Privacy Policy — aifa77

1Introduction

aifa77 ("we", "us", "our", "the Platform") operates the online gaming platform accessible at https://aifa77.cam, providing sports betting, live casino, slot gaming, and related services primarily to players based in Indonesia. We recognize that privacy is a fundamental right and take our obligations as a data controller seriously.

This Privacy Policy describes the personal data we collect from players and visitors to aifa77, the purposes for which that data is processed, the parties with whom it may be shared, and the measures we take to keep it secure. It also explains the rights available to you in relation to your personal data and how to exercise them.

This Privacy Policy should be read in conjunction with our Terms & Conditions, which govern the overall use of the aifa77 platform. By registering an account or using any service on aifa77, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.

2Definitions

The following definitions apply throughout this Privacy Policy:

• "Personal Data" means any information relating to an identified or identifiable natural person — in practice, any data that could directly or indirectly identify you as a player.
• "Processing" means any operation performed on personal data, including collection, storage, use, disclosure, and deletion.
• "Data Controller" means aifa77, the entity that determines the purposes and means of processing your personal data.
• "Data Processor" means a third party that processes personal data on behalf of aifa77, subject to our instructions and a binding data processing agreement.
• "Player" / "You" means any individual who has registered an account on aifa77 or who visits the Platform without a registered account.
• "KYC" (Know Your Customer) means the identity verification process required to confirm that players are who they claim to be, mandated under international anti-money laundering standards.
• "Cookies" means small data files placed on your device by the Platform to enable session management, analytics, and personalization.

3Data We Collect

aifa77 collects the following categories of personal data from players:

3.1 Identity Data

Full legal name, date of birth, nationality, and government-issued identification number as shown on your KTP (Kartu Tanda Penduduk — Indonesian National Identity Card) or equivalent document. A selfie photograph taken with your ID document may also be required for KYC completion.

3.2 Contact Data

Email address, Indonesian mobile phone number, and residential address. This information is used to communicate with you about your account, process transactions, and send promotional communications where you have opted in.

3.3 Financial Data

Bank account details including your BCA, BRI, BNI, or Mandiri account number and account holder name; or your registered e-wallet identifiers for OVO, DANA, GoPay, ShopeePay, or LinkAja. We also record transaction histories including deposit amounts, withdrawal requests, and net win/loss figures for regulatory and audit purposes.

3.4 Technical Data

IP address, device type, operating system, browser version, screen resolution, and session timestamps. This data is used for security monitoring, fraud detection, and platform optimization.

3.5 Behavioral Data

Game history, betting patterns, session duration, click-stream data, and bonus utilization records. This data enables us to provide a personalized experience, detect problem gambling indicators, and fulfill responsible gaming obligations.

4How We Collect Data

4.1 Directly From You

The majority of personal data we hold is provided directly by you during account registration, KYC verification, deposit and withdrawal requests, or when you contact our support team. You are responsible for the accuracy of the information you provide; inaccurate data may delay payment processing or result in account suspension.

4.2 Automatically Through Platform Use

When you access and use the aifa77 platform, we automatically collect technical and behavioral data through server logs, cookies, and similar tracking technologies. This includes your IP address, device identifiers, session activity, and pages visited. This collection is necessary for the platform to function securely and to monitor for suspicious activity.

4.3 From Third Parties

We may receive identity verification data from accredited KYC providers, fraud-score data from risk assessment services, and payment confirmation data from your bank or e-wallet provider (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, or LinkAja). We may also receive publicly available information about you where relevant to our fraud prevention or responsible gaming obligations.

