Your privacy matters to us. This Policy explains exactly what personal data bio77 collects, how it is used, who it may be shared with, and how you can exercise your rights as a data subject.
These highlights summarize bio77's core data protection principles. The full legal details are set out in the policy clauses below.
Every page of the bio77 Platform is served over HTTPS with TLS 1.2 or higher. All data transmitted between your device and bio77's servers is encrypted in transit, preventing interception by third parties.
bio77 only collects personal data that is strictly necessary to operate your account, process payments, verify your identity, and comply with anti-money-laundering obligations. We do not collect data for its own sake.
bio77 does not sell, rent, or trade your personal data to any third party for commercial purposes. Data sharing with service providers is strictly limited to what is required to deliver the services you use.
You have the right to access, correct, and request deletion of your personal data held by bio77. You may also request a copy of your data in a portable format. Contact our support team to exercise any of these rights.
bio77 processes the personal data of Indonesian residents in line with internationally recognized data protection standards. Payment data tied to BCA, BRI, BNI, Mandiri, OVO, and DANA accounts is handled with particular care given its sensitivity.
bio77 does not retain personal data indefinitely. Retention periods are defined by legal obligation, contractual necessity, and legitimate business purpose. Data no longer required is securely deleted or anonymized.
For questions about your data, email us at [email protected] (plain text — not a link).
Scope: This Privacy Policy applies to all personal data collected by bio77 through the bio77.cam website, its mobile interface, and all associated digital services. By using the bio77 Platform, you acknowledge and accept the practices described in this Policy.
In this Privacy Policy, the following terms carry the meanings set out below:
bio77 acts as the Data Controller in respect of all personal data collected from Members and visitors to the Platform. The Company determines the purposes for which your personal data is collected and the manner in which it is processed, stored, and protected.
bio77 operates as an internationally licensed offshore platform. While the Platform primarily serves residents of Indonesia — including users in Jakarta, Surabaya, Medan, Bandung, Bali, Yogyakarta, and Semarang — the data processing infrastructure is located outside Indonesian territory, managed in compliance with the data protection requirements of the Company's licensing jurisdiction and internationally recognized standards including the GDPR principles of data minimization, purpose limitation, and storage limitation.
All data processing activities conducted on behalf of the Company by third-party service providers are governed by written data processing agreements that impose obligations equivalent to those set out in this Policy.
When you register for a bio77 account, undergo KYC verification, make a deposit or withdrawal, or contact support, you provide us with the following categories of personal data:
When you use the bio77 Platform, certain data is collected automatically through technical means:
bio77 may receive personal data about you from the following third-party sources:
| Data Category | Examples | Source |
|---|---|---|
| Identity | Name, date of birth, KTP number | Member / KYC provider |
| Contact | Email, phone, address | Member |
| Financial | Bank account, e-wallet ID, transactions | Member / payment processors |
| Technical | IP address, device type, browser | Automatically collected |
| Behavioral | Betting history, session data, click paths | Automatically collected |
| Verification docs | KTP scan, address proof, payment screenshot | Member |
bio77 processes your personal data only where a recognized lawful basis exists. The primary lawful bases applicable to our processing activities are as follows:
bio77 uses the personal data it collects for the following specific purposes:
bio77 shares personal data with carefully selected third-party service providers that process data on our behalf as Data Processors. These include KYC verification partners, payment gateway operators, fraud detection services, cloud infrastructure providers, and customer support platform providers. All such providers are contractually bound to process your data solely for the purposes instructed by bio77, to maintain appropriate security standards, and not to disclose your data to further parties without authorization.
To process your deposits and withdrawals, bio77 shares the minimum necessary financial data with relevant Indonesian banking and e-wallet partners. This may include your registered bank account number, your registered name, and the transaction amount in IDR. bio77 does not share your betting history or KYC documents with payment partners.
bio77 may disclose personal data to competent legal, regulatory, or law enforcement authorities where required by law, court order, or regulatory direction. bio77 will, where legally permitted, notify the affected Member prior to such disclosure.
In the event that the Company is subject to a merger, acquisition, or sale of assets, Member personal data may be transferred to the acquiring entity as part of the transaction, subject to equivalent privacy protections. Members will be notified of any such transfer via the email address on their Account prior to any change in data controller.
bio77 does not sell, rent, license, or otherwise commercially exploit your personal data to any third party for their own marketing or commercial purposes. This prohibition is absolute and applies regardless of the format or medium of the data.
bio77's data processing infrastructure is located outside Indonesia. By using the bio77 Platform, you acknowledge that your personal data will be transferred to and processed in jurisdictions other than Indonesia, including the jurisdiction of bio77's licensing authority and the data center locations of our cloud infrastructure providers.
Where personal data is transferred internationally, bio77 applies appropriate safeguards to ensure the data receives a level of protection equivalent to that described in this Policy. These safeguards include standard contractual clauses, data processing agreements with binding obligations on recipient parties, and technical security measures applied consistently across all processing locations.
