Last Updated: January 2026  |  Effective Date: January 2026

1. Introduction and Scope

mob77 ("we," "us," or "our") operates the online gaming platform accessible at mob77.cam. This Privacy Policy describes how mob77 collects, processes, stores, shares, and protects personal data provided by users ("you" or "Player") when you register an account, access our website, or use any of our gaming services.

This policy applies to all personal data collected through the mob77 website, mobile-optimised pages, customer support channels, and any other touchpoints through which you interact with our platform. By registering an account or using our services, you acknowledge that you have read and understood this Privacy Policy and consent to the processing activities described herein.

We serve Indonesian players exclusively. Where Indonesian data-protection obligations are relevant, we apply protections consistent with internationally recognised privacy standards, including principles drawn from the General Data Protection Regulation (GDPR) and Indonesia's own personal data protection frameworks.

Your data is never sold. mob77 does not sell, rent, or trade your personal information to third-party marketers. We share data only with trusted service partners necessary to operate our platform and comply with legal obligations.

2. Data We Collect

2.1 Information You Provide Directly

When you register with mob77 or interact with our services, you provide us with information that may include:

  • Identity data: full legal name, date of birth, gender, and nationality as shown on your Indonesian national identification card (KTP) or passport.
  • Contact data: email address, mobile phone number, and residential address within Indonesia.
  • Financial data: bank account details (e.g., BCA, BRI, BNI, Mandiri account numbers), e-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja), and transaction history on our platform.
  • Verification data: photographs, scanned copies of government-issued identification, selfies, and any additional documents submitted during Know Your Customer (KYC) verification.
  • Communications data: records of messages sent to customer support via live chat, email, or WhatsApp, including their content and timestamps.
  • Preference data: language preferences, game history, responsible gaming tool settings, and marketing communication preferences.

2.2 Information Collected Automatically

When you access the mob77 website, our systems automatically record certain technical information, including:

  • IP address and approximate geographic location (country and city level)
  • Device type, operating system, and browser type and version
  • Pages visited, session duration, referring URLs, and click-path data
  • Login timestamps and session identifiers
  • Cookies and similar tracking technologies (see Section 9 on Cookies)

2.3 Information from Third Parties

We may receive additional data about you from third-party sources, including identity verification service providers, fraud prevention agencies, payment processors, and publicly available databases used for anti-money laundering (AML) screening. This data is used solely to verify your identity, protect against fraud, and comply with our legal obligations.

3. Legal Basis for Processing

mob77 processes your personal data on the following legal grounds:

  • Contractual necessity: Processing required to register your account, process deposits and withdrawals, and deliver gaming services.
  • Legal obligation: Processing required to comply with anti-money laundering regulations, age verification requirements, fraud prevention obligations, and reporting duties.
  • Legitimate interests: Processing necessary for platform security, fraud prevention, product improvement, and responsible gaming monitoring, where these interests do not override your privacy rights.
  • Consent: Marketing communications and certain cookie placements, where we rely on your explicit consent, which you may withdraw at any time.

4. How We Use Your Data

mob77 uses the personal data we collect for the following purposes:

  • Creating and managing your player account, including identity and age verification
  • Processing financial transactions — deposits and withdrawals via Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata, BSI, OCBC NISP) and e-wallets
  • Detecting and preventing fraud, money laundering, and unauthorised account access
  • Conducting AML screening, sanctions checks, and politically exposed person (PEP) screening
  • Providing 24/7 Indonesian-language customer support via live chat, email, and WhatsApp
  • Monitoring gaming activity to identify problem gambling indicators and apply responsible gaming interventions
  • Personalising your gaming experience and communicating relevant promotions (subject to your marketing preferences)
  • Maintaining platform security, including intrusion detection and access control audits
  • Complying with requests from law enforcement or regulatory authorities where legally required
  • Analysing aggregated, anonymised usage data to improve our services and user experience

5. Data Sharing and Disclosure

5.1 Trusted Service Partners

We share personal data with carefully selected third-party service providers who process data on our behalf, strictly in accordance with our instructions and applicable data protection standards. These partners include:

  • Payment processors and Indonesian banks facilitating deposits and withdrawals
  • Identity verification and KYC service providers
  • Fraud prevention and AML screening platforms
  • Cloud hosting and IT infrastructure providers
  • Customer support software providers
  • Analytics providers using anonymised or aggregated data only

All service partners are bound by contractual obligations that prohibit them from using your data for any purpose beyond the specific service they provide to mob77.

5.2 Legal Disclosures

We may disclose personal data to law enforcement agencies, regulatory authorities, courts, or other public bodies when we are legally required to do so, or when we reasonably believe disclosure is necessary to prevent illegal activity, protect the safety of our users, or enforce our Terms and Conditions.

5.3 Business Transfers

In the event of a merger, acquisition, or sale of all or part of our business, your personal data may be transferred to the acquiring entity as part of the transaction. We will notify affected users of any such transfer and the applicable privacy terms of the successor entity.

