Privacy Policy

1. Introduction

xox777 ("we", "us", "our", "the Company") is committed to protecting and respecting your privacy. This Policy sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by xox777. It covers our online gaming platform accessible at xox777.cam, including all associated services, account management tools, payment processing interfaces, customer support channels, and marketing communications.

By registering an account on the xox777 Platform, you acknowledge that you have read and understood this Policy and that you consent to the collection and processing of your personal data as described herein. If you do not consent to the terms of this Policy, you must not register an account or use our services.

This Policy should be read in conjunction with our Terms & Conditions, which govern the overall contractual relationship between you and xox777. In the event of any conflict between this Policy and the Terms & Conditions on a privacy-related matter, this Policy shall take precedence.

2. Definitions

• "Personal Data" means any information that relates to an identified or identifiable natural person, including but not limited to name, date of birth, email address, phone number, financial account details, and device identifiers.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, transmission, and deletion.
• "Data Subject" means the individual whose Personal Data is being processed — in this context, you, the registered Player or site visitor.
• "Controller" means xox777, which determines the purposes and means of processing your Personal Data.
• "Processor" means any third-party entity that processes Personal Data on behalf of xox777, subject to a data processing agreement.
• "Cookies" means small text files placed on your device by the Platform to enable functionality, analytics, and personalization.
• "KYC" (Know Your Customer) means identity verification procedures required by anti-money-laundering regulations and our platform integrity policy.

3. Data We Collect

xox777 collects only the categories of Personal Data that are strictly necessary to deliver our services securely and in compliance with applicable regulations. The following table outlines the specific data categories we process:

Data Category	Specific Examples	Collection Point
Identity Data	Full legal name, date of birth, nationality, KTP (National ID) number, KTP photograph	Registration, KYC verification
Contact Data	Email address, Indonesian mobile phone number, residential address	Registration, account settings
Financial Data	Bank account number and bank name (BCA, BRI, BNI, Mandiri, etc.), e-wallet ID (OVO, DANA, GoPay, ShopeePay, LinkAja), transaction history	Deposit, withdrawal, KYC
Gaming Data	Bet history, game session logs, win/loss records, bonus usage, account balance history	Ongoing platform use
Technical Data	IP address, device type, browser type and version, operating system, screen resolution, session timestamps	Automatic collection on access
Usage Data	Pages visited, features accessed, navigation paths, time spent on each page	Analytics tools (cookies)
Communications Data	Live chat transcripts, email correspondence, support ticket content	Customer support interactions
Marketing Preferences	Promotional opt-in/opt-out status, preferred communication channel, bonus interest signals	Account settings, consent forms

We do not collect sensitive special-category data such as biometric data (beyond selfie verification for KYC), racial or ethnic origin, political opinions, religious beliefs, or health data unless specifically required by law or explicitly consented to by you for responsible gaming purposes.

4. How We Collect Your Data

xox777 collects your Personal Data through the following channels:

4.1 Direct Collection

• Account registration forms where you voluntarily enter your name, date of birth, email address, and contact details.
• KYC verification submissions, including document uploads and selfie photographs.
• Deposit and withdrawal requests where you provide banking details for BCA, BRI, BNI, Mandiri, CIMB Niaga, or registered e-wallet accounts.
• Customer support interactions initiated via live chat, email, or any other support channel you use to contact us.
• Survey or feedback form responses where you voluntarily provide your opinions.
• Responsible gaming tool activations, including deposit limit requests and self-exclusion applications.

4.2 Automated Collection

• Technical data is collected automatically when you access the Platform, using server logs, session cookies, and analytics tools.
• Gaming data is recorded automatically by our platform systems each time you place a wager, spin a slot reel, join a live dealer table, or complete any in-game action.
• Device fingerprinting tools may be used to detect fraudulent access, duplicate account creation, or unauthorized use of VPN services to circumvent geographic restrictions.

4.3 Third-Party Sources

• Identity verification partners may provide confirmation of document authenticity during KYC processing.
• Payment processors (including BCA's payment gateway, OVO, DANA, and other integrated payment partners) share transaction status and confirmation data with us.
• Fraud pr evention services may provide risk-scoring data associated with your account or payment methods to help us detect and prevent fraudulent activity.

