Privacy Policy

1. Introduction and Scope

This Privacy Policy applies to all users of the upo77 gaming platform, accessible at https://upo77.cam and associated mobile applications. It covers all personal information collected through your registration, use of our services, communications with customer support, and interactions with our marketing materials. This policy should be read in conjunction with our Terms & Conditions, which govern your use of the platform.

upo77 operates as an online gaming platform offering casino games, sports betting, live dealer entertainment, and related services to users in Indonesia. As a data controller, we determine the purposes and means of processing your personal information. We comply with applicable data protection laws and regulations, including international standards for data security and privacy.

2. Information We Collect

2.1 Information You Provide Directly

When you create an account on upo77, we collect personal information that you provide voluntarily during the registration process and throughout your use of our services:

• Account Registration Information: Full legal name, date of birth, gender, residential address, email address, phone number, preferred username, and password.
• Identity Verification Documents: Government-issued identification (Indonesian National ID or KTP), proof of address documents (utility bills or bank statements), and selfie photographs for identity verification (KYC) purposes.
• Financial Information: Bank account details, e-wallet account information (OVO, DANA, GoPay, ShopeePay, LinkAja), credit or debit card numbers (stored securely by our payment processors, not by upo77 directly), transaction history, deposit amounts, withdrawal amounts, and betting history.
• Communications: Messages, emails, live chat transcripts, and any other communications you send to our customer support team or through our platform.
• Marketing Preferences: Your consent preferences for receiving promotional emails, SMS messages, push notifications, and other marketing communications.

2.2 Information Collected Automatically

When you access and use the upo77 platform, we automatically collect certain technical information about your device and how you interact with our services:

• Device Information: IP address, device type (mobile, tablet, desktop), operating system, browser type and version, device identifiers (IMEI, Android ID, IDFA), screen resolution, and mobile network information.
• Usage Data: Pages viewed, games played, bets placed, search queries, time spent on pages, click patterns, navigation paths, referral sources, access times and dates, and session duration.
• Location Data: Approximate geographic location derived from your IP address to verify that you are accessing our services from within Indonesia, as required by our licensing and regulatory obligations.
• Cookies and Tracking Technologies: We use cookies, web beacons, pixel tags, and similar technologies to recognize your browser, remember your preferences, analyze usage patterns, and improve our services. You can control cookie settings through your browser preferences, though disabling cookies may affect your ability to use certain features of our platform.

2.3 Information from Third Parties

We may receive information about you from third-party sources, including:

• Payment Processors: Verification of payment method validity, transaction status, and fraud prevention information from banks and payment service providers.
• Identity Verification Services: Confirmation of identity document authenticity and cross-reference checks from third-party verification providers.
• Fraud Prevention Services: Information about known fraudulent accounts, suspicious betting patterns, and risk assessment data from specialized security vendors.
• Marketing Partners: If you access our platform through an affiliate link or promotional campaign, we may receive information about the referral source.

3. How We Use Your Information

upo77 uses your personal information for the following purposes, all of which are necessary for providing our gaming services and complying with legal obligations:

3.1 Service Delivery and Account Management

• Creating and maintaining your user account
• Processing deposits and withdrawals
• Enabling you to place bets and play games
• Tracking your betting history and account balance
• Providing customer support and responding to your inquiries
• Administering bonuses, promotions, and loyalty programs
• Sending transactional communications (deposit confirmations, withdrawal notifications, account updates)

3.2 Legal and Regulatory Compliance

• Verifying your identity and age to ensure compliance with the 21+ requirement
• Preventing underage gambling and ensuring player eligibility
• Detecting and preventing fraud, money laundering, and other illegal activities
• Complying with anti-money laundering (AML) and know your customer (KYC) regulations
• Fulfilling record-keeping requirements under applicable gaming laws
• Responding to legal requests from government authorities, courts, or law enforcement agencies
• Enforcing our Terms & Conditions and investigating violations

