Privacy Policy

1. Introduction

alfa77 ("we", "us", "our", or "the Company") operates the online sports betting and live casino platform accessible at https://alfa77.cam (the "Platform"). As part of delivering our services to registered Users in Indonesia and internationally, we necessarily collect and process certain categories of personal data.

This Privacy Policy ("Policy") describes our practices regarding the collection, use, storage, disclosure, and protection of your personal data. It applies to all Users who access, register on, or interact with the Platform in any capacity, including visitors who browse without registering an Account.

By registering an Account on the alfa77 Platform, you acknowledge that you have read, understood, and agree to the data practices described in this Policy. This Policy should be read alongside our Terms & Conditions, which govern your use of the Platform more broadly.

If you are under 21 years of age, you are not permitted to use this Platform. alfa77 does not knowingly collect personal data from any person under 21. If we become aware that personal data has been collected from a person under this age threshold, that data will be deleted promptly and the associated Account closed.

2. Definitions

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

3. Data We Collect

alfa77 collects Personal Data across three broad categories: data you provide directly, data generated through your use of the Platform, and data received from third-party service providers. The specific data items collected under each category are listed below.

3.1 Data You Provide Directly

• Registration data: Full legal name, date of birth, email address, Indonesian mobile phone number, residential address, and city of residence (e.g., Jakarta, Surabaya, Bandung, Medan, Bali, Yogyakarta, Makassar, Semarang, Palembang).
• KYC identity documents: Photographs of your Indonesian national ID card (KTP), selfie verification images, and any additional supporting documents submitted to complete identity verification.
• Payment information: Bank account details for BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, BSI, or Bank Permata; e-wallet identifiers for OVO, DANA, GoPay, ShopeePay, or LinkAja. We do not store full card numbers or CVV codes.
• Communications: Content of messages, queries, and complaints submitted to Customer Support via email or live chat, including the email address from which correspondence originates.
• Responsible Gaming submissions: Self-exclusion requests, deposit limit preferences, and cooling-off period requests submitted through the Account settings or Customer Support team.

3.2 Data Generated Through Platform Use

• Transaction records: Details of all deposits, withdrawals, bets placed, games played, bonuses claimed, and account balance changes — including timestamps and amounts in IDR (Rp).
• Betting and gaming history: Records of all wagers placed on sports markets (including BRI Liga 1, EPL, Champions League, MotoGP, and other events), casino games, togel (Indonesia's traditional numbers lottery) markets, and any other game types available on the Platform.
• Session data: Login timestamps, session duration, pages visited, features accessed, and logout timestamps for each active session.
• Technical data: IP address, device type, operating system, browser type and version, screen resolution, and time zone setting (typically WIB UTC+7 for Indonesian users).
• Location data: Approximate geographic location derived from IP address at login and at transaction initiation, used for fraud prevention and geographic access control.

3.3 Data Received from Third Parties

• KYC verification providers: Identity verification status, document authenticity scores, and watchlist screening results returned by our contracted KYC service provider.
• Payment processors: Transaction confirmation references, settlement status, and fraud screening scores from BCA, BRI, and other payment infrastructure partners.
• Anti-fraud and AML services: Risk scores, device fingerprint identifiers, and behavioural analytics data provided by contracted security and compliance vendors.

4. How Data Is Collected

alfa77 collects Personal Data through the following mechanisms:

• Account registration forms: Structured data input fields completed by the User during the sign-up process.
• KYC document upload: Secure document submission portal integrated into the Account verification workflow.
• Platform activity: Automated logging of all transactions, bets, game sessions, and Account changes as they occur in real time.
• Cookies and browser storage: Session cookies, persistent cookies, and local storage values set by the Platform's web application on your device. See Section 11 for full cookie details.
• Customer Support interactions: Inbound emails and live chat transcripts generated when you contact [email protected] or use the in-Platform live chat widget.
• Third-party data feeds: Enriched data returned from contracted KYC verification, AML screening, fraud detection, and payment processing APIs.

