Privacy Policy

1. Introduction

Welcome to the Privacy Policy of bejo77 (the "Company", "we", "us", "our"). This Privacy Policy describes how we collect, use, disclose, store, and protect personal information obtained from users (the "User", "you", "your") of our online betting and gaming platform accessible at https://bejo77.cam and through any associated mobile applications or services (collectively, the "Platform" or "Service").

At bejo77, we are committed to protecting your privacy and ensuring the security of your personal data. We comply with applicable data protection laws and regulations, including international best practices for data privacy and security. This Privacy Policy should be read in conjunction with our Terms and Conditions and Responsible Gaming Policy, which together govern your use of the Service.

2. Data Controller Identity and Contact Information

bejo77 is the data controller responsible for your personal information collected through the Platform. For data protection inquiries, privacy-related concerns, or to exercise your data subject rights, please contact our Data Protection Officer:

• Email: [email protected]
• Subject Line: "Privacy / Data Protection Inquiry"
• Response Time: We aim to respond to all privacy inquiries within 14 days

3. Information We Collect

bejo77 collects various types of information to provide, maintain, improve, and secure our Service. The categories of personal data we collect include:

3.1 Information You Provide Directly

When you register an account or use our Service, you voluntarily provide:

• Identity Information: Full legal name, date of birth, gender, nationality, government-issued identification numbers (KTP number for Indonesian residents)
• Contact Information: Email address, phone number (including country code), residential address (street, city, province, postal code)
• Account Credentials: Username, password (stored in encrypted hash form only), security questions and answers
• Financial Information: Bank account details (account number, bank name, account holder name), e-wallet account information, payment card details (processed and stored by third-party PCI-DSS compliant payment processors only—we do not store full card numbers)
• Verification Documents: Copies of government-issued photo ID (KTP, passport, driver's license), proof of address documents (utility bills, bank statements), selfie photographs for identity verification
• Communication Records: Messages exchanged with customer support via live chat, email, WhatsApp, or other channels; customer service call recordings (with notice and consent)
• Marketing Preferences: Your choices regarding promotional communications, newsletter subscriptions, and bonus offers

3.2 Information Collected Automatically

When you access and use the Platform, we automatically collect technical and usage information:

• Device Information: Device type, operating system and version, browser type and version, screen resolution, device identifiers (IMEI, advertising ID)
• Connection Data: IP address, internet service provider (ISP), approximate geographic location (country, region, city derived from IP address)
• Usage Data: Pages visited, features used, clicks, search queries, time spent on pages, referring/exit pages, session duration, access times and dates
• Gaming Activity: Bets placed (amount, type, timestamp, outcome), games played, deposits and withdrawals, account balance changes, bonus usage, responsible gaming tool settings
• Cookies and Similar Technologies: Data collected through cookies, web beacons, local storage, and similar tracking technologies (see Section 10 for details)

3.3 Information from Third-Party Sources

We may receive information about you from third-party sources:

• Payment Processors: Transaction confirmation, fraud risk scores, payment method verification status from banks, e-wallet providers, and payment gateways
• Identity Verification Services: Age verification results, identity authentication scores, address validation, sanctions screening, politically exposed person (PEP) checks from specialized KYC providers
• Marketing Partners: If you arrive at our Platform through an affiliate or marketing partner, we may receive referral information and campaign tracking data
• Social Media: If you choose to connect your social media account (optional and only with explicit permission), we may receive profile information in accordance with the social platform's privacy settings
• Public Sources: Information from publicly available databases for fraud prevention, compliance screening, and legal obligations

4. How We Use Your Personal Information

bejo77 processes your personal data for specific, legitimate purposes necessary to provide and improve our Service. We use your information for the following purposes:

4.1 Service Provision and Account Management

• Create, maintain, and authenticate your user account
• Verify your identity, age (21+ requirement), and address through KYC procedures
• Process deposits, withdrawals, and other financial transactions
• Enable you to place bets, play games, and use all Platform features
• Maintain accurate account balance and transaction history records
• Apply responsible gaming limits and self-exclusion tools you configure
• Provide customer support and respond to your inquiries
• Send transactional communications (account notifications, withdrawal confirmations, security alerts)

4.2 Legal and Regulatory Compliance

• Comply with licensing requirements and regulatory obligations under gaming laws
• Conduct anti-money laundering (AML) and know-your-customer (KYC) checks
• Prevent underage gambling by verifying all users are 21 years or older
• Detect and prevent fraud, collusion, bonus abuse, and other prohibited activities
• Investigate disputes, complaints, and Terms violations
• Respond to legal requests from authorities (court orders, subpoenas, regulatory inquiries)
• Maintain records required by gaming regulations (typically 5-7 years)
• Report suspicious activity to relevant authorities as required by law