3.3 Security and Fraud Prevention

• Monitoring account activity for suspicious behavior or unauthorized access
• Detecting multiple accounts, bonus abuse, and collusion between players
• Protecting against hacking, phishing, and other cyber threats
• Verifying the legitimacy of withdrawal requests
• Maintaining the integrity and fairness of our gaming platform

3.4 Service Improvement and Analytics

• Analyzing usage patterns to understand how players interact with our platform
• Identifying popular games, betting markets, and features
• Improving website performance, mobile app functionality, and user experience
• Testing new features and conducting A/B testing
• Generating aggregated, anonymized statistics for business analysis

3.5 Marketing and Communications

• Sending promotional emails about new games, bonuses, and special offers (only with your consent)
• Providing personalized game recommendations based on your preferences
• Conducting customer satisfaction surveys
• Displaying targeted advertisements on our platform

You may opt out of marketing communications at any time by clicking the unsubscribe link in promotional emails or adjusting your preferences in your account settings. Note that even if you opt out of marketing communications, we will still send essential transactional messages related to your account.

4. How We Share Your Information

upo77 does not sell your personal information to third parties. However, we may share your information with carefully selected service providers and partners who assist us in operating our platform and delivering our services:

4.1 Service Providers and Business Partners

• Payment Processors: Banks, e-wallet providers, and payment gateways that process your deposits and withdrawals (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, OVO, DANA, GoPay, ShopeePay, LinkAja, Visa, Mastercard).
• Identity Verification Providers: Third-party services that verify the authenticity of your identification documents.
• Game Providers: Software studios that provide casino games, live dealer tables, and sports betting platforms integrated into upo77.
• Cloud Hosting Services: Technology providers that host our servers and databases.
• Customer Support Tools: Live chat software and helpdesk platforms that enable our support team to assist you.
• Marketing and Analytics Platforms: Email service providers, SMS gateways, and analytics tools that help us communicate with users and understand platform usage.

All third-party service providers are contractually bound to protect your information and use it only for the purposes we specify. They are prohibited from using your data for their own marketing purposes without your separate consent.

4.2 Legal Obligations and Safety

We may disclose your information to government authorities, law enforcement agencies, courts, or regulators when required by law or when we believe in good faith that disclosure is necessary to:

• Comply with a legal obligation, court order, subpoena, or regulatory request
• Investigate suspected fraud, money laundering, or other illegal activity
• Protect the rights, property, or safety of upo77, our users, or the public
• Enforce our Terms & Conditions or other agreements
• Respond to claims of rights infringement

4.3 Business Transfers

In the event that upo77 is involved in a merger, acquisition, asset sale, bankruptcy, or other business transaction, your personal information may be transferred to the acquiring entity as part of that transaction. We will notify you via email or prominent notice on our platform before your information is transferred and becomes subject to a different privacy policy.

5. Data Security

upo77 employs industry-standard security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction:

• Encryption: All data transmitted between your device and our servers is encrypted using 256-bit SSL (Secure Socket Layer) technology, the same encryption standard used by banks and financial institutions.
• Secure Storage: Personal information is stored on secure servers with restricted access, protected by firewalls and intrusion detection systems.
• Access Controls: Only authorized personnel with a legitimate business need can access your personal information, and all access is logged for audit purposes.
• Regular Security Audits: Our systems undergo regular security assessments and penetration testing by independent third-party security firms.
• Payment Card Security: We do not store your full credit card numbers on our servers. Payment card data is tokenized and processed by PCI-DSS compliant payment processors.
• Account Security: You are responsible for maintaining the confidentiality of your password. We encourage you to use a strong, unique password and enable two-factor authentication (2FA) for additional protection.

While we implement robust security measures, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security, but we continually work to enhance our security practices and promptly address any identified vulnerabilities.

