at777 Privacy Policy

1Definitions

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information that identifies or could reasonably be used to identify a living natural person, directly or in combination with other data.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, erasure, or any combination thereof.
• "Data Controller" means at777, the legal entity that determines the purposes and means of processing your Personal Data.
• "Data Processor" means any third party that processes Personal Data on behalf of at777, under a binding data processing agreement.
• "Member" / "you" means any registered account holder on the at777 Platform.
• "Platform" means the at777 website at https://at777.pro and all associated services.
• "KY C" means Know Your Customer — the identity and document verification process required for regulatory compliance.
• "AML" means Anti-Money Laundering — the regulatory framework governing financial crime prevention obligations.
• "Cookies" means small text files placed on your device by the Platform to enable core functionality, session management, and usage analytics.

2Data We Collect

at777 collects only the categories of Personal Data that are necessary to provide the Platform's services, meet regulatory obligations, and maintain platform security. The primary categories are as follows:

3How We Collect Your Data

3.1  Directly from you. The majority of the Personal Data at777 holds is provided by you directly during account registration, the KYC process, deposit and withdrawal requests, and communications with our support team.

3.2  Automatically. When you access and interact with the Platform, technical and usage data is collected automatically through server logs, session cookies, and analytics tools. This includes your IP address, device fingerprint, browser type, and navigation behaviour within the Platform.

3.3  From third parties. at777 may receive identity and verification data from licensed KYC/AML service providers when you submit documentation for account verification. at777 may also receive transaction confirmation data from payment processors, including local Indonesian banks and e-wallet operators, to reconcile deposits and withdrawals.

3.4  at777 does not purchase Personal Data from data brokers or third-party marketing list providers.

4Lawful Basis for Processing

at777 processes your Personal Data only where a valid lawful basis exists. The primary bases on which at777 relies are:

• Contractual necessity: Processing required to register your account, provide gaming and betting services, process financial transactions, and enforce the Terms & Conditions.
• Legal obligation: Processing required to comply with AML regulations, KYC obligations, tax reporting duties, and any other applicable legal or regulatory requirements.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and service improvement — where those interests are not overridden by your rights and freedoms.
• Consent: Processing for optional marketing communications (promotional emails, bonus alerts) where you have explicitly opted in. You may withdraw consent at any time by contacting Support or updating your Account preferences.

5How We Use Your Personal Data

5.1  at777 uses your Personal Data for the following purposes:

• Creating, managing, and securing your at777 Account;
• Verifying your identity and age (21+) in accordance with KYC requirements;
• Processing deposits via local Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata) and e-wallets (OVO, DANA, GoPay, ShopeePay, LinkAja), and processing withdrawal requests to verified payment methods;
• Calculating, crediting, and auditing bonuses and promotional offers;
• Detecting and preventing fraud, money laundering, account takeover, and other prohibited conduct;
• Operating responsible gaming monitoring tools, including flagging unusual session patterns, deposit escalations, or potential problem gambling indicators;
• Providing customer support via live chat and email, in both English and Indonesian;
• Sending account-related transactional communications (deposit confirmations, withdrawal status updates, security alerts);
• Sending optional promotional communications about bonuses, new games, and platform features — only where you have consented to receive these;
• Improving the Platform through aggregated, anonymised usage analytics;
• Meeting reporting, record-keeping, and disclosure obligations under applicable law.

5.2  at777 does not use automated decision-making or profiling in a manner that produces legal or similarly significant effects on Members, except where expressly permitted by applicable law and where appropriate safeguards are in place.

6Data Sharing & Disclosure

6.1  at777 does not sell, rent, or trade your Personal Data to any third party. Data is shared only in the following limited circumstances:

• Payment processors: Your financial data is shared with the relevant Indonesian bank or e-wallet operator solely to execute the deposit or withdrawal transaction you have initiated.
• KYC/AML service providers: Identity documents are transmitted to licensed third-party verification providers to complete your account verification. These providers are bound by strict data processing agreements and may not use your data for any purpose other than the verification service.
• Game technology providers: Anonymised gameplay session data may be shared with licensed game studios (such as Pragmatic Play, Evolution Gaming, PG Soft, Spribe, NetEnt, or Microgaming) for the purpose of RNG certification, game dispute resolution, and technical integration. No personally identifiable information beyond a session token is shared.
• Regulatory and law enforcement authorities: at777 will disclose Personal Data to competent authorities where required to do so by applicable law, valid legal process, or regulatory order.
• Professional advisors: Legal counsel, auditors, and accountants may access Personal Data on a need-to-know basis and are bound by professional confidentiality obligations.

6.2  All third-party Data Processors engaged by at777 are subject to binding data processing agreements that prohibit secondary use, require appropriate security standards, and mandate prompt notification in the event of a data breach.

7Data Retention

7.1  at777 retains Personal Data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention periods apply:

• Active account data: Retained for the duration of your account's active status plus a minimum of five (5) years following account closure, to meet AML record-keeping requirements.
• KYC and identity documents: Retained for a minimum of five (5) years following the conclusion of the business relationship, in accordance with applicable AML regulations.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction.
• Support communications: Retained for a minimum of two (2) years from the date of the interaction, or longer if related to an ongoing dispute or investigation.
• Marketing consent records: Retained for the duration of your consent and for a period of two (2) years following withdrawal of consent, to evidence compliance.
• Technical and usage logs: Typically retained for up to twelve (12) months, unless retained longer for fraud investigation purposes.

7.2  When Personal Data is no longer required, it is securely deleted or anonymised in a manner that prevents reconstruction of the original data.

