77lucky Casino & Sportsbook Data Care

This page describes what we collect when you use 77lucky and how we keep that data protected. We take your privacy seriously and operate transparent data practices across all our gaming verticals—slots (Aviator, Sweet Bonanza, Gates of Olympus, Fortune Tiger, Mahjong Ways), live-dealer tables (Baccarat, Roulette, Blackjack, Dragon Tiger), sportsbook predictions (Liga 1, Piala AFF, Champions League, Premier League, MotoGP, badminton), and esports markets (Mobile Legends, Free Fire, PUBG Mobile). Our data collection focuses on account verification, payment processing, and compliance with applicable regulations in jurisdictions where we operate.

When you register on 77lucky, we collect your email, phone number, identity documents (card scan), and payment method details (bank account or e-wallet credentials for DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, e-wallet). We use this information to verify your identity, process deposits and withdrawals, prevent fraud, and comply with local regulations. Our servers may sit outside your jurisdiction; however, we apply consistent encryption and access controls regardless of server location.

Our services are available only where local law permits. Users are responsible for verifying that access and use comply with their own jurisdiction's law.

What We Collect on 77lucky

We collect information in several categories. Account data includes your email address, phone number, username, password (stored encrypted), and recovery questions. Identity verification data includes your national ID or passport scan, date of birth, and full legal name. Payment data includes your bank account number or e-wallet credential (stored encrypted) for processing deposits via DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, e-wallet and withdrawals. Gaming activity data includes your bet history, game outcomes, tournament participation, leaderboard position, and account balance. Support communications include any emails, live-chat transcripts, or support tickets you submit to our team.

We also collect technical data: IP address, device type (mobile or desktop), browser version, cookie identifiers, and access timestamps. This technical data helps us detect fraud, improve platform stability, and troubleshoot support issues. We do not intentionally collect biometric data, health information, or special category data unless you explicitly provide such information during support communication. If you visit 77lucky from Jakarta, Surabaya, Bandung, Medan, or Semarang, your regional IP is logged for geo-restriction compliance verification.

Account data
Email, phone, username, password (encrypted), recovery questions
Identity data
ID scan, date of birth, legal name, nationality
Payment data
Bank account or e-wallet details (encrypted); transaction history
Gaming activity
Bet history, game outcomes, tournament standings, account balance
Technical data
IP address, device type, browser version, cookie IDs, access logs

How We Use Your Data on 77lucky

We use collected data for core platform functions: account creation, identity verification, deposit and withdrawal processing, game operation, and settlement. We use your email and phone for account recovery, transaction notifications, and support communication. We use identity and payment data to comply with anti-money-laundering (AML) regulations and know-your-customer (KYC) requirements applicable to jurisdictions where we operate.

We analyze gaming activity data to detect fraud, suspicious patterns, and bonus abuse. If we identify accounts under your control accessing 77lucky simultaneously or exhibiting account-farming behavior, we may restrict or terminate your account. We use technical data (IP address, device identifiers) for geo-restriction enforcement and security monitoring. We do not use your data for marketing, profiling, or automated decision-making beyond standard fraud detection. We do not sell your data to third parties. During periods like Idul Fitri, Idul Adha, Imlek, or Nyepi when payment processors operate on reduced schedules, we may retain transaction data longer than usual for reconciliation purposes.

Data retention: We retain account data for the duration of your account plus seven years for compliance purposes. Deleted account data is purged from active systems within 30 days, though backup copies may persist for 90 days.

Third-Party Data Sharing on 77lucky

We share your payment data with payment processors (mobile banking, local payment, online payment, e-wallet, mobile banking, local payment partner networks; online payment, e-wallet, mobile banking, local payment) only to process your deposits and withdrawals. These processors maintain their own privacy policies; we are not responsible for their data practices. We may share identity verification data with third-party KYC providers who conduct ID authentication on our behalf. We share transaction data with regulatory authorities only when legally required by applicable jurisdiction.

We do not share your data with marketing partners, data brokers, or affiliate networks. We do not use your data to build user profiles for sale. If we undergo corporate reorganization or acquisition, your data may be transferred to the acquiring entity under identical privacy protections. You will be notified via email of any such transfer.

Cookies and Tracking on 77lucky

We use session cookies to maintain your login state during your visit to 77lucky. These cookies expire when you log out or close your browser. We use persistent cookies to remember your language preference and device type; these persist for up to 12 months. We do not use tracking pixels, web beacons, or third-party analytics that profile your browsing outside 77lucky. We do not permit Google Analytics, Facebook Pixel, or similar third-party tracking services on our platform.

