Privacy Policy

Throughout this Privacy Policy, the following terms carry the meanings defined below:

w7777 is the data controller responsible for your Personal Data collected through the w7777 platform at https://w7777.my. As the data controller, w7777 determines the purposes and means of processing your Personal Data and is responsible for ensuring that processing activities comply with applicable data protection laws and our international gaming licence obligations.

For all data protection enquiries, you may contact us via the channels described in Clause 14 of this Policy. We aim to respond to all data protection requests within 30 calendar days of receipt.

w7777 collects the following categories of Personal Data from players:

Registration Data: When you create a w7777 account, you provide your full legal name, date of birth, email address, mobile phone number (registered in Indonesia or the country of your residence), and a chosen username and password.

Identity Verification (KYC) Data: Before approving withdrawal requests, w7777 requires documentary proof of identity and residence. This includes scanned copies or photographs of your Indonesian National Identity Card (KTP) or passport, proof of residential address (such as a bank statement from BCA, BRI, BNI, Mandiri, or CIMB Niaga dated within 90 days), and confirmation of the payment method used for deposits (such as a screenshot of your OVO, DANA, GoPay, or ShopeePay account showing your registered name and number).

Financial Data: Details of your deposits and withdrawals, including the payment method used, transaction reference numbers, amounts in Indonesian Rupiah (IDR), and timestamps. w7777 does not store full card numbers or full bank account numbers — only the partial identifiers needed to match a withdrawal to the correct payment method.

Gaming Activity Data: A complete record of your wagering activity on w7777, including game sessions, bet amounts, win/loss outcomes, bonus usage, and responsible gaming tool activations.

Technical Data: Your IP address, browser type and version, operating system, device type, screen resolution, session duration, pages visited, referral source, and any error logs generated during your use of the platform.

Communications Data: The content of all communications you submit to w7777 customer support via live chat or email, including the date, time, and subject of each interaction.

w7777 collects Personal Data through the following channels:

• Directly from you: When you register an account, complete KYC verification, make a deposit or withdrawal request, claim a bonus, or contact customer support.
• Automatically through your use of the platform: Technical data including IP address, device identifiers, and session data is collected automatically when you access the w7777 website or any game within the platform.
• Through cookies and similar technologies: As described in Clause 8 of this Policy, w7777 uses cookies to maintain session state, remember your preferences, and collect aggregated analytical data about how players navigate the platform.
• From third-party identity verification providers: When w7777 uses a third-party KYC provider to verify your identity documents, that provider may return enriched identity data (such as name matching confidence scores) to w7777 as part of the verification result.
• From payment processors: Payment gateways used by w7777 for local bank transfers and e-wallet transactions (including those processing BCA, BRI, BNI, OVO, DANA, GoPay, ShopeePay, and LinkAja payments) may share transaction metadata with w7777 for reconciliation purposes.

w7777 processes your Personal Data on the following legal bases:

w7777 uses your Personal Data for the following specific purposes:

• Account management: Creating and maintaining your w7777 account, authenticating your identity at login, and enabling account recovery where your credentials are lost.
• Payment processing: Verifying, approving, and processing your IDR deposit and withdrawal requests via local Indonesian payment channels including BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, and LinkAja.
• Identity verification: Conducting KYC checks to confirm you are who you say you are, that you are at least 21 years of age, and that your source of funds is legitimate — as required by our licensing obligations.
• Game provision: Enabling access to w7777's full catalogue of live casino, slots, poker, roulette, and sportsbook products, and maintaining an accurate record of your wagering history.
• Bonus and promotion administration: Determining your eligibility for welcome bonuses, reload offers, and cashback promotions, and tracking wagering progress against applicable requirements.
• Responsible gaming: Monitoring for signs of problem gambling, applying deposit limits and self-exclusion restrictions you have requested, and providing you with access to your own gaming activity data so you can make informed decisions about your play.
• Fraud and security: Detecting and investigating suspicious activity, preventing multi-accounting, identifying collusion in poker games, and protecting the integrity of w7777's sportsbook markets.
• Customer support: Responding to your enquiries, resolving disputes, and managing complaints in relation to your w7777 account, transactions, or gaming experience.
• Marketing (with your consent): Sending you promotional communications about new games, bonuses, and seasonal offers relevant to Indonesian players — including during Idul Fitri, Ramadhan, and Indonesian Independence Day promotional periods. You can opt out of these communications at any time.
• Platform improvement: Using aggregated, anonymised analytical data to identify usability issues, improve navigation, and optimise the w7777 gaming experience for Indonesian players across desktop and mobile devices.

w7777 may share your Personal Data with third parties only in the following limited circumstances:

• Third-party processors acting on our behalf: We engage vetted third-party service providers to carry out specific processing functions — including KYC/identity verification, payment gateway processing, fraud screening, and platform analytics. These processors are contractually bound to process your data only for the purposes w7777 specifies, and to maintain data security standards consistent with our own.
• Payment providers: Sharing the minimum information necessary to process your IDR transactions with local Indonesian payment networks and financial institutions including BCA, BRI, BNI, Mandiri, CIMB Niaga, and e-wallet providers OVO, DANA, GoPay, ShopeePay, and LinkAja.
• Game content providers: Live casino game providers such as Evolution Gaming and Pragmatic Play Live operate the game servers that w7777 connects to. These providers may receive your username and session token as part of the game connection, but do not receive your full identity or financial data.
• Regulatory and law enforcement authorities: Where required by applicable law, a court order, or a valid request from a regulatory or law enforcement authority, w7777 will disclose Personal Data as required. We will notify you of any such request where we are legally permitted to do so.
• Corporate transactions: In the event of a merger, acquisition, or sale of all or part of w7777's business, Personal Data may be transferred to the acquiring entity as part of the transaction, subject to equivalent data protection obligations.

