Privacy Policy — maka77

1 Introduction

maka77 is an internationally operated online betting and live casino platform serving the Indonesian market and other permitted jurisdictions. We are deeply committed to protecting the privacy and personal data of every player who interacts with our platform — whether during registration, identity verification, deposit and withdrawal transactions, customer support interactions, or regular gameplay.

This Policy applies to all personal data collected through maka77.cam, our mobile-optimized website interface, and any email or chat communications with our customer support team. It is to be read alongside our Terms & Conditions, which govern the broader contractual relationship between you and maka77.

maka77 acts as the data controller in respect of all personal data collected and processed through the Platform. All data processing activities are conducted in accordance with the applicable data protection and privacy laws of the jurisdiction in which maka77 is licensed and operated.

2 Definitions

In this Policy, the following definitions apply:

• "Personal Data" means any information that identifies, or could reasonably be used to identify, a natural person — including name, email address, date of birth, national identity number, payment account details, and device identifiers.
• "Processing" means any operation performed on personal data, including collection, storage, use, disclosure, transmission, and deletion.
• "Data Controller" means the entity that determines the purposes and means of processing personal data — in this case, maka77.
• "Data Processor" means a third party that processes personal data on behalf of the data controller under a written agreement.
• "KYC" means Know Your Customer — the regulatory-mandated identity and age verification process applicable to all players prior to withdrawal processing.
• "Cookies" means small data files placed on your browser or device by the Platform for session management, analytics, and personalization purposes.
• "WIB" means Western Indonesia Time (UTC+7), the default time zone for all data-processing timestamps.

3 Personal Data We Collect

maka77 collects only the data that is necessary to provide a safe, compliant, and high-quality gaming experience. The categories of personal data we collect include:

3.1 Registration Data

• Full legal name
• Date of birth (to verify minimum age of 21)
• Email address
• Username and encrypted password
• Residential address (city, province, country — Indonesia or other permitted jurisdiction)
• Phone number (optional, for two-factor authentication and account recovery)

3.2 Identity Verification (KYC) Data

• Government-issued photo ID (Indonesian National Identity Card / KTP, passport, or KITAS)
• Selfie or live photo for liveness verification
• Proof of payment method ownership (bank account or e-wallet registered in your name)

3.3 Financial Data

• Bank account numbers (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata, OCBC NISP)
• E-wallet account identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja)
• Deposit and withdrawal transaction records, amounts, and timestamps
• Betting history and account balance records

3.4 Technical & Device Data

• IP address and approximate geolocation (city/country level)
• Browser type, version, and operating system
• Device type (desktop, mobile, tablet)
• Session timestamps, login history, and page interaction data

3.5 Communications Data

• The content of emails, live chat messages, and support tickets submitted to our customer service team
• Feedback and survey responses (where voluntarily provided)

4 How We Collect Your Data

maka77 collects personal data through the following channels:

• Directly from you: When you register an account, submit KYC documents, make a deposit or withdrawal, contact customer support, or respond to a promotion or survey.
• Automatically: Through cookies, log files, and analytics technologies when you access or navigate the Platform — including session data, clickstream data, and device/browser information.
• From payment providers: When you initiate a transaction, our payment processing partners (including local Indonesian banks and e-wallet providers such as OVO, DANA, GoPay, ShopeePay, and LinkAja) may share transaction confirmation and account ownership data with us for fraud prevention and reconciliation purposes.
• From identity verification services: We may use third-party KYC and anti-money-laundering screening services that cross-reference your identity documents against authoritative databases to confirm authenticity and age.

5 Purpose of Processing

We process your personal data for the following specific, legitimate, and transparently communicated purposes:

6 Legal Basis for Processing

maka77 processes your personal data only where a valid legal basis exists. Depending on the specific processing activity, we rely on one or more of the following legal grounds:

• Contractual necessity: Processing that is required to fulfill our obligations under the Terms & Conditions you accepted at registration — including account management, payment processing, and bet settlement.
• Legal obligation: Processing required to comply with applicable anti-money-laundering (AML) regulations, licensing conditions, and other statutory requirements — including KYC verification and transaction record-keeping.
• Legitimate interests: Processing necessary for our legitimate business interests, where those interests are not overridden by your privacy rights — including fraud detection, platform security, responsible gaming monitoring, and analytics.
• Consent: Where we rely on your consent — for example, for optional marketing communications — you may withdraw that consent at any time without affecting the lawfulness of prior processing. To withdraw consent, update your notification preferences in your account settings or contact support at [email protected].

7 Data Sharing & Disclosure

maka77 does not sell, rent, or trade your personal data to any third party for commercial purposes. We may, however, share your data with the following categories of recipients where strictly necessary:

7.1 Payment Service Providers

To facilitate deposits and withdrawals, we share necessary financial and identity data with Indonesian banking partners (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata, OCBC NISP) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja). These providers act as independent data controllers and their own privacy policies apply to data processed within their systems.

7.2 Identity Verification Partners

We engage licensed third-party KYC and AML screening providers to verify identity documents and cross-check against sanctions and watchlists. These providers are bound by strict data processing agreements and may only use the data shared with them for the specific verification purpose.

7.3 Technology Infrastructure Providers

Our platform relies on third-party cloud hosting, content delivery, and technical infrastructure providers. These providers process data solely as data processors acting on our documented instructions and are contractually obligated to maintain appropriate security standards.

7.4 Game Studios & Software Providers

To deliver live casino, slot, and sports betting products from providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft, certain technical session data (such as a session token or anonymized player ID) may be passed to those studios. No directly identifying personal data (name, email, bank details) is shared with game studios without your explicit consent.