5. Purpose of Processing

alfa77 processes your Personal Data for the following specific, documented purposes:

6. Legal Basis for Processing

alfa77 processes Personal Data on one or more of the following legal bases, depending on the specific processing activity:

• Contract Performance: Processing is necessary to deliver the services you have requested — including operating your Account, processing deposits via BCA, BRI, BNI, Mandiri, and e-wallets such as OVO, DANA, and GoPay, settling bets, and providing Customer Support.
• Legal Obligation: Processing is required to comply with applicable anti-money laundering (AML) regulations, Know Your Customer (KYC) requirements, responsible gaming obligations, and record-keeping mandates imposed by our international licensing authority.
• Legitimate Interest: Processing is carried out to pursue our legitimate business interests — including fraud prevention, platform security, detection of multi-accounting, and improving the User experience — where those interests are not overridden by your fundamental privacy rights.
• Consent: Where we rely on your consent (for example, to send promotional emails about Ramadhan reload offers, BRI Liga 1 accumulator specials, or seasonal Idul Fitri cashback promotions), we will obtain your explicit, freely given opt-in agreement before processing. You may withdraw your consent at any time by updating your marketing preferences in Account settings or by contacting [email protected].

7. Data Sharing & Disclosure

alfa77 does not sell, rent, or trade your Personal Data to any third party for their own marketing or commercial purposes. We share your data only in the following defined circumstances and only with parties who are contractually obligated to protect it:

7.1 Service Providers (Data Processors)

We engage trusted third-party vendors to process data on our behalf, strictly under written data processing agreements that require them to apply security standards equivalent to our own. These include:

• KYC & identity verification partners: Receive KTP images and selfie photographs to perform document authenticity checks and age verification.
• Payment processors: BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, OVO, DANA, GoPay, ShopeePay, LinkAja, and their respective banking infrastructure providers receive the minimum payment data necessary to process your transaction.
• AML & fraud screening vendors: Receive pseudonymised transaction and device data to generate risk scores used in our compliance monitoring workflow.
• Game software providers: Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, Pocket Games Soft, and other integrated studios receive your User session token and bet data necessary to operate their games and settle wagers. They do not receive your KTP, banking details, or full contact information.
• Customer support infrastructure: Live chat and helpdesk software providers receive the content of your support conversations and your Account identifier to route and log support interactions.

7.2 Legal & Regulatory Disclosure

alfa77 may disclose Personal Data to competent authorities, regulators, law enforcement agencies, or courts where we are legally required to do so, or where disclosure is necessary to protect the rights, property, or safety of alfa77, our Users, or the public. Such disclosures are made strictly on a need-to-know basis and are documented in our internal compliance records.

7.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of alfa77's business assets, your Personal Data may be transferred to the acquiring entity as part of that transaction. You will be notified via the email address registered on your Account at least 30 days before any such transfer takes effect, and you will be given the opportunity to close your Account and withdraw your Funds prior to the transfer date.

8. International Data Transfers

As an internationally operated platform, some of the third-party service providers we work with — including game software studios, KYC verification vendors, and cloud infrastructure providers — may process your Personal Data on servers located outside Indonesia. Where such international transfers occur, alfa77 takes the following safeguards to ensure your data remains adequately protected:

• We transfer data only to jurisdictions that provide a level of data protection broadly equivalent to internationally recognised standards.
• All third-party processors handling transferred data are bound by contractual data protection clauses that require them to implement appropriate technical and organisational security measures.
• Where a transfer involves Sensitive Data (such as KTP photographs), enhanced contractual protections and access controls are applied.
• We conduct periodic due-diligence reviews of all international data processors to verify their continued compliance with our contractual requirements.

By registering an Account on the alfa77 Platform, you acknowledge and consent to the international transfer of your Personal Data as described in this section, subject to the safeguards outlined above.

9. Data Retention

alfa77 retains your Personal Data for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal, regulatory, or licensing obligations. The following retention periods apply:

Once a retention period expires, Personal Data is securely deleted or irreversibly anonymised so that it can no longer be linked to an identified individual. Anonymised, aggregated data (used for platform analytics and business reporting) may be retained indefinitely as it no longer constitutes Personal Data.