In all cases of data sharing, w7777 applies the principle of data minimisation — sharing only the data that is strictly necessary for the relevant purpose.

w7777 uses cookies and similar technologies on its website for the following purposes:

w7777 does not use third-party advertising or retargeting cookies. You may manage cookie preferences through your browser settings, but please note that disabling strictly necessary cookies will prevent you from logging in or using the platform.

w7777 retains Personal Data for the periods described below, after which data is securely deleted or anonymised:

• Account and registration data: Retained for the duration of your account's active life, and for a period of five (5) years following permanent account closure. This retention is required under our international gaming licence to support anti-money-laundering investigations and regulatory audits.
• KYC identity documents: Retained for five (5) years from the date of verification, or five (5) years from permanent account closure, whichever is later.
• Financial transaction records: Retained for seven (7) years from the date of each transaction, consistent with standard financial record-keeping requirements.
• Gaming activity history: Retained for five (5) years from the date of each session. Anonymised, aggregated gaming statistics may be retained indefinitely for platform analytics.
• Customer support communications: Retained for three (3) years from the date of each interaction, unless the communication relates to an unresolved dispute or legal matter, in which case it is retained until the matter is fully resolved.
• Marketing consent records: Retained for the duration of the account, plus three (3) years from the date consent is withdrawn, to demonstrate compliance with applicable marketing regulations.

Where you request deletion of your account, w7777 will anonymise or delete all Personal Data that is not subject to mandatory retention periods within 30 calendar days of the request being confirmed.

w7777 implements a layered set of technical and organisational security measures to protect your Personal Data against unauthorised access, loss, alteration, or disclosure:

• Transport encryption: All data transmitted between your browser or mobile device and the w7777 servers is encrypted using TLS 1.2 or higher (HTTPS). The padlock icon visible in your browser address bar confirms this encryption is active.
• Password hashing: Account passwords are stored as salted cryptographic hashes. w7777 staff cannot retrieve your plain-text password — only you know it. If you lose your password, a reset link is sent to your registered email address.
• KYC document security: Identity documents submitted for KYC verification are stored in encrypted, access-controlled storage. Access is restricted to authorised personnel conducting identity verification only.
• Payment data tokenisation: w7777 does not store full bank account numbers or full card numbers. Payment identifiers are tokenised by our payment gateway partners. Only the partial identifiers needed to match a withdrawal request to its payment method are stored within the w7777 system.
• Access controls: Internal access to player Personal Data is role-based and restricted to staff with a legitimate operational need. All internal access events are logged for audit purposes.
• Data breach response: In the event of a Personal Data breach that poses a risk to player rights, w7777 will notify affected players at the email address on their account within 72 hours of becoming aware of the breach, and will take all reasonably practicable steps to contain and remediate the breach.

As a w7777 player, you have the following rights in respect of your Personal Data. To exercise any of these rights, contact our support team at the details in Clause 14. We will respond within 30 calendar days.

Please note that certain rights may be limited where w7777 has a legal obligation to retain data, or where exercising the right would conflict with our regulatory requirements as a licensed gaming operator.

If you are under 21 years of age, you must not access the w7777 platform, create an account, or provide us with any Personal Data. If w7777 discovers or is notified that a person under 21 has registered an account, we will immediately close the account, delete all associated Personal Data that we are not required by law to retain, return any deposits to the payment method used, and void any winnings generated.

If you are a parent or guardian and believe that a person under 21 in your household has accessed the w7777 platform, please contact our support team immediately so we can investigate and take appropriate action. We take underage access seriously and will cooperate fully with any parental or regulatory investigation.

w7777 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or our licensing requirements. When we make material changes — such as introducing a new category of data collection, a new sharing arrangement, or a change to your rights — we will notify registered players by email to the address on their account at least seven (7) days before the change takes effect.

Minor or administrative updates (such as clarifications in wording, corrections to typographical errors, or updates to contact details) may be made immediately without advance notice. The "Last updated" date at the top of this page will always reflect when the Policy was most recently revised.

Your continued use of the w7777 platform after the effective date of any revision constitutes your acceptance of the updated Privacy Policy. If you do not agree with a material change, you may close your account and request deletion of your Personal Data in accordance with Clause 11.

For all data protection enquiries — including requests to exercise any of the rights described in Clause 11, questions about how your Personal Data is used, or concerns about a potential data breach — please contact the w7777 Data Protection team through the following channels:

• Live Chat: Available 24/7 directly from the w7777 website. Our Indonesian-speaking support agents are available around the clock and can escalate data protection matters to the appropriate team.
• Email: [email protected] — please include "Data Protection Request" in the subject line and the email address registered to your w7777 account in the message body. Allow up to 30 calendar days for a substantive response.

When submitting a data rights request, please provide your registered w7777 username and the email address on your account to help us locate your records efficiently. We may ask for additional verification of your identity before fulfilling any data access, rectification, or erasure request, to ensure we do not disclose or modify data belonging to the wrong person.

If you are unsatisfied with our response to any data protection concern, you have the right to escalate the matter to the relevant data protection supervisory authority in your jurisdiction.