Your privacy matters to us. This Privacy Policy explains exactly what personal data mr777 collects from Indonesian Members, how it is used, who it may be shared with, and the rights you hold over your own information. We encourage you to read it in full.
Your Data, Your Rights: This Privacy Policy constitutes a binding commitment by mr777 to handle your personal data with care, transparency, and respect. It applies to all Members who register and use the mr777 platform at mr777.vip. If you have questions about any section of this policy, our 24/7 support team is available via live chat at any time.
mr777 ("we", "us", "our", "the Platform") operates the online betting and gaming website accessible at mr777.vip. As part of delivering our services — sports betting, live casino, slot games, and other gaming products to Members in Indonesia — we necessarily collect and process certain personal information about you.
This Privacy Policy sets out a complete and honest account of our data practices: what we collect, why we collect it, how long we keep it, who we share it with, and how we protect it. This policy applies to all personal data processed in connection with your use of the mr777 platform, regardless of whether you access it via a desktop browser or a mobile device.
We are committed to data minimisation — collecting only what is genuinely needed to operate the Platform safely and compliantly — and to transparency, so that you always understand how your information is being used. By registering an Account with mr777 or continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy.
This Privacy Policy should be read alongside mr777's Terms & Conditions, which govern the overall contractual relationship between you and the Platform.
The following defined terms are used throughout this Privacy Policy:
mr777 collects the following categories of personal data from Members and prospective Members:
When you create an mr777 Account, we collect the information you provide during the registration process, including your full legal name, date of birth, email address, mobile phone number, residential address in Indonesia, and a username and password of your choosing.
To comply with our international licensing obligations and to prevent fraud and money laundering, we collect identity documents including your Indonesian National Identity Card (KTP), passport, or driving licence; proof of residential address (utility bill, bank statement, or official government correspondence dated within the last three months); proof of payment method ownership; and in some cases a selfie photograph holding your identity document.
We collect the details necessary to process your deposits and withdrawals in IDR, including your bank account name and number (for transfers via BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, or Bank Danamon) and your registered e-wallet account details (for OVO, DANA, GoPay, ShopeePay, or LinkAja). We do not store full payment card numbers. All financial data is handled under 256-bit TLS encryption.
We maintain a complete record of all financial transactions on your Account, including deposits, withdrawals, bonus credits, and wagering activity. This includes the date, time, amount in IDR, payment method used, and the outcome of each transaction.
We record your gameplay activity on the Platform, including the games you play (slots, live baccarat, sportsbook markets, togel, and other game categories), the amounts wagered, the outcomes of individual game rounds, session durations, and your interaction with bonus offers and promotions.
When you access mr777 via a browser or mobile device, we automatically collect certain technical information: your IP address, browser type and version, operating system, device type and identifier, screen resolution, referring URL, pages visited on the Platform, and session timestamps.
We retain records of all communications between you and mr777's customer support team, including live chat transcripts, email correspondence, and any written submissions made via support forms on the Platform.
If you interact with mr777's responsible gaming tools — such as setting deposit limits, requesting a time-out, or applying for self-exclusion — we record those requests and the settings you apply. This data is treated with heightened sensitivity and is used exclusively to enforce your stated protective preferences.
mr777 collects your personal data through the following channels:
Data Minimisation Commitment: mr777 does not purchase personal data from data brokers. We do not collect data from social media profiles without your explicit consent. We collect only the minimum data necessary to operate the Platform safely, verify your identity, process your transactions, and fulfil our legal obligations.