8Cookies & Tracking Technologies

8.1  at777 uses cookies and similar tracking technologies to operate the Platform effectively and improve the Member experience. The categories of cookies in use are:

• Essential cookies: Required for the Platform to function. These include session authentication cookies, security tokens, and load-balancing cookies. They cannot be disabled without impairing Platform functionality.
• Analytics cookies: Used to collect anonymised data on how Members navigate the Platform — including page views, session duration, and feature usage — to identify areas for improvement. No personally identifiable information is transmitted through analytics cookies.
• Responsible gaming cookies: Used to track session time and trigger time-limit reminders in accordance with at777's responsible gaming commitments.

8.2  at777 does not deploy third-party advertising cookies, retargeting pixels, or social media tracking pixels on the Platform.

8.3  You may manage or disable non-essential cookies through your browser settings. Please note that disabling essential cookies may prevent certain Platform features from functioning correctly.

9Your Data Rights

9.1  As a Member of at777, you hold the following rights in respect of your Personal Data, subject to applicable law and regulatory limitations:

• Right of access: You may request a copy of the Personal Data at777 holds about you, along with information about how it is being processed.
• Right to rectification: You may request correction of any Personal Data that is inaccurate, incomplete, or out of date. Some data (such as your registered name and date of birth) can only be amended following successful submission of updated identity documentation.
• Right to erasure: You may request deletion of your Personal Data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where processing is unlawful. This right is subject to at777's overriding legal obligation to retain certain data under AML and KYC regulations.
• Right to restrict processing: You may request that at777 restrict the processing of your Personal Data in certain circumstances, such as where you contest its accuracy or object to its use.
• Right to data portability: Where processing is based on your consent or on a contractual basis, you may request that at777 provide your Personal Data in a structured, machine-readable format.
• Right to object: You may object to the processing of your Personal Data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, subject to at777's assessment of whether those interests are overridden by your rights.
• Right to withdraw consent: Where processing is based solely on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

9.2  To exercise any of the rights listed above, please contact at777 Support with your request. at777 will respond within thirty (30) calendar days of receiving a valid request. In complex cases, this period may be extended by a further two months, with notice provided to you within the initial thirty-day window.

9.3  at777 may need to verify your identity before processing a data rights request, to ensure that Personal Data is not disclosed to an unauthorised party.

10Security Measures

10.1  at777 takes the security of your Personal Data seriously and implements a combination of technical and organisational measures to protect it against unauthorised access, accidental loss, alteration, and disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your browser and the Platform;
• AES-256 encryption for sensitive data stored at rest, including financial account details and identity documents;
• Role-based access controls, ensuring that only staff with a legitimate operational need can access Member Personal Data;
• Regular internal security audits and vulnerability assessments;
• Two-factor authentication (2FA) available for Member accounts and mandatory for internal staff access to Member data systems;
• Real-time intrusion detection and DDoS mitigation systems;
• Staff data protection training and binding confidentiality obligations.

10.2  In the event of a data breach that is likely to result in a high risk to your rights, at777 will notify affected Members without undue delay, providing details of the nature of the breach, the categories of data affected, and the steps at777 is taking to address it.

10.3  While at777 employs robust security measures, no internet-based service can guarantee absolute security. You are responsible for keeping your account login credentials confidential and for notifying at777 immediately if you suspect any unauthorised access to your account.

11Minors

11.1  The at777 Platform is strictly intended for adults aged 21 years and over. at777 does not knowingly collect Personal Data from individuals under the age of 21. If at777 becomes aware that Personal Data has been collected from a minor, such data will be permanently deleted and the associated account will be closed immediately.

11.2  If you are a parent or guardian and believe that your child has registered an account or provided Personal Data to at777, please contact Support immediately at support@at777.pro so that we can take prompt action.

12Third-Party Links & Services

12.1  The Platform may contain references to third-party game studios, payment service providers, and other services. This Privacy Policy applies solely to Personal Data collected and processed by at777. at777 is not responsible for the privacy practices of any third party, and we encourage you to review the privacy policies of any external services you access in connection with your at777 account.

12.2  Game providers such as Pragmatic Play, Evolution Gaming, PG Soft, Spribe, NetEnt, and Microgaming operate under their own privacy frameworks. at777 limits data shared with these providers to what is strictly necessary for game delivery and dispute resolution, as described in Section 6.

13Policy Amendments

13.1  at777 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, regulatory requirements, or the Platform's features. Material changes will be communicated to Members via the registered email address and/or a notice on the Platform, no less than seven (7) days prior to the amendment taking effect.

13.2  The "Last Updated" date at the top of this page reflects when the most recent revision was made. Continued use of the Platform following the effective date of any amendment constitutes your acceptance of the updated Policy. If you do not agree with the amended Policy, you must cease using the Platform and may request closure of your account by contacting Support.

13.3  The version of this Privacy Policy currently published on the Platform supersedes all prior versions.

14Contact

14.1  If you have any questions, concerns, or requests relating to this Privacy Policy or to the processing of your Personal Data by at777, please contact our Data Protection team through the following channels:

• Email: support@at777.pro (plain text — not a clickable link)
• Live Chat: Available within your Account dashboard after logging in to at777
• Support Hours: 24/7 WIB (Western Indonesia Time, UTC+7), including all Indonesian public holidays

14.2  For data rights requests (access, rectification, erasure, portability), please include your registered account email address and a description of your request. at777 may require identity verification before processing your request.

14.3  For concerns related to responsible gaming, self-exclusion, or deposit limit settings, please visit the Responsible Gaming page. For a full overview of your contractual rights and obligations as a Member, please refer to the Terms & Conditions.