Privacy Policy

bata77 ("we", "us", "our") is committed to protecting the privacy of every individual who interacts with our platform. This Privacy Policy sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by bata77. It applies to all users of the bata77 website at bata77.cam, including any mobile or other device-optimised versions of the platform.

This policy is intended to be read alongside our Terms & Conditions. By registering an account or using any part of the bata77 platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.

bata77 serves English-preference players across Indonesia, including users in Jakarta, Surabaya, Bandung, Medan, Bali, Semarang, Makassar, and beyond. We recognise that Indonesian users' personal data carries particular significance and we are committed to handling it with the highest standards of care, transparency, and security.

In this Privacy Policy, the following terms have the meanings assigned below:

3.1 Registration Data. When you create a bata77 account, we collect:

• Full legal name (as it appears on your government-issued ID)
• Date of birth (to verify that you are at least 21 years of age)
• Email address
• Mobile phone number
• Residential address in Indonesia
• Username and hashed password

3.2 KYC Verification Data. To comply with our anti-money-laundering (AML) obligations and confirm your eligibility, we collect:

• Scan or photograph of your Indonesian National Identity Card (KTP) or valid passport
• Proof of address document (e.g., a recent BCA, BRI, BNI, or Mandiri bank statement, or a utility bill)
• Proof that the payment method used (bank account or e-wallet) is registered in your name
• A selfie or liveness-check image where required by our KYC provider

3.3 Transaction Data. For every deposit and withdrawal, we record:

• Transaction amount (in IDR/Rp)
• Date, time, and method of transaction (BCA, BRI, OVO, DANA, GoPay, ShopeePay, LinkAja, etc.)
• Transaction reference numbers
• Running account balance at time of transaction

3.4 Betting and Gaming Activity. We record all wagers, game sessions, and associated outcomes for the purposes of account management, dispute resolution, and regulatory reporting. This includes sports bets (BRI Liga 1, EPL, mix parlay, voor bola markets), live casino sessions, slot activity, and togel (lottery) entries.

3.5 Technical and Device Data. When you access bata77, our servers automatically collect:

• IP address
• Device type, operating system, and browser version
• Session timestamps and duration
• Pages visited and features used within the platform
• Referring URL (the website or source from which you arrived at bata77)

3.6 Communications Data. If you contact bata77 support via live chat, email, or any other channel, we retain records of those communications, including the content of messages, the date and time of contact, and the resolution outcome. These records are used for quality assurance, training, and dispute resolution purposes.

bata77 collects personal data through the following channels:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, place a bet, participate in a promotion, or contact our support team.
• Automatically — through our platform's server logs, session management systems, and cookie technology when you browse or use bata77.
• From third-party service providers — our licensed KYC and identity verification partners may provide supplementary data (e.g., document authenticity scores) as part of the verification workflow. Our payment processors (for BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, and LinkAja transactions) provide transaction confirmation data.
• From publicly available sources — in cases where fraud or AML investigations require it, bata77 may reference publicly available records to corroborate information provided by a user.

bata77 processes your personal data only where a valid legal basis exists. The table below sets out the primary purposes for which we process your data and the corresponding legal basis for each:

Where we rely on legitimate interests as our legal basis, we conduct a balancing test to ensure that our interests do not override your fundamental rights and freedoms. You may request details of any such balancing test by contacting us at [email protected].

6.1 bata77 does not sell, rent, or trade your personal data to any third party for commercial marketing purposes. We share your data only in the following limited circumstances:

• KYC and Identity Verification Providers: We engage licensed third-party verification services to authenticate documents submitted during the KYC process. These providers act as data processors under written agreements that restrict their use of your data to the verification purpose only.
• Payment Processors: To process deposits and withdrawals via BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, LinkAja, and other channels, we share the minimum necessary transaction data with the relevant payment processor.
• Fraud Prevention and AML Services: We may share data with specialist fraud-detection and AML screening services to fulfil our regulatory obligations. These services process data only as instructed by bata77.
• Game Content Providers: Game studios such as Pragmatic Play, Evolution Gaming, Microgaming, and Spribe may receive anonymised session data (e.g., game ID, session duration, stake amounts) for the purpose of game integrity monitoring. No directly identifiable personal data is shared with game studios.
• Legal and Regulatory Authorities: We may disclose personal data to law enforcement agencies, regulatory bodies, or courts where we are legally compelled to do so, or where disclosure is necessary to protect the safety of our users or the integrity of the platform.
• Business Transfers: In the event of a merger, acquisition, or sale of substantially all of bata77's assets, user data may be transferred to the acquiring entity, subject to equivalent privacy protections. We will provide reasonable advance notice of any such transfer.

7.1 bata77 operates as an internationally licensed platform. As a result, your personal data may be processed by our service providers in countries outside of Indonesia, including the jurisdiction in which our primary licensing authority is located.

