Privacy Policy — pik777

The following terms carry the meanings set out below throughout this Privacy Policy:

pik777 collects only the Personal Data that is necessary for the purposes described in this Policy. The categories of data we collect are as follows:

2.1 Registration Data

When you create an account, we collect: your full legal name, date of birth, Indonesian mobile number, email address (if provided), preferred username, and the password you set (stored as a salted, one-way hash — we never store your password in plain text).

2.2 Identity Verification (KYC) Data

To comply with our anti-money-laundering obligations and to enforce our 21+ age restriction, we may collect copies of: your Indonesian national identity card (KTP), passport, or driver's licence (SIM); a live selfie photograph; and proof of residential address (e.g., a utility bill or bank statement issued within the last three months).

2.3 Financial Data

When you make deposits or withdraw funds, we record: the bank account name, bank name (e.g., BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata), and masked account number; e-wallet identifiers for OVO, DANA, GoPay, ShopeePay, or LinkAja; transaction amounts in IDR; and transaction timestamps. We do not store full payment credentials — payment processing is handled by our integrated payment gateways which maintain their own PCI-compliant data environments.

2.4 Transactional and Gaming Data

We maintain a full record of your betting and gaming activity on the Platform, including: bet placement times, markets selected, stakes wagered, odds accepted, game titles played, session durations, Wallet Balance movements, and promotion codes redeemed. This data is used for account management, dispute resolution, responsible gaming monitoring, and fraud detection.

2.5 Technical and Device Data

When you access the Platform, we automatically collect: your IP address, device type and model, operating system version, browser type and version, screen resolution, device language setting, referring URL, and session activity logs including page views and click events.

2.6 Communications Data

If you contact our support team via live chat, email to [email protected], or WhatsApp, we retain the full text of those communications, including timestamps, the support agent involved, and any attachments you submit, for a minimum of 3 years.

2.7 Behavioral and Preference Data

We collect data about how you interact with the Platform — which games you return to most frequently, your preferred betting markets, promotional offers you engage with, and navigation patterns. This data drives personalization features and is used to optimize the Platform experience for Indonesian users.

pik777 collects Personal Data through the following mechanisms:

• Directly from you: Registration forms, KYC document uploads, support communications, and any profile update you submit.
• Automatically via the Platform: Server logs, browser cookies, session tokens, and analytics scripts capture technical and behavioral data each time you access the Platform.
• From payment processors: Our payment gateway partners transmit transaction confirmation data (amounts, timestamps, masked account references) back to pik777 upon completion of each deposit or withdrawal.
• From identity verification providers: Third-party KYC service providers may return verification results, risk scores, and document authenticity assessments to pik777 after processing your submitted documents.
• From fraud prevention services: Device fingerprinting and behavioral analytics providers may return risk flags associated with your device or session to help us detect account takeovers, multi-accounting, and bonus abuse.

pik777 processes your Personal Data on the following legal grounds:

pik777 uses collected Personal Data for the following purposes:

5.1 Account and Service Delivery

To create and maintain your account, authenticate your identity at login, process deposits and withdrawals through your nominated Indonesian bank or e-wallet, track your Wallet Balance and Bonus Funds, record all wagering and gaming activity, and provide customer support when you contact us.

5.2 Compliance and Security

To fulfill our legal obligations, including verifying that all Members are natural persons aged 21 or older who are residents of Indonesia; conducting KYC document checks; screening against sanctions and watch-lists; detecting and investigating fraud, money laundering, bonus abuse, and multi-accounting; and cooperating with any lawful data request from competent authorities.

5.3 Responsible Gaming

To monitor your betting patterns for indicators of problem gambling behavior; to enforce deposit limits, cooling-off periods, and self-exclusion decisions you have requested; to send responsible gaming reminders where your session data suggests extended or high-frequency play; and to refer you to our Responsible Gaming resources when appropriate.

5.4 Marketing and Personalization

Where you have provided consent, we use your data to send promotional offers, tournament notifications, and deposit bonus alerts via email or SMS. We also use behavioral and preference data to surface game recommendations within the Platform — for example, highlighting BRI Liga 1 match betting markets to Members who regularly engage with football, or recommending slot titles from Pragmatic Play or NetEnt based on your previous game history. You may opt out of marketing communications at any time by contacting support.

5.5 Platform Improvement

Aggregated and anonymized analytics data is used to understand how Members navigate the Platform, identify technical errors, measure the performance of new features, and make data-driven decisions about the Platform's product roadmap. This analysis does not involve decisions about individual Members.

pik777 shares your Personal Data only in the limited circumstances set out below:

6.1 Service Providers

We engage carefully selected third-party service providers to support Platform operations. These include: payment gateway operators (who process IDR transactions via BCA, BRI, BNI, Mandiri, CIMB Niaga, and e-wallets such as OVO, DANA, GoPay, and ShopeePay); KYC and identity verification providers; fraud prevention and device intelligence vendors; cloud hosting infrastructure providers; email and SMS delivery services; and live chat software providers. Each service provider is bound by a data processing agreement that prohibits them from using your data for any purpose other than the specific service they provide to pik777.

6.2 Game Studios

When you play a game powered by a third-party studio such as Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Pocket Games Soft, Spribe, or Ezugi, a minimal set of session data (anonymized player session token, stake amount, game result) is transmitted to the studio's game server. These studios do not receive your name, contact details, or payment information.