If you have questions about the specific transfer safeguards applicable to your personal data, please contact us using the details in Clause 15.
bio77 retains personal data only for as long as is necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce contractual agreements. The following retention periods apply:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account and identity data | Duration of account + 5 years after closure | Legal obligation / AML |
| KYC documents | Duration of account + 5 years after closure | Legal obligation / AML |
| Transaction records | Duration of account + 5 years after closure | Legal obligation / AML |
| Support communications | 3 years from date of interaction | Legitimate interests |
| Behavioral and usage data | 24 months from collection | Legitimate interests |
| Marketing consent records | Until consent is withdrawn + 1 year | Consent |
| Cookie data | Session cookies: deleted on browser close; persistent cookies: up to 12 months | Consent / legitimate interests |
Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymized so that it can no longer be associated with any individual Member.
The bio77 Platform uses the following categories of cookies and similar tracking technologies:
You may control non-essential cookies through your browser settings. Most modern browsers allow you to block or delete cookies. Note that disabling functional cookies may impair certain features of the bio77 Platform. Strictly necessary and fraud prevention cookies cannot be disabled without preventing core Platform functionality from operating.
bio77 does not deploy third-party advertising network cookies, retargeting pixels, or cross-site tracking technologies for the purpose of serving advertisements on external websites.
As a Member of the bio77 Platform, you have the following rights in relation to your personal data. bio77 is committed to honoring these rights promptly and without undue restriction.
To exercise any of the above rights, contact the bio77 support team using the details in Clause 15. bio77 will respond to all data subject requests within 30 days. Where a request is particularly complex, the response period may be extended by a further 60 days, with prior notice given to the Member.
bio77 does not charge a fee for processing data subject requests unless the request is manifestly unfounded or excessive in nature.
The bio77 Platform is strictly intended for adults aged 21 years and older. bio77 does not knowingly collect or process personal data from individuals under the age of 21. The registration process requires date-of-birth confirmation, and KYC verification includes age verification as a mandatory step.
If bio77 becomes aware that personal data has been collected from a person under the age of 21, that data will be deleted immediately and the associated Account will be closed without refund of any deposited funds. If you are a parent or guardian and believe that a minor in your care has registered a bio77 Account, please contact us immediately at the address provided in Clause 15.
bio77 implements a layered set of technical and organizational security measures designed to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. These measures include:
While bio77 takes all reasonable steps to protect your personal data, no internet transmission or electronic storage system is entirely secure. You are responsible for keeping your Account credentials confidential and for notifying bio77 immediately if you suspect unauthorized access to your Account.
The bio77 Platform may contain references to third-party game providers — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft — whose software is integrated directly into the bio77 Platform under license agreements. These providers operate their game engines within bio77's technical environment and are bound by data processing agreements with the Company.
The bio77 Platform does not contain outbound links to external websites. In the event that any such links appear within promotional content or game-specific pages, bio77 is not responsible for the privacy practices or content of those external sites. Users who navigate away from the bio77 Platform do so at their own risk.
bio77 reviews this Privacy Policy periodically and reserves the right to update it to reflect changes in applicable law, regulatory guidance, our data processing practices, or the services we offer. The date of the most recent revision is displayed at the top of this page.
Where changes are material — meaning they significantly affect how we collect, use, or share your personal data — bio77 will notify registered Members via the email address on their Account no fewer than 14 days before the changes take effect. For minor or clarificatory amendments, a notice on the Platform homepage will be considered sufficient.
Continued use of the bio77 Platform after the stated effective date of any amended Privacy Policy constitutes your acceptance of the revised terms. If you do not accept the amended Policy, you must cease using the Platform and request Account closure before the effective date.
If you have any questions about this Privacy Policy, wish to exercise a data subject right, or want to raise a concern about how bio77 handles your personal data, please contact the bio77 Data Privacy team using the details below.
Email (plain text — not a clickable link):
[email protected]
Live Chat: Available 24/7 via the chat widget on the bio77 Platform. Indonesian-speaking agents are available across all Indonesian time zones (WIB, WITA, and WIT).
Response Time: bio77 aims to acknowledge all privacy-related inquiries within 24 hours and to provide a substantive response within 30 days of receipt.
If you are not satisfied with bio77's handling of your personal data or our response to a data subject request, you have the right to escalate your complaint to bio77's formal dispute resolution process, details of which will be provided upon request. bio77 treats all privacy complaints seriously and is committed to resolving them fairly and transparently.
For general questions about accounts, payments, and bonuses, visit the bio77 FAQ page for quick plain-English answers.
Have more questions about how bio77 handles your data? Our FAQ covers common privacy and account security questions in plain English — or review our full Terms & Conditions for the complete legal picture.