a regulator, financial intelligence unit, or law enforcement body, we will do so. We will notify you of such a disclosure unless prohibited by law from doing so.
• Business successors: In the event of a merger, acquisition, or sale of the ras77 business, your Personal Data may be transferred to the acquiring entity, subject to the same privacy protections described in this Policy.

8 Payment Data & Financial Privacy

Given the financial nature of the ras77 platform, payment data receives a heightened level of protection:

• Full card numbers (Visa, Mastercard) are never stored on ras77 servers. Only the last four digits and card expiry are retained for display purposes. Full card data is processed exclusively by our PCI-DSS-compliant payment gateway partners.
• Bank account numbers (BCA, BRI, BNI, Mandiri, and other Indonesian banks) are stored in encrypted form and are only decrypted by authorised payment-processing systems at the point of initiating a withdrawal.
• E-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja) are stored with the same encryption standards applied to bank account data and are used solely for the purpose of processing your IDR withdrawals.
• All financial data is never used for marketing profiling — your payment method choices and transaction amounts are used exclusively for payment processing, fraud prevention, and AML compliance.
• ras77 will only process withdrawals to a payment account that has been verified in your own name. Third-party withdrawals are prohibited to protect against money laundering and to safeguard your funds.

9 Cookies & Tracking Technologies

ras77 uses cookies and similar tracking technologies to operate the platform effectively and to improve your experience. The cookies we use fall into the following categories:

You may manage your cookie preferences through your browser settings at any time. Disabling strictly necessary or functional cookies may impair your ability to log in and use the platform. For analytics and marketing cookies, you may also withdraw consent by contacting us at [email protected].

10 Data Retention

ras77 retains your Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by our gaming licence conditions and applicable international regulations. The following indicative retention periods apply:

• Account and identity data: Retained for the duration of your active account relationship with ras77, and for a minimum of five (5) years following account closure, to satisfy AML record-keeping obligations.
• Transaction and financial data: Retained for a minimum of five (5) years from the date of each transaction, in line with standard financial record-keeping requirements under international AML frameworks.
• KYC documents: Retained for the duration of your account and for five (5) years post-closure. Physical document images are stored in encrypted form; access is restricted to compliance personnel only.
• Support communications: Retained for two (2) years from the date of the last interaction, for quality assurance and dispute resolution purposes.
• Technical and usage data (logs): Retained for up to thirteen (13) months in raw form, after which they are anonymised and retained in aggregate form indefinitely for analytical purposes.
• Marketing consent records: Retained for as long as you hold an active account or until you withdraw consent, whichever is earlier.

Upon expiry of the applicable retention period, Personal Data is securely deleted or permanently anonymised. You may request early deletion of certain categories of your data by exercising your rights as described in Section 12 below, subject to any overriding legal obligations that require continued retention.

11 Security Measures

ras77 applies a comprehensive, layered approach to data security. The technical and organisational measures we have in place include:

• 256-bit SSL/TLS encryption on all data transmitted between your browser or device and the ras77 platform, ensuring that your login credentials, payment details, and session activity cannot be intercepted in transit.
• Encryption at rest for all sensitive Personal Data stored on ras77 servers, including KYC documents, bank account numbers, and e-wallet identifiers.
• Access controls and least-privilege principles: Only personnel with a verified operational need are granted access to Personal Data, and all access events are logged and subject to regular audit.
• Device fingerprinting and anomaly detection: Our platform monitors login events for unusual IP addresses, device changes, and geographic anomalies consistent with account takeover attempts, triggering automatic security challenges where warranted.
• Rate limiting and brute-force protection: All authentication endpoints are protected by request-rate limiting to prevent automated credential-stuffing attacks.
• Regular security assessments: ras77 conducts periodic vulnerability assessments and penetration tests of its platform infrastructure to identify and remediate security weaknesses proactively.
• Data breach response: In the event of a confirmed data breach that is likely to result in a risk to your rights and freedoms, ras77 will notify affected Users without undue delay and take all reasonable steps to contain and remediate the breach.

