Last Updated: 1 January 2026

Privacy Policy

At star77, the privacy and security of your personal data is a fundamental commitment, not an afterthought. This Privacy Policy explains in clear, straightforward terms exactly what data we collect, why we collect it, how we use and store it, and the rights you hold as a User of our platform — including all relevant rights under applicable data protection frameworks.

Your Privacy Matters: star77 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. All data processing described in this Policy is carried out solely in connection with operating and improving the star77 platform for Indonesian players.

1

Introduction

This Privacy Policy applies to all personal data collected, processed, and stored by star77 in connection with the online betting and gaming platform operated at https://star77.cam (the "Platform"). It applies to all registered Users and to visitors who browse the Platform without registering an account.

star77 is committed to handling personal data responsibly and in compliance with internationally recognised data protection principles, including purpose limitation, data minimisation, accuracy, storage limitation, integrity, and confidentiality. While Indonesia's Personal Data Protection Law (UU PDP) is the primary regulatory framework relevant to our Indonesian Users, star77 also applies broader international best-practice standards to ensure a consistently high level of data protection.

By registering an account or otherwise using the star77 Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you do not agree with any part of this Policy, you should not use the Platform.

2

Definitions

In this Privacy Policy, the following terms carry the meanings set out below:

Term Meaning
"Personal Data" Any information that relates to an identified or identifiable natural person — including name, date of birth, email address, phone number, bank account details, IP address, and device identifiers.
"Processing" Any operation performed on Personal Data, including collection, storage, use, disclosure, transfer, erasure, or destruction.
"Data Controller" star77, which determines the purposes and means of processing Personal Data collected through the Platform.
"Data Processor" Any third-party service provider that processes Personal Data on behalf of and under the instructions of star77 (e.g., payment processors, KYC verification services).
"User" / "you" Any individual who accesses or registers on the star77 Platform, whether as a registered account holder or an anonymous visitor.
"KYC Data" Identity verification documents and data submitted by Users for the purpose of Know Your Customer (KYC) compliance, including copies of KTP and selfie photographs.
"Cookies" Small text files stored on a User's device by the Platform for purposes of session management, analytics, and personalisation.
3

Data We Collect

star77 collects Personal Data across several categories, depending on the nature of the User's interaction with the Platform:

3.1 Registration Data

When you create an account on star77, we collect: your full legal name, date of birth, Indonesian national identity number (NIK from KTP), residential address, email address, and mobile phone number. This information is required to create and administer your account.

3.2 KYC Verification Data

To comply with anti-money-laundering (AML) obligations and to verify User identity, we collect copies of your Indonesian National Identity Card (KTP), selfie photographs, and proof of payment method ownership (e.g., bank account screenshots showing your registered name with BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, or LinkAja).

3.3 Financial Transaction Data

We record all deposit and withdrawal transactions processed through the Platform, including transaction amounts in Rupiah (Rp), timestamps, payment method details (bank name, masked account number, e-wallet provider), and transaction reference numbers.

3.4 Betting and Gaming Activity Data

We maintain records of all bets placed, games played, wager amounts, outcomes, bonus usage, and betting history associated with your account. This data is used for account management, dispute resolution, and responsible gaming monitoring.

3.5 Technical and Device Data

When you access the Platform, we automatically collect technical data including your IP address, browser type and version, operating system, device type, screen resolution, referring URLs, pages visited, session duration, and click-path data.

3.6 Customer Support Communications

We retain records of all communications between you and the star77 support team, including Live Chat transcripts, WhatsApp message histories, and email correspondence. These records are used for quality assurance, dispute resolution, and account management purposes.

3.7 Promotional and Marketing Data

Where you have opted in to receive promotional communications, we record your marketing preferences, the offers you have claimed, and your engagement with promotional emails or messages. You may update or withdraw your marketing preferences at any time by contacting [email protected].

