Your privacy matters to us. This Privacy Policy explains exactly what personal data spu777 collects from Indonesian players, how we use and protect it, who we share it with, and what rights you have over your own information. Please read it alongside our Terms & Conditions.
Privacy at a Glance
The cards below summarise the six most important things to know about privacy at spu777. The full legal text follows in the sections below.
Notice: This Privacy Policy applies to all personal data processed by spu777 in connection with the spu777 Platform at https://spu777.bet. By registering an account or using the Platform, you acknowledge that you have read and understood this Privacy Policy. If you have questions, contact our Data Protection contact at [email protected].
spu777 ("spu777", "we", "us", "our") operates the online gaming platform accessible at https://spu777.bet, providing casino games, live dealer tables, sports betting markets, esports wagering, and related services primarily to players in Indonesia. In the course of providing these services, spu777 collects and processes personal data about its players and website visitors.
This Privacy Policy sets out in transparent and plain terms what personal data we collect, why we collect it, how we use and protect it, who we share it with, and what choices you have. We are committed to handling your data responsibly, proportionately, and in compliance with our international licensing obligations and applicable data protection principles.
This Privacy Policy forms part of spu777's overall legal framework, which also includes the Terms & Conditions and the Responsible Gaming Policy. Terms defined in the Terms & Conditions carry the same meaning here unless this Policy provides a different definition.
In this Privacy Policy, the following terms have the meanings set out below:
spu777 collects the following categories of personal data about you, depending on how you interact with the Platform:
| Category | Examples | When Collected |
|---|---|---|
| Identity Data | Full legal name, date of birth, gender, nationality, KTP or passport number, photograph | Registration & KYC |
| Contact Data | Email address, Indonesian mobile phone number, residential address | Registration |
| Account Data | Username, password hash, account status, account preferences, login history | Registration & ongoing use |
| Financial Data | Bank account name and number (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon), e-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja), deposit and withdrawal history, transaction amounts in IDR | Deposits, withdrawals & KYC |
| Gaming Data | Bet history, game session logs, wagering amounts, win/loss records, bonus usage, sports betting selections | Ongoing gameplay |
| Technical Data | IP address, device type and identifier, browser type and version, operating system, time zone (WIB/WITA/WIT), referral URL | Automatic collection on site visit |
| Communication Data | Live chat transcripts, WhatsApp message content (where applicable), email correspondence, support ticket history | Customer support interactions |
| Responsible Gaming Data | Self-imposed deposit limits, loss limits, session limits, self-exclusion records, cooling-off period records | When tools are activated |
| Marketing Preferences | Email and push notification opt-in/opt-out status, promotion claim history | Registration & account settings |
spu777 does not collect payment card numbers. All card-based payments (where applicable) are handled directly by our PCI-DSS-compliant payment processor, which returns only a transaction reference to spu777. We do not store full card numbers on our systems.
spu777 collects personal data through the following channels:
spu777 processes your personal data only where there is a valid legal basis for doing so. The table below sets out the main purposes for which we process personal data and the legal basis relied upon for each purpose.
| Purpose | Legal Basis |
|---|---|
| Account registration and management | Performance of contract — necessary to open and operate your spu777 Account |
| Identity verification (KYC) and age check (21+) | Legal obligation — required by our international gaming licence and AML compliance programme |
| Processing deposits and withdrawals in IDR | Performance of contract — necessary to facilitate financial transactions on your behalf |
| Fraud prevention and security monitoring | Legitimate interest — protecting spu777 and its players from fraudulent activity, unauthorised access, and money laundering |
| Responsible gaming tool management | Legal obligation and legitimate interest — maintaining player welfare and complying with responsible gaming requirements under our licence |
| Customer support and dispute resolution | Performance of contract and legitimate interest — resolving queries and disputes efficiently |
| Sending promotional communications | Consent — only where you have opted in to receive marketing from spu777 |
| Platform analytics and performance improvement | Legitimate interest — improving the user experience, game offering, and technical stability of the Platform |
| Regulatory reporting and compliance | Legal obligation — reporting to our licensing authority and fulfilling AML/CTF obligations |
Where spu777 relies on legitimate interest as the legal basis for processing, we have conducted a balancing assessment to confirm that our interests do not override your fundamental rights and freedoms in the context of that specific processing activity.
spu777 shares personal data with third parties only in the circumstances described below. In every case, spu777 ensures that sharing is governed by appropriate contractual safeguards and that the receiving party is prohibited from using your data for purposes beyond those specified.