6. Data Retention

mob77 retains your personal data for as long as your account remains active and for a defined period thereafter, in accordance with our legal obligations and legitimate business interests. Specifically:

  • Account data: retained for the lifetime of your account plus a minimum of five years following account closure, to satisfy AML record-keeping requirements.
  • Transaction records: retained for a minimum of five years following each transaction date.
  • KYC documents: retained for five years following the last transaction or account closure, whichever is later.
  • Customer support communications: retained for three years from the date of each interaction.
  • Marketing preferences and consent records: retained until you withdraw consent or close your account, plus one year thereafter.

When retention periods expire, data is securely deleted or irreversibly anonymised. You may request early deletion in accordance with Section 8 (Your Rights), subject to any overriding legal obligations.

7. Data Security

mob77 implements robust technical and organisational measures to protect your personal data from unauthorised access, loss, alteration, or disclosure. Our security infrastructure includes:

  • 256-bit SSL/TLS encryption for all data transmitted between your device and our servers
  • AES-256 encryption for sensitive data stored in our databases
  • Multi-factor authentication requirements for staff accessing production systems
  • Role-based access controls limiting data access to personnel with a legitimate need
  • Regular penetration testing and vulnerability assessments by independent security firms
  • Continuous intrusion detection and real-time security monitoring
  • Annual staff training on data protection and information security best practices

While we apply industry-leading security practices, no digital platform can guarantee absolute security. You are responsible for keeping your account credentials confidential and for notifying us immediately if you suspect unauthorised access to your account.

8. Your Data Rights

As a mob77 player, you hold the following rights with respect to your personal data:

  • Right of Access: You may request a copy of the personal data we hold about you at any time.
  • Right to Rectification: You may request correction of inaccurate or incomplete data held on your account.
  • Right to Erasure: You may request deletion of your personal data where we no longer have a legal basis to retain it, subject to our statutory retention obligations.
  • Right to Restriction: You may request that we temporarily halt processing of your data while accuracy or legal basis disputes are resolved.
  • Right to Data Portability: You may request a machine-readable copy of the data you have provided to us directly.
  • Right to Object: You may object to processing based on our legitimate interests, including direct marketing communications.
  • Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact our Data Protection team at [email protected]. We will respond within 30 days of receiving your request. In some cases, we may need to verify your identity before processing your request.

9. Cookies and Tracking Technologies

mob77 uses cookies and similar technologies (local storage, session tokens, pixel tags) to operate our platform, remember your preferences, maintain session security, and analyse usage patterns. The categories of cookies we use include:

  • Strictly necessary cookies: Essential for platform functionality, secure login, and session management. These cannot be disabled without affecting your ability to use our services.
  • Performance cookies: Collect anonymised data on page visits, error rates, and load times to help us improve platform performance.
  • Functionality cookies: Remember your preferences such as language settings, preferred deposit method, and responsible gaming tool configurations.
  • Analytics cookies: Track aggregated usage patterns to understand how players interact with our platform, enabling data-driven improvements.

You can manage cookie preferences through your browser settings. Blocking strictly necessary cookies may impair platform functionality.

10. Children and Minors

mob77 services are strictly for adults aged 21 years and older. We do not knowingly collect personal data from individuals under 21 years of age. If we discover that we have inadvertently collected data from a minor, we will immediately delete that data and close the associated account. If you believe a minor has registered an account with mob77, please contact us at [email protected] immediately.

11. International Data Transfers

Your data may be transferred to and processed in countries other than Indonesia where our service partners operate. In all such cases, we ensure that appropriate safeguards are in place — including standard contractual clauses and data processing agreements — to maintain a level of data protection equivalent to that afforded to your data within Indonesia.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or business operations. When we make material changes, we will notify you via email to your registered address and post a prominent notice on our website with the effective date of the revised policy. Your continued use of mob77 services following notification constitutes acceptance of the updated policy.

13. Contact and Data Protection Enquiries

For any questions, concerns, or requests relating to this Privacy Policy or your personal data, please contact us:

  • Email: [email protected]
  • Live Chat: Available 24/7 through the mob77 website
  • Subject line: "Data Privacy Request" — to ensure prompt routing to our data protection team
  • Response target: Within 30 calendar days for data rights requests; within 48 hours for general privacy enquiries

Our Privacy Commitments

Six principles that define how mob77 handles your personal data every single day.

End-to-End Encryption

Every byte of data travelling between your device and our servers is protected with 256-bit SSL/TLS encryption — the same standard used by major Indonesian banks like BCA and BRI.

Zero Data Sales

We never sell, rent, or trade your personal data to marketing agencies or data brokers. Your information is used exclusively to operate and improve mob77 services for you.

You Own Your Data

You have the right to access, correct, export, or request deletion of your personal data at any time. Our data protection team responds to all requests within 30 calendar days.

Minimal Data Collection

We collect only what we genuinely need to operate our platform, verify your identity, and meet legal obligations. No superfluous data collection — ever.

Strict Partner Standards

Every third-party partner — from payment processors to KYC providers — signs binding data processing agreements that prohibit them from using your data for anything beyond their contracted service.

Transparent Updates

When we make material changes to this policy, we notify you directly by email before the changes take effect. No silent updates — you always know what's changing and why.

Questions or Concerns?

Our support team is available 24/7 to address any questions about your personal data, our privacy practices, or your rights as a mob77 player. You can also explore our other policy documents for a complete picture.