xin77 Privacy Policy

The following terms carry the meanings assigned below throughout this Privacy Policy.

2.1 Identity. The Data Controller responsible for your Personal Data is xin77, operating the Platform at https://xin77.cam. All data protection enquiries should be directed to our support team using the contact details in Section 14 of this Policy.

2.2 Scope. This Privacy Policy applies to all Personal Data collected through the Platform, including data submitted during account registration, KYC verification, transaction processing, customer support interactions, and browsing activity on the Platform. It does not apply to third-party websites or services that may be linked to or from the Platform.

3.1 Registration Data. When you create an Account on xin77, we collect the following information directly from you:

• Full legal name as it appears on your government-issued identification.
• Date of birth (to verify that you are 21 years of age or older).
• Residential address in Indonesia.
• Email address and mobile phone number.
• Username and hashed password (passwords are never stored in plain text).

3.2 Identity Verification (KYC) Data. To comply with our anti-money-laundering and age-verification obligations, we may collect:

• Copies of government-issued identification documents (Indonesian KTP, SIM, or Passport).
• Proof of residential address documents (utility bills, bank statements dated within three months).
• Selfie photographs taken alongside your identification document.
• Proof of ownership of the payment method used (e.g., a screenshot of your BCA, BRI, BNI, Mandiri, OVO, or DANA account displaying your registered name).

3.3 Financial Data. When you make deposits or request withdrawals, we collect:

• Bank account name and account number (for bank transfer transactions via BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, or Bank Permata).
• E-wallet account identifier (for OVO, DANA, GoPay, ShopeePay, or LinkAja transactions).
• Transaction amounts, dates, and reference numbers.

xin77 does not store full card numbers or CVV codes. Payment card data, where applicable, is handled exclusively by our PCI-DSS-compliant payment gateway partners.

3.4 Technical and Behavioural Data. When you access the Platform, we automatically collect:

• IP address and approximate geographic location (city and country level).
• Device type, operating system, and browser version.
• Session duration, pages visited, features used, and in-Platform navigation paths.
• Betting history, game session logs, wager amounts, and game outcomes.
• Cookie identifiers and similar tracking technologies (see Section 7).

3.5 Communications Data. When you contact xin77 customer support, we retain records of:

• Live chat transcripts and email correspondence.
• The subject matter and resolution of each support ticket.
• Your Account status at the time of contact.

xin77 processes your Personal Data on the following legal bases:

5.1 Account Administration. We use your registration and financial data to open and maintain your xin77 Account, verify your identity, process deposits and withdrawals in Indonesian Rupiah (IDR / Rp), and provide customer support in both English and Indonesian.

5.2 Platform Security and Fraud Prevention. Technical and behavioural data is analysed continuously by xin77's risk management systems to detect and prevent fraud, money laundering, multi-accounting, bonus abuse, and other prohibited conduct described in the Terms & Conditions. This processing is in xin77's legitimate interests and in the interests of the wider player community.

5.3 Responsible Gaming. xin77 uses Account history, session duration data, and betting pattern analysis to identify players who may be displaying signs of problem gambling. Where such patterns are detected, xin77 may proactively reach out with responsible gaming resources, apply protective account restrictions, or refer the player to our Responsible Gaming tools. This processing supports our commitment to player welfare.

5.4 Regulatory and Legal Compliance. Transaction records, KYC documents, and Account activity logs are retained in accordance with applicable international anti-money-laundering standards and disclosed to competent authorities when we receive a lawful request to do so.

5.5 Promotional Communications. Where you have opted in, xin77 uses your email address and Account profile to send personalised promotional offers, bonus announcements, and seasonal promotions — including campaigns during Ramadhan, Idul Fitri, Chinese New Year (Imlek), and Indonesian Independence Day (17 August). You may opt out of marketing communications at any time by clicking the unsubscribe link in any marketing email or by adjusting your notification preferences in Account settings.

5.6 Product Development and Analytics. Aggregated and anonymised behavioural data is used internally to improve the Platform's user experience, optimise game selection and sportsbook coverage (including BRI Liga 1, EPL, La Liga, and other popular markets), and develop new features. This data cannot be used to identify individual players.

6.1 No Sale of Personal Data. xin77 does not sell, rent, or trade your Personal Data to unaffiliated third parties for their own marketing or commercial purposes. Period.

6.2 Service Providers (Data Processors). xin77 engages trusted third-party service providers who process Personal Data solely on our behalf and under our instruction. These include:

• Payment Gateway Providers: To process deposits and withdrawals via Indonesian bank transfers (BCA, BRI, BNI, Mandiri) and e-wallets (OVO, DANA, GoPay, ShopeePay, LinkAja).
• KYC and Identity Verification Partners: To perform automated document verification and age-check services.
• Cloud Infrastructure and Hosting Providers: To host and operate the Platform, database systems, and security infrastructure.
• Customer Support Platform Providers: To power live chat and ticketing systems used by our support agents.
• Anti-Fraud and Risk Management Tools: To detect suspicious activity, multi-accounting, and financial crime.

All Data Processors are required to maintain contractual data protection obligations equivalent to those in this Privacy Policy and to process data only for the specific purposes agreed with xin77.

6.3 Game Studios. Third-party game studios integrated into the Platform — such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft — may receive session identifiers and bet amounts necessary to render their games and calculate game outcomes. These studios do not receive your full personal profile or financial account details.

6.4 Law Enforcement and Regulatory Bodies. xin77 will disclose Personal Data to law enforcement agencies, regulatory authorities, or courts when we are legally obliged to do so by a valid, lawful order or request. We will notify you of such disclosures where we are legally permitted to do so.