5. Purpose of Processing

xox777 processes your Personal Data only for defined, legitimate purposes. We do not use your data in ways that are incompatible with the purposes described below:

• Account Creation and Management: To register your account, verify your identity, maintain your profile, and manage your session securely.
• Service Delivery: To provide access to sports betting markets, casino games, live dealer tables, and all other features available on the xox777 Platform.
• Payment Processing: To facilitate deposits and withdrawals via your chosen Indonesian banking or e-wallet method, and to maintain accurate financial transaction records.
• Regulatory Compliance: To fulfill our obligations under applicable anti-money laundering (AML) regulations, know-your-customer (KYC) requirements, and any other legal obligations imposed by our licensing jurisdiction.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent transactions, unauthorized account access, bonus abuse, multi-accounting, and other prohibited activities.
• Customer Support: To respond to your inquiries, resolve disputes, and improve our support quality by reviewing past interaction records.
• Responsible Gaming: To monitor gaming patterns that may indicate problem gambling behavior, to administer deposit limits, session limits, and self-exclusion tools, and to fulfil our duty-of-care obligations toward vulnerable players.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates — but only where you have given explicit consent to receive such communications and have not subsequently opted out.
• Platform Improvement: To analyze usage patterns, conduct A/B testing, and improve the technical performance, user experience, and game selection on the Platform.
• Legal Proceedings: To establish, exercise, or defend legal claims if a dispute arises between you and xox777.

6. Legal Basis for Processing

xox777 processes your Personal Data on one or more of the following legal bases, depending on the specific processing activity:

• Legitimate Interests: Processing is necessary for our legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and general business analytics — provided those interests are not overridden by your own rights and interests.
• Legal Obligation: Processing is required to comply with legal obligations applicable to xox777, including AML regulations, KYC mandates, and data retention requirements imposed by our licensing jurisdiction.
• Consent: For marketing communications and optional analytics cookies, processing is based on your freely given, specific, informed consent. You may withdraw this consent at any time without affecting the lawfulness of processing that occurred prior to withdrawal.

7. Data Sharing & Disclosure

xox777 does not sell, rent, or trade your Personal Data to any third party for that party's own marketing or commercial purposes. We share your data only in the following strictly defined circumstances:

7.1 Service Providers (Processors)

We engage third-party companies to perform functions on our behalf under strict data processing agreements that prohibit those parties from using your data for any purpose other than providing the contracted service. These include:

• Payment gateway and banking partners (including integrations with BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, and LinkAja) for transaction processing.
• Identity verification providers for KYC document authentication.
• Game software providers (including Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, and Pocket Games Soft) who may receive session tokens and game-round data necessary to deliver gameplay.
• Cloud hosting and infrastructure providers who store Platform data on secured servers.
• Customer support platform providers who host our live chat and ticketing systems.
• Fraud detection and cybersecurity service providers.

7.2 Legal and Regulatory Disclosures

xox777 may disclose your Personal Data to competent authorities, regulators, law enforcement agencies, or courts where we are required to do so by applicable law, by a binding court order, or where we believe in good faith that disclosure is necessary to prevent serious harm or illegal activity.

7.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of xox777's business assets, your Personal Data may be transferred to the acquiring entity as part of that transaction. You will be notified in advance of any such transfer and of any material change to how your data is processed as a result.

7.4 Aggregate and Anonymized Data

xox777 may share aggregated, anonymized statistical data (which cannot be used to identify any individual) with business partners, game studios, and market analysts for industry research and platform improvement purposes.

8. International Data Transfers

xox777 operates internationally and your Personal Data may be transferred to, stored in, or processed in countries other than Indonesia. These may include jurisdictions where our licensing authority is based, where our cloud infrastructure is hosted, or where our third-party service providers operate.

Whenever we transfer Personal Data internationally, we take all reasonable steps to ensure that your data receives an equivalent level of protection to that which it would receive in Indonesia. Safeguards we apply include:

• Contractual clauses that bind recipients to treat your data with the same standard of care as we do.
• Transferring data only to service providers that maintain internationally recognized security certifications (such as ISO 27001 or SOC 2 Type II).
• Encrypting all data in transit using TLS 1.2 or higher, and all data at rest using AES-256 encryption.

9. Data Retention

xox777 retains your Personal Data only for as long as it is necessary for the purposes for which it was collected, or as required by applicable law. Our standard retention periods are as follows:

Data Category	Retention Period	Basis
Account & Identity Data	5 years after account closure	AML / KYC regulatory obligation
Financial Transaction Records	7 years from transaction date	Financial record-keeping requirements
Gaming Session Logs	3 years from session date	Dispute resolution, fraud prevention
Customer Support Records	3 years from last interaction	Legitimate interest (service improvement)
Marketing Consent Records	Duration of consent plus 3 years	Legal proof of consent
Technical / Log Data	12 months from collection	Security monitoring

Upon expiry of the applicable retention period, your Personal Data is securely deleted or anonymized so that it can no longer be linked to you as an individual.