4

How We Collect Data

star77 collects Personal Data through the following channels:

  • Directly from you: When you register an account, complete KYC verification, make a deposit or withdrawal, place a bet, contact customer support, or respond to a survey or promotion;
  • Automatically via the Platform: Through server logs, cookies, web beacons, and session-tracking technologies as you navigate the Platform;
  • From third-party service providers: Identity verification services may return enriched data about the documents you submit; payment processors confirm transaction status and account ownership; fraud-detection systems provide risk-scoring signals based on transaction patterns;
  • From publicly available sources: In limited circumstances, star77 may cross-reference publicly available information (such as sanctions lists or politically exposed persons databases) against registration data as part of AML compliance obligations.
6

How We Use Your Data

star77 uses the Personal Data we collect for the following specific purposes:

  • Account Administration: Creating, maintaining, and closing your account; verifying your identity; processing deposits and withdrawals via BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Permata, BSI, OVO, DANA, GoPay, ShopeePay, and LinkAja;
  • Service Delivery: Processing bets and wagers, settling game outcomes, applying bonus credits, and providing access to the full range of star77 products including sports betting, live casino, and specialty games;
  • Compliance and Risk Management: Conducting KYC verification, monitoring transactions for AML indicators, screening against sanctions and PEP (Politically Exposed Persons) databases, and investigating suspected fraud or Prohibited Conduct;
  • Responsible Gaming: Monitoring betting patterns to identify potential problem gambling behaviours; administering self-exclusion requests, deposit limits, and cooling-off periods; fulfilling obligations under responsible gaming best practices;
  • Customer Support: Responding to queries, resolving disputes, handling complaints, and improving the quality of our Indonesian-speaking support team's service;
  • Platform Improvement: Analysing aggregated and anonymised usage data to improve platform features, interface design, and product offerings;
  • Marketing Communications: Sending promotional offers, bonus notifications, and platform news to Users who have opted in to receive such communications — subject always to your ability to opt out at any time.

Purpose Limitation Commitment: star77 will not use your Personal Data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or where required to do so by applicable law.

7

Sharing Your Data

star77 does not sell, rent, or trade your Personal Data to any third party. We share data only in the following limited and controlled circumstances:

  • Payment Processors: Transactional data is shared with the relevant payment service provider (local Indonesian banks and e-wallet operators) as strictly necessary to execute deposit and withdrawal instructions;
  • KYC and Identity Verification Providers: KYC Data is shared with contracted third-party identity verification services for the purpose of authenticating your identity documents and performing AML screening;
  • Fraud Detection and Security Services: Technical and behavioural data may be processed by fraud-detection tools that help protect the Platform and its Users from account takeover, bonus abuse, and financial crime;
  • IT Infrastructure Providers: Data is stored on and processed by hosting providers and cloud infrastructure operators engaged by star77 under data-processing agreements that require them to apply equivalent data protection standards;
  • Legal and Regulatory Authorities: star77 may disclose Personal Data to competent regulatory, law-enforcement, or judicial authorities where required to do so by applicable law, court order, or in connection with the prevention of serious criminal activity;
  • Business Transfers: In the event of a merger, acquisition, or sale of all or part of star77's business operations, User data may be transferred to the acquiring entity, subject to the same privacy commitments set out in this Policy.

All third-party Data Processors engaged by star77 are bound by contractual data-processing agreements that prohibit them from using your Personal Data for any purpose beyond the specific service they provide to star77.

8

Data Retention

star77 retains Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply:

Data Category Retention Period
Account Registration Data 5 years from account closure, or longer if required by AML regulations
KYC Verification Data 5 years from the date of verification, or from account closure — whichever is later
Financial Transaction Records 5 years from transaction date in compliance with AML record-keeping obligations
Betting and Gaming History 3 years from account closure for dispute resolution purposes
Customer Support Communications 2 years from the date of the last communication in any support thread
Technical and Device Data (logs) 12 months from collection, unless retained longer for active fraud investigations
Marketing Preferences Until you withdraw consent, after which records of consent withdrawal are retained for 2 years

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised so that it can no longer be attributed to any individual.

