kim777 Privacy Policy

1. Introduction

1.1 kim777 ("we", "us", "our") operates the online casino and sports betting platform accessible at kim777.pro (the "Platform"). As part of operating this Platform for players across Indonesia — including Jakarta, Surabaya, Medan, Bandung, Bali, Semarang, Makassar, Palembang, and beyond — we necessarily collect and process certain personal data about our registered players and visitors.

1.2 This Privacy Policy sets out, in clear and accessible terms, what personal data kim777 collects from you, the purposes for which that data is processed, the legal basis on which processing rests, with whom your data may be shared, how long it is retained, the security measures in place to protect it, and the rights you hold over your personal information.

1.3 Kim777 processes personal data only to the extent necessary to operate the Platform safely, legally, and efficiently. We do not sell your personal data to third parties and we do not use it for purposes beyond those described in this policy without your explicit consent.

1.4 This policy should be read alongside the kim777 Terms & Conditions, which govern your use of the Platform as a whole. In matters relating specifically to data and privacy, this Privacy Policy takes precedence.

2. Definitions

The following terms are used consistently throughout this Privacy Policy:

• "Personal Data" — any information that identifies or could reasonably identify a living individual, either on its own or in combination with other data.
• "Processing" — any operation performed on personal data, including collection, recording, storage, use, disclosure, transmission, erasure, or destruction.
• "Data Controller" — kim777, the entity that determines the purposes and means of processing your personal data.
• "Data Processor" — a third party that processes personal data on behalf of kim777, under kim777's instructions and subject to data processing agreements.
• "Player" / "You" — any individual who registers an account on, visits, or uses the kim777 Platform in any capacity.
• "Account" — the registered profile created by a Player upon completing the kim777 registration process.
• "KYC" — Know Your Customer identity verification, required before a Player may complete their first withdrawal.
• "Cookies" — small text files placed on your device by the Platform to recognise returning visitors and support platform functionality.

3. Personal Data We Collect

3.1 The categories of personal data kim777 collects, and the typical data points within each category, are set out in the table below:

3.2 Special Category Data. Kim777 does not intentionally collect special category data (such as health data, religious beliefs, or political opinions) from players. If such data is volunteered by a player during a support interaction — for example, disclosing a health condition in the context of a responsible gaming request — it will be treated with the highest level of care, used solely for the purpose for which it was provided, and deleted once that purpose is fulfilled.

4. How We Collect Your Data

4.1 Directly from you — when you register an Account, complete the KYC verification process, make a deposit or withdrawal, contact our support team, or update your account preferences and responsible gaming settings.

4.2 Automatically as you use the Platform — through server logs, session tracking, and cookie technology as you navigate pages, play games, and interact with the sportsbook. This includes your IP address, device identifiers, and behavioural usage data as described in Section 3.

4.3 From third-party service providers — including identity verification services (which return the result of a document check), payment processors (which confirm successful transactions), fraud prevention services (which flag risk signals), and analytics providers (which aggregate anonymised usage data). All third-party providers processing data on our behalf are bound by data processing agreements consistent with the obligations set out in this policy.

4.4 From publicly available sources — in limited circumstances relating to fraud prevention or AML (anti-money laundering) screening, kim777 may cross-reference information against publicly available records such as sanctions lists or adverse media databases.

5. Purpose & Legal Basis for Processing

5.1 Kim777 processes personal data only where a lawful basis exists. The primary purposes for which we process data, and the corresponding legal basis for each, are as follows:

5.2 Where kim777 relies on legitimate interests as the legal basis for processing, we have assessed that our interests do not override your fundamental rights and freedoms. You may request a copy of this assessment by contacting our support team.

