Privacy Policy

1. Information We Collect

ufo77 collects several categories of personal information necessary to provide our online gambling services, ensure account security, comply with regulatory requirements, and improve user experience. The types of information we collect include:

1.1 Information You Provide Directly

When you register an account or use our services, you voluntarily provide the following information:

• Account Registration Data: Full legal name (as it appears on your government-issued ID), date of birth, gender, residential address (including city and postal code), email address, and mobile phone number.
• Identity Verification Documents (KYC): Copies of your Indonesian national identity card (KTP), passport, driver's license, or other government-issued identification documents, along with verification selfie photographs.
• Financial Information: Bank account details (bank name, account number, account holder name), e-wallet account information (OVO, DANA, GoPay, ShopeePay, LinkAja account numbers), and transaction history including deposits and withdrawals.
• Communication Data: Content of your communications with our customer support team via live chat, email, WhatsApp, or in-app messaging, including queries, complaints, and feedback.
• Preference Settings: Account preferences such as language selection, notification settings, deposit limits, self-exclusion settings, and responsible gaming tool configurations.

1.2 Information Collected Automatically

When you access or use ufo77 services, we automatically collect certain technical and behavioral information:

• Device Information: Device type (mobile, tablet, desktop), operating system (Android, iOS, Windows, macOS), browser type and version, screen resolution, and device identifiers.
• Usage Data: Pages visited, features accessed, games played, bets placed, time spent on platform, click patterns, navigation paths, and session duration.
• Location Data: IP address, general geographic location (city and region level, not precise GPS coordinates), and timezone information. This helps us verify you are accessing our services from Indonesia and comply with geographic restrictions.
• Log Data: Server logs recording access times, error messages, system events, security incidents, and technical diagnostics.
• Cookie and Tracking Data: Information collected through cookies, web beacons, and similar tracking technologies to remember your preferences, authenticate your sessions, and analyze platform usage patterns.

1.3 Information from Third Parties

We may receive information about you from third-party sources, including:

• Payment Processors: Transaction confirmations, payment status updates, and anti-fraud checks from banks (BCA, BRI, BNI, Mandiri) and e-wallet providers.
• Identity Verification Services: Results from third-party KYC verification services that cross-reference your submitted documents against government databases.
• Game Providers: Game session data, betting history, and results from our software partners like Pragmatic Play, Evolution Gaming, and Microgaming.
• Fraud Prevention Services: Risk scores, fraud indicators, and security alerts from specialized anti-fraud platforms.

2. How We Use Your Information

ufo77 uses the collected information for the following purposes:

2.1 Service Provision and Account Management

• Create, maintain, and manage your ufo77 account.
• Process your deposits, withdrawals, and financial transactions accurately and securely.
• Provide access to sports betting, casino games, lottery products, and other gambling services.
• Verify your identity, age (21+), and residency to ensure regulatory compliance.
• Authenticate your login sessions and prevent unauthorized account access.
• Apply your account settings, preferences, and responsible gaming limits.

2.2 Legal and Regulatory Compliance

• Comply with Know Your Customer (KYC) and Anti-Money Laundering (AML) regulations.
• Fulfill licensing requirements under international gaming law.
• Prevent underage gambling by verifying that all users are at least 21 years of age.
• Detect and prevent fraud, money laundering, identity theft, and other illegal activities.
• Respond to legal requests from law enforcement, regulatory authorities, or courts when legally required.
• Maintain records for audit purposes as mandated by gaming regulations.

2.3 Security and Fraud Prevention

• Monitor account activity for suspicious behavior, unusual betting patterns, and potential security breaches.
• Implement risk-based authentication to prevent unauthorized access.
• Detect duplicate accounts, bonus abuse, collusion, and other Terms & Conditions violations.
• Protect against technical attacks including DDoS, SQL injection, and other cyber threats.
• Investigate disputes, chargebacks, and customer complaints.

2.4 Customer Support and Communication

• Respond to your inquiries, technical issues, and support requests via live chat, email, WhatsApp, and in-app messaging.
• Send transactional notifications about account activity, deposit confirmations, withdrawal status, bonus credits, and password changes.
• Provide important updates regarding changes to Terms & Conditions, Privacy Policy, or service features.
• Deliver responsible gaming messages, self-exclusion confirmations, and problem gambling resources when appropriate.

