key77 is committed to protecting the privacy and personal data of every player on our platform. This Privacy Policy explains exactly what information we collect, why we collect it, how it is used and stored, and the rights you hold over your own data as a player based in Indonesia.
Your Privacy Matters: By registering an account or using any key77 service, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, please discontinue use of the key77 platform immediately.
key77 ("we", "us", "our", "the Platform") operates the online casino and sportsbook service accessible at key77.lat. As part of delivering a secure, personalised, and legally compliant betting experience, key77 necessarily processes certain personal data belonging to registered players and site visitors. This Privacy Policy sets out, in clear and transparent terms, how that data is handled throughout its lifecycle — from the moment it is collected through to its eventual deletion or anonymisation.
key77 serves players across Indonesia and is designed specifically for Indonesian residents who prefer to engage with an international-standard English-language platform that supports local IDR banking and Indonesian-language customer service. The data practices described in this Policy reflect that context — including the types of identity documents used for verification (KTP, passport), the payment infrastructure (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja), and the regulatory environment applicable to our operations.
This Privacy Policy should be read alongside our Terms & Conditionsand our Responsible Gaming policy, both of which form part of the broader agreement between key77 and its registered players.
For the purposes of this Privacy Policy, key77 acts as the data controller in respect of all personal data collected through the key77 platform. As data controller, key77 determines the purposes for which personal data is processed and the means by which that processing is carried out.
All data protection enquiries, subject access requests, and complaints regarding key77's data practices should be directed to our dedicated privacy contact at [email protected] with the subject line "Privacy Enquiry — [Your Account Username]". We aim to acknowledge all privacy-related correspondence within 24 hours and provide a substantive response within 5 business days.
key77 collects only the personal data that is necessary and proportionate for the purposes described in this Policy. The categories of personal data we may collect include:
key77 collects personal data through the following channels:
key77 processes personal data only where there is a clear, documented purpose and an appropriate legal basis for doing so. The table below summarises the primary purposes for which your data is used and the corresponding legal basis for each:
| Purpose | Data Categories Used | Legal Basis |
|---|---|---|
| Account creation & management | Identity, contact, credential data | Contract performance |
| Age & identity verification (KYC) | Identity documents, NIK, photograph | Legal obligation; legitimate interest |
| Processing deposits & withdrawals | Financial, payment data | Contract performance |
| Anti-money-laundering (AML) compliance | Identity, financial, transaction data | Legal obligation |
| Fraud prevention & platform security | Technical, device, behavioural data | Legitimate interest |
| Delivering gaming services | Gaming & betting activity data | Contract performance |
| Customer support & dispute resolution | Communications, account data | Contract performance; legal obligation |
| Responsible gaming monitoring | Gaming activity, self-exclusion records | Legal obligation; legitimate interest |
| Marketing & promotional communications | Contact, gaming preference data | Consent (opt-in only) |
| Platform analytics & improvement | Technical, session, device data | Legitimate interest |
Where key77 relies on your consent as the legal basis for processing (primarily for marketing communications), you have the right to withdraw that consent at any time by contacting us at [email protected] or by updating your communication preferences within your account settings. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.
key77 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. Your data may be shared with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data processing agreements:
To process deposits and withdrawals, key77 shares relevant financial and identity data with licensed payment processors and the partner banks and e-wallet platforms you use (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, OVO, DANA, GoPay, ShopeePay, LinkAja). These providers act as independent data controllers for their own transaction records and are governed by their own privacy policies.
key77 uses trusted third-party identity verification services to assist with document authentication during the KYC process. These partners are contractually bound to process identity data solely for the purpose of verification on key77's behalf and are prohibited from using your data for any independent purpose.
Game studios such as Pragmatic Play, Evolution Gaming, PG Soft, NetEnt, Microgaming, and Spribe may receive anonymised or pseudonymised session data (e.g., game round identifiers, bet amounts) to enable game functionality, audit outcomes, and settle jackpots. These providers do not receive personally identifiable information beyond what is strictly required for game operation.
key77 may share technical identifiers (IP address, device fingerprint) with specialist fraud prevention platforms to detect and prevent bonus abuse, account takeover, and money laundering activity. These services process data solely on key77's instructions.
key77 may be required by applicable law or binding legal process to disclose personal data to regulatory bodies, financial intelligence units, or law enforcement agencies. In such cases, key77 will disclose only the minimum data required to satisfy the legal obligation and will, where legally permissible, notify the affected player of the disclosure.
In the event of a merger, acquisition, restructuring, or sale of all or part of key77's business, player data may be transferred to the acquiring entity as part of the transaction. Players will be notified of any such transfer and the applicable privacy terms of the new controller prior to the transfer taking effect.
