tko777 is committed to protecting your personal data. This Privacy Policy explains what information we collect, how we use it, and the rights you hold as an Indonesian player on our platform.
This Privacy Policy ("Policy") governs the collection, use, storage, and disclosure of personal data by tko777 ("we", "us", "our"), the operator of the online gambling platform accessible at https://tko777.cam. It applies to all individuals who visit, register on, or interact with the tko777 Platform, including players located across Indonesia — from Jakarta, Surabaya, Medan, Bandung, Yogyakarta, Bali, Semarang, and Makassar.
By creating an account or using any tko777 service, you ("the User", "you", "your") acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. This Policy should be read alongside our Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference.
tko777 takes its data protection obligations seriously. We apply internationally recognized privacy standards and maintain technical and organizational safeguards appropriate to the sensitivity of the personal data we handle, including the Indonesian National Identity Card (KTP) details, bank account information, and gaming history of our registered players.
tko777 collects the following categories of personal data from Users:
| Category | Specific Data Points | Collection Trigger |
|---|---|---|
| Identity Data | Full legal name, date of birth, KTP number, selfie photograph, nationality | Account registration & KYC verification |
| Contact Data | Email address, mobile phone number, residential address (city, province, postal code) | Account registration |
| Financial Data | Indonesian bank account number, bank name (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Permata, BSI), e-wallet accounts (OVO, DANA, GoPay, ShopeePay, LinkAja), deposit and withdrawal transaction records, account balance | First deposit or withdrawal request |
| Gaming Activity Data | Bet history, game selections, wagering amounts, win/loss records, session durations, game type preferences (sports, slots, live casino, togel) | Active gameplay |
| Technical Data | IP address, device type, operating system, browser type and version, screen resolution, time zone (WIB/WITA/WIT), session timestamps | Platform access |
| Communications Data | Live chat transcripts, WhatsApp message records, email correspondence, support ticket content | Customer support interactions |
| Preference Data | Language preferences, notification settings, responsible gaming limit configurations, marketing consent records | Account settings management |
Note on Sensitive Data: KTP numbers, bank account details, and financial transaction records are classified as Sensitive Personal Data. They are encrypted at rest using AES-256 encryption, encrypted in transit using TLS 1.3, and accessible only to authorized personnel with a legitimate business need.
The majority of personal data tko777 holds is provided directly by you during the following interactions:
When you access or use the tko777 Platform, certain technical data is collected automatically by our servers and analytics systems:
tko777 may receive personal data about you from trusted third-party partners in the following circumstances:
tko777 processes your personal data for the following clearly defined purposes:
tko777 processes your personal data only where a recognized legal basis exists. The primary legal bases we rely on are:
tko777 does not sell, rent, or trade your personal data to third parties for their independent marketing purposes. We share personal data only in the limited circumstances described below, and only with parties who are contractually bound to handle it with appropriate confidentiality and security standards.
We engage carefully selected third-party service providers to support our operations. These processors act only on tko777's documented instructions:
tko777 may disclose personal data to governmental authorities, regulatory bodies, law enforcem ent agencies, or courts of competent jurisdiction where disclosure is required by applicable law, a valid legal order, or our international gaming license conditions. In such cases, tko777 will disclose only the minimum personal data necessary to satisfy the legal requirement and will notify affected Users where permitted by law.
In the event of a merger, acquisition, restructuring, or sale of all or a material portion of tko777's assets, your personal data may be transferred to the successor entity as part of that transaction. You will be notified via email and a prominent Platform notice at least 30 days before any such transfer takes effect, and the acquiring entity will be required to honor this Privacy Policy or provide you with a materially equivalent level of protection.
tko777 retains personal data only for as long as necessary to fulfill the purposes described in this Policy, or as required by applicable legal, regulatory, or licensing obligations. The following retention periods apply:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account & identity data (KTP, name, DOB) | Duration of account + 5 years after closure | AML compliance, dispute resolution, licensing obligations |
| Financial transaction records | Duration of account + 7 years after closure | International AML record-keeping requirements |
| Gaming activity & bet history | Duration of account + 3 years after closure | Dispute resolution, responsible gaming analysis |
| Customer support communications | 3 years from date of interaction | Complaint handling, quality assurance |
| Technical logs (IP, session data) | 12 months from collection | Security monitoring, fraud investigation |
| Marketing consent records | Until consent is withdrawn + 2 years | Demonstrating compliance with consent obligations |
| Cookie data | As specified in Section 9 per cookie type | Platform functionality and analytics |
When the applicable retention period expires, personal data is securely deleted or irreversibly anonymized so that it can no longer be associated with any identifiable individual. Backup copies are purged on the next scheduled backup rotation cycle following the deletion trigger date.
tko777 implements a layered security architecture to protect your personal data against unauthorized access, disclosure, alteration, and destruction. Our key technical and organizational security measures include:
Your Role in Security: No security system is impenetrable. You play a critical role in protecting your own data by using a strong, unique password for your tko777 account, enabling 2FA, never sharing your login credentials with any third party, and contacting our support team immediately if you suspect unauthorized account access.
tko777 uses cookies and similar tracking technologies (including local storage objects and session tokens) to operate and improve the Platform. A cookie is a small text file placed on your device by our web server when you visit the Platform. Cookies do not contain executable code and cannot access other files on your device.
