Your Privacy Matters
to gus77

gus77 ("gus77", "we", "us", or "our") operates the online gaming and sports betting platform accessible at gus77.asia (the "Platform"). We are committed to protecting the privacy of every player who registers, deposits, plays, or otherwise interacts with the Platform. This Privacy Policy describes the personal data we collect from you, the purposes for which we process it, the parties with whom we may share it, the measures we take to keep it secure, and the rights you hold in respect of your data.

By registering an account on the Platform, completing a deposit, or continuing to use any gus77 service, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein. If you do not agree with any part of this policy, you must immediately cease using the Platform and contact our support team to request account closure.

This Privacy Policy is incorporated by reference into the gus77 Terms & Conditions. Defined terms not separately defined in this policy carry the meanings assigned to them in the Terms & Conditions. In the event of any conflict between this Privacy Policy and the Terms & Conditions, the Terms & Conditions shall prevail unless the conflict relates specifically to data protection matters, in which case this Privacy Policy governs.

gus77 collects personal data in the following categories. We collect only what is necessary for the stated purpose, and we do not collect sensitive categories of data (such as health data, biometric data, or political opinions) except where strictly required to comply with applicable law or regulatory guidance.

gus77 collects personal data through the following channels and mechanisms:

• Direct Submission: Data you actively provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting support, or filling in any form on the Platform.
• Automated Technical Collection: Data collected automatically by our servers and analytics tools when you access the Platform, including your IP address, device identifiers, browser fingerprint, and session behaviour. This collection occurs regardless of whether you are logged in to your account.
• Payment Processors: Confirmation and transaction reference data returned to gus77 by our Indonesian payment partners (banks and e-wallet providers) upon successful processing of deposit or withdrawal instructions.
• KYC and Identity Verification Partners: Results and risk-scoring outputs from third-party identity verification services engaged by gus77 to validate player identity documents and screen against sanctions and politically exposed person (PEP) lists.
• Cookies and Similar Technologies: Data collected via cookies, web beacons, local storage, and session storage as described in Section 7 of this policy.
• Fraud Prevention and Anti-Money-Laundering Tools: Device fingerprinting, behavioural analytics, and transaction monitoring outputs generated by our fraud prevention systems.
• Publicly Available Sources: Where permitted by applicable law, gus77 may supplement player data with information available from public records or commercially licensed data sources for the purpose of identity verification or fraud prevention.

gus77 uses the personal data we collect for the following specific purposes. For each purpose, we have identified the primary data categories involved:

4.1 Marketing Communications. If you have opted in to marketing communications during registration or subsequently through your account preferences, gus77 may send you promotional emails, SMS messages, or in-platform notifications about bonuses, new games, sportsbook markets (including BRI Liga 1 fixtures, EPL, La Liga, Champions League, and Timnas Indonesia matches), seasonal promotions (such as Ramadhan, Idul Fitri, and Independence Day specials), and other platform updates. You may withdraw your marketing consent at any time by updating your notification preferences in the Account Settings or by contacting support.

4.2 Automated Decision-Making. gus77 employs automated systems to detect and prevent fraud, money laundering, and responsible gaming concerns. These systems may automatically flag or restrict your account activity pending manual review. Where a significant decision affecting your account is made solely by automated means, you have the right to request human review of that decision by contacting our support team.

gus77 processes personal data on the following legal bases, consistent with international data protection standards applicable in our licensing jurisdiction:

• Performance of a Contract: Processing necessary to create and manage your account, authenticate your identity, process financial transactions, and deliver the gaming services you have requested. Without this processing, we cannot provide the Platform to you.
• Legal Obligation: Processing required to comply with anti-money-laundering (AML) regulations, Know Your Customer (KYC) requirements, tax reporting obligations, and any other applicable legal or regulatory duty imposed on gus77 by the laws of our licensing jurisdiction.
• Legitimate Interests: Processing for purposes including fraud detection and prevention, platform security, responsible gaming monitoring, IT systems maintenance, internal analytics, and improving our services — where these interests are not overridden by your fundamental rights and interests.
• Consent: Processing for marketing communications, personalised promotions, and any other purpose where consent is required and has been obtained from you. You may withdraw consent at any time without affecting the lawfulness of processing already carried out.

6.1 Third-Party Service Providers. gus77 shares personal data with carefully selected third-party service providers who assist us in operating the Platform. These include payment processors handling Indonesian bank transfers (BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata) and e-wallet transactions (OVO, DANA, GoPay, ShopeePay, LinkAja); KYC and identity verification providers; fraud prevention and AML screening services; cloud hosting and data centre providers; customer support software platforms; and gaming content suppliers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Pocket Games Soft, and Spribe.

All third-party service providers are bound by contractual data processing agreements that require them to process personal data only for the specific purpose for which it was shared, to maintain appropriate technical and organisational security measures, and to return or destroy data upon termination of the service relationship.

6.2 Legal and Regulatory Disclosures. gus77 may disclose personal data to regulatory authorities, law enforcement agencies, courts, or other government bodies where required or permitted by applicable law, including in response to a lawful request, subpoena, court order, or regulatory investigation.

6.3 Business Transfers. In the event of a merger, acquisition, asset sale, or other corporate restructuring involving gus77, personal data held by the Company may be transferred to the acquiring or successor entity. We will notify affected players of any such transfer and of any material changes to this Privacy Policy that result from the transaction.

6.4 No Sale of Data. gus77 does not sell, rent, or licence your personal data to third parties for their own independent marketing or commercial purposes under any circumstances.

7.1 What Are Cookies. Cookies are small text files placed on your device by a website when you visit it. They allow the website to remember information about your visit, such as your preferred settings and login state, making your next visit easier and the site more useful to you. gus77 uses cookies and similar technologies including web beacons, local storage objects, and session storage.

7.2 Types of Cookies Used by gus77.

7.3 Managing Cookies. You can control and delete cookies through your browser settings. Most browsers allow you to refuse new cookies, delete existing cookies, and configure alerts when cookies are set. Please note that disabling strictly necessary cookies will prevent you from logging in to the Platform and accessing real-money gaming features. Disabling analytics or functional cookies will not affect your ability to play but may reduce the quality of your personalised experience.

8.1 Active Accounts. gus77 retains personal data for as long as your account remains active. An account is considered active if you have logged in, placed a bet, made a deposit or withdrawal, or contacted support within the preceding 12 months.

8.2 Post-Closure Retention. Following the closure of your account — whether at your request or as a result of a breach of our Terms & Conditions — gus77 retains your personal data for a minimum period of five (5) years. This retention period is required to fulfil our AML record-keeping obligations, respond to regulatory enquiries, resolve outstanding disputes, and enforce our Terms. In certain circumstances, where required by applicable law or ongoing legal proceedings, data may be retained beyond this period.

8.3 KYC Documentation. Identity documents and KYC records are retained for a minimum of five (5) years following the end of the business relationship, consistent with standard AML record-keeping requirements.

8.4 Marketing Data. Where you have consented to marketing communications, your contact and preference data used for that purpose is retained until you withdraw consent or request deletion, subject to our minimum legal retention obligations overriding any deletion request.

8.5 Deletion. Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with any identified or identifiable individual. Anonymised, aggregated data may be retained indefinitely for statistical and platform improvement purposes.

9.1 Technical Measures. gus77 implements appropriate technical security measures to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. These include TLS/SSL encryption for all data in transit, AES-256 encryption for sensitive data at rest, firewalls and intrusion detection systems, regular vulnerability assessments and penetration testing, and strict access controls limiting data access to authorised personnel only.

9.2 