7.5 Regulatory Authorities & Law Enforcement

Where required by applicable law, court order, or legitimate regulatory demand, maka77 may disclose personal data to competent authorities. We will, where legally permitted to do so, notify you of such disclosure in advance.

7.6 Corporate Transactions

In the event of a merger, acquisition, restructuring, or sale of all or part of the maka77 business, player data may be transferred to the acquiring or successor entity, provided that entity agrees to protect your data in a manner consistent with this Policy.

8 Cookies & Tracking Technologies

maka77 uses cookies and similar tracking technologies to operate the Platform, analyze usage patterns, remember your preferences, and deliver a personalized experience. The categories of cookies we use are as follows:

Strictly necessary cookies cannot be disabled, as they are essential to the Platform's core functionality. For all other cookie categories, you may manage your preferences through your browser settings. Please note that disabling functional or analytics cookies may affect your experience on the Platform.

9 Data Retention

maka77 retains your personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law and regulatory obligations. The following general retention periods apply:

• Account and registration data: Retained for the duration of your active Account and for a minimum of 5 years following Account closure, to satisfy AML record-keeping requirements.
• KYC documents: Retained for a minimum of 5 years from the date of submission, in compliance with applicable identity verification and financial regulation requirements.
• Transaction records: Retained for a minimum of 5 years from the date of each transaction.
• Customer support records: Retained for 3 years from the date of the last interaction, or longer if the matter remains subject to ongoing dispute resolution.
• Technical and device data (logs): Retained for up to 12 months, after which anonymized or aggregated versions may be retained for analytical purposes.
• Marketing preferences: Retained until you withdraw your consent or request deletion, and for up to 2 years thereafter for audit purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with our internal data destruction procedures.

10 Data Security

maka77 implements a comprehensive set of technical and organizational measures to protect your personal data against unauthorized access, accidental loss, alteration, disclosure, or destruction. Our security controls include:

• 256-bit SSL/TLS encryption for all data transmitted between your browser and our servers.
• Encrypted storage of sensitive personal and financial data at rest using industry-standard encryption protocols.
• Role-based access controls limiting internal access to personal data to only those staff members whose job function requires it.
• Two-factor authentication (2FA) available and strongly recommended for all player accounts.
• Regular security audits and penetration testing conducted by independent cybersecurity professionals.
• Incident response procedures to detect, contain, and report data security incidents in a timely manner.

11 Your Data Rights

As a player on the maka77 platform, you have the following rights in respect of your personal data. To exercise any of these rights, please contact us at [email protected]. We aim to respond to all data rights requests within 30 calendar days.

• Right of Access: You have the right to request a copy of the personal data we hold about you, along with information about how it is processed.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data we hold about you.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent, or where processing is unlawful. This right is subject to overriding legal retention obligations.
• Right to Restriction of Processing: You may request that we temporarily suspend processing of your data — for example, while the accuracy of data is being contested.
• Right to Data Portability: Where processing is based on consent or contractual necessity and carried out by automated means, you may request a copy of your data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing based on legitimate interests, and at any time to the processing of your personal data for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the legality of prior processing.

12 Children's Privacy

The maka77 platform is strictly intended for adults aged 21 years and older. We do not knowingly collect personal data from any person under the age of 21. Registration on the Platform requires confirmation of minimum age, and our KYC process verifies age prior to withdrawal processing.

If maka77 becomes aware that personal data has been collected from a person under 21, that Account will be closed immediately, all associated funds will be forfeited in accordance with our Terms & Conditions, and the data will be deleted from our systems as promptly as possible, subject to any legal obligations to retain records of the incident.

If you are a parent or guardian and believe that a minor under your care has registered on maka77, please contact us immediately at [email protected] so that we can take prompt action.

13 International Data Transfers

As an internationally operated platform, maka77 may transfer your personal data to servers or processors located outside Indonesia. Where such transfers occur, we take steps to ensure that your data receives an equivalent level of protection to that which it would receive in your home country. Safeguards we implement include:

• Entering into data processing agreements with all international service providers that include binding data protection obligations.
• Using providers that operate under internationally recognized security certification frameworks.
• Conducting due-diligence reviews of the data protection standards of third-party processors prior to engagement.

For players in Indonesia, your primary account and transaction data are stored and processed in a manner consistent with the data protection standards of maka77's licensing jurisdiction. Payment processing for transactions through local Indonesian payment providers (BCA, BRI, BNI, Mandiri, and e-wallets) is conducted by those providers within their own Indonesian-regulated infrastructure.

14 Amendments to this Policy

maka77 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform functionality. When we make material changes to this Policy, we will:

• Update the "Last Updated" date at the top of this page.
• Where reasonably practicable, notify registered players by email of significant changes prior to them taking effect.
• In cases of minor or editorial changes, publication on this page alone constitutes sufficient notice.

Your continued use of the maka77 Platform after any amendment to this Policy becomes effective constitutes your acceptance of the revised terms. We encourage you to review this page periodically. If you do not agree with any amendment, you should cease using the Platform and may request account closure by contacting our support team.

15 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by maka77, please contact our dedicated data protection and privacy team. We aim to acknowledge all enquiries within 48 hours and to resolve them fully within 30 calendar days.

For requests to exercise your data rights — access, rectification, erasure, portability, or objection — please include your full name, registered email address, and a clear description of your request. We may need to verify your identity before processing certain requests to ensure the security of your data.