9

Data Security

9.1 star77 implements a comprehensive set of technical and organisational security measures designed to protect your Personal Data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include:

  • SSL/TLS Encryption: All data transmitted between your device and the star77 Platform is encrypted in transit using industry-standard TLS 1.2 or higher;
  • Data Encryption at Rest: Sensitive Personal Data — including KYC documents and financial account details — is encrypted at rest using AES-256 encryption;
  • Access Controls: Access to Personal Data within star77's systems is strictly limited to authorised personnel on a need-to-know basis, enforced by role-based access controls and multi-factor authentication;
  • Intrusion Detection: The Platform is monitored 24/7 by automated intrusion-detection and anomaly-detection systems that flag suspicious access patterns for immediate review;
  • Regular Security Audits: star77 conducts periodic security assessments, penetration testing, and vulnerability scans to identify and remediate potential weaknesses before they can be exploited.

9.2 Despite these measures, no digital system can guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, star77 will notify affected Users and relevant authorities in accordance with applicable law, without undue delay.

Security Reminder: star77 will never ask for your account password via email, Live Chat, or phone call. If you receive any communication purporting to be from star77 that requests your password, treat it as a phishing attempt and report it immediately to [email protected].

10

Cookies & Tracking Technologies

10.1 What Are Cookies. Cookies are small text files placed on your device when you visit the star77 Platform. They allow the Platform to recognise your device across sessions, remember your preferences, maintain your login state, and collect analytics data about how the Platform is used.

10.2 Types of Cookies We Use. star77 uses the following categories of cookies:

Cookie Type Purpose Required?
Strictly Necessary Session authentication, security tokens, shopping cart equivalents for bet slips. The Platform cannot function without these cookies. Yes
Functional Remembering your language display settings, preferred odds format, and interface layout choices across sessions. Optional
Analytics Collecting anonymised usage statistics to help star77 understand which features are most used, identify navigation bottlenecks, and improve platform design. Optional
Marketing Tracking promotional campaign effectiveness and enabling contextually relevant offers to be presented to Users who have opted in to marketing communications. Optional

10.3 Managing Cookies. You can control and manage cookies through your browser settings. Disabling strictly necessary cookies will impair the functionality of the Platform significantly. Disabling optional cookies may limit personalisation features but will not prevent you from using the core betting and gaming services.

11

Your Rights

As a User of star77, you hold a number of rights in relation to your Personal Data. star77 is committed to honouring these rights promptly and without undue complexity. The following rights are available to you:

Right of Access

Request a copy of all Personal Data star77 holds about you, along with information about how it is processed.

Right to Rectification

Request correction of any inaccurate or incomplete Personal Data we hold about you.

Right to Erasure

Request deletion of your Personal Data where it is no longer needed for its original purpose, subject to legal retention obligations.

Right to Restrict Processing

Request that we temporarily suspend processing of your data while the accuracy or lawfulness of that processing is under review.

Right to Data Portability

Receive a structured, machine-readable copy of Personal Data you have provided to us, for transfer to another service provider.

Right to Object

Object to processing of your data on the grounds of legitimate interests, including processing for direct marketing purposes.

Right to Withdraw Consent

Where processing is based on your consent, withdraw that consent at any time without affecting the lawfulness of prior processing.

Right to Lodge a Complaint

Lodge a complaint with the relevant data protection authority if you believe your rights have not been respected by star77.

To exercise any of the above rights, please submit a written request to [email protected] with the subject line "Data Rights Request — [Your Full Name]". star77 will respond to all verifiable requests within 30 calendar days. We may request proof of identity before processing your request to protect against unauthorised access to another person's data.

12

Minors

12.1 The star77 Platform is strictly intended for adults aged 21 years and above. We do not knowingly collect, process, or store Personal Data relating to individuals under the age of 21.

12.2 If star77 becomes aware that Personal Data belonging to a person under 21 has been collected — whether through misrepresentation during registration or any other means — we will immediately suspend the relevant account, delete the associated Personal Data to the extent permitted by law, and return any deposited funds subject to the outcome of an age-verification investigation.

12.3 Parents and guardians who believe that a minor may have registered on the star77 Platform are urged to contact our support team immediately at [email protected] so that the matter can be investigated and resolved without delay.