6. Sharing Your Personal Data

6.1 Kim777 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We share your data only in the circumstances described below, and only to the minimum extent necessary:

• Payment Processors: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) receive the transaction data strictly necessary to process your deposits and withdrawals.
• Identity Verification Providers: Third-party KYC services receive the identity documents you submit in order to return a verification result to kim777. These providers operate under strict data processing agreements and do not retain your documents beyond the time required to process the verification.
• Game Providers: Studios such as Pragmatic Play, Evolution Gaming, PG Soft, NetEnt, and Microgaming receive a session token and your account identifier when you launch a game. They do not receive your full identity data or payment details.
• Fraud and AML Screening Services: Specialist providers may receive limited personal data to assess transaction risk and screen against sanctions lists, as required by applicable anti-money laundering obligations.
• Legal and Regulatory Authorities: Kim777 will disclose personal data to law enforcement, regulatory bodies, or judicial authorities where required to do so by law, court order, or valid legal process.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of kim777's business, player data may be transferred to the acquiring entity. Players will be notified of any such transfer and given the opportunity to close their accounts before the transfer takes effect.

6.2 All third-party service providers that process personal data on behalf of kim777 are required to execute data processing agreements that obligate them to maintain appropriate security standards, use the data only for the specified purpose, and not share it further without kim777's authorisation.

7. Cookies & Tracking Technologies

7.1 The kim777 Platform uses cookies and similar tracking technologies to support core functionality, improve user experience, and collect aggregated analytics data. The main categories of cookies used are described below:

• Essential Cookies: Required for the Platform to function. These include session authentication tokens, security cookies, and load-balancing cookies. They cannot be disabled without breaking core Platform functionality.
• Functional Cookies: Remember your preferences such as language settings, game display options, and responsible gaming tool configurations. Disabling these cookies may result in a degraded experience.
• Analytics Cookies: Collect anonymised data about how players navigate the Platform — which pages are most visited, where sessions end, and how features are used. This data is used exclusively to improve the Platform and is never combined with your identity data.
• Marketing Cookies: Used only where you have opted into promotional communications. These track which promotions you have engaged with to avoid sending duplicate offers.

7.2 You can manage your cookie preferences through your browser settings. Most browsers allow you to refuse cookies entirely, delete existing cookies, or receive a notification before a new cookie is placed. Note that disabling essential cookies will prevent you from accessing your Account.

7.3 Kim777 does not use third-party advertising networks or cross-site tracking cookies. Tracking on the Platform is limited to the purposes described above and is confined to the kim777 domain.

8. Data Retention

8.1 Kim777 retains personal data for no longer than is necessary for the purposes for which it was collected, taking into account our legal obligations and any applicable regulatory retention requirements. The general retention periods applied are:

• Active Account Data: Retained for the lifetime of your Account plus a minimum of five years following Account closure, in line with standard AML record-keeping requirements.
• KYC Documents: Retained for a minimum of five years from the date of the most recent transaction on the Account, in accordance with applicable anti-money laundering obligations.
• Transaction Records: Retained for a minimum of five years from the date of each transaction.
• Support Communications: Retained for three years from the date of the communication, unless the communication forms part of an ongoing dispute, in which case it is retained until the dispute is finally resolved.
• Marketing Preferences: Retained until you withdraw consent or close your Account, after which your opt-out record is retained to prevent inadvertent future contact.
• Technical and Usage Data: Retained in anonymised or aggregated form for up to 24 months for Platform analytics purposes.

8.2 On expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be linked to an identifiable individual.

9. Data Security

9.1 Kim777 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. Key measures include:

• 256-bit SSL Encryption: All data transmitted between your browser or device and the kim777 Platform is encrypted in transit using TLS 1.2 or higher. This applies to login sessions, game sessions, deposit and withdrawal flows, and support interactions.
• Encrypted Storage: Sensitive personal data, including password hashes, identity document references, and payment method identifiers, is encrypted at rest within kim777's secure data infrastructure.
• Access Controls: Access to personal data within kim777's internal systems is restricted to authorised personnel on a strict need-to-know basis. Access privileges are reviewed regularly and revoked immediately on personnel change.
• Two-Factor Authentication: Kim777 offers two-factor authentication for player Accounts and enforces it for all internal staff accessing production systems.
• Penetration Testing: Kim777's platform infrastructure is subject to regular penetration testing and vulnerability assessments conducted by independent security firms.
• Incident Response: Kim777 maintains a documented data breach response procedure. In the event of a breach that poses a risk to player rights, affected players will be notified promptly.

9.2 Whilst kim777 takes all reasonable measures to secure your data, no digital platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your Account credentials. If you suspect that your Account has been compromised, contact our support team immediately.