You may disable cookies in your browser settings; however, disabling cookies may prevent normal 77lucky functionality (such as maintaining your login session). We do not track your activity after you leave our platform or use your data to build profiles on other websites.

Our 77lucky Data Security Practices

We encrypt all payment data, identity documents, and passwords using industry-standard encryption (AES-256 or equivalent). Data in transit (between your device and our servers) is encrypted using TLS 1.2 or higher. Data at rest on our servers is encrypted and accessible only to authorized staff with verified need. We employ multi-factor authentication for internal account access; staff cannot view customer payment data without dual approval.

We conduct regular security audits and penetration testing to identify vulnerabilities. We maintain redundant backups stored in geographically separate locations. In the event of a data breach affecting your account, we notify you via email within 48 hours and provide guidance on account security steps. We do not guarantee standard security practices; no system is impervious to attack. However, we maintain standard industry security practices and respond promptly to identified threats.

Breach notification: If we discover unauthorized access to your data, we contact you immediately via registered email with details of affected information and recommended actions.

Your Rights on 77lucky

You have the right to access all personal data we hold about you. You may request a copy by logging into your account dashboard or emailing our support team. You have the right to correct inaccurate information; you may update your email, phone, and address directly in account settings or request corrections through support. You have the right to delete your account and associated data; account deletion is processed within 30 days, though we may retain data as required by law (typically seven years for compliance purposes).

You have the right to object to specific data uses (e.g., fraud detection profiling). Objections are reviewed within seven business days; however, we may maintain data use if required by law or for account security. You have the right to data portability: we provide your gaming history, bet records, and account balance in standard format (CSV or JSON) upon request. To exercise any of these rights, contact our support team through the account dashboard.

77lucky privacy team
Data protection and compliance

We at 77lucky prioritize transparent data practices and user control over personal information. Our privacy commitments reflect our commitment to protecting your data while enabling seamless account management across slots, live dealers, sportsbook, and esports verticals.

International Data Transfers on 77lucky

Our servers and data centers may be located outside your jurisdiction. When you register on 77lucky, your data is transmitted to and stored in multiple geographic locations for redundancy and security. We maintain consistent encryption and access controls regardless of server location. If applicable law imposes strict restrictions on data transfer outside your jurisdiction, you are responsible for verifying compliance before registering on 77lucky.

We do not intentionally transfer your data to jurisdictions considered unsafe; however, we may store backup copies in multiple regions for disaster recovery. Your data may be accessed by our support team regardless of their physical location, provided they authenticate through secure channels.

Changes to Our 77lucky Privacy Policy

We may update this privacy policy at any time. Material changes are communicated via email to your registered account email address. Continued use of 77lucky after policy changes constitutes your acceptance of updated terms. We maintain a version history of all privacy policy updates; you may request prior versions through our support team.

For questions about our privacy practices, contact our support team through the account dashboard or visit our FAQ pageFor formal privacy complaints or data-subject requests (access, correction, deletion), submit a written request to our compliance team; response time is typically five business days. Our services are available only where local law permits. Users are responsible for verifying that access and use comply with their own jurisdiction's law.

Legal and Jurisdiction Information

Service availability

We at 77lucky offer our gaming platform exclusively in jurisdictions where online wagering is permitted by applicable local law. Our services are not available in jurisdictions where such activity is prohibited or restricted. We do not claim licensing in any specific territory, nor do we represent our platform as legal or authorized in any particular country or region. Instead, we operate under the principle that our services are available only where local law permits. Users accessing 77lucky from any location assume full responsibility for verifying that such access complies with the laws and regulations of their own jurisdiction. We implement geo-restriction controls to limit access where legally required, though no automated geo-blocking system is universally perfect or foolproof. Players should independently confirm their eligibility before attempting registration or account funding. We reserve the right to restrict or terminate access from any user, region, or jurisdiction if we determine that service provision would violate applicable legal requirements. During periods of legal uncertainty or regulatory change in specific regions, we may temporarily restrict access pending clarification of local requirements. Our commitment to jurisdiction-restricted access reflects our intent to operate within legal boundaries while respecting the autonomy of individual users to verify their own compliance obligations. Users who access 77lucky from unsupported jurisdictions do so at their own risk; we are not liable for legal consequences arising from such access.