4.3 Security and Fraud Prevention

• Monitor account activity for unusual patterns indicating fraud or security breaches
• Detect and prevent multiple accounts, identity theft, and payment fraud
• Protect against denial-of-service attacks, hacking attempts, and system intrusions
• Verify payment method ownership and authenticate transactions
• Enforce Platform security policies and account restrictions
• Block access from restricted jurisdictions or sanctioned entities

4.4 Service Improvement and Personalization

• Analyze usage patterns to improve Platform functionality, performance, and user experience
• Develop new features, games, and services based on player preferences
• Optimize Platform performance across different devices and browsers
• Personalize content, game recommendations, and promotional offers based on your activity and preferences (with your consent)
• Conduct market research and statistical analysis to understand player behavior

4.5 Marketing and Communications (With Consent)

• Send promotional emails about bonuses, tournaments, and special offers (opt-in required for Indonesian users)
• Deliver personalized marketing messages via email, SMS, or push notifications
• Display targeted advertisements on the Platform or through advertising partners
• Announce new features, games, or Platform updates
• Invite participation in surveys, promotions, or loyalty programs

Note: You can opt out of marketing communications at any time through account settings or unsubscribe links in emails. Opting out does not affect essential transactional communications.

5. Legal Basis for Processing

Under applicable data protection laws, we process your personal data based on the following legal grounds:

• Contractual Necessity: Processing is necessary to perform our contract with you (Terms and Conditions), including account creation, transaction processing, and service delivery
• Legal Obligation: Processing is required to comply with legal and regulatory obligations (KYC/AML compliance, age verification, licensing requirements, tax reporting, legal requests)
• Legitimate Interests: Processing serves our or a third party's legitimate interests (fraud prevention, security, service improvement, business analytics) provided these interests are not overridden by your fundamental rights and freedoms
• Consent: For certain processing activities (marketing communications, personalized advertising, optional data collection), we rely on your freely given, specific, informed, and unambiguous consent, which you may withdraw at any time

6. Data Sharing and Third-Party Disclosure

bejo77 does not sell, rent, or trade your personal information to third parties for their marketing purposes. However, we may share your data with the following categories of recipients as necessary to operate our Service:

6.1 Service Providers and Processors

We engage trusted third-party service providers who process personal data on our behalf under strict contractual obligations:

• Payment Processors: Banks, e-wallet providers, payment gateways that process deposits and withdrawals (BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, and international payment processors)
• Identity Verification Providers: Specialized KYC/AML service providers that verify identity documents, check sanctions lists, and conduct fraud screening
• Game Providers: Third-party studios that supply casino games, live dealer tables, and sports betting platforms—they may process game session data and betting activity
• Cloud Hosting and Infrastructure: Server hosting providers, content delivery networks (CDN), database management services that store and process Platform data
• Customer Support Tools: Live chat platforms, ticketing systems, CRM software that help us deliver customer service
• Marketing and Analytics: Email service providers, SMS gateways, analytics platforms (Google Analytics with IP anonymization), advertising networks
• Security and Fraud Prevention: Cybersecurity firms, fraud detection services, DDoS protection providers

6.2 Legal and Regulatory Authorities

We may disclose personal information to:

• Gaming regulators and licensing authorities overseeing our operations
• Law enforcement agencies investigating criminal activity
• Tax authorities for reporting obligations
• Courts and legal representatives in response to court orders, subpoenas, or legal proceedings
• Financial crime prevention agencies for AML/CTF compliance

6.3 Business Transfers

In the event of a merger, acquisition, reorganization, sale of assets, or bankruptcy, your personal information may be transferred to the acquiring entity or successor, subject to this Privacy Policy or a successor policy with equivalent protections.

6.4 Affiliate and Partner Networks

If you arrived at bejo77 through an affiliate partner, we may share aggregated, non-personally identifiable data with that partner for commission tracking purposes. We do not share your identity or contact details with affiliates without explicit consent.

7. Security Measures and Data Protection

bejo77 employs industry-standard technical and organizational measures to protect your personal information against unauthorized access, loss, misuse, alteration, or destruction. Our security practices include:

Despite these robust safeguards, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your personal information using commercially acceptable means, we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and must notify us immediately if you suspect unauthorized account access.