6.5 Corporate Transactions. In the event that xin77 undergoes a merger, acquisition, or sale of substantially all of its assets, your Personal Data may be transferred to the successor entity. You will be notified via your registered email address of any such transfer and will have the opportunity to request deletion of your data prior to the transfer completing.

7.1 What Are Cookies. Cookies are small text files placed on your device when you visit the Platform. They allow xin77 to recognise your browser, remember your preferences, maintain your login session, and collect analytical data about how the Platform is used.

7.2 Types of Cookies Used.

7.3 Managing Cookies. You may manage or disable non-essential cookies through your browser settings. Disabling strictly necessary or security cookies may prevent you from accessing certain features of the Platform or impair the security of your Account.

7.4 Local Storage. In addition to cookies, xin77 may use browser local storage to maintain session tokens and user preferences. Local storage data is not transmitted to third-party advertisers.

8.1 Retention Periods. xin77 retains Personal Data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods:

8.2 Post-Retention Deletion. Upon expiry of the applicable retention period, xin77 will securely delete or anonymise your Personal Data using industry-standard data destruction procedures. Anonymised data that can no longer identify you may be retained indefinitely for aggregate statistical purposes.

9.1 Technical Safeguards. xin77 employs the following technical security measures to protect your Personal Data:

• TLS 1.2 / 1.3 Encryption: All data transmitted between your device and the xin77 Platform is encrypted in transit using 256-bit Transport Layer Security.
• Encryption at Rest: Sensitive data fields, including KYC documents and financial account identifiers, are encrypted at rest using AES-256 encryption.
• Password Hashing: Account passwords are hashed using a robust one-way cryptographic algorithm. xin77 does not store passwords in any retrievable form.
• Two-Factor Authentication (2FA): All Players are strongly encouraged to enable 2FA from their Account security settings to provide an additional layer of protection against unauthorised access.
• Intrusion Detection and Monitoring: xin77's infrastructure is monitored 24/7 for intrusion attempts, anomalous access patterns, and data exfiltration indicators.

9.2 Organisational Safeguards. Access to Player Personal Data within xin77 is restricted on a strict need-to-know basis. Staff with access to Personal Data are bound by confidentiality obligations and undergo regular data protection training. All third-party service providers with access to Personal Data are subject to contractual data security obligations.

9.3 Data Breach Response. In the event of a confirmed data breach that is likely to result in a risk to Players' rights and freedoms, xin77 will notify affected Players via their registered email address within 72 hours of becoming aware of the breach, providing details of the nature of the breach, the data categories affected, and the steps xin77 is taking to mitigate harm.

As a Player on xin77, you hold the following rights with respect to your Personal Data. To exercise any of these rights, contact us at [email protected] with the subject line "Data Rights Request". We will respond within 30 days.

11.1 21+ Platform. xin77 is strictly an adults-only platform. You must be at least 21 years of age to register an Account and use any feature of the Platform. This requirement applies to all players, including those accessing xin77 from Jakarta, Surabaya, Medan, Bandung, Bali, and all other regions of Indonesia.

11.2 No Intentional Collection of Minors' Data. xin77 does not knowingly collect Personal Data from individuals under the age of 21. Age verification is performed during the KYC process using government-issued identification. If xin77 discovers that Personal Data of an individual under 21 has been collected, that data will be permanently deleted and the Account closed without delay.

11.3 Reporting Underage Access. If you have reason to believe that a person under the age of 21 has registered or is using an xin77 Account, please report it immediately to [email protected]. xin77 takes reports of underage access extremely seriously and will investigate all reports promptly.

12.1 Cross-Border Processing. As a globally operated platform serving Indonesian players, xin77 may transfer Personal Data to Data Processors located in countries outside Indonesia. These transfers may occur when data is processed by cloud infrastructure providers, KYC verification partners, or game studio operators based in other jurisdictions.

12.2 Safeguards for International Transfers. Where Personal Data is transferred internationally, xin77 ensures that adequate safeguards are in place, including:

• Standard contractual clauses incorporating data protection obligations equivalent to this Privacy Policy.
• Binding corporate rules or equivalent frameworks where applicable.
• Transfers only to countries or organisations that maintain data protection standards that xin77 considers adequate for the protection of your rights.

12.3 Player Consent. By using the Platform, you acknowledge and consent to the international transfer of your Personal Data as described in this section, subject always to the safeguards described above.

13.1 Right to Update. xin77 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or Platform features. The most current version of this Policy will always be available at https://xin77.cam/privacy-policy.

13.2 Notification of Material Changes. Where changes to this Policy are material — meaning they significantly affect your rights or the way we process your data — xin77 will notify you by email to your registered address at least 14 days prior to the changes taking effect.

13.3 Acceptance of Changes. Your continued use of the Platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not accept the changes, you should cease use of the Platform and request Account closure before the effective date.

13.4 Version Identification. The current version of this Privacy Policy is identified by the "Last Updated" date displayed in the page header above. Prior versions are available upon request by contacting [email protected].

14.1 Data Protection Enquiries. For all enquiries, requests, and complaints related to your Personal Data and this Privacy Policy, please contact the xin77 data protection team using the details below. Our support team includes native Indonesian-speaking agents available during WIB peak hours (08:00–02:00 WIB), and all data rights requests will be handled in English or Indonesian as you prefer.

14.2 Complaints. If you are dissatisfied with xin77's handling of your Personal Data, you have the right to lodge a formal written complaint by emailing [email protected] with the subject line "Privacy Complaint". xin77 will acknowledge receipt within one business day and provide a substantive written response within ten business days.