6.3 Legal and Regulatory Disclosure

We may disclose Personal Data to law enforcement agencies, regulatory authorities, or courts where we are required to do so by law, court order, or where we have a good-faith belief that disclosure is necessary to prevent imminent harm, fraud, or financial crime. We will notify affected Members of such disclosures where legally permissible.

6.4 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or substantially all of pik777's assets, your Personal Data may be transferred to the successor entity. We will provide notice on the Platform prior to such a transfer and will ensure the successor entity is bound by privacy obligations no less protective than those in this Policy.

pik777 uses cookies and similar tracking technologies to operate the Platform effectively. The categories of cookies we deploy are as follows:

You may configure your browser to block or delete cookies at any time. However, disabling strictly necessary or fraud prevention cookies may impair your ability to log in, place bets, or complete transactions on the Platform.

pik777 retains your Personal Data for as long as necessary to fulfill the purposes described in this Policy, subject to the following minimum retention periods:

Upon expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymized. Where data must be retained for legal compliance, access is restricted to authorized personnel only.

pik777 implements a layered security architecture to protect your Personal Data against unauthorized access, accidental loss, alteration, or disclosure. Our principal security measures include:

• 256-bit SSL/TLS encryption on all data in transit between your device and our servers.
• AES-256 encryption at rest for all stored Personal Data and KYC documents.
• One-way password hashing using bcrypt with a unique per-account salt — your plaintext password is never stored.
• Role-based access controls ensuring that only authorized pik777 personnel with a defined operational need can access Member Personal Data.
• Automated anomaly detection that flags unusual login locations, session behavior, or transaction patterns for security review.
• Regular third-party penetration testing of Platform infrastructure and application layers.
• Incident response procedures requiring that affected Members and, where required by law, relevant authorities are notified within 72 hours of a confirmed data breach.

As a Member whose Personal Data is processed by pik777, you hold the following rights. To exercise any of these rights, contact our support team through live chat or at [email protected]. pik777 will respond within 30 days of receiving a valid request.

pik777 is strictly an adults-only platform. You must be at least 21 years of age to register an account or access any gambling product on the Platform. We do not knowingly collect Personal Data from persons under the age of 21.

pik777 enforces age verification through multiple mechanisms: date-of-birth declaration at registration; KYC document verification before the first withdrawal; and ongoing fraud-detection monitoring that may flag accounts where stated age is inconsistent with device or behavioral signals. Any account found to belong to a person under 21 will be closed immediately, all Wallet Balance forfeited, and any KYC documents securely destroyed.

The Platform integrates with third-party game studios, payment providers, and service vendors as described in Section 6. Each of these parties operates under its own privacy policy and data governance framework. pik777 is not responsible for the privacy practices of third-party services beyond the contractual data processing obligations we impose on them as described in Section 6.1.

Specifically, when you interact with a live casino game powered by Evolution Gaming, or a slot title provided by Pragmatic Play, Microgaming, NetEnt, or Pocket Games Soft, those game sessions are delivered through the respective studio's infrastructure. Only a pseudonymous session token — not your name, contact details, or financial information — is passed to the game server. The studios' own privacy policies govern the limited session-level data they receive.

pik777 does not embed social media plugins, advertising networks, or third-party tracking pixels on the Platform beyond those disclosed in Section 7 (Cookies). Links to other websites do not appear within the Platform; you will not be redirected to external domains during normal use.

pik777's primary data processing infrastructure is hosted in data centers in the Asia-Pacific region. Some third-party service providers engaged by pik777 — including cloud infrastructure providers, KYC verification vendors, and game studio server operators — may process data in jurisdictions outside Indonesia.

Where Personal Data is transferred to a jurisdiction that does not provide a level of data protection equivalent to that afforded within Indonesia, pik777 ensures that appropriate safeguards are in place, including: contractual data processing agreements containing standard data protection clauses; technical and organizational security measures equivalent to those described in Section 9; and restrictions on the purposes for which the transferee may use the data.

By using the Platform, you acknowledge that your Personal Data may be processed in countries other than Indonesia as part of the delivery of pik777's services, subject always to the protections described in this Policy.

pik777 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the features of the Platform. When material changes are made, we will display a prominent notice on the Platform and, where practicable, send an email notification to the address registered on your account. The "Last Updated" date at the top of this page will be revised on each occasion.

Your continued use of the Platform after the effective date of any amendment constitutes acceptance of the revised Privacy Policy. If you do not accept the changes, you should cease using the Platform and contact support to request account closure. We recommend reviewing this Policy periodically so that you remain informed of how we handle your data.

If you have any questions, concerns, or requests relating to this Privacy Policy or your Personal Data, please contact the pik777 privacy team through any of the following channels:

• Live Chat: Available 24/7 directly within the pik777 Platform — the fastest route for urgent account-related privacy requests.
• Email: support@pik777.app — please include "Privacy Request" in your subject line. This is plain text only; it is not a clickable link.
• WhatsApp: Available 07:00–23:00 WIB daily. Number displayed within the Platform after login.

pik777 acknowledges all privacy-related requests within 48 hours and provides a substantive response within 30 calendar days. Complex requests involving data export or erasure may require additional time, in which case we will notify you of the expected timeline.