Your personal data belongs to you. This policy explains exactly what opo77 collects, why we collect it, how we protect it, and the rights you hold over it as a member of our platform.
These highlights summarise our core privacy commitments. They do not replace the full policy below, which all members are required to read before registering an opo77 account.
All data transmitted between your device and the opo77 platform is protected by 256-bit SSL/TLS encryption — the same standard applied by BCA and other major Indonesian banks to their digital banking services. Your account credentials, payment details, and personal information are never transmitted in plain text.
opo77 does not sell, rent, or trade your personal data to any unaffiliated third party for their own marketing or commercial purposes. Your data is shared only with service partners who are directly involved in delivering the opo77 platform services, under strict contractual data protection obligations.
opo77 collects only the personal data that is genuinely necessary to operate your account, process transactions, fulfil KYC obligations, and deliver the services you use. We do not collect data speculatively or for purposes that are not directly related to your membership and use of the platform.
As an opo77 member, you have the right to access, correct, and request deletion of your personal data. You may also object to certain forms of processing, request data portability, and withdraw marketing consent at any time. All such requests are handled by the 24/7 support team within 30 days.
Member data is stored on secured servers with restricted access controls, regular vulnerability assessments, and intrusion detection systems. Passwords are stored using bcrypt hashing and are never stored or transmitted in recoverable plain-text form. Access to member data is limited to authorised opo77 personnel on a need-to-know basis.
In the event of a data security breach that is likely to result in a risk to your rights or freedoms, opo77 will notify affected members via their registered contact details as promptly as technically feasible. We maintain an incident response plan and conduct regular security drills to minimise breach likelihood and impact.
opo77 ("we", "us", "the Platform") operates the online betting and gaming platform accessible at opo77.bet. In the course of providing our services to members in Indonesia, we collect, process, and store personal data. This Privacy Policy describes our practices with respect to that data: what we collect, why, how we protect it, who we share it with, how long we keep it, and what rights you hold over it.
This policy applies to all personal data collected from members and prospective members through the opo77 website, mobile web experience, live chat interface, email correspondence, and any other channel through which you interact with opo77. By registering an account or using any opo77 service, you acknowledge that you have read and understood this Privacy Policy.
This Privacy Policy should be read together with opo77's Terms & Conditions and Responsible Gaming Policy, all of which govern your use of the platform.
Data Controller: For the purposes of this Privacy Policy, opo77 is the data controller responsible for the personal data you provide when registering and using the platform. Questions regarding this policy or your data rights should be directed to [email protected].
| Term | Meaning |
|---|---|
| "Personal Data" | Any information that identifies or can reasonably be used to identify a living individual, including but not limited to name, Indonesian mobile number, email address, national identity number (KTP number), IP address, and device identifiers. |
| "Processing" | Any operation performed on personal data, including collection, recording, storage, adaptation, retrieval, use, disclosure, transmission, restriction, erasure, or destruction. |
| "Member" / "You" | Any individual who has registered an account on the opo77 platform or who interacts with the platform in any way, including prospective members who have initiated but not completed registration. |
| "Service Partners" | Third-party providers who deliver services integral to the opo77 platform, including game studios (e.g., Evolution Gaming, Pragmatic Play), payment processors (e.g., BCA, OVO, DANA), KYC verification providers, and cloud infrastructure providers. |
| "Cookies" | Small text files placed on your device by the opo77 platform or third-party analytics tools to store session information, preferences, and usage statistics. |
| "KYC" | Know Your Customer — the identity verification process requiring submission of government-issued identity documents (KTP or equivalent) to confirm a member's age, identity, and eligibility to use the platform. |
opo77 collects the following categories of personal data from members:
| Category | Examples of Data Collected |
|---|---|
| Identity Data | Full legal name as it appears on government-issued ID, date of birth, nationality, KTP number (Indonesian National Identity Card number). |
| Contact Data | Indonesian mobile number (+62 format), email address (where provided voluntarily for support correspondence). |
| Account Data | Username, hashed password, account registration date, account status, preferred language, and session history. |
| Financial Data | Bank account name, bank name (BCA, BRI, BNI, Mandiri, etc.), registered e-wallet details (OVO, DANA, GoPay, ShopeePay, LinkAja), deposit amounts, withdrawal amounts, transaction timestamps, and wallet balance history. |
| Transactional Data | Wager history, game session records, bet amounts, outcomes, bonus activations, and promotional participation records. |
| Technical Data | IP address, device type, operating system, browser type and version, screen resolution, session duration, pages visited, and referring URL. |
| KYC Documents | Scanned or photographed copies of your KTP or other government-issued identity documents submitted during the identity verification process. |
| Communications Data | Records of live chat transcripts, email correspondence, and any other written communication between you and the opo77 support team. |
Sensitive data: opo77 does not intentionally collect sensitive personal data such as racial or ethnic origin, religious beliefs, health information, or political opinions. If any such information is inadvertently included in communications you send to opo77 support, it will not be used for any processing purpose and will be deleted from our records.