7.2 Where personal data is transferred outside of Indonesia, bata77 ensures that appropriate safeguards are in place, which may include:

• Standard contractual clauses approved by the relevant data protection authority;
• Data processing agreements that impose data protection obligations on the recipient equivalent to those applicable to bata77;
• Transfers only to countries or organisations that have been assessed as providing an adequate level of data protection.

7.3 You may request information about the specific safeguards applied to any international transfer of your data by contacting us at [email protected].

8.1 bata77 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• Transport Security: All data transmitted between your device and bata77's servers is encrypted using TLS 1.2 or higher (256-bit SSL). The padlock icon in your browser confirms this connection is secure.
• At-Rest Encryption: Personal data stored in our databases is encrypted at rest using AES-256 encryption.
• Password Security: User passwords are never stored in plain text. We apply industry-standard hashing algorithms with unique salts per account.
• Access Controls: Access to personal data within bata77's internal systems is restricted to authorised personnel on a strict need-to-know basis. All staff with access to personal data undergo regular privacy and security training.
• Intrusion Detection: Our infrastructure is monitored 24/7 for suspicious activity using automated intrusion detection and alerting systems.
• Regular Security Audits: bata77 conducts periodic third-party penetration tests and security audits to identify and remediate vulnerabilities proactively.

8.2 Despite these measures, no system can guarantee absolute security. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, bata77 will notify affected users without undue delay and take all reasonable steps to contain and remediate the breach.

9.1 bata77 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law or our licensing obligations. The following retention periods apply as a general guide:

9.2 Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification. Anonymised or aggregated data (from which no individual can be identified) may be retained indefinitely for statistical and analytical purposes.

10.1 bata77 uses cookies and similar technologies to operate the platform, maintain your session, and collect anonymous analytics data. We do not use third-party advertising cookies or cross-site tracking technologies.

10.2 Types of Cookies We Use:

10.3 You can manage or delete cookies through your browser settings at any time. Please note that disabling strictly necessary cookies will prevent the bata77 platform from functioning correctly. Disabling functional or analytics cookies will not impair core platform functionality but may affect your personalised experience.

As a bata77 user, you hold the following rights with respect to your personal data. To exercise any of these rights, contact us at [email protected] with your full name and registered email address. We will respond within 30 calendar days of receiving a valid request.

12.1 bata77 is strictly an adults-only platform. We do not knowingly collect personal data from any person under the age of 21 years. Our registration process requires users to self-declare their date of birth, and all accounts are subject to mandatory KYC age verification before withdrawals are processed.

12.2 If we become aware that personal data has been collected from an individual under the age of 21 — whether through self-declaration error, document forgery, or any other means — we will immediately suspend the account, delete all associated personal data to the extent permitted by our legal obligations, and refund any deposited funds (net of any bonuses claimed) to the original payment source.

12.3 If you are a parent or guardian and believe your child has registered on bata77, please contact us immediately at [email protected]. We will treat such reports with the highest priority and take immediate action.

13.1 The bata77 platform may contain references to or integrations with third-party services, including game studios (Pragmatic Play, Evolution Gaming, Microgaming, Spribe, Pocket Games Soft) and payment processors. These third parties operate under their own privacy policies, which are independent of this document.

13.2 bata77 is not responsible for the privacy practices or content of any third-party service. We encourage you to review the privacy policies of any third-party service you interact with in connection with your use of bata77.

13.3 All third-party data processors engaged by bata77 are contractually bound to handle personal data in accordance with our instructions and to implement appropriate security measures. We conduct due diligence on all data processors before engagement and review their compliance on a periodic basis.

14.1 bata77 reserves the right to update or amend this Privacy Policy at any time. Where changes are material — meaning they significantly affect how your personal data is processed or the rights available to you — we will provide advance notice of at least 14 calendar days by posting a prominent notice on the bata77 homepage and/or sending an email to your registered address before the updated policy takes effect.

14.2 Minor amendments, such as corrections of typographical errors or clarifications that do not alter the substance of any clause, may be made without advance notice and take effect upon publication. The "Last Updated" date at the top of this document will reflect the date of the most recent revision.

14.3 Your continued use of bata77 following the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not accept the updated policy, you should cease using the platform and request account closure before the effective date.

15.1 For all privacy-related queries, data subject rights requests, or concerns about how bata77 handles your personal data, please contact our support team using the details below:

15.2 When submitting a data rights request, please include: (a) your full registered name; (b) the email address associated with your bata77 account; (c) a clear description of the right you wish to exercise and the data to which it relates. We may need to verify your identity before processing the request to prevent unauthorised data disclosure.

15.3 For matters related to our overall Terms of Service, please refer to our Terms & Conditions. For information on responsible gaming tools and self-exclusion, please visit our Responsible Gaming page.