iw777 Privacy Policy

In this Privacy Policy, the following terms carry the meanings set out below:

• "iw777", "We", "Us", "Our" — the operator of the iw777 platform accessible at https://iw777.one and all associated subdomains and progressive web application interfaces.
• "You", "Player", "Data Subject" — any individual who accesses, registers on, or interacts with the iw777 platform.
• "Personal Data" — any information that identifies or could identify you as a natural person, including your name, email address, Indonesian mobile number, date of birth, National Identity Card (KTP) number, bank account details, IP address, and device identifiers.
• "Processing" — any operation performed on personal data, including collection, storage, retrieval, use, disclosure, or deletion.
• "Data Controller" — the entity that determines the purposes and means of processing personal data. For iw777 players, this is the iw777 operator.
• "Data Processor" — a third party that processes personal data on behalf of iw777 under a contractual agreement, such as payment processors and KYC verification providers.
• "KYC" — Know Your Customer identity verification procedures required for account verification and responsible gaming compliance.
• "Cookies" — small text files or equivalent tracking technologies placed on your device by the iw777 platform to support session management, analytics, and security functions.

2.1 iw777 acts as the Data Controller for all personal data collected from players using the platform at https://iw777.one. As Data Controller, iw777 is responsible for ensuring that your personal data is processed in accordance with applicable data protection principles.

2.2 iw777 is operated for the Indonesian market. If you are accessing the platform from Indonesia, your data is processed under the data protection standards applicable to the iw777 operator's jurisdiction, consistent with internationally recognised privacy principles.

2.3 If you have any questions about how iw777 handles your personal data, or wish to exercise any of your data rights, please contact our Data Protection contact point as set out in Section 16 of this Policy.

3.1 iw777 collects the following categories of personal data:

3.2 iw777 does not collect or store full payment card numbers. Any card payment facilitation is handled exclusively by PCI-DSS-certified third-party payment processors who tokenise card data before it reaches iw777's systems.

3.3 iw777 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data beyond document photographs submitted for KYC purposes.

4.1 iw777 collects personal data through the following channels:

• Direct submission: Information you provide when completing the registration form, submitting KYC documents, making a deposit or withdrawal request, or contacting customer support.
• Automated technical collection: IP address, device identifiers, browser information, and session data collected automatically when you access the iw777 platform, via server logs and first-party cookies.
• Payment processors: Transaction confirmation data (amount, timestamp, payment channel reference) returned by BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja, and other payment partners following a deposit or withdrawal.
• KYC verification providers: Enhanced identity data and document verification results returned by iw777's third-party KYC bureau partners.
• Fraud and security tools: Risk scoring and device fingerprint data generated by iw777's anti-fraud platform during login and transaction events.

4.2 iw777 does not purchase data from data brokers, social media platforms, or advertising networks for the purpose of building player profiles.

5.1 iw777 processes your personal data on the following legal grounds:

• Contractual necessity: Processing required to open and maintain your account, process deposits and withdrawals, settle winnings, and fulfil iw777's obligations under the Terms & Conditions you accepted at registration.
• Legal obligation: Processing required to comply with anti-money-laundering (AML) obligations, KYC requirements, age verification mandates, and any lawful request from a competent authority.
• Legitimate interests: Processing for fraud prevention, platform security, abuse detection, and internal analytics — where these interests are not overridden by your fundamental privacy rights.
• Consent: Where iw777 sends you optional marketing communications or uses non-essential cookies, we rely on your freely given and withdrawable consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6.1 iw777 uses your personal data for the following purposes:

• Creating and managing your iw777 player account, including login authentication and session security.
• Processing deposits in IDR via local Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI) and e-wallets (OVO, DANA, GoPay, ShopeePay, LinkAja), and processing withdrawal requests to your verified payment account.
• Completing KYC verification to confirm your identity and confirm that you meet the 21+ age requirement before any withdrawal is processed.
• Delivering transactional notifications — deposit confirmations, withdrawal updates, bonus activation alerts, and security alerts — to your registered email address or mobile number.
• Monitoring your account activity in real time to detect and prevent fraud, money laundering, multi-accounting, and other prohibited conduct as defined in the iw777 Terms & Conditions.
• Analysing aggregated and anonymised usage data to improve the performance, stability, and content of the iw777 platform, including game selection, page load optimisation, and navigation design.
• Administering responsible gaming tools — deposit limits, session reminders, self-exclusion — and monitoring gameplay patterns that may indicate problem gambling behaviour.
• Responding to support queries submitted via live chat, email ([email protected]), or WhatsApp, and maintaining a record of those interactions for quality assurance and dispute resolution purposes.
• Sending optional promotional communications about iw777 bonuses, tournaments, and seasonal offers, where you have consented to receive such messages.