13

Third-Party Links

The star77 Platform may, on occasion, contain references or links to third-party websites, tools, or services. This Privacy Policy applies solely to data processing carried out by star77 in connection with the Platform. star77 has no control over, and assumes no responsibility for, the privacy practices, content, or data-handling standards of any third-party website or service. Users who navigate to third-party sites from the star77 Platform do so at their own discretion and should review the applicable privacy policies of those sites independently.

14

International Data Transfers

14.1 star77's infrastructure and some of its third-party service providers may be located outside Indonesia. As a result, your Personal Data may be transferred to and processed in countries other than the country in which you reside.

14.2 Where Personal Data is transferred outside Indonesia, star77 takes steps to ensure that an adequate level of protection is applied to that data, consistent with the requirements of Indonesia's Personal Data Protection Law (UU PDP). Such steps may include entering into data-transfer agreements incorporating standard contractual clauses, or relying on the recipient country's adequacy status under applicable international frameworks.

14.3 By using the star77 Platform and providing your Personal Data, you acknowledge and consent to the transfer of your data to countries outside Indonesia for processing in accordance with this Policy.

15

Policy Amendments

15.1 star77 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we provide. When material changes are made, we will notify registered Users via email to their registered address and will display a prominent notice on the Platform for a minimum of 7 calendar days prior to the revised Policy taking effect.

15.2 The "Last Updated" date displayed at the top of this page indicates when the current version of the Privacy Policy entered into force. We encourage Users to review this Policy periodically to stay informed about how star77 protects their data.

15.3 Your continued use of the Platform following notification of any amendment constitutes your acceptance of the revised Privacy Policy. If you do not agree to the amended Policy, you must cease using the Platform and may request account closure in accordance with the Terms & Conditions.

16

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data, please contact the star77 Data Protection team through any of the following channels:

  • Live Chat: Available 24/7 directly through the star77 Platform;
  • WhatsApp: Available 24/7 — contact details are displayed after login;
  • Email: [email protected] (plain text — not a clickable link).

When contacting us regarding a data rights request, please include your full registered name, your registered email address, and a clear description of your request. For data erasure or portability requests, please also include a copy of your KTP for identity verification purposes.

Our support team includes Indonesian-speaking agents serving Users across Jakarta, Surabaya, Bandung, Medan, Bali, Yogyakarta, Semarang, Makassar, Palembang, and all other regions of Indonesia, available around the clock to assist with any privacy-related enquiry.

Data Protection Principles

How star77 Protects Your Privacy

Six core commitments that guide every data decision we make at star77.

End-to-End Encryption

All data transmitted between your device and star77's servers is protected by TLS 1.2+ encryption in transit, and sensitive records including KYC documents are encrypted at rest with AES-256 — the same standard used by international financial institutions.

Minimal Data Collection

star77 applies strict data minimisation principles. We collect only the data that is genuinely necessary to operate your account, process transactions via BCA, BRI, BNI, Mandiri, and other local payment methods, and fulfil our legal obligations.

Your Rights, Respected

From access and rectification to erasure and portability, star77 honours your full suite of data subject rights. Submit a request to our support team and receive a verified response within 30 calendar days — no unnecessary barriers, no runaround.

No Data Selling

star77 has never sold, rented, or traded User Personal Data to third parties for their independent commercial use. Your information exists solely to power your experience on the star77 platform — nothing more, nothing less.

Defined Retention Limits

Every category of data we hold has a clearly defined maximum retention period. Once that period expires, data is securely deleted or anonymised. We do not retain Personal Data indefinitely simply because storage is cheap.

Transparent Processing

This Privacy Policy is written in plain professional English — not impenetrable legal jargon — so that every Indonesian player, whether based in Jakarta, Bali, Medan, or Surabaya, can clearly understand what data star77 holds and why.

Questions About Your Data?

Our support team is available around the clock to address any privacy concern, process a data rights request, or explain how your Personal Data is handled on the star77 platform.

To submit a data rights request, email [email protected] with the subject line "Data Rights Request". | Return to Home