Privacy Policy — kim777

This Privacy Policy applies to all personal data processed by kim777 in connection with the operation of its online betting platform accessible at https://kim777.cam ("Platform"). It covers data collected from Members, prospective Members, and visitors to the Platform, regardless of their location, with particular relevance to users located in Indonesia.

The data controller — the entity responsible for determining how and why your personal data is processed — is kim777, the internationally licensed entity that owns and operates the Platform. References to "the Company", "we", "us", or "our" in this Policy refer to kim777 in that capacity.

This Privacy Policy is incorporated into and should be read alongside our Terms & Conditions. By registering an account or using the Platform, you confirm that you have read and understood this Policy.

In this Privacy Policy, the following terms carry the meanings set out below:

kim777 collects the following categories of personal data from Members and Platform visitors:

We do not intentionally collect special-category (sensitive) personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data, or health data. If any such data is incidentally included in a document submitted for KYC, it is not actively used and is stored only as part of the unredacted KYC document.

We collect personal data through the following channels:

• Direct Provision: Information you supply when registering an account, completing KYC verification, making a deposit, requesting a withdrawal, contacting customer support, or participating in promotions.
• Automated Technical Collection: Data generated automatically as you browse and interact with the Platform, collected via server logs, cookies, pixel tags, and similar tracking technologies (see Section 10).
• Payment Processors: Transaction confirmation data relayed to us by domestic bank gateways (BCA, BRI, BNI, Mandiri) and e-wallet providers (OVO, DANA, GoPay) when you make a deposit or receive a withdrawal.
• Third-Party Verification Services: Identity verification results from KYC service providers engaged to validate government-issued documents against official databases.
• Fraud & Security Monitoring: Risk signals and device reputation data from third-party fraud detection services, used to protect Members and the Platform from unauthorized access and fraudulent activity.

kim777 processes your personal data for the following purposes, each underpinned by a recognized legal basis:

kim777 does not sell, rent, or trade your personal data to unaffiliated third parties for their own marketing purposes. We share personal data only in the following circumstances and only to the extent necessary:

• Payment Processors & Banking Partners: To facilitate deposits and withdrawals, we share necessary transaction data with partner banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja). These entities process data under their own privacy frameworks and applicable banking regulations.
• KYC & Identity Verification Providers: To complete mandatory identity verification, we share KYC documents with specialized third-party verification services that validate documents against official identity databases. These providers operate under strict data processing agreements.
• Game Content Providers: Game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft may receive session data (stake amounts, game outcomes) necessary for game settlement and fairness auditing. No unnecessary personal data is shared.
• Fraud & Security Services: Device fingerprint and behavioral risk data may be shared with fraud detection providers to identify and prevent unauthorized account access and financial crime.
• Cloud Infrastructure & Hosting Providers: Personal data is stored on secure servers provided by enterprise cloud hosting partners operating under contractual data protection obligations.
• Legal & Regulatory Authorities: We may disclose personal data to law enforcement agencies, regulatory bodies, or courts where required by applicable law or in response to a valid legal process. We will seek to notify affected Members where legally permissible.
• Corporate Transactions: In the event of a merger, acquisition, or sale of the Company, Member data may be transferred to the acquiring entity, which will be required to honour the commitments in this Privacy Policy.

All Third-Party Providers with whom we share data are subject to binding contractual obligations that restrict their use of that data to the specific purpose for which it was shared and require them to maintain appropriate security standards.

As an internationally licensed platform serving Members primarily located in Indonesia, kim777 may transfer personal data to servers, processors, or affiliated entities located outside Indonesia. Where such transfers occur, the Company implements appropriate safeguards to ensure your data receives an equivalent level of protection, including:

• Standard contractual clauses or data processing agreements with international service providers;
• Transfers only to jurisdictions that maintain adequate data protection frameworks recognized by the Company's licensing authority;
• Encryption of data in transit via TLS 1.2+ and at rest using AES-256 encryption standards.

By using the Platform, you acknowledge that your data may be transferred and processed internationally in accordance with the safeguards described above.

kim777 retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods:

When personal data is no longer required for any legitimate purpose, it is either deleted securely or anonymized so that it can no longer be associated with any individual.