5How We Use Your Data

aifa77 uses the personal data we collect for the following purposes:

• Account Creation and Management: To register your account, authenticate your identity at login, and maintain accurate account records.
• KYC and Age Verification: To confirm that you are at least 21 years of age and that you are who you claim to be, as required under international gaming standards.
• Payment Processing: To facilitate deposits and withdrawals in IDR via your registered BCA, BRI, BNI, Mandiri, or e-wallet account, and to maintain an accurate transaction history.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, money laundering, multiple account creation, and unauthorized access to the platform.
• Responsible Gaming Monitoring: To identify patterns that may indicate problem gambling behaviors and, where appropriate, to apply protective measures such as deposit limits or account cooling-off periods.
• Customer Support: To respond to your inquiries, resolve disputes, and provide ongoing assistance through our 24/7 support team.
• Promotional Communications: To send you offers, bonuses, and platform updates where you have explicitly opted in to receive such communications. You may opt out at any time.
• Platform Improvement: To analyze aggregated behavioral data to improve game performance, user experience, and the overall quality of services offered on aifa77.
• Legal Compliance: To comply with applicable anti-money laundering (AML) regulations, international gaming licensing obligations, and any lawful requests from competent authorities.

6Legal Basis for Processing

aifa77 processes personal data on the following legal bases:

• Contractual Necessity: Processing required to fulfill our obligations under the Terms & Conditions you accepted at registration — including account management, KYC, and payment processing.
• Legitimate Interests: Processing necessary for our legitimate business interests, such as fraud prevention, security monitoring, platform analytics, and responsible gaming oversight, provided those interests are not overridden by your rights.
• Legal Obligation: Processing required to comply with applicable anti-money laundering laws, international gaming licensing requirements, and other regulatory obligations that bind the platform.
• Consent: Processing based on your freely given, specific, and informed consent — in particular, sending promotional communications. You may withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.

7Data Sharing & Disclosure

7.1 Third-Party Processors

aifa77 shares personal data only with carefully selected third-party processors who are contractually bound to process data solely on our instructions and to implement appropriate security measures. These include KYC identity verification providers, payment gateway operators, cloud infrastructure providers, and fraud detection services.

7.2 Payment Partners

To process your deposits and withdrawals, we share necessary financial data with your chosen payment provider — including BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, and LinkAja. Each of these providers operates under its own privacy policy and data protection obligations.

7.3 Game Content Providers

Game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft may receive a pseudonymized player identifier and game session data to enable game functionality. These providers do not receive your full identity or financial data.

7.4 Legal and Regulatory Disclosure

aifa77 may disclose personal data to competent law enforcement authorities, regulatory bodies, or courts where required to do so by law, court order, or to protect the legal rights of the platform or other players. We will notify you of such disclosures unless we are legally prohibited from doing so.

8Data Retention

aifa77 retains personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable legal or regulatory obligations. The following retention periods apply:

• Active Account Data: Retained for the full duration of your account's active status plus a minimum of five (5) years following account closure, to satisfy anti-money laundering record-keeping requirements.
• Transaction Records: All deposit, withdrawal, and betting transaction records are retained for a minimum of five (5) years from the date of each transaction.
• KYC Documents: Identity documents submitted for verification are retained for five (5) years following account closure or the last transaction, whichever is later.
• Support Communications: Records of customer support interactions are retained for two (2) years from the date of each interaction.
• Technical Logs: Server access logs and session data are retained for twelve (12) months for security and fraud investigation purposes.
• Marketing Consent Records: Records of your marketing preferences and consent are retained for the duration of your account plus two (2) years.

Upon expiry of the relevant retention period, personal data is securely deleted or anonymized so that it can no longer be linked to an individual player.

9Cookies & Tracking Technologies

9.1 What Are Cookies?

Cookies are small text files placed on your device when you visit a website. They allow the site to remember information about your visit — such as your language preferences, session state, and login status — improving both functionality and security.

9.2 Types of Cookies We Use

• Essential Cookies: Required for the platform to function. These enable secure login sessions, maintain your account state while you navigate the site, and protect against cross-site request forgery. These cannot be disabled.
• Analytical Cookies: Used to understand how players interact with the platform — which pages are visited most, where users drop off, and how performance can be improved. Data collected is aggregated and anonymized.
• Preference Cookies: Remember your language settings, preferred game categories, and display options so you do not have to reconfigure them on each visit.
• Security Cookies: Used for fraud detection and device fingerprinting to identify unusual access patterns that may indicate account takeover attempts.

