msg77 Privacy Policy

In this Privacy Policy the following terms carry the meanings assigned to them below:

• "Platform" means the msg77 website at https://msg77.pro and all associated pages, features, and services accessible through it.
• "We", "Us", "Our" refers to msg77 and its operating entity, the data controller responsible for your personal data.
• "You", "Member", "User" means any individual who accesses the Platform, whether or not they have registered an account.
• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to name, email address, date of birth, residential address, payment details, and device identifiers.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, and deletion.
• "KYC" (Know Your Customer) means the identity and address verification process required to activate full account functionality and process withdrawal requests.
• "Third Party" means any entity other than you and msg77, including technology partners, payment processors, fraud-prevention services, and regulatory authorities.
• "Cookies" means small text files placed on your device by the Platform to enable certain functionality and collect usage analytics.

msg77 collects the following categories of personal data depending on how you interact with the Platform:

We do not intentionally collect any special-category (sensitive) personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data. If you volunteer such information during a support interaction, it will be treated with the highest level of confidentiality and deleted as soon as it is no longer required.

We collect personal data through the following channels:

• Direct interactions: Data you provide when you complete the registration form, submit KYC documents, make a deposit or withdrawal request, contact our support team, or update your account profile.
• Automated technologies: Technical and Usage Data collected automatically as you browse and use the Platform, via cookies, server logs, and analytics scripts. This data is collected whether or not you are logged in to an account.
• Payment processors: Confirmation data returned by local bank transfer networks and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) when a deposit or withdrawal transaction is processed. msg77 does not receive or store full bank account passwords or e-wallet PINs.
• Third-party verification services: Identity and sanctions-screening data returned by our KYC and AML compliance partners when verifying your identity documents.
• Referral sources: If you arrived at msg77 via an affiliate partner link, we may record the affiliate identifier associated with your registration for commission-tracking purposes. The affiliate is not provided with your personal data.

msg77 processes your personal data on one or more of the following legal bases:

• Contractual necessity: Processing required to perform the contract between you and msg77 — specifically, to open and maintain your account, process deposits and withdrawals, settle bets, and deliver the gaming services you have requested.
• Legal obligation: Processing required to comply with applicable international anti-money-laundering (AML) regulations, Know Your Customer (KYC) obligations, and record-keeping requirements imposed on licensed gambling operators.
• Legitimate interests: Processing for fraud detection and prevention, platform security, responsible-gambling monitoring, and internal analytics used to improve the Platform — provided these interests are not overridden by your privacy rights.
• Consent: Processing for optional purposes where you have given explicit, freely withdrawable consent — specifically, sending you promotional emails, WhatsApp marketing messages, and personalised bonus offers. You may withdraw consent at any time through your account settings or by contacting support.

msg77 uses the personal data we hold about you for the following purposes:

• To create, maintain, and secure your account, including verifying your identity during registration and on an ongoing KYC basis;
• To process deposits and withdrawals in Indonesian Rupiah (IDR) via supported local banks and e-wallets;
• To settle sportsbook bets — including BRI Liga 1, EPL, La Liga, Champions League, AFF Cup, and other covered markets — and casino game rounds fairly and accurately;
• To administer bonuses and promotions, including verifying that wagering requirements have been met before authorising bonus withdrawals;
• To detect and prevent fraud, money laundering, collusion, and other prohibited conduct as defined in our Terms & Conditions;
• To monitor and support responsible gambling, including applying deposit limits, session restrictions, cooling-off periods, and self-exclusion orders at your request or, in certain cases, where we identify patterns of harmful play;
• To respond to your enquiries submitted via live chat, WhatsApp, or email;
• To send you transactional notifications (account activity alerts, withdrawal confirmations, KYC status updates) — these are not optional as they are required to operate your account;
• To send you promotional communications where you have consented to receive them;
• To comply with applicable legal and regulatory obligations, including responding to lawful requests from authorities;
• To improve the Platform through aggregate, anonymised usage analytics.

msg77 does not sell your personal data. We disclose your data to third parties only in the following circumstances:

• Payment processors: We share the financial data necessary to execute your deposit or withdrawal instruction with the relevant local bank network or e-wallet provider (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja). These providers act as independent data controllers for their own systems and are bound by their own privacy policies.
• KYC and AML compliance partners: We share identity documents and transaction data with our licensed compliance service providers for the purpose of identity verification and sanctions screening. These partners are contractually prohibited from using your data for any purpose other than performing the verification service.
• Game content providers: Game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Pocket Games Soft, and Spribe receive a pseudonymised player identifier and bet/win data necessary to operate their game engines within the Platform. They do not receive your name, contact details, or payment information.
• Technology infrastructure providers: Cloud hosting, content delivery network (CDN), and customer support platform providers that process data on our behalf under strict data-processing agreements.
• Legal and regulatory authorities: Where required by a valid court order, regulatory directive, or applicable law, we will disclose personal data to the relevant authority. We will notify you of such a disclosure where we are legally permitted to do so.
• Business successors: In the event of a merger, acquisition, or sale of substantially all of msg77's assets, your personal data may be transferred to the acquiring entity, subject to equivalent privacy protections. You will be notified of any such transfer in advance.

msg77 uses the following categories of cookies on the Platform:

msg77 does not deploy third-party advertising cookies, social-media tracking pixels, or cross-site behavioural profiling technologies. You can manage or delete cookies at any time through your browser settings. Disabling strictly necessary cookies may impair Platform functionality, including the ability to remain logged in.