Account eligibility

Eligibility for account registration and real-money play on 77lucky is determined by applicable law in the user's jurisdiction. We do not impose a fixed age threshold in our privacy policy; instead, we require users to confirm that they meet the minimum age and legal qualifications prescribed by their own jurisdiction's gaming regulations. Users accessing 77lucky from jurisdictions with specific age requirements (such as 21, 18, or other thresholds) are individually responsible for confirming their compliance with those thresholds before registering. During account registration, users certify that they are of legal age to participate in gaming activities in their location. We conduct identity verification (card scan and payment method confirmation) to confirm user identity and assess account eligibility. This verification process helps us identify underage or ineligible users and prevent their participation. Verified accounts gain full access to our gaming verticals—slots, live dealers, sportsbook, esports—subject only to their account tier and deposit history. Unverified players may access free-play demo versions of our games without funding requirement. We reserve the right to suspend or terminate any account if we determine that the user does not meet applicable eligibility requirements or has provided false information during verification. Account holders acknowledge that they are legally responsible for their own compliance with age and eligibility rules in their jurisdiction.

Local-law responsibility

Users are fully responsible for determining whether access to and use of 77lucky complies with the laws and regulations of their own jurisdiction before they register, deposit funds, or participate in any gaming activity on our platform. Online gaming regulations vary significantly across jurisdictions, regions, and even local municipalities. Some territories permit online gaming with minimal restrictions; others impose licensing requirements or prohibit such activity entirely. We do not provide legal advice, nor do we represent ourselves as authorized or licensed in any specific jurisdiction. It is the sole responsibility of each user to research and understand the applicable gaming laws in their location, consult with legal counsel if necessary, and determine their own compliance obligations. By accessing 77lucky, users implicitly represent that they have conducted this due diligence and determined that such access is legal under their local law. Users who proceed despite legal uncertainty do so at their own risk. We are not liable for any legal consequences, penalties, or damages arising from a user's violation of their own jurisdiction's gaming regulations. Players should regularly review changes to local law; if a user's jurisdiction subsequently prohibits or restricts online gaming, that user should cease access to 77lucky immediately. We maintain the right to block access from jurisdictions we determine to be prohibited, though we cannot guarantee perfect enforcement of such restrictions.

Data and privacy scope

We collect user data for account verification, payment processing, and regulatory compliance purposes. During identity verification, we request card scans (national ID or passport), payment method details (bank account or e-wallet credentials), and contact information (email, phone number). This data is stored securely and used only for account verification, fraud prevention, transaction settlement, and compliance with applicable regulations. Users retain the right to access, correct, or delete their personal data by requesting such action through our account settings or by contacting our support team. This privacy policy provides comprehensive detail on our data collection, storage, retention, and usage practices. We do not share personal data with third parties except as required for payment processing (to our payment partners DANA, OVO, GoPay, ShopeePay, LinkAja, QRIS, BCA, Mandiri, BRI, BNI), regulatory compliance (to government agencies where legally mandated), or account security (to fraud-prevention service providers). Users concerned about privacy or data handling practices should review this policy in full before registering. We employ encryption and standard security measures to protect user data against unauthorized access or disclosure. In the event of a data breach, we notify affected users and authorities as required by applicable law. Users retain independent responsibility for account security; we recommend strong passwords, regular password changes, and caution when accessing 77lucky from shared or public devices.

Contact for legal inquiries

Users with legal questions, compliance concerns, or regulatory inquiries may contact our support team through standard channels accessible in the 77lucky account dashboard. We maintain English-language support during standard business hours; response time typically ranges from several hours to one business day depending on inquiry complexity and support volume. For urgent compliance matters or formal legal correspondence, users should describe their concern clearly in initial contact, specifying whether the matter relates to account eligibility, local-law compliance, data privacy, transaction disputes, or other topics. We aim to respond to all inquiries within three business days; complex matters may require additional time for investigation or consultation with legal counsel. Users outside supported jurisdictions seeking clarification on service availability should contact support with their location and ask for explicit confirmation regarding eligibility. We cannot provide personalized legal advice regarding specific jurisdictions; users should consult qualified legal counsel in their own location for authoritative interpretation of local gaming laws. Our support team is authorized to discuss our privacy practices, data handling procedures, account management, and settlement mechanics, but not to provide legal counsel or make exceptions to stated policies. For queries unrelated to our platform or account management, users should seek assistance from appropriate professional advisors in their location. Escalations regarding privacy interpretation or data-subject requests are reviewed by our dedicated data protection team with response window of five business days.