The majority of personal data opo77 holds about you is provided directly by you in the following circumstances:
When you use the opo77 platform, we automatically collect technical and usage data through server logs, session tracking technology, and cookies. This includes your IP address, device identifiers, browser characteristics, and a record of the pages you visit and actions you take on the platform. This data is collected for security, fraud prevention, and platform optimisation purposes.
In some circumstances, opo77 may receive personal data about you from third-party sources, including:
opo77 processes your personal data for the following specific purposes:
opo77 processes your personal data on the following legal grounds:
opo77 shares personal data with trusted service partners only to the extent necessary to deliver the services you use. All service partners are contractually bound to process your data solely on opo77's instructions and to maintain data security standards equivalent to those applied by opo77. Service partner categories include:
opo77 may disclose personal data to competent authorities, regulatory bodies, or law enforcement agencies where required to do so by law, court order, or regulatory instruction. opo77 will, where legally permitted, notify the affected member of such a disclosure request before complying.
opo77 does not sell, rent, licence, or otherwise transfer your personal data to any unaffiliated third party for their own commercial or marketing purposes. This prohibition applies regardless of any compensation that might be offered for such a transfer.
opo77's commitment: Your data is used to run your account and keep the platform secure — not to generate advertising revenue or to build commercial profiles for sale to data brokers.
Some of opo77's service partners — including game studios and cloud infrastructure providers — operate servers or processing facilities outside Indonesia. As a result, your personal data may be transferred to and processed in jurisdictions other than Indonesia. Where such transfers occur, opo77 ensures that appropriate contractual safeguards are in place to protect your data to a standard equivalent to that described in this Privacy Policy.
opo77 does not transfer KYC identity documents internationally unless required to fulfil a specific verification function, in which case the transfer is made to a contracted KYC provider under a data processing agreement that prohibits further transfer or use beyond the verification purpose.
opo77 retains your personal data for as long as your account remains active and for a defined period thereafter, as follows:
| Data Category | Retention Period |
|---|---|
| Account Registration Data | Duration of account activity plus 5 years from account closure date. |
| Financial Transaction Records | 7 years from the date of each transaction, in compliance with applicable financial record-keeping obligations. |
| KYC Identity Documents | 5 years from the date of verification or from account closure, whichever is later. |
| Live Chat and Email Correspondence | 3 years from the date of the relevant communication. |
| Technical / Log Data | 12 months from the date of collection, unless retained for an ongoing fraud or security investigation. |
| Marketing Consent Records | Duration of consent plus 3 years from withdrawal of consent, as evidence of the consent given. |
Upon expiry of the applicable retention period, personal data is deleted or anonymised in a manner that prevents recovery or reconstruction. Requests for early deletion are handled in accordance with your rights under Section 12.
opo77 applies the following technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction:
Your responsibility: While opo77 takes extensive measures to protect your data, the security of your account also depends on the strength and confidentiality of your password and OTP codes. opo77 will never ask for your password or OTP via any channel. If you receive such a request purporting to be from opo77, treat it as fraudulent and report it to [email protected] immediately.
Cookies are small text files placed on your device when you visit the opo77 platform. They are used to maintain your login session, remember your preferences, and collect anonymised usage statistics that help us improve the platform.
You may disable non-essential cookies through your browser settings. Most modern browsers provide granular cookie management tools. Note that disabling strictly necessary cookies will prevent you from logging in to the opo77 platform. Disabling analytics cookies will not affect your ability to use any platform feature.