As an internationally operated platform, key77 may process or store personal data on servers located outside Indonesia. Where personal data is transferred to countries that may not provide an equivalent level of data protection to the standards described in this Policy, key77 implements appropriate safeguards to ensure your data remains adequately protected, including:
By using the key77 platform, you acknowledge that your data may be transferred to and processed in jurisdictions outside Indonesia in accordance with the safeguards described above.
key77 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal or regulatory obligations. The following retention periods apply as a general guide:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account registration & KYC documents | 5 years after account closure | AML & regulatory compliance |
| Financial transaction records | 5 years from transaction date | Financial reporting & AML |
| Gaming & betting activity logs | 3 years after account closure | Dispute resolution; responsible gaming audit |
| Customer support communications | 2 years after case closure | Dispute resolution; service improvement |
| Self-exclusion & responsible gaming records | Duration of exclusion + 5 years | Legal obligation; player protection |
| Marketing consent records | Until consent is withdrawn + 1 year | Compliance with consent obligations |
| Technical & server logs | 12 months on a rolling basis | Security monitoring; fraud detection |
Upon expiry of the applicable retention period, personal data is either securely deleted or irreversibly anonymised so that it can no longer be associated with any identifiable individual. Anonymised, aggregated data may be retained indefinitely for statistical and analytical purposes.
key77 uses cookies and similar tracking technologies to operate the platform, improve user experience, and understand how players interact with our services. A "cookie" is a small text file stored on your device by your web browser when you visit a website.
You can control cookie settings through your web browser's preferences panel. Disabling strictly necessary cookies will impair or prevent access to key77's authenticated services. Disabling performance or marketing cookies will not affect your ability to play or transact but may result in a less personalised experience. For guidance on managing cookies in your specific browser, refer to your browser's official support documentation.
As a player whose personal data is processed by key77, you hold the following rights in relation to your data. To exercise any of these rights, submit a written request to [email protected] with the subject line "Data Rights Request — [Your Account Username]".
key77 will respond to all verified data rights requests within 5 business days of receipt. Complex requests may require up to 30 days; in such cases key77 will notify you of the extended timeline within the initial 5-day response window.
Identity Verification for Data Requests: To protect your data from unauthorised disclosure, key77 will require you to verify your identity before processing any data rights request. This typically involves confirming your registered email address and, for high-sensitivity requests, submitting a copy of your KTP or passport.
key77 strictly prohibits access to its platform by persons under the age of 21. The key77 platform is not directed at, and does not knowingly collect personal data from, individuals under 21 years of age. Our registration process includes automated age verification checks, and accounts are subject to KYC verification requiring proof of age before withdrawal privileges are granted.
If key77 becomes aware that personal data belonging to a person under 21 has been collected — whether through a fraudulent registration or any other means — key77 will immediately close the relevant account, void all wagers placed from that account, return deposited funds to the source payment method (less any applicable transaction fees), and permanently delete all associated personal data without delay.
If you believe a minor has accessed or registered on the key77 platform, please notify us immediately at [email protected].
key77 takes the security of your personal data seriously and implements a comprehensive suite of technical and organisational measures to protect your information against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:
Despite these measures, no online platform can guarantee absolute security. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, key77 will notify affected players without undue delay and take all reasonable steps to contain and mitigate the impact of the breach.
The key77 platform integrates with a number of third-party services to deliver its full functionality — including game software providers (Pragmatic Play, Evolution Gaming, PG Soft, Microgaming, NetEnt, Spribe), payment processors, and analytics tools. While key77 selects these partners carefully and requires them to operate under appropriate data processing agreements, each third party operates under its own privacy policy for data it independently controls.
key77 is not responsible for the privacy practices of any third-party service provider acting as an independent data controller. Where a third party processes your data solely on key77's instructions (as a data processor), key77 remains responsible for ensuring that processing is carried out in accordance with this Privacy Policy.
key77 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, new legal requirements, or feedback from players. When material changes are made — particularly those that affect how your personal data is used or your rights in relation to it — key77 will provide at least 7 days' advance notice via email to your registered account address and/or by displaying a prominent notification on the platform.
The "Last updated" date shown at the top of this page reflects the date of the most recent revision. We encourage you to review this Policy periodically. Continued use of the key77 platform following the effective date of any amendment constitutes your acceptance of the revised Privacy Policy.
This Privacy Policy was last reviewed and approved for publication in January 2026. key77 recommends that all players save or print a copy of this Policy for their personal records.
If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or would like to raise a concern about how key77 handles your personal data, please contact us using the details below:
If you are not satisfied with key77's response to a privacy complaint, you have the right to escalate your complaint to key77's compliance team for senior review. key77 is committed to resolving all data protection concerns promptly, fairly, and transparently.
Our Privacy Commitments
Beyond the legal text above, here are the six core privacy principles that guide every data decision we make at key77.
key77 has never sold player data to third parties for commercial purposes and never will. Your personal information exists solely to deliver and improve your experience on our platform.
Every byte of data exchanged between your device and key77's servers travels over an encrypted TLS 1.3 connection. Your credentials, payment details, and personal information are protected end-to-end.
Access, correct, export, or delete your personal data at any time by contacting our privacy team. We acknowledge all requests within 24 hours and resolve them within 5 business days.
Promotional emails and bonus notifications are sent only with your explicit consent. Unsubscribe at any time from your account settings — no dark patterns, no re-opt-in traps.
key77 collects only the data that is genuinely necessary for account operation, KYC compliance, and payment processing. We do not collect data speculatively or beyond what each purpose requires.
Every category of personal data has a defined maximum retention period. When that period expires, data is securely deleted or irreversibly anonymised — no indefinite storage of dormant player records.
Your privacy and security are built into every layer of the key77 platform. Explore our full game library, check your account settings, or visit our FAQ if you have any remaining questions.