The security of your personal data is a core operational priority for kim777. We implement the following technical and organizational measures to protect your information against unauthorized access, disclosure, alteration, or destruction:

• Encryption in Transit: All data exchanged between your browser and the Platform is encrypted using TLS 1.2 or higher (256-bit SSL). Connections not meeting this standard are rejected.
• Encryption at Rest: Personal data stored on Company servers is encrypted using AES-256 encryption. Database fields containing sensitive financial data (bank account numbers, e-wallet IDs) are additionally tokenized.
• Access Controls: Access to Member personal data by Company employees and contractors is strictly role-based and limited to the minimum necessary for each function. All access is logged and subject to periodic audit.
• Two-Factor Authentication: All Company staff with access to production data systems are required to use multi-factor authentication. Members are also offered 2FA for Account logins.
• Penetration Testing & Vulnerability Management: The Platform undergoes regular third-party security assessments. Critical and high vulnerabilities are remediated within defined SLA periods.
• Incident Response: The Company maintains a documented data breach response procedure. In the event of a material breach affecting Member data, affected Members will be notified within a reasonable timeframe, alongside any applicable regulatory authorities.

kim777 uses cookies and similar tracking technologies on the Platform for the following purposes:

• Essential Cookies: Required for the Platform to function correctly — maintaining your logged-in session, remembering security preferences, and enabling core functionality. These cannot be disabled without preventing use of the Platform.
• Performance & Analytics Cookies: Used to collect anonymized or aggregated data about how Members navigate and use the Platform, enabling us to identify performance bottlenecks and improve the user experience. No individual Members are identified through this data.
• Functional Cookies: Used to remember your preferences such as preferred language display, last-visited game categories, and notification settings.
• Fraud Prevention Cookies: Device fingerprinting tokens used to identify suspicious login behavior, multi-account activity, and automated bot traffic.

kim777 does not use third-party advertising cookies or behavioral tracking cookies for the purpose of serving targeted advertising on external websites.

Most web browsers allow you to manage cookie preferences through their settings. Disabling essential cookies may impair Platform functionality. For detailed cookie information, including a list of specific cookies in use, please contact our support team.

As a Member of kim777, you hold the following rights in respect of your personal data. To exercise any of these rights, contact us using the details in Section 15. We will respond within a reasonable timeframe, typically within 30 days.

Please note that certain rights are subject to limitations where legal obligations require us to retain or process data — for example, AML record-keeping requirements mandate minimum retention of transaction and KYC data as described in Section 8, regardless of an erasure request.

The Platform is strictly intended for adults aged 21 years and older. kim777 does not knowingly collect personal data from individuals under the age of 21. Age verification is enforced as part of the account registration process and may be repeated during KYC review.

If the Company becomes aware that personal data has been collected from a person under 21 years of age, the relevant Account will be suspended immediately, all bets placed through that Account will be voided, and all deposits will be returned to the original payment source. Any associated personal data will be deleted as soon as legally permissible.

If you are a parent or guardian and believe your child has registered an account on this Platform, please contact our support team immediately using the contact details in Section 15.

The Platform may contain references to third-party services such as game studios, sports data providers, or payment gateway landing pages. These third-party services operate under their own privacy policies, over which kim777 has no control and for which kim777 bears no responsibility.

When you navigate away from the kim777 Platform to a third-party service, we recommend reviewing that party's privacy policy before submitting any personal data.

kim777 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, industry standards, or our data processing practices. When material changes are made, we will notify Members via the Platform's notification system or by email to the address registered on your Account, at least seven (7) days before the changes take effect.

The "Last Updated" date displayed at the top of this page always reflects the most recent revision. The current version of this Policy is the definitive version. Archived versions of this Policy are available upon request from our support team.

Your continued use of the Platform after the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. If you do not agree with the changes, you may request Account closure prior to the effective date.

For any privacy-related inquiry, data rights request, or complaint regarding how kim777 handles your personal data, please contact us through the following channels:

• Email: [email protected] — please include "Privacy Request" in your subject line so your message is routed directly to our data protection team.
• Live Chat: Available 24/7 via the Platform. Indonesian-speaking agents are on shift 07:00–02:00 WIB for Members who prefer to communicate in Bahasa Indonesia.
• Support Ticket: Submit a formal request through your Account dashboard for a complete written record of the correspondence.

We aim to acknowledge all privacy requests within 72 hours and to resolve them within 30 days. Complex requests, particularly those involving large volumes of data or requiring coordination with third-party processors, may take up to 60 days; we will notify you if an extension is required.

If you are dissatisfied with our response to a privacy complaint, you have the right to escalate the matter to the relevant data protection authority in your jurisdiction, or to the dispute resolution body associated with kim777's international gaming licence.