We process your personal data only where we have a valid legal basis for doing so. The following table sets out the primary purposes for which mr777 processes your data and the corresponding legal basis for each:
| Processing Purpose | Categories of Data Used | Legal Basis |
|---|---|---|
| Creating and managing your mr777 Account | Registration Data, KYC Data | Contract performance (to provide the service you signed up for) |
| Processing deposits and withdrawals in IDR | Financial Data, Transaction Data | Contract performance; legal obligation (AML compliance) |
| Identity verification and fraud prevention | KYC Data, Technical Data, Financial Data | Legal obligation; legitimate interest in protecting the Platform |
| Delivering games and recording game outcomes | Gameplay Data, Transaction Data | Contract performance |
| Customer support and dispute resolution | Communications Data, Transaction Data, Gameplay Data | Contract performance; legitimate interest |
| Enforcing responsible gaming limits and self-exclusion | Responsible Gaming Data, Account Data | Legal obligation; legitimate interest in Member welfare |
| Personalising promotional offers and bonuses | Gameplay Data, Transaction Data | Legitimate interest; consent (where required) |
| Platform security, abuse prevention, and AML monitoring | Technical Data, Transaction Data, KYC Data | Legal obligation; legitimate interest |
| Regulatory reporting and licence compliance | All categories as required | Legal obligation under international gaming licence |
| Analytics and Platform improvement | Technical Data, Gameplay Data (aggregated/pseudonymised) | Legitimate interest |
Where we rely on legitimate interest as a legal basis, we have assessed that our interests are not overridden by your privacy rights. You have the right to object to processing based on legitimate interest — see Section 10 (Your Rights) for details.
Where we rely on consent as a legal basis (for example, for marketing communications beyond standard transactional emails), you may withdraw that consent at any time by contacting our support team or updating your Account notification preferences. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
mr777 does not sell your personal data to any third party for marketing or commercial purposes. We share your data only in the limited circumstances described below:
To complete deposits and withdrawals, we share your name, bank account or e-wallet details, and the transaction amount with the relevant Indonesian payment provider (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, OVO, DANA, GoPay, ShopeePay, LinkAja). These providers act as Data Processors under binding data processing agreements and are permitted to use your data only to complete the specific transaction.
To fulfil our identity verification obligations, we share your KYC documents and registration data with our licensed identity verification partners. These partners return a verification result to mr777 and are contractually prohibited from retaining or using your identity data for any purpose beyond the verification service.
Your gameplay session data (but not your full name or financial details) is transmitted to and from our licensed game studios — including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Pocket Games Soft — as a technical requirement of delivering their game content on the Platform. These studios operate under strict data confidentiality obligations as part of their licensing framework.
We may disclose your personal data to regulatory bodies, law enforcement agencies, or courts of competent jurisdiction where we are legally required to do so — for example, in response to a lawfully issued court order, a regulatory audit under our international gaming licence, or an AML investigation by a recognised financial intelligence unit. We will disclose only the minimum data necessary to comply with the legal obligation.
In the event that mr777's business is acquired, merged with, or otherwise transferred to another entity, Member personal data may be transferred as part of that transaction. In such circumstances, we will notify affected Members and ensure that the receiving entity is bound by data protection obligations at least as protective as those in this Privacy Policy before any transfer takes place.
We may share limited personal data with our legal counsel, auditors, and other professional advisors where strictly necessary for them to provide their services to mr777. All such advisors are bound by professional confidentiality obligations.
No Sale of Data: mr777 will never sell, rent, or lease your personal data to advertisers, data brokers, marketing agencies, or any other commercial third party. This is an unconditional commitment.
mr777 uses cookies and similar tracking technologies to make the Platform function correctly, to remember your preferences, and to understand how Members use the site so that we can improve it. The following types of cookies are in use:
These cookies are essential for the Platform to operate. They manage your authenticated session, maintain your Account login state, protect against cross-site request forgery (CSRF) attacks, and enable core game functionality. These cookies cannot be disabled without breaking core Platform features. No consent is required for strictly necessary cookies under applicable data protection frameworks.
These cookies remember your preferences — such as your chosen display settings, your preferred time zone (WIB / WITA / WIT), and any accessibility adjustments — so that you do not have to reconfigure them each time you visit. Disabling these cookies means the Platform will not remember your preferences between sessions.
We use pseudonymised analytics cookies to understand how Members navigate the Platform: which pages are visited most, how long sessions last, which game categories generate the most engagement, and where Members encounter difficulties. This data is processed in aggregate form and is used exclusively for internal Platform improvement purposes. Individual Members are not identified from analytics data.