6.1 Payment Processors & Indonesian Banks
To process your IDR deposits and withdrawals, spu777 must share certain identity and account data with the relevant payment partner — for example, BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, OVO, DANA, GoPay, ShopeePay, or LinkAja. The data shared is limited to what is strictly necessary to execute and confirm the specific transaction.
6.2 KYC & Identity Verification Providers
spu777 uses licensed third-party identity verification service providers to validate the KYC documents you submit (KTP, passport, proof of address). These providers return a verification result and a risk score to spu777. They do not retain your documents beyond the period required for the verification process and are contractually prohibited from using them for any other purpose.
6.3 IT Infrastructure & Hosting Providers
The spu777 Platform is hosted on secure cloud infrastructure. Our hosting provider processes technical data (server logs, database records) as a Data Processor under spu777's instructions and has no independent right to access or use player data.
6.4 Licensing Authority
As a condition of our international gaming licence, spu777 may be required to share certain account and transaction data with our licensing authority upon their request. This sharing is a legal obligation and is not subject to player consent.
6.5 Law Enforcement & Regulators
spu777 will disclose personal data to law enforcement agencies, courts, or regulatory bodies where required to do so by a valid legal process (such as a court order or statutory obligation). We will notify the affected player of any such disclosure where we are legally permitted to do so.
6.6 Business Transfers
In the event of a merger, acquisition, or sale of all or part of spu777's business, personal data held by spu777 may be transferred to the acquiring entity as part of the transaction. Players will be notified of any such transfer and their rights will be preserved under the new entity's privacy policy.
Data is Never Sold: spu777 does not sell, rent, auction, or otherwise commercially transfer your personal data to any third party for their own independent marketing, profiling, or commercial purposes. This prohibition is absolute and applies regardless of any commercial arrangement spu777 may have with third-party service providers.
spu777 is an internationally operated platform. As a result, some of your personal data may be transferred to, stored in, or processed in countries outside Indonesia. This may occur, for example, where our cloud hosting infrastructure or a KYC verification partner operates servers in a jurisdiction other than Indonesia.
When spu777 transfers personal data internationally, we take reasonable steps to ensure that an adequate level of protection is applied to that data, including:
If you would like more information about the specific safeguards applied to any international transfer of your personal data, please contact the spu777 support team at [email protected].
spu777 uses cookies and similar tracking technologies on the Platform to provide a functional and personalised user experience. The following types of cookies are used:
spu777 does not use third-party advertising or retargeting cookies. You may control cookies through your browser settings. However, disabling essential cookies will prevent you from logging into your spu777 Account or completing financial transactions on the Platform.
spu777 retains personal data for no longer than is necessary for the specific purpose for which it was collected, subject to any legal or regulatory retention obligations. The following retention schedule applies:
| Data Category | Retention Period |
|---|---|
| Account & identity data | Duration of account plus 5 years after account closure (to satisfy AML regulatory requirements) |
| KYC documents | 5 years from submission or from last transaction, whichever is later |
| Financial transaction records | 5 years from the date of each transaction |
| Gaming / bet history | 3 years from each bet settlement date, or for the duration of any active dispute |
| Customer support records | 3 years from the date of last interaction |
| Marketing preference records | Until opt-out, then suppression list record retained for 3 years to evidence compliance |
| Server & access logs (Technical Data) | 90 days, unless retained longer for an active security investigation |
| Self-exclusion records | Duration of self-exclusion plus 5 years, to prevent circumvention via re-registration |
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with any individual. Anonymised aggregated data (e.g., aggregate betting volumes, platform usage statistics) may be retained indefinitely for analytical purposes.