2.5 Service Improvement and Analytics

• Analyze user behavior to understand how Indonesian players use our platform and identify areas for improvement.
• Test new features, games, and promotional offers to optimize user experience.
• Monitor platform performance, uptime, load times, and technical errors.
• Conduct market research to better understand Indonesian gambling preferences and trends.
• Generate aggregated, anonymized statistics about user demographics, popular games, and betting patterns (these statistics cannot be traced back to individual users).

2.6 Marketing and Promotions (With Your Consent)

With your explicit consent, we may use your contact information to:

• Send promotional emails, SMS messages, or push notifications about bonuses, special offers, new games, and tournaments.
• Personalize marketing content based on your gaming preferences and activity history.
• Invite you to participate in surveys, focus groups, or promotional campaigns.

You can withdraw marketing consent at any time by clicking unsubscribe links in emails, adjusting notification settings in your account, or contacting customer support. Withdrawing marketing consent does not affect transactional communications necessary for service operation.

3. How We Share Your Information

ufo77 does not sell your personal information to third parties for their marketing purposes. However, we may share your information with the following categories of recipients under limited circumstances:

3.1 Service Providers and Business Partners

We share information with trusted third-party service providers who assist us in operating our platform:

• Payment Processors: Banks (BCA, BRI, BNI, Mandiri) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) receive your financial information necessary to process deposits and withdrawals.
• Game Providers: Software developers like Pragmatic Play, Evolution Gaming, Microgaming, and NetEnt receive your user ID and betting data to deliver game functionality and track jackpots.
• Identity Verification Services: KYC verification platforms receive your identification documents to confirm your age, identity, and residency against government databases.
• Cloud Hosting Providers: Secure server infrastructure providers store our databases and backups.
• Customer Support Tools: Live chat software and ticketing systems process your support communications.
• Analytics Platforms: Website analytics tools receive anonymized usage data to help us understand user behavior patterns.

All third-party service providers are contractually required to protect your data, use it only for the specified purpose, and comply with applicable data protection laws. They cannot use your information for their own purposes or share it with others without our permission.

3.2 Legal and Regulatory Authorities

We may disclose your information to government authorities, law enforcement, or regulatory bodies when:

• Required by law, court order, subpoena, or other legal process.
• Necessary to comply with gaming license requirements or regulatory audits.
• Reporting suspected money laundering, fraud, or other illegal activity to appropriate authorities.
• Responding to national security or public safety requests from Indonesian government agencies.

3.3 Business Transfers

If ufo77 undergoes a merger, acquisition, reorganization, bankruptcy, or sale of assets, your personal information may be transferred to the new owner as part of the business transaction. We will notify you via email and/or prominent notice on our website before your information is transferred and becomes subject to a different Privacy Policy.

3.4 With Your Consent

We may share your information with other third parties when you provide explicit consent, such as participating in joint promotions with partners or sharing your username on public leaderboards.

4. Data Security Measures

ufo77 implements industry-standard technical and organizational security measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction:

4.1 Technical Security Controls

• SSL/TLS Encryption: All data transmitted between your device and our servers is encrypted using 256-bit SSL/TLS protocol, preventing interception by third parties.
• Data Encryption at Rest: Sensitive data stored in our databases (passwords, financial information, identification documents) is encrypted using AES-256 encryption.
• Secure Password Storage: Passwords are hashed using bcrypt with salt, making them unreadable even to ufo77 employees.
• Firewalls and Intrusion Detection: Network-level firewalls and intrusion detection systems monitor and block suspicious traffic patterns.
• Regular Security Audits: Independent security firms conduct penetration testing and vulnerability assessments quarterly.
• DDoS Protection: Distributed denial-of-service protection mechanisms ensure platform availability during attacks.