10. Your Rights Over Your Personal Data

10.1 You hold the following rights in relation to the personal data kim777 holds about you. To exercise any of these rights, contact our support team using the details in Section 14. We will respond to verified requests within 30 days. Complex requests may require an extension of up to a further 60 days, in which case we will notify you of the extension within the initial 30-day period.

• Right of Access: You may request a copy of all personal data kim777 holds about you, along with information about how it is used, where it came from, and with whom it has been shared.
• Right to Rectification: You may request that inaccurate or incomplete personal data held about you be corrected. For certain data fields (name, date of birth), correction requires re-submission of KYC documents.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the original collection purpose, where you withdraw consent and no other legal basis exists, or where the data has been unlawfully processed. Note that kim777 may be legally obligated to retain certain data (e.g., transaction records for AML purposes) and cannot delete such data until the applicable retention period has expired.
• Right to Restriction of Processing: You may request that kim777 restrict processing of your data — meaning it is stored but not actively used — while a data accuracy dispute is being resolved, or while an objection to processing is being assessed.
• Right to Data Portability: Where processing is based on your consent or a contract with you, and is carried out by automated means, you may request a copy of the data you provided to kim777 in a structured, machine-readable format.
• Right to Object: You may object at any time to processing based on legitimate interests, including profiling for responsible gaming purposes. Kim777 will cease processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based solely on your consent (for example, marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

10.2 Kim777 will not charge a fee for handling rights requests except in cases where requests are manifestly unfounded or excessive, in which case a reasonable administrative fee may apply.

11. Protection of Minors

11.1 The kim777 Platform is strictly intended for adults aged 21 and above. Kim777 does not knowingly collect personal data from individuals under the age of 21. Age is verified as part of the KYC process before any withdrawal is approved, and registration systems include age-check mechanisms at the point of account creation.

11.2 If kim777 discovers or reasonably suspects that an Account is held by a person under the age of 21, that Account will be immediately suspended, all associated funds will be frozen pending investigation, and any winnings will be forfeited. The matter may be referred to relevant child protection authorities where required.

11.3 If you are a parent or guardian and believe that a minor in your care has registered an Account on kim777, please contact our support team immediately so that the Account can be investigated and closed.

12. Third-Party Links & Services

12.1 The kim777 Platform may from time to time reference or link to third-party services — for example, game providers, sports data feeds, or payment method landing pages. Once you leave the kim777 Platform, this Privacy Policy no longer applies. Kim777 is not responsible for the privacy practices of third-party websites or services and encourages you to read the privacy policy of any external site you visit.

12.2 Game providers integrated into the kim777 Platform (such as Evolution Gaming, Pragmatic Play, and PG Soft) operate their game engines within the Platform under contractual arrangements that limit their use of player data to the delivery of the game session. They do not receive full player identity data and are not permitted to use session data for independent marketing purposes.

13. Changes to This Privacy Policy

13.1 Kim777 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or Platform functionality. The "Last updated" date at the top of this page will reflect the date of the most recent revision.

13.2 Where a material change is made to this policy — for example, a new category of data is collected, or a new third-party category is introduced — kim777 will notify active registered players by email to their registered address at least 14 days before the change takes effect.

13.3 Continued use of the Platform following the effective date of any updated Privacy Policy constitutes your acknowledgement of, and agreement to, the revised terms. If you do not agree with any change to this policy, you should cease using the Platform and may request Account closure through our support team.

14. Contact Us

14.1 For any question, request, or complaint relating to this Privacy Policy, or to exercise any of the rights described in Section 10, please contact the kim777 Data Privacy team using the details below. We aim to acknowledge all privacy-related enquiries within 48 hours and resolve them within 30 days.

• Live Chat: Available 24/7 at kim777.pro — fastest response, typically under 5 minutes
• Email: support@kim777.pro (plain text — not a clickable link)
• Subject line for privacy requests: "Privacy Request – [Your Username]"
• Support hours: 24/7, covering WIB (UTC+7), WITA (UTC+8), and WIT (UTC+9)

14.2 When submitting a data rights request, please include your registered username and a brief description of your request. For identity verification purposes, we may ask you to confirm ownership of your Account before processing the request. We will never ask for your password.