12 Your Data Rights

As a User of the ras77 platform, you hold the following rights in respect of your Personal Data. To exercise any of these rights, please contact us at [email protected] with the subject line "Data Rights Request" and your registered account email address:

• Right of Access: You have the right to request a copy of the Personal Data ras77 holds about you, along with information about how it is being processed. We will provide this in a structured, commonly used format within thirty (30) days of a verified request.
• Right to Rectification: If any of the Personal Data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated without undue delay.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your Personal Data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (for consent-based processing), or where the processing is unlawful. This right is subject to our overriding legal obligations to retain certain data (e.g., AML records for five years post-closure).
• Right to Restrict Processing: You may request that we limit how we process your Personal Data in certain circumstances — for example, while the accuracy of a data point is under dispute.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity and is carried out by automated means, you have the right to receive your Personal Data in a structured, machine-readable format and to transmit it to another controller.
• Right to Object: You have the right to object to processing carried out on the basis of ras77's legitimate interests, including profiling for fraud detection, and to opt out of direct marketing communications at any time.
• Right to Withdraw Consent: Where we rely on your consent as the legal basis for processing, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

ras77 will acknowledge all data rights requests within five (5) business days. Complex requests may take up to thirty (30) calendar days to fully resolve. We may ask you to verify your identity before actioning a request to protect against fraudulent data-access attempts.

13 Minors & Age Restriction

Age verification is a mandatory step in the ras77 registration and KYC process. We verify date-of-birth at registration and may request government-issued ID (Indonesian KTP or passport) to confirm that the User meets the 21+ minimum age requirement before the first withdrawal is processed.

If ras77 discovers or is informed that a User is under 21 years of age, we will immediately suspend the account, withhold any associated funds pending investigation, and permanently close the account. Any deposits made by an underage user will be returned to the verified payment source, less any amounts that cannot be recovered due to gaming activity already completed. No bonus funds will be returned.

If you are the parent or guardian of a minor and believe they have registered with ras77, please contact us immediately at [email protected] so that the account can be investigated and closed without delay.

14 Third-Party Links & Integrations

The ras77 platform integrates with third-party game studios and payment processors as described in this Policy. While ras77 conducts due diligence on all such partners and requires them to maintain appropriate data-protection standards contractually, we are not responsible for the privacy practices of third parties operating their own independent platforms or services.

The ras77.bio website does not contain links to unrelated external websites. All links on the platform direct Users to internal pages within the ras77 ecosystem. If you arrive at ras77.bio via an external link or affiliate referral, please be aware that those external sites operate under their own privacy policies, for which ras77 accepts no responsibility.

15 Changes to This Privacy Policy

ras77 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data-processing practices, applicable regulations, or platform functionality. When material changes are made, we will notify you by one or more of the following methods:

• Displaying a prominent notice on the ras77 platform upon your next login session after the update takes effect.
• Sending a notification to the email address registered to your account.
• Updating the "Effective Date" and "Last Reviewed" dates at the top of this page.

Your continued use of the ras77 platform after the revised Privacy Policy has been published and notified constitutes your acknowledgement of the updated terms. We encourage you to review this page periodically to remain informed of how ras77 protects your data. If a proposed change is material and requires your renewed consent, we will seek that consent before the change takes effect for your account.

16 Contact Us

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a concern about how ras77 handles your Personal Data, please reach out to us through the following channels:

• Email: [email protected] — please include "Privacy Policy" or "Data Rights Request" in the subject line, along with your registered account email address, so we can route your enquiry to the correct team promptly.
• Live Chat: Available 24 hours a day, 7 days a week, directly through the ras77 platform after logging in to your account. Our Indonesian-speaking support agents can handle data enquiries in addition to general account support.

We are committed to resolving all privacy-related enquiries fairly and promptly. Our target response time for email enquiries is within 24 hours during standard WIB (Western Indonesia Time, UTC+7) operating periods, with full resolution of data-rights requests within 30 calendar days.