You can manage cookie settings through your browser's privacy controls. Most modern browsers allow you to block or delete cookies. Note that disabling cookies beyond strictly necessary ones may impair some Platform features. Clearing cookies will log you out of your current session and reset any saved preferences.
No Third-Party Advertising Cookies: mr777 does not permit third-party advertising networks to place tracking cookies on the Platform. We do not use retargeting pixels from social media platforms such as Facebook or Google for the purposes of tracking Members' browsing activity off the mr777 site.
mr777 retains your personal data only for as long as it is necessary for the purposes described in this Privacy Policy, or as required by applicable legal and regulatory obligations. The following retention periods apply:
| Data Category | Retention Period | Reason |
|---|---|---|
| Registration and Account Data | Duration of Account + 5 years after closure | Legal obligation; dispute resolution |
| KYC Identity Documents | Duration of Account + 5 years after closure | AML legal obligation under international licensing |
| Financial Transaction Records | Duration of Account + 5 years after closure | Financial record-keeping; AML compliance |
| Gameplay Records | Duration of Account + 3 years after closure | Dispute resolution; regulatory audit |
| Customer Support Communications | 3 years from the date of the communication | Dispute resolution; quality assurance |
| Technical / Log Data | 13 months from collection | Security monitoring; fraud detection |
| Responsible Gaming Records | Duration of Account + 5 years after closure | Regulatory obligation; Member welfare protection |
| Analytics Data (aggregated) | 26 months from collection | Platform improvement analytics |
When the applicable retention period expires, personal data is securely deleted or irreversibly anonymised so that it can no longer be linked to an identifiable individual. Where data is anonymised rather than deleted, the anonymised data may be retained for statistical purposes without time limit.
mr777 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our key security controls include:
While mr777 employs industry-standard security measures, no internet-connected platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your own Account credentials and for ensuring that no unauthorised person has access to the device you use to access mr777. If you suspect your Account has been compromised, contact our support team immediately via live chat.
As an mr777 Member, you hold the following rights with respect to your personal data. To exercise any of these rights, contact our support team via live chat or at [email protected]. We will respond within 30 days of receiving a valid request.
You have the right to request a copy of all personal data that mr777 holds about you. We will provide this in a structured, machine-readable format (JSON or CSV) upon a verified request. The first copy is provided free of charge; subsequent requests within a 12-month period may attract a reasonable administrative fee.
If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it. For certain data categories (such as your registered name or date of birth), rectification may require you to submit updated KYC documentation.
You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where you object to processing based on legitimate interest and no overriding legitimate grounds exist. Note that certain data categories must be retained for the periods specified in Section 8 to meet our legal obligations — erasure requests will be fulfilled to the maximum extent legally permissible.
You may request that we temporarily restrict the processing of your personal data — for example, while we investigate a dispute about its accuracy, or pending the outcome of an objection you have raised under Section 10.5.
You have the right to object to our processing of your personal data where we rely on legitimate interest as our legal basis. Upon receiving your objection, we will cease the processing in question unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or where the processing is necessary for the establishment, exercise, or defence of legal claims.
Where processing is based on your consent or on contract performance, and is carried out by automated means, you have the right to receive your personal data in a portable, machine-readable format for transfer to another service provider of your choice.
Where processing is based on your consent (for example, for personalised marketing communications), you may withdraw that consent at any time via your Account settings or by contacting our support team. Withdrawal does not affect the lawfulness of any processing carried out before the withdrawal date.
Identity Verification for Rights Requests: To protect your data, mr777 requires identity verification before processing any personal data rights request. We will ask you to confirm your registered email address and may ask you to complete a brief identity check. We will not process a request if we are unable to verify that it comes from the registered Account holder.
The mr777 Platform is strictly restricted to adults aged 21 years and above. We do not knowingly collect personal data from any individual under the age of 21. Registration requires declaration of date of birth, and KYC verification confirms the age of all Members before real-money services are activated on their Account.