4.2 Organizational Security Controls

• Access Controls: Employee access to personal data is restricted on a need-to-know basis using role-based access controls. Only authorized personnel can view sensitive information.
• Employee Training: All staff receive regular training on data protection best practices, privacy regulations, and security protocols.
• Confidentiality Agreements: Employees and contractors sign strict confidentiality agreements prohibiting unauthorized data disclosure.
• Incident Response Plan: We maintain a formal security incident response plan to quickly identify, contain, and remediate data breaches.
• Regular Backups: Data backups are performed daily and stored in geographically separated secure locations.

4.3 User Responsibilities

While we implement robust security measures, you also play a critical role in protecting your account:

• Choose a strong, unique password combining uppercase, lowercase, numbers, and symbols. Never reuse passwords from other websites.
• Keep your login credentials confidential. Never share your password with anyone, including customer support agents (we will never ask for your password).
• Log out of your account after each session, especially when using shared or public devices.
• Enable two-factor authentication if available for additional account protection.
• Be cautious of phishing emails pretending to be from ufo77. Verify sender addresses and never click suspicious links.
• Keep your registered email address and phone number secure, as they are used for account recovery.
• Report suspicious account activity to our support team immediately.

Despite our security efforts, no method of data transmission or storage is 100% secure. While we strive to protect your information using industry best practices, we cannot guarantee absolute security. You acknowledge that you provide your information at your own risk.

5. Data Retention Periods

ufo77 retains your personal information only as long as necessary to fulfill the purposes outlined in this Privacy Policy and to comply with legal, regulatory, and business requirements:

Data Category	Retention Period	Reason for Retention
Account Registration Data	Account lifetime + 5 years after closure	Regulatory compliance, fraud prevention, legal defense
KYC Documents	5 years after account closure	AML/KYC regulations, licensing requirements
Financial Transactions	7 years after transaction date	Tax regulations, AML compliance, audit requirements
Betting History	5 years after bet settlement	Dispute resolution, licensing audits, fraud investigation
Customer Support Communications	3 years after conversation date	Service improvement, dispute resolution, training purposes
Marketing Consent Records	Account lifetime + 2 years after withdrawal	Legal compliance, preference management
Server Logs and IP Addresses	90 days (unless involved in investigation)	Security monitoring, technical troubleshooting
Self-Exclusion Records	Permanent (never deleted)	Protect vulnerable users, prevent re-registration

After the applicable retention period expires, we securely delete or anonymize your personal information so it can no longer be associated with you. Anonymized data (stripped of all personal identifiers) may be retained indefinitely for statistical analysis and research purposes.

If you close your account, we will mark it as inactive and restrict access, but we cannot immediately delete your data due to regulatory obligations. You can request a copy of your data or ask questions about retention periods by contacting our Data Protection Officer.

6. Your Privacy Rights

As a user of ufo77 services, you have the following rights regarding your personal data:

6.1 Right to Access

You have the right to request a copy of all personal information we hold about you. We will provide this information in a structured, commonly used, machine-readable format (typically PDF or CSV). To request access, contact our support team with your request. We will respond within 30 days.

6.2 Right to Rectification

If any of your personal information is inaccurate or incomplete, you have the right to request correction. You can update most information directly in your account settings (email, phone number, address). For changes to your legal name or date of birth, contact customer support with supporting documentation.

6.3 Right to Erasure (Right to Be Forgotten)

You may request deletion of your personal data under certain circumstances:

• The data is no longer necessary for the purposes it was collected.
• You withdraw consent for processing based on consent.
• You object to processing and there are no overriding legitimate grounds.
• The data was processed unlawfully.

However, we may be legally required to retain certain information for regulatory compliance (KYC records, transaction history) even after account closure. We will explain any limitations on deletion when you make your request.

6.4 Right to Restriction of Processing

You can request that we limit how we use your data in certain situations, such as while we verify the accuracy of disputed information or determine whether our legitimate interests override your objection to processing.

6.5 Right to Data Portability

You have the right to receive your personal data in a portable format and to transmit it to another service provider where technically feasible.

6.6 Right to Object

You can object to processing of your personal data for direct marketing purposes at any time. We will immediately stop processing your data for marketing. You can also object to processing based on legitimate interests by explaining your specific situation.