10. Data Security

alfa77 implements a multi-layered technical and organisational security framework to protect your Personal Data against unauthorised access, accidental loss, destruction, or disclosure. Our security measures include:

• 256-bit TLS/SSL encryption applied to all data transmitted between your device and the alfa77 Platform, ensuring that your login credentials, payment details, and session data are protected in transit.
• Encryption at rest for all Sensitive Data categories stored in our databases, including KTP images, financial account references, and KYC verification records.
• Role-based access controls (RBAC) that restrict internal staff access to Personal Data on a strict need-to-know basis. Customer Support agents can view only the Account data necessary to resolve your query.
• Two-factor authentication (2FA) available to all Users for Account login and strongly recommended for all registered Accounts.
• Penetration testing and vulnerability scanning conducted on a regular basis by independent security specialists to identify and remediate potential weaknesses in the Platform's infrastructure.
• 24/7 security monitoring including intrusion detection, DDoS mitigation, and anomalous login alert systems.
• Incident response procedures that include notification protocols in the event of a data breach affecting User Personal Data. Affected Users will be notified without undue delay where a breach is likely to result in a high risk to their rights and freedoms.

11. Cookies & Tracking Technologies

The alfa77 Platform uses cookies and similar tracking technologies to operate correctly, maintain your logged-in session, remember your preferences, and support our security and analytics functions. The following cookie categories are used:

You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will prevent the Platform from functioning correctly and may make it impossible to log in or complete transactions. Disabling analytics or functional cookies will not prevent you from using the Platform but may reduce the quality of your experience.

12. Your Privacy Rights

Subject to applicable law and our legitimate overriding interests (including AML record-keeping obligations), you have the following rights in respect of your Personal Data held by alfa77. To exercise any of these rights, please contact us at [email protected] with the subject line "Privacy Rights Request" and include your registered Account username.

We will acknowledge your request within 5 business days and respond substantively within 30 calendar days. Complex requests may take up to 60 days, in which case we will notify you of the extended timeline.

13. Protection of Minors

The alfa77 Platform is strictly restricted to individuals who are at least 21 years of age. We do not knowingly collect, process, or store Personal Data belonging to anyone under 21. Our KYC verification process is specifically designed to confirm that all registered Users meet this age requirement before they are permitted to deposit funds or participate in any real-money gaming activity.

If you are a parent or guardian and have reason to believe that a person under 21 has accessed the Platform using your payment method or identity, please contact us immediately at [email protected]. We will investigate the matter without delay, close the associated Account, and return any funds to the originating payment source.

We strongly recommend that parents and guardians install parental control software on shared devices to prevent minors from accessing gambling content. Internet service providers in Indonesia offer filtering tools that can restrict access to specific categories of website content.

14. Third-Party Services

The alfa77 Platform integrates with various third-party services to deliver its full feature set. While we select these partners carefully and require them to meet our data protection standards contractually, their own privacy practices are governed by their own privacy policies, which are independent of this Policy. The following categories of third-party integration are active on the Platform:

• Game content providers: Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, Pocket Games Soft, and others provide game clients that run within the Platform. These studios may collect technical data (device type, browser version, game session identifiers) necessary to operate their game software.
• Payment infrastructure: BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Permata, BSI, OVO, DANA, GoPay, ShopeePay, and LinkAja are independent financial institutions. Their processing of your payment data is subject to their own privacy policies and applicable Indonesian banking regulations.
• Live sports data providers: Real-time odds and match data for BRI Liga 1, EPL, Champions League, La Liga, Serie A, Bundesliga, Piala AFF, MotoGP (Mandalika), and other markets are supplied by licensed data aggregators. These feeds are used solely to display market information and settle bets; they do not receive your Personal Data.

alfa77 is not responsible for the privacy practices of any third-party service that operates independently of our Platform. We encourage you to review the privacy policies of any third-party service you interact with.

15. Policy Amendments

alfa77 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, operational requirements, or applicable law. The "Last Updated" date at the top of this page will be revised whenever a meaningful change is made to the Policy's content.

Where changes materially affect your rights or the way we handle your Personal Data, we will notify you by email to your registered address at least 14 days before the updated Policy takes effect. For minor clarifications or corrections that do not affect your rights, the updated Policy will take effect upon publication without advance notice.

Your continued use of the Platform following the effective date of any amended Policy constitutes your acknowledgment of and agreement to the revised terms. If you do not accept the revised Policy, you must cease use of the Platform and may request Account closure and withdrawal of Funds before the effective date.

16. Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise any of your privacy rights, or wish to raise a formal data protection complaint, please contact the alfa77 privacy team using the details below:

When submitting a privacy rights request or data complaint, please include your registered Account username, a clear description of your request or concern, and any relevant supporting information. This will help us process your request as efficiently as possible.

If you are not satisfied with our response to a formal data complaint, you have the right to escalate your complaint to the relevant data protection supervisory authority in your jurisdiction.