As an opo77 member, you hold the following rights with respect to your personal data. All rights requests should be submitted to the opo77 support team and will be responded to within 30 calendar days:
You have the right to request a copy of all personal data opo77 holds about you, along with information about how it is processed, the purposes for which it is used, and who it has been shared with. Access requests are fulfilled free of charge for the first request in any 12-month period.
If any personal data opo77 holds about you is inaccurate or incomplete, you have the right to request that we correct or complete it. Identity-critical data (name, date of birth, KTP number) can only be corrected following successful re-submission of KYC documents.
You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where processing was unlawful. This right is subject to legal retention obligations — financial transaction records, for example, must be retained for the period specified in Section 9 regardless of an erasure request.
You may request that opo77 restrict the processing of your data in certain circumstances — for example, while the accuracy of data you have contested is being verified, or where you have objected to processing and that objection is under review.
You have the right to receive a copy of the personal data you provided to opo77 in a structured, commonly used, machine-readable format (such as CSV or JSON), and to request that this data be transmitted directly to another data controller where technically feasible.
You may object to the processing of your personal data where opo77 is relying on legitimate interests as the legal basis. opo77 will cease that processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms. You may also object at any time to processing for direct marketing purposes, with immediate effect.
Where opo77 processes your data on the basis of your consent — for example, for marketing communications — you may withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal. To withdraw consent, contact the support team via live chat or email.
The opo77 platform is strictly for adults aged 21 years and over. opo77 does not knowingly collect personal data from any person under the age of 21. Age verification is conducted as part of the KYC process for all members.
If opo77 discovers that it has inadvertently collected personal data from a person under 21, that data will be immediately deleted, the associated account will be closed, and any deposits will be returned to the originating payment account. Parents and guardians who believe a minor may have registered on the opo77 platform should contact the support team immediately at [email protected].
21+ Only: opo77 enforces its minimum age requirement strictly. All registrations are subject to age verification, and accounts that fail KYC age verification will be closed with deposits returned.
With your consent, opo77 may send promotional offers, bonus notifications, and platform updates to your registered Indonesian mobile number via SMS or messaging applications. Marketing consent is collected at registration and is entirely optional — it has no effect on your access to any opo77 service or on the terms of any bonus to which you are entitled based on your account activity.
You may withdraw marketing consent at any time by:
Withdrawal of marketing consent is processed within 5 business days. Transactional communications — such as deposit confirmations, withdrawal notifications, OTP codes, and support responses — are not affected by a marketing opt-out and will continue to be sent as they are necessary for account operation.
opo77 reserves the right to update this Privacy Policy at any time. Material changes — those that significantly affect your rights or the way we process your data — will be communicated to members via notification on the platform or via SMS to the registered mobile number at least 7 calendar days before the change takes effect.
Non-material changes, such as clarifications of existing practices or corrections of typographical errors, may take effect without prior notice. The version number and last-updated date at the top of this page will always reflect the currency of the document. The most current version of this Privacy Policy is always accessible at opo77.bet/privacy-policy.
Continued use of the opo77 platform following the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. If you do not accept a material amendment, you should close your account before the effective date and withdraw any remaining balance.
To exercise any of the data rights described in Section 12, or to raise any question or concern about how opo77 handles your personal data, please contact the support team through the following channels:
opo77 will acknowledge all privacy-related requests within 48 hours and will provide a substantive response within 30 calendar days. Where a request is complex or involves a large volume of data, we may extend this period by a further 60 days and will notify you accordingly.
If you are not satisfied with opo77's response to a privacy request or concern, you have the right to escalate the complaint through opo77's formal complaints procedure, details of which are set out in the Terms & Conditions. opo77 is committed to resolving all privacy complaints fairly and within a reasonable timeframe.
Response commitment: opo77 acknowledges all privacy correspondence within 48 hours and provides a substantive response within 30 days. We do not charge fees for exercising your data rights under this policy.
Have questions about how opo77 handles your data? Our 24/7 support team is ready to help. Already a member? Log in and enjoy a secure, trusted betting experience.
21+ only. Gambling involves risk. Play responsibly.