8. Data Retention Periods

bejo77 retains your personal information only for as long as necessary to fulfill the purposes described in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements. Specific retention periods include:

• Active Account Data: Retained for the duration of your account relationship plus regulatory retention requirements (typically 5-7 years after account closure for gaming compliance)
• Transaction Records: Financial transaction data (deposits, withdrawals, bets) retained for 7 years minimum to comply with tax laws and AML regulations
• KYC Documentation: Identity verification documents retained for 7 years after account closure or last transaction as required by gaming regulations
• Communication Records: Customer support interactions retained for 3 years for quality assurance and dispute resolution
• Marketing Data: If you opt out of marketing, your suppression record (email/phone number) is retained indefinitely to honor your opt-out preference
• Security and Fraud Data: Data related to security incidents, fraud investigations, or banned accounts retained for 10 years or longer if subject to ongoing legal proceedings
• Analytics and Usage Data: Aggregated, anonymized usage statistics may be retained indefinitely for business intelligence purposes

Upon expiration of applicable retention periods, personal data is securely deleted or anonymized such that it can no longer identify you. Data subject to legal hold (e.g., litigation, regulatory investigation) is retained until the hold is lifted.

9. Your Data Subject Rights

Under applicable data protection laws, you have certain rights regarding your personal information. bejo77 respects these rights and provides mechanisms to exercise them:

Right	Description	How to Exercise
Access	Request a copy of the personal data we hold about you, including details of processing activities	Submit a written request via email to [email protected] with "Data Access Request" in the subject line
Rectification	Correct inaccurate or incomplete personal information	Update information via account settings or contact customer support
Erasure	Request deletion of your personal data (subject to legal retention obligations)	Submit account closure request; note that regulatory requirements may prevent immediate deletion
Restriction	Limit how we process your data in certain circumstances	Contact customer support with specific restriction requests
Portability	Receive your data in a structured, machine-readable format and transmit it to another controller	Submit portability request via email; we provide data in CSV/JSON format
Objection	Object to processing based on legitimate interests or for direct marketing	Opt out of marketing via account settings or unsubscribe links; contact support for other objections
Withdraw Consent	Withdraw previously given consent for optional processing activities	Adjust consent preferences in account settings or contact support
Lodge Complaint	File a complaint with a data protection supervisory authority	Contact your local data protection authority; we will cooperate with investigations

10. Cookies and Tracking Technologies

bejo77 uses cookies, web beacons, local storage, and similar tracking technologies to enhance user experience, analyze Platform usage, and deliver personalized content. A cookie is a small text file stored on your device that helps us recognize you on return visits.

10.1 Types of Cookies We Use

• Essential Cookies: Necessary for Platform functionality (authentication, session management, security). Cannot be disabled without preventing Service use.
• Performance Cookies: Collect anonymous usage statistics (page load times, error messages, traffic sources) to help us improve performance.
• Functional Cookies: Remember your preferences (language, currency, display settings) to personalize your experience.
• Marketing Cookies: Track your activity across sessions to deliver targeted advertising and measure campaign effectiveness. Require consent in most jurisdictions.
• Third-Party Cookies: Set by external services we use (Google Analytics, advertising partners, social media widgets). Subject to third-party privacy policies.

10.2 Managing Cookie Preferences

You can manage cookie preferences through your browser settings. Most browsers allow you to block or delete cookies, though this may impair Platform functionality. To opt out of targeted advertising, visit industry opt-out tools like the Network Advertising Initiative or Digital Advertising Alliance. Note that essential cookies cannot be disabled as they are required for Service operation.

11. International Data Transfers

bejo77 operates an international online platform. Your personal information may be transferred to, stored, and processed in jurisdictions outside of Indonesia, including countries that may not provide the same level of data protection as your home country. When we transfer data internationally, we implement appropriate safeguards such as:

• Standard contractual clauses approved by data protection authorities
• Data processing agreements requiring equivalent protection standards
• Transfers to jurisdictions recognized as providing adequate data protection
• Your explicit consent for specific transfers where required by law

Our primary data storage facilities are located in secure, audited data centers. Third-party service providers (payment processors, game providers, analytics tools) may process data in their respective jurisdictions. We ensure all processors meet our privacy and security requirements regardless of location.

12. Changes to This Privacy Policy

bejo77 reserves the right to update this Privacy Policy periodically to reflect changes in our practices, legal requirements, or Service features. When we make material changes that affect how we collect, use, or share your personal information, we will:

• Update the "Last Updated" date at the top of this policy
• Notify you via email to your registered email address at least 14 days before changes take effect
• Display a prominent notice on the Platform highlighting the changes
• For significant changes requiring new consent, present a clear consent mechanism before continuing Service use

Your continued use of the Service after the effective date of changes constitutes acceptance of the updated Privacy Policy. If you disagree with changes, you may close your account; however, previously collected data remains subject to the policy in effect at the time of collection unless you consent to new terms.

13. Contact Information and Data Protection Officer

If you have questions, concerns, or requests regarding this Privacy Policy, your personal data, or our privacy practices, please contact our Data Protection team:

For regulatory inquiries or formal complaints that cannot be resolved through our internal process, you have the right to contact your local data protection supervisory authority. We will cooperate fully with any regulatory investigation and work in good faith to resolve concerns.