6.7 Right to Withdraw Consent

Where we process your data based on consent (such as marketing communications), you have the right to withdraw that consent at any time. This will not affect the lawfulness of processing before you withdrew consent.

6.8 How to Exercise Your Rights

To exercise any of these rights, contact us at:

• Email: [email protected] with subject line "Privacy Rights Request"
• Live Chat: Available 24/7 on our website
• WhatsApp: +62 812 3456 7890

We may request additional information to verify your identity before processing privacy rights requests. We will respond within 30 days of receiving your verified request.

7. Cookies and Tracking Technologies

ufo77 uses cookies, web beacons, and similar tracking technologies to enhance user experience, analyze platform usage, and deliver personalized content. A cookie is a small text file stored on your device that allows us to recognize you on subsequent visits.

7.1 Types of Cookies We Use

• Essential Cookies: Necessary for basic platform functionality, including user authentication, session management, and security features. These cannot be disabled as the platform would not function without them.
• Performance Cookies: Collect anonymous information about how users interact with our platform (pages visited, time spent, errors encountered) to help us improve performance and usability.
• Functionality Cookies: Remember your preferences (language, currency display, game favorites) to provide a personalized experience on return visits.
• Analytics Cookies: Help us understand user behavior patterns through aggregated statistics. We use this data to optimize platform design and identify popular features.

7.2 Managing Cookie Preferences

You can control cookie settings through your browser preferences. Most browsers allow you to:

• View what cookies are stored and delete them individually or all at once.
• Block third-party cookies while allowing first-party cookies.
• Block all cookies from specific websites.
• Block all cookies from all websites (note: this will prevent you from logging into ufo77).
• Delete all cookies when you close your browser.

Please note that disabling certain cookies may impact platform functionality and prevent access to some features. Essential cookies cannot be disabled through browser settings as they are critical for security and basic operations.

8. International Data Transfers

ufo77 operates internationally and may transfer your personal data to servers located outside Indonesia for processing and storage. When we transfer data internationally, we ensure appropriate safeguards are in place to protect your information:

• Data centers are located in jurisdictions with strong data protection laws.
• Service providers are contractually bound to protect your data according to international standards.
• Data transfers comply with applicable data protection regulations.
• Security measures (encryption, access controls) remain in effect regardless of data location.

By using ufo77 services, you acknowledge and consent to the transfer of your personal information to international locations for the purposes described in this Privacy Policy.

9. Children's Privacy

ufo77 services are strictly intended for adults aged 21 and older. We do not knowingly collect personal information from individuals under 21 years of age. Our registration process includes mandatory age verification, and we implement strict KYC procedures to prevent underage gambling.

If we discover that we have inadvertently collected information from someone under 21, we will immediately delete that information and permanently close the account. If you believe a minor has registered an account on ufo77, please contact us immediately at [email protected] so we can investigate and take appropriate action.

Parents and guardians are encouraged to monitor their children's internet usage and educate them about the risks of online gambling. We recommend using parental control software to block access to gambling websites for underage individuals.

10. Changes to This Privacy Policy

ufo77 reserves the right to update this Privacy Policy at any time to reflect changes in our practices, technology, legal requirements, or business operations. When we make material changes, we will notify you through:

• Email notification to your registered email address.
• Prominent banner notification on the website homepage.
• In-account notification message upon your next login.

The "Last Updated" date at the top of this policy indicates when the most recent revisions were made. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

Your continued use of ufo77 services after notification of changes constitutes acceptance of the updated Privacy Policy. If you do not agree with the changes, you must stop using our services and request account closure.

11. Contact Information and Data Protection Officer

If you have questions, concerns, or complaints about this Privacy Policy or how ufo77 handles your personal information, please contact us:

• General Privacy Inquiries: [email protected]
• Data Protection Officer: Available through customer support channels
• Live Chat: 24/7 on every page of the website
• WhatsApp: +62 812 3456 7890 (text only)

We take all privacy concerns seriously and will investigate and respond to your inquiry within 30 days. If you are not satisfied with our response, you may have the right to lodge a complaint with a data protection authority in your jurisdiction.