10. Security Measures

xox777 implements a comprehensive, multi-layered security framework to protect your Personal Data against unauthorized access, loss, destruction, alteration, or disclosure. Our security measures include:

• AES-256 Data-at-Rest Encryption: All stored Personal Data, including KYC documents and financial records, is encrypted at rest using industry-standard AES-256 encryption.
• Access Controls: Internal access to Personal Data is restricted on a strict need-to-know basis. All staff members with data access are subject to confidentiality obligations and undergo regular security training.
• Two-Factor Authentication (2FA): All administrative access to systems containing Personal Data requires two-factor authentication. We strongly recommend that Players also enable 2FA on their xox777 accounts via account settings.
• Regular Security Audits: We conduct periodic penetration testing, vulnerability assessments, and third-party security audits to identify and remediate potential weaknesses in our infrastructure.
• Firewall and Intrusion Detection: Our platform infrastructure is protected by enterprise-grade firewalls and real-time intrusion detection systems that monitor for anomalous activity around the clock.
• Incident Response: In the event of a confirmed personal data breach that is likely to result in risk to your rights, we will notify you and relevant regulatory authorities within 72 hours of becoming aware of the breach, in line with international best practice.

While we deploy the strongest reasonable safeguards, no online platform can guarantee absolute security. You are encouraged to use a strong, unique password for your xox777 account and to avoid accessing the Platform on unsecured public Wi-Fi networks.

11. Cookies & Tracking Technologies

xox777 uses cookies and similar tracking technologies to operate the Platform effectively, personalize your experience, and analyze how our services are used. The types of cookies we deploy are:

11.1 Strictly Necessary Cookies

These cookies are essential for the Platform to function. They enable core features such as secure login sessions, account authentication, and navigation. These cookies cannot be disabled without preventing the Platform from operating correctly.

11.2 Functional Cookies

These cookies remember your preferences and settings — such as your chosen language, preferred currency display (IDR / Rp), and game lobby layout — to provide a more personalized experience on subsequent visits.

11.3 Analytics Cookies

These cookies collect anonymized information about how visitors use the Platform, including which pages are visited most frequently and how users navigate between sections. This data is used exclusively to improve Platform performance and user experience. Analytics cookies are only deployed with your prior consent.

11.4 Managing Your Cookie Preferences

You can manage your cookie preferences through your browser settings. Most modern browsers allow you to block or delete cookies. Note that disabling strictly necessary cookies will impair Platform functionality. For detailed instructions on managing cookies in your specific browser, consult your browser's help documentation.

12. Your Privacy Rights

xox777 respects your rights as a Data Subject. Depending on the legal basis under which your data is processed, you hold the following rights with respect to your Personal Data:

To exercise any of the above rights, please contact us at [email protected]. We will respond to all verified rights requests within 30 calendar days. We may need to verify your identity before processing your request to prevent unauthorized access to another person's data.

13. Minors & Age Gating

If you are a parent or guardian and believe that a minor in your care has registered an account on xox777, please contact us immediately at [email protected]. We take underage access seriously and will act on all such reports promptly.

14. Third-Party Services

The xox777 Platform integrates with a number of third-party game providers, payment processors, and technology partners to deliver a complete gaming experience. Each of these parties operates under their own privacy policies governing the data they process in connection with service delivery.

xox777 is not responsible for the privacy practices of third-party game studios (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft) or payment partners beyond our contractual obligations as a data controller. We encourage you to review the privacy documentation of any third-party service you interact with directly.

The xox777 website does not contain links to external third-party websites beyond those necessary for service delivery. We are not responsible for the content or privacy practices of any external website that you may access independently.

15. Policy Amendments

xox777 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, our data processing practices, or our service offerings. Material changes will be communicated to registered Players via email notification sent to your registered address and via a prominent notice posted on the Platform, no fewer than fourteen (14) days before the revised Policy takes effect.

Your continued use of the xox777 Platform after the effective date of any amendment constitutes your acceptance of the revised Policy. If you object to any change, you must cease using the Platform and may request account closure and data deletion by contacting our support team.

The date of the most recent revision is displayed in the "Last Updated" badge at the top of this page. We recommend reviewing this Policy periodically to remain informed of how we protect your data.

16. Contact Our Privacy Team

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way xox777 processes your Personal Data, please contact our dedicated privacy support team using the details below. All privacy-related correspondence is treated with strict confidentiality.

When submitting a formal rights request (access, erasure, rectification, etc.), please include your full registered name, the email address associated with your xox777 account, and a clear description of your request. We may ask you to verify your identity before processing your request to ensure the security of your Personal Data.