Privacy Policy

1. Definitions

The following definitions apply throughout this Privacy Policy:

• "Personal Data" — any information that identifies or can reasonably be used to identify a natural person, directly or in combination with other data.
• "Processing" — any operation performed on Personal Data, including collection, storage, use, disclosure, alteration, or deletion.
• "Platform" — the ying77 website at ying77.cam, including all pages, features, games, and services available thereon.
• "Services" — all gaming, betting, and ancillary services provided by ying77, including sports betting, live casino, slot games, and togel (traditional Indonesian numbers-prediction lottery).
• "User," "You," "Your" — any individual who accesses the Platform or holds a registered account.
• "Controller" — ying77, the entity that determines the purposes and means of processing Personal Data.
• "Processor" — a third-party service provider that processes Personal Data on behalf of ying77 under binding data-processing agreements.

2. Information We Collect

2.1 Information You Provide Directly

When you register an account, complete identity verification, or interact with our customer support, ying77 collects the following categories of Personal Data:

• Identity Data: Full legal name, date of birth, gender, nationality, and a copy of your Indonesian national identity card (KTP / Kartu Tanda Penduduk).
• Contact Data: Email address, mobile phone number, and residential address in Indonesia (Jakarta, Surabaya, Medan, Bandung, Bali, or other cities).
• Financial Data: Bank account details for Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, Bank Permata, BSI), and e-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja). We do not store full card numbers on our servers.
• Verification Data: Documents submitted for KYC (Know Your Customer) verification, including proof of address and selfie images.
• Communications Data: Records of your correspondence with our support team, including chat transcripts, emails, and call logs (where applicable).

2.2 Information Collected Automatically

When you use the Platform, certain technical data is collected automatically through cookies, log files, and similar technologies:

• Device and Browser Data: IP address, device type, operating system, browser type and version, screen resolution, and language preferences.
• Usage Data: Pages visited, features used, games played, bet amounts, session duration, click-stream data, and referring URLs.
• Transaction Data: Details of deposits, withdrawals, bets placed, bonuses claimed, and associated timestamps in Western Indonesia Time (WIB, UTC+7).
• Location Data: General geographic location inferred from your IP address. We do not use precise GPS location data.

2.3 Information from Third Parties

We may receive information about you from trusted third-party sources to supplement our own records:

• Identity verification services that cross-reference your KTP details against authoritative databases.
• Payment processors who confirm transaction status and flag anomalous activity.
• Fraud-prevention and anti-money-laundering screening services.
• Game providers (Evolution Gaming, Pragmatic Play, Microgaming, NetEnt, Ezugi, Spribe, Pocket Games Soft) who report game-session outcomes for dispute resolution.

3. How We Collect Information

ying77 collects Personal Data through the following channels:

• Account Registration Forms: Data entered during sign-up and profile completion.
• KYC Submission Portal: Document uploads during identity verification.
• Deposit and Withdrawal Flows: Bank account and e-wallet details entered during financial transactions.
• Customer Support Interactions: Information shared via live chat, email, or WhatsApp during support sessions.
• Cookies and Tracking Technologies: Automated collection as described in Section 9.
• Third-Party Integrations: Data received from payment processors, game providers, and fraud-screening partners.

4. Purposes of Processing

ying77 processes your Personal Data for the following specific, documented purposes:

5. Legal Basis for Processing

ying77 processes your Personal Data under one or more of the following legal bases:

• Contractual Necessity: Processing required to fulfill our obligations under the User Agreement — including account management, bet settlement, and payment processing.
• Legitimate Interests: Processing necessary for fraud prevention, security monitoring, platform analytics, and responsible gaming oversight, where those interests are not overridden by your fundamental rights.
• Legal Obligation: Processing required to comply with applicable anti-money-laundering, counter-terrorism-financing, and identity-verification obligations under international standards.
• Consent: Processing for optional activities such as promotional communications, where you have provided explicit, freely-given, informed consent that you may withdraw at any time without penalty.