You have the following rights in relation to the personal data that spu777 holds about you. To exercise any of these rights, contact us at [email protected] with the subject line "Privacy Rights Request" and include your spu777 username and the specific right you wish to exercise. spu777 will respond within 30 calendar days of receiving a valid request.
Note on Erasure Requests: spu777's ability to erase your personal data may be limited by legal retention obligations (see Section 9). In particular, AML regulations require us to retain identity and transaction records for a defined period after account closure regardless of an erasure request. Where full erasure is not possible, spu777 will explain the specific legal basis for retaining each data element and will delete or anonymise all data not subject to a legal retention requirement.
The spu777 Platform is strictly intended for adults aged 21 and over. spu777 does not knowingly collect personal data from individuals under the age of 21. If you are under 21, you must not register an account, use the Platform, or provide any personal data to spu777.
If spu777 becomes aware that personal data has been collected from a person under 21, we will close the associated account, void any transactions, and delete the personal data as promptly as practicable, subject to any legal obligations that may require temporary retention during the investigation and closure process.
If you believe that an individual under 21 has registered an account with spu777, please contact us immediately at [email protected] so that we can take appropriate action.
spu777 takes the security of your personal data seriously and implements a multi-layered approach to protecting it against unauthorised access, disclosure, alteration, and destruction. Our technical and organisational security measures include:
Your Role in Security: While spu777 applies strong technical safeguards, the security of your account also depends on the strength of your password and the care you take with your login credentials. Use a unique, strong password for your spu777 account and enable two-factor authentication where available. Never share your credentials with any third party. If you suspect unauthorised access to your account, contact our 24/7 Live Chat support immediately.
The spu777 Platform does not contain links to third-party websites for general browsing purposes. Where references are made to payment partners (such as BCA, BRI, OVO, or GoPay) or game software providers (such as Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, or Pocket Games Soft), these references are informational only and do not constitute endorsement of, or a link to, those parties' websites.
If you navigate away from spu777 to any third-party website — for example, by accessing your bank's internet banking portal to initiate a transfer — spu777 has no control over and accepts no responsibility for the privacy practices of that third-party site. We encourage you to read the privacy policy of any external site you visit.
spu777 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, updates to our product offering, or amendments required by changes in applicable law or our licensing obligations.
When we make a material change to this Privacy Policy — one that meaningfully affects how we collect, use, or share your personal data — we will notify you by email to the address registered on your spu777 account at least 7 days before the change takes effect. We will also update the "Last Updated" date at the top of this page.
For minor or administrative updates (such as clarifications of existing language, corrections of typographical errors, or updates to contact details), we may revise the Policy without prior notice. Your continued use of the spu777 Platform after the effective date of any revision constitutes your acknowledgment of the updated Privacy Policy. If you do not accept the revised Policy, please contact support to request account closure and withdrawal of any remaining balance before the effective date.
If you have any questions about this Privacy Policy, wish to exercise any of your privacy rights as described in Section 10, or want to raise a data protection concern, please contact spu777 through the following channels:
Related Policies: This Privacy Policy should be read alongside spu777's Terms & Conditions and Responsible Gaming Policy. Together, these three documents form the complete legal framework governing your relationship with spu777. If you have questions about game rules, bonuses, or account management, the FAQ page covers many common topics.
Ready to Play?
spu777 combines enterprise-grade data protection with over 3,000 slots, 500+ live casino tables, and comprehensive BRI Liga 1 and EPL sportsbook coverage. All transactions in IDR, fast withdrawals, 24/7 Indonesian-speaking support. Adults 21+ only.
21+ Adults only. You must be 21 or older to play at spu777. Play responsibly. Responsible Gaming • FAQ