6.2 iw777 does not use automated decision-making that produces significant legal effects on you without human review. Risk scoring generated by fraud detection systems is reviewed by the iw777 compliance team before account restrictions are applied.

7.1 iw777 does not sell, rent, or otherwise commercialise your personal data to any third party. Data is shared only in the following limited circumstances:

• Payment service providers: BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, OVO, DANA, GoPay, ShopeePay, LinkAja, and any other payment channel listed on the iw777 deposit/withdrawal page. These providers receive only the transaction data required to execute and confirm the payment.
• KYC and identity verification bureaus: Third-party identity verification services that process document images and biographic data solely to confirm your identity and age on iw777's behalf.
• Fraud prevention and security platforms: Services that analyse device fingerprints, IP reputation data, and transaction patterns to detect and prevent fraud, abuse, and money laundering.
• Game content providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Pocket Games Soft, Spribe, and other certified studios may receive a pseudonymous player ID and session token to facilitate gameplay. They do not receive your full name, bank details, or KTP number.
• Legal and regulatory authorities: iw777 will disclose personal data to competent authorities where required by a valid legal order, court subpoena, or applicable law. iw777 will notify you of such a disclosure where legally permitted to do so.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of the iw777 business, player account data may be transferred to the acquiring entity as part of the transaction, subject to equivalent privacy protections.

7.2 All third-party Data Processors engaged by iw777 are contractually bound by data processing agreements that impose confidentiality obligations and restrict use of your data to the specific purpose for which it was shared.

8.1 iw777 operates infrastructure and engages service providers located in multiple jurisdictions. As a result, your personal data may be transferred to and processed in countries outside Indonesia.

8.2 Where personal data is transferred internationally, iw777 ensures that appropriate safeguards are in place, including contractual data protection clauses, to maintain a standard of protection equivalent to that described in this Privacy Policy.

8.3 By registering for an iw777 account, you acknowledge and consent to the international transfer of your personal data as described in this section.

9.1 iw777 uses first-party cookies and similar tracking technologies to operate and improve the platform. The following cookie categories are in use:

• Strictly necessary cookies: Required for login session management, security token validation, and load balancing. These cookies cannot be disabled as they are essential to platform operation.
• Functional cookies: Remember your display preferences (e.g., game category filter, last-visited lobby section) to improve your browsing experience across sessions.
• Analytics cookies: Collect anonymised data about how players navigate the iw777 platform — which pages are visited most, where drop-offs occur, and how quickly pages load — to guide platform improvements.
• Security cookies: Support fraud detection by tracking login attempts, session anomalies, and device consistency across multiple logins.

9.2 iw777 does not use third-party advertising cookies or cross-site tracking cookies for the purpose of serving targeted advertisements on other websites.

9.3 You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair the functionality of the iw777 platform, including the ability to log in. Disabling analytics or functional cookies will not prevent you from using the platform.

10.1 iw777 implements a layered security architecture to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure:

• Transport encryption: All data transmitted between your device and iw777 servers is encrypted using TLS 1.3, ensuring that your credentials, financial data, and KYC documents cannot be intercepted in transit.
• At-rest encryption: Stored personal data and KYC documents are encrypted using 256-bit AES encryption. Encryption keys are managed in a dedicated key management system, separate from the data stores.
• Access controls: Access to personal data within iw777's systems is granted on a strict need-to-know basis. All internal access is authenticated, role-based, and logged for audit purposes.
• Network security: The iw777 platform is protected by Web Application Firewalls (WAF), intrusion detection systems (IDS), and DDoS mitigation services.
• Incident response: iw777 maintains a documented data breach response procedure. In the event of a breach that is likely to result in a risk to your rights, iw777 will notify affected players within a reasonable timeframe.

10.2 While iw777 takes all reasonable technical and organisational measures to protect your data, no internet transmission or storage system is completely secure. You are responsible for maintaining the confidentiality of your iw777 login credentials and for ensuring that your own device is adequately secured.