| Cookie Type | Purpose | Duration | Opt-Out? |
|---|---|---|---|
| Strictly Necessary | Session management, authentication tokens, security CSRF protection, responsible gaming enforcement | Session / up to 24 hours | No — required for Platform to function |
| Functional | Remembering your language preference, notification settings, and responsible gaming limit configurations | Up to 12 months | Yes — via Account settings |
| Analytics | Aggregate Platform usage statistics (pages visited, session duration, feature adoption) to improve user experience — data is pseudonymized before analysis | Up to 12 months | Yes — via Account settings |
| Security & Fraud Detection | Device fingerprinting for multi-account detection and fraud prevention; risk scoring for unusual login activity | Up to 6 months | No — required for account security |
tko777 does not use third-party advertising cookies or behavioral retargeting pixels. We do not share cookie data with advertising networks or social media platforms. You may manage cookie preferences through your browser settings at any time, but please note that disabling strictly necessary cookies will prevent you from logging into your tko777 account.
As a User of tko777, you hold the following rights with respect to your personal data. These rights are subject to applicable legal limitations, including our AML record-keeping obligations and legitimate fraud prevention interests.
Request a copy of all personal data we hold about you, along with information about how it is processed.
Request correction of any inaccurate or incomplete personal data we hold. Update your contact details directly via Account settings.
Request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention requirements.
Request that we restrict processing of your data in certain circumstances — for example, while a rectification request is being resolved.
Request your personal data in a structured, commonly used, machine-readable format where processing is based on consent or contractual necessity.
Object to processing based on legitimate interests, including any direct marketing communications you no longer wish to receive.
Withdraw consent for marketing communications at any time via Account settings or by contacting our support team, without affecting prior processing.
Request human review of any automated decision that produces a significant effect on your account status, including fraud flags or self-exclusion triggers.
To exercise any of these rights, please contact our customer support team via live chat or email (see Section 14). We will acknowledge your request within 3 business days and provide a substantive response within 30 calendar days. In cases of complexity or volume, we may extend this period by a further 30 days with notice to you. We will not charge a fee for reasonable requests.
⚠️ 21+ Only: tko777 strictly prohibits use of the Platform by individuals under 21 years of age. We do not knowingly collect personal data from minors. If you are under 21, you must not register an account or use any tko777 service.
Age verification is a mandatory step in the KYC process for all tko777 accounts. We verify date of birth against the KTP provided during registration. If we discover that personal data has been collected from an individual under 21, we will immediately suspend the associated account, forfeit any balance, and permanently delete all personal data collected from that individual, except where retention is required by applicable law for fraud investigation purposes.
If you are a parent or guardian and believe your child has created a tko777 account, please contact our support team immediately via live chat or email. We will investigate and take appropriate action within 24 hours of a verified report. We encourage parents and guardians to use device-level parental control software to prevent underage access to online gambling platforms.
tko777 operates as an internationally licensed platform. To deliver our services to Indonesian players, some personal data may be processed on servers located outside Indonesia, including in jurisdictions where data protection laws may differ from Indonesian standards. In all cases, tko777 ensures that appropriate safeguards are in place before transferring personal data internationally, including:
tko777 does not transfer personal data to any jurisdiction that is subject to international sanctions or that lacks a functional legal framework for data protection enforcement.
tko777 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or our Platform's features and services. When material changes are made, we will notify you by email to your registered address and display a prominent notice on the Platform for at least 14 days before the updated Policy takes effect.
The "Last Updated" date at the top of this document indicates when the Policy was most recently revised. We encourage you to review this Policy periodically. Your continued use of the tko777 Platform after any amendment takes effect constitutes your acknowledgment of the revised Policy. If you do not agree with any amended terms, you may request account closure as described in our Terms & Conditions.
For any privacy-related inquiries, requests to exercise your data rights, or concerns about how tko777 handles your personal data, please contact our customer support team through the following channels:
When submitting a data rights request, please specify the right you wish to exercise (access, rectification, erasure, etc.) and provide enough identifying information for our team to verify your identity before processing the request. We may ask for confirmation of your registered email address or a one-time verification code sent to your registered mobile number as part of this process.
Every byte of data exchanged between your browser and tko777's servers is protected by TLS 1.3 encryption with Perfect Forward Secrecy. Your KTP details, bank account numbers, and session credentials are never transmitted in plain text under any circumstances.
tko777 collects only the personal data that is genuinely necessary to deliver our services, verify your identity, and comply with our licensing obligations. We do not harvest data speculatively or sell any User information to third-party advertisers or data brokers — ever.
Our identity verification process — including KTP authentication and selfie matching — meets international AML and CTF standards. This protects every Indonesian player on the Platform by ensuring that all accounts belong to real, eligible adults aged 21 and above.
Your Indonesian bank account details — whether BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, or Bank Permata — and e-wallet credentials (OVO, DANA, GoPay, ShopeePay, LinkAja) are encrypted at rest using AES-256 and accessed only by authorized payment processing personnel.
tko777 publishes transparent data retention periods for every category of personal data we hold. We do not retain data beyond what is legally required. When retention periods expire, data is securely and irreversibly deleted — not archived indefinitely in legacy systems.
Our entire customer support team consists of native Indonesian speakers available 24/7 to assist with data rights requests, privacy concerns, and account security issues. Privacy requests are escalated to our dedicated privacy team within one business day of receipt.
Our 24/7 Indonesian-speaking support team is ready to assist with any privacy concern, data rights request, or security question. You can also explore our FAQ for quick answers to the most common questions from Indonesian players.