If mr777 discovers that personal data has been collected from a person under the age of 21 — whether through deliberate misrepresentation during registration or any other means — we will immediately suspend the relevant Account, delete all associated personal data to the extent permitted by legal retention obligations, and refund any deposited balance to the payment method from which it was received, after conducting appropriate AML checks.
If you are a parent or guardian and believe that your child under the age of 21 has registered an Account with mr777 without your knowledge, please contact our support team immediately at [email protected] so that we can take protective action without delay.
The mr777 Platform may contain references to third-party services, payment providers, or game studios. This Privacy Policy applies exclusively to data processed by mr777 and does not extend to any third-party websites, applications, or services that you may access from the Platform. When you interact with a third-party service — for example, completing a transaction through your OVO or DANA application — that third party's own privacy policy governs how your data is handled within their systems.
mr777 is not responsible for the privacy practices of third parties and encourages Members to review the privacy policies of any third-party service they use in connection with their mr777 Account.
mr777 operates as an internationally licensed platform. As a consequence, some of your personal data may be processed or stored on servers located in jurisdictions outside Indonesia — for example, at our licensed data centre infrastructure or at the server facilities operated by our KYC or game content partners.
Where personal data is transferred internationally, mr777 ensures that appropriate safeguards are in place to protect the data at the destination, including:
By registering an Account with mr777, you acknowledge and consent to the transfer of your personal data to international server infrastructure for the purposes described in this Privacy Policy, subject always to the safeguards described in this section.
mr777 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, new legal obligations, or improvements to our Platform. When we make material changes to this policy — defined as changes that affect your rights or how your personal data is used in a significant way — we will notify you via email to your registered address and via a prominent in-Platform notification, at least 14 days before the amended policy takes effect.
Minor clarifications or corrections that do not change the substance of our data practices may be made without notice, and the "Effective" date at the top of this policy will be updated accordingly. The most current version of the Privacy Policy will always be accessible at mr777.vip/privacy-policy. We encourage you to review this policy periodically. Your continued use of the Platform after the effective date of any amended policy constitutes your acceptance of the updated terms.
If you have any questions about this Privacy Policy, wish to exercise your data rights, or have a complaint about how mr777 has handled your personal data, please contact us through one of the following channels:
All privacy complaints are handled by mr777's dedicated data protection team and are logged, investigated, and responded to in accordance with our internal complaints procedure. If you are not satisfied with the outcome of a complaint, you may escalate your concern to the regulatory authority overseeing mr777's international gaming licence.
Our Commitment: We take every privacy concern seriously. If you believe your personal data has been mishandled in any way, we ask you to contact us first. mr777's data protection team will investigate promptly and provide a clear, written response within 30 days — no matter how large or small the concern.
A concise visual reference to the types of data mr777 collects, and why each category is necessary to deliver a secure, compliant, and enjoyable platform experience for Indonesian Members.
Beyond legal compliance, mr777 has embedded privacy protection into the core architecture and culture of the Platform. Here is what that means in practice for every Indonesian Member.
Every connection between your browser and mr777's servers is protected with 256-bit TLS 1.3 encryption — the same standard used by international banks. Your data is unreadable to any third party in transit.
Internal access to your personal data is governed by role-based controls. Only staff with a verified operational need can access any given data category. All access events are logged and audited on a regular basis.
Sensitive data — including your KYC documents, financial account details, and hashed credentials — is encrypted at rest using AES-256. Even in the unlikely event of a server breach, your data cannot be read in plain form.
mr777 has never sold, rented, or leased Member personal data to any third party for commercial purposes — and we never will. Your data is used exclusively to operate the Platform and fulfil our legal obligations.
You can access, correct, port, restrict, or request deletion of your personal data at any time. Submit a request via live chat or email and our data protection team will respond within 30 days — no questions asked.
mr777 commissions independent security assessments and penetration tests to proactively identify vulnerabilities in the Platform. Critical findings are remediated within 72 hours of discovery — before they can be exploited.
Now that you know exactly how mr777 protects your privacy, explore everything the Platform has to offer. From live baccarat tables to the latest slot releases and a full sportsbook covering BRI Liga 1, EPL, and more — it's all here, secured and ready for you.