6. Data Retention

upo77 retains your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements:

• Active Accounts: While your account remains active, we retain all associated personal information to provide ongoing services.
• Closed Accounts: After you close your account, we retain certain information for a period required by law (typically 5-7 years) to comply with financial record-keeping regulations, tax obligations, and anti-money laundering requirements.
• Marketing Data: If you opt out of marketing communications, we retain a record of your opt-out preference indefinitely to ensure we honor your request.
• Anonymized Data: We may retain anonymized, aggregated data indefinitely for statistical analysis and business intelligence purposes, as this data cannot be used to identify you personally.

7. Your Privacy Rights

As a user of upo77, you have certain rights regarding your personal information:

7.1 Right of Access

You have the right to request a copy of the personal information we hold about you. Most account information is accessible through your account dashboard. For additional information, contact our support team.

7.2 Right to Rectification

If any personal information we hold about you is inaccurate or incomplete, you have the right to request corrections. You can update most information directly in your account settings or by contacting customer support.

7.3 Right to Deletion

You may request deletion of your personal information, subject to our legal obligations to retain certain records for regulatory compliance. After the required retention period, we will delete or anonymize your information upon request.

7.4 Right to Restriction

You may request that we limit how we use your personal information in certain circumstances, such as while we verify the accuracy of information you have contested.

7.5 Right to Data Portability

You have the right to receive your personal information in a structured, commonly used, machine-readable format and to transmit that data to another service provider where technically feasible.

7.6 Right to Object

You may object to the processing of your personal information for direct marketing purposes at any time. We will honor such requests promptly.

7.7 Right to Withdraw Consent

Where we rely on your consent to process personal information, you have the right to withdraw that consent at any time. This will not affect the lawfulness of processing based on consent before withdrawal.

To exercise any of these rights, please contact our Data Protection Officer at [email protected]. We will respond to your request within 30 days.

8. Cookies and Tracking Technologies

upo77 uses cookies and similar technologies to enhance your experience on our platform. Cookies are small text files stored on your device that help us recognize you, remember your preferences, and analyze how you use our services.

Types of Cookies We Use:

• Essential Cookies: Necessary for the platform to function, including login authentication and security features. These cannot be disabled.
• Performance Cookies: Collect anonymous data about how visitors use our site, helping us improve functionality and user experience.
• Functional Cookies: Remember your preferences (language, region, username) to provide a personalized experience.
• Marketing Cookies: Track your activity across websites to deliver targeted advertising relevant to your interests.

You can manage cookie preferences through your browser settings. Most browsers allow you to block or delete cookies, though this may affect your ability to use certain features of our platform. For more information about cookies and how to manage them, visit www.allaboutcookies.org.

9. International Data Transfers

Your personal information may be transferred to and processed in countries outside of Indonesia where our servers, service providers, or partners are located. These countries may have data protection laws that differ from Indonesian regulations. When we transfer your information internationally, we ensure appropriate safeguards are in place, such as standard contractual clauses approved by relevant authorities, to protect your data in accordance with this Privacy Policy.

10. Children's Privacy

upo77 is intended solely for users aged 21 and older. We do not knowingly collect personal information from individuals under 21 years of age. If we become aware that we have inadvertently collected information from someone under 21, we will delete that information immediately and close the associated account. Parents or guardians who believe their child has provided personal information to upo77 should contact us immediately at [email protected].

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will notify you by email, display a prominent notice on our platform, or update the "Effective Date" at the top of this policy. Your continued use of the platform after notification of changes constitutes acceptance of the updated policy. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

12. Contact Us

If you have any questions, concerns, or complaints about this Privacy Policy or our data practices, please contact us:

• Email: [email protected]
• Data Protection Officer: [email protected]
• Live Chat: Available 24/7 through our platform
• WhatsApp: Available during business hours (08:00-02:00 WIB)

We take all privacy inquiries seriously and will respond to your request within 30 days. If you are not satisfied with our response, you have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.