We retain your personal data for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following retention periods apply:

• Account and identity data: Retained for a minimum of five (5) years following permanent account closure to satisfy AML record-keeping obligations.
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction, consistent with international financial-crime compliance requirements.
• KYC documents: Retained for the duration of the membership and for five (5) years post-closure. Documents that do not pass verification are deleted within 90 days of submission.
• Support communication logs: Retained for two (2) years from the date of the last interaction in the relevant ticket or chat thread.
• Marketing preference records: Retained for as long as your account is active. If you withdraw marketing consent, your opt-out record is retained indefinitely to prevent inadvertent re-contact.
• Analytics data: Aggregated and anonymised after 13 months; raw session logs are deleted after 13 months.

Following the expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to you as an individual.

msg77 implements the following technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, or alteration:

• Encryption in transit: All data transmitted between your device and our servers is encrypted using TLS 1.2 or higher. Our domains enforce HTTPS with HSTS headers.
• Encryption at rest: Personal data and KYC documents stored on our servers are encrypted using AES-256 encryption.
• Access controls: Access to personal data systems is restricted to authorised personnel on a strict need-to-know basis. All internal access is logged and subject to regular audit.
• Two-factor authentication: Internal administrative access to data systems requires multi-factor authentication. We also strongly encourage members to enable two-factor authentication on their own accounts.
• Penetration testing: Our Platform undergoes regular third-party security assessments. Critical vulnerabilities are patched within 24 hours of identification.
• Incident response: We maintain a documented data-breach response procedure. In the event of a breach likely to result in a high risk to your rights and freedoms, we will notify you without undue delay.

Subject to applicable law and certain exemptions, you hold the following rights in respect of your personal data held by msg77:

• Right of access: You may request a copy of the personal data we hold about you, along with information about how it is used and with whom it has been shared.
• Right to rectification: You may request correction of any personal data that is inaccurate or incomplete. For account-critical data (name, date of birth), corrections must be supported by documentary evidence.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where processing was unlawful. This right is subject to our legal obligation to retain certain records for AML compliance purposes — in such cases, we will inform you of the data we are legally required to retain and for how long.
• Right to restriction: You may request that we restrict processing of your data in certain circumstances, such as while you contest the accuracy of your data or while a complaint is under review.
• Right to data portability: You may request that we provide your personal data in a structured, commonly used, machine-readable format so that you can transfer it to another service provider.
• Right to object: You may object to processing based on legitimate interests (e.g., analytics) or direct marketing at any time. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal.

To exercise any of these rights, contact our support team via live chat or email at [email protected]. Requests are processed within 30 calendar days. In complex cases this period may be extended by a further 30 days, and we will notify you of any extension within the initial 30-day window.

msg77 is strictly an adults-only platform. Access is limited to individuals who are at least 21 years of age. We do not knowingly collect personal data from any person under the age of 21.

If we become aware that personal data has been submitted by or on behalf of a person under 21, we will immediately suspend the associated account, delete the data, and return any deposited funds to the source payment method. If you believe a minor has registered an account on the Platform, please notify us immediately at [email protected] so that we can take prompt action.

Parents and guardians are encouraged to use internet filtering tools to prevent minors from accessing online gambling sites. Information on parental controls is available from your internet service provider or device manufacturer.

msg77 operates as an internationally licensed platform. Your personal data may be transferred to, and processed in, countries outside Indonesia where our technology infrastructure providers, KYC partners, or game content suppliers maintain their systems. These countries may not have data-protection laws equivalent to those in your home jurisdiction.

Where we transfer personal data internationally, we take steps to ensure an adequate level of protection is applied, including requiring our service providers to enter into data-processing agreements that incorporate internationally recognised standard contractual clauses or equivalent safeguards.

By using the Platform and providing your personal data, you acknowledge that your data may be transferred and processed as described in this clause.

msg77 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or the services we offer. When material changes are made, we will notify active members via the email address registered to their account and display a prominent notice on the Platform for at least seven (7) days before the changes take effect.

The date at the top of this page indicates when the policy was last revised. Your continued use of the Platform after the effective date of any revision constitutes your acceptance of the updated policy. If you do not accept the revised policy, you must cease using the Platform and contact support to close your account.

For any questions about this Privacy Policy, to exercise a data right, or to report a privacy concern, please contact us through the following channels:

• Live Chat: Available 24/7 via the chat widget on the Platform. Average first response: 2–5 minutes during peak WIB hours.
• WhatsApp: Available 24/7. Contact details are provided in the Support section of your account dashboard.
• Email: [email protected] (plain text — not a clickable link). Responses to privacy-related email enquiries are provided within 5 business days.

When submitting a data request, please include your registered username, the nature of your request, and any relevant details to allow us to locate your records and respond promptly. We may ask you to verify your identity before processing certain requests, particularly erasure and portability requests, to ensure we do not act on instructions from unauthorised persons.