11.1 iw777 retains personal data for the following periods, after which data is securely deleted or anonymised:

11.2 Where retention is required by a legal obligation, applicable law, or ongoing dispute, iw777 may retain data beyond the standard periods set out above until that obligation or dispute is resolved.

12.1 As a data subject, you hold the following rights with respect to your personal data held by iw777. To exercise any of these rights, contact the iw777 support team using the details in Section 16:

• Right of Access: You may request a copy of all personal data iw777 holds about you. iw777 will respond within 30 days of a verified request.
• Right to Rectification: If any personal data held by iw777 is inaccurate or incomplete, you may request that it be corrected. For changes to name, date of birth, or bank details, additional KYC verification may be required.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purpose it was collected, where you have withdrawn consent, or where processing was unlawful. Note that iw777 may be required to retain certain data to fulfil legal obligations even after an erasure request.
• Right to Restrict Processing: You may request that iw777 limits the processing of your data — for example, while a rectification request is being reviewed.
• Right to Data Portability: You may request a structured, machine-readable copy of the personal data you have provided to iw777, for the purpose of transferring it to another service provider.
• Right to Object: You may object to the processing of your personal data where iw777 relies on legitimate interests as the legal basis. iw777 will cease processing unless compelling legitimate grounds exist that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without penalty. Withdrawal does not affect the lawfulness of any processing that occurred before you withdrew consent.

12.2 iw777 will not charge a fee for exercising any of these rights under normal circumstances. Where a request is manifestly unfounded or excessive, iw777 reserves the right to charge a reasonable administrative fee or decline to act on the request, with written explanation.

13.1 The iw777 platform is strictly for adults aged 21 years or older. iw777 does not knowingly collect personal data from individuals under the age of 21.

13.2 Age verification is a mandatory step in the KYC process. All players are required to submit a government-issued photo identification document confirming that they are 21 or older before a withdrawal can be processed.

13.3 If iw777 discovers or is notified that a registered account belongs to an individual under the age of 21, the account will be immediately closed, all balances will be refunded to the originating payment method (excluding bonus credits), and any associated KYC data will be deleted in accordance with applicable law.

13.4 If you are a parent or guardian and believe that a minor has accessed iw777, please contact our support team immediately at [email protected] or via live chat so that we can take prompt action.

14.1 The iw777 platform integrates third-party services to deliver core functionality. These services operate under their own privacy policies, which are independent of this document:

• Game studios (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Pocket Games Soft, Spribe): receive a pseudonymous session token to serve game content. Their data practices are governed by their own privacy policies.
• Payment processors (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, OVO, DANA, GoPay, ShopeePay, LinkAja): process transaction data under their respective privacy and security frameworks.
• Analytics providers: iw777 uses first-party analytics infrastructure. No personal data is shared with third-party analytics platforms such as Google Analytics in a way that would allow user-level identification.

14.2 iw777 is not responsible for the privacy practices of third-party services. We encourage you to review the privacy policies of any third-party platform you interact with, including your bank or e-wallet provider.

15.1 iw777 reserves the right to update or revise this Privacy Policy at any time. Material changes — such as the introduction of a new category of data collection or a new third-party sharing arrangement — will be communicated to registered players via email or an in-platform notification at least seven (7) days before the revised policy takes effect.

15.2 The current version of this Privacy Policy, marked with its effective date, is always available at https://iw777.one/privacy-policy. Your continued use of the iw777 platform after the effective date of a revised policy constitutes your acceptance of the updated terms.

15.3 If you do not agree with an amended Privacy Policy, you must cease using the platform and may request account closure before the effective date of the change by contacting iw777 support.

16.1 For any questions, requests to exercise your data rights, or privacy-related complaints, please contact the iw777 data protection contact point using the following channels:

• Live Chat: Available 24/7 directly from your iw777 account dashboard — the fastest channel for urgent matters.
• Email: [email protected] — please include "Privacy Request" in the subject line and provide your registered username to expedite handling.
• WhatsApp: +62 811 7770 777 — available for Indonesian players during WIB (UTC+7) business hours and for urgent support outside those hours.

16.2 iw777 aims to acknowledge all privacy-related requests within 24 hours and to provide a substantive response within 30 days. Where a request is complex or voluminous, iw777 may extend this period by a further 30 days, with written notice to you.

16.3 If you are not satisfied with iw777's response to a privacy complaint, you have the right to escalate the matter to the relevant data protection authority or competent regulatory body in your jurisdiction.