6. Disclosure to Third Parties

6.1 Service Providers (Processors)

ying77 shares Personal Data with carefully vetted third-party service providers that process data strictly on our behalf and under binding data-processing agreements. These categories of processors include:

• Payment Processors: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, Bank Permata, BSI) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) to facilitate deposits and withdrawals.
• Identity Verification Providers: Third-party KYC services that validate identity documents against authoritative sources.
• Game Content Providers: Studios including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Ezugi, Spribe, and Pocket Games Soft receive session data necessary to operate and settle their games.
• Fraud and AML Screening Services: Specialized providers that screen transactions and account activity against watchlists and behavioral risk models.
• Cloud Infrastructure Providers: Enterprise hosting partners that store data on secure, access-controlled servers.
• Customer Support Tools: Platforms that power our live chat and ticketing systems, configured to store only the minimum data required.

6.2 Legal and Regulatory Disclosures

We may disclose your Personal Data to law enforcement agencies, regulatory bodies, or courts when required to do so by applicable law, valid legal process, or to protect the rights, property, or safety of ying77, our users, or the public. We will notify you of such disclosure where legally permitted to do so.

6.3 Business Transfers

In the event of a merger, acquisition, asset sale, or corporate restructuring involving ying77, Personal Data may be transferred to the successor entity. You will be notified via email and a prominent site notice prior to any such transfer, and the successor will be bound by privacy commitments no less protective than those described in this Policy.

6.4 No Sale of Personal Data

ying77 does not and will not sell, rent, license, or trade your Personal Data to any third-party advertiser, data broker, or unrelated commercial entity for their own independent marketing or commercial purposes. This commitment is unconditional and applies regardless of compensation offered.

7. Data Retention

ying77 retains Personal Data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. The following retention schedule applies:

• Account and Identity Data: Retained for the duration of your account plus 5 years after account closure, to satisfy AML record-keeping requirements.
• Transaction Records: Retained for 5 years from the date of each transaction.
• KYC Documents: Retained for 5 years after the verification date or account closure, whichever is later.
• Customer Support Communications: Retained for 3 years from the date of each interaction.
• Usage and Analytics Data: Retained in anonymized or aggregated form indefinitely for platform improvement; identifiable records deleted after 24 months.
• Marketing Consent Records: Retained until you withdraw consent, plus 1 year thereafter as evidence of prior consent.

Upon expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymized in accordance with industry-standard data destruction procedures.

8. Data Security Measures

Protecting your Personal Data is a core operational priority at ying77. We implement a layered security architecture comprising the following controls:

• Encryption in Transit: All communications between your browser and our servers use TLS 1.2 or higher (256-bit AES encryption).
• Encryption at Rest: Sensitive fields in our databases (financial data, identity document scans) are encrypted at the storage layer using AES-256.
• Access Controls: Strict role-based access controls (RBAC) ensure that ying77 staff can access only the Personal Data necessary for their specific job function. All access is logged and subject to periodic audit.
• Two-Factor Authentication (2FA): Required for all staff accounts with access to production systems containing Personal Data.
• Penetration Testing: We conduct regular third-party penetration tests and vulnerability assessments to identify and remediate security weaknesses.
• Incident Response: A documented data breach response plan is in place. In the event of a breach affecting your Personal Data, you will be notified within 72 hours of our becoming aware of the incident, to the extent technically feasible.
• Physical Security: Our hosting infrastructure is housed in data centers with physical access controls, 24/7 CCTV monitoring, and biometric entry requirements.