9.3 Managing Cookies

You may configure your browser to refuse or delete non-essential cookies at any time. Please note that disabling essential cookies will prevent you from logging in or using the platform's core features. For instructions on managing cookies in your specific browser, refer to your browser's help documentation.

10Data Security

aifa77 implements a layered set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, and destruction. These measures include:

• SSL/TLS Encryption: All data transmitted between your device and our servers is encrypted using industry-standard Transport Layer Security (TLS 1.2 or higher).
• Data Encryption at Rest: Sensitive personal data, including KYC documents and financial identifiers, is encrypted at rest using AES-256 encryption.
• Access Controls: Personal data is accessible only to aifa77 staff and authorized processors on a strict need-to-know basis. All staff with data access undergo mandatory privacy training.
• Two-Factor Authentication (2FA): Available for all player accounts and mandatory for all staff accounts with access to personal data systems.
• Regular Security Audits: Our systems undergo periodic penetration testing and security audits by independent specialists.
• Incident Response: In the event of a data breach that poses a risk to your rights, aifa77 will notify affected players without undue delay and take immediate remediation steps.

11International Data Transfers

aifa77 operates internationally and some of our third-party service providers — including cloud infrastructure providers and game content studios — may process data in jurisdictions outside Indonesia. Where personal data is transferred internationally, we ensure that appropriate safeguards are in place, including contractual data processing agreements that require the recipient to apply equivalent data protection standards.

No personal data is transferred to a third party in any jurisdiction unless aifa77 is satisfied that an adequate level of protection is maintained. If you have concerns about any specific international data transfer, please contact us using the details in Section 16.

12Your Rights

As a player on aifa77, you have the following rights in relation to your personal data. To exercise any of these rights, please contact our support team using the details in Section 16. We will respond to all verifiable requests within 30 days.

• Right of Access: You may request a copy of the personal data we hold about you, including information about how it is processed and who it has been shared with.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. For account-critical data (name, date of birth), rectification may require supporting documentation.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal obligation to retain certain data (such as AML records) for defined periods.
• Right to Restrict Processing: You may request that we limit the processing of your data in certain circumstances — for example, while you contest the accuracy of data we hold.
• Right to Data Portability: You may request that we provide your personal data in a structured, machine-readable format so that it can be transferred to another service provider.
• Right to Object: You may object to our processing of your data for legitimate interests or direct marketing purposes at any time. We will cease such processing unless we can demonstrate compelling grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (such as for promotional communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal.

13Minors

aifa77 is strictly an adults-only platform. We do not knowingly collect personal data from individuals under the age of 21. Our registration process and KYC verification procedures are specifically designed to prevent underage individuals from accessing the platform.

If we become aware that personal data has been collected from an individual under the age of 21, we will immediately suspend the associated account, delete the data in question, and return any deposited funds to the original payment method following verification. If you believe that a minor has registered on our platform, please notify us immediately at [email protected].

14Third-Party Links

The aifa77 platform may contain references to third-party services such as payment providers or game studios. These third parties operate their own privacy policies, which are entirely independent of aifa77. We are not responsible for the privacy practices of any third party and encourage you to review the privacy policies of any external service you interact with in connection with your use of aifa77.

15Policy Amendments

aifa77 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform functionality. Material changes will be communicated to registered players via the email address on file or through a prominent notice on the Platform prior to the change taking effect.

The "Last Updated" date at the top of this page always reflects when the most recent revision was made. Continued use of the aifa77 platform following publication of an updated Privacy Policy constitutes your acceptance of the revised terms. We encourage you to review this page periodically.

16Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the personal data aifa77 holds about you, please contact our dedicated data protection support team. We are available 24 hours a day, 7 days a week, and offer assistance in both English and Bahasa Indonesia.

When submitting a data access, rectification, or erasure request, please include your registered email address and a brief description of your request. We may ask you to verify your identity before processing the request to ensure we are responding to the correct account holder.