9. Cookies and Tracking Technologies

9.1 What We Use

ying77 uses cookies, web beacons, pixel tags, and similar technologies to operate, secure, and improve the Platform. A cookie is a small text file stored on your device by your browser. We use the following categories of cookies:

• Strictly Necessary Cookies: Essential to platform operation — session authentication, security tokens, load balancing. Cannot be disabled without breaking core functionality.
• Functional Cookies: Remember your preferences such as language, currency display (IDR), time-zone (WIB), and game lobby layout to provide a personalized experience.
• Analytics Cookies: Collect anonymized usage statistics (pages visited, session duration, device type) to help us understand how players use the Platform and identify areas for improvement.
• Security Cookies: Support our fraud-detection systems by helping identify unusual access patterns and suspicious login attempts.

9.2 Managing Cookies

You may control non-essential cookies through your browser settings. Most browsers allow you to block or delete cookies via the Settings or Privacy menu. Please note that disabling functional cookies may impair certain Platform features. Strictly Necessary cookies cannot be disabled as they are integral to security and session management. Consult your browser's help documentation for instructions specific to your browser version.

10. Your Privacy Rights

As a user of ying77, you hold the following rights with respect to your Personal Data. To exercise any of these rights, contact our support team at [email protected]:

• Right of Access: Request a copy of the Personal Data we hold about you, along with information on how it is processed.
• Right to Rectification: Request correction of inaccurate or incomplete Personal Data without undue delay.
• Right to Erasure: Request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations (see Section 7).
• Right to Restriction: Request that we restrict processing of your Personal Data in certain circumstances — for example, while the accuracy of data is contested.
• Right to Data Portability: Receive your Personal Data in a structured, machine-readable format (JSON or CSV) for transfer to another service provider where technically feasible.
• Right to Object: Object to processing based on legitimate interests, including profiling for personalization. We will cease such processing unless we can demonstrate compelling legitimate grounds.
• Right to Withdraw Consent: Where processing is based on consent (e.g., marketing communications), withdraw that consent at any time without affecting the lawfulness of prior processing.

We will respond to all verified privacy rights requests within 30 calendar days. In complex cases we may extend this period by a further 30 days, notifying you of the extension and reason within the initial 30-day window. There is no charge for exercising your rights unless requests are manifestly unfounded or excessive, in which case a reasonable administrative fee may apply.

11. Protection of Minors

The ying77 Platform is strictly intended for adults aged 21 and over. We do not knowingly collect Personal Data from individuals under 21 years of age. Our registration process requires date-of-birth disclosure, and our KYC process verifies age through government-issued identity documents. If we become aware that we have inadvertently collected Personal Data from a minor, we will immediately suspend the account, delete all associated data, and return any deposited funds.

If you are a parent or guardian and believe that a minor has created an account on ying77 without your consent, please contact us immediately at [email protected] so we can take prompt remedial action.

12. International Data Transfers

Your Personal Data is primarily stored on servers located in secure data centers serving the Asia-Pacific region. Certain service providers (such as game studios and fraud-screening partners) may process data on infrastructure located in other jurisdictions. When such transfers occur, ying77 ensures appropriate safeguards are in place, including:

• Binding contractual clauses with processors that impose data protection standards equivalent to those described in this Policy.
• Transfers only to processors in jurisdictions that maintain adequate data protection frameworks recognized by international standards.
• Ongoing monitoring of processor compliance through contractual audit rights.

13. Changes to This Privacy Policy

ying77 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or the services we offer. When material changes are made, we will notify you by sending an email to your registered address and by posting a prominent notice on the Platform at least 14 days before the changes take effect. The "Last Updated" date at the top of this Policy will always reflect the most recent revision.

Your continued use of the Platform after the effective date of any revised Policy constitutes your acceptance of the updated terms. If you do not agree with any changes, you should stop using our services and request account closure before the effective date.

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data-processing practices, please contact the ying77 Privacy Team through any of the following channels:

• Email: [email protected]
• Live Chat: Available 24/7 directly on the Platform
• Response Time: Privacy requests acknowledged within 48 hours; resolved within 30 days

Our customer support team operates 24 hours a day, 7 days a week, with Indonesian-speaking agents available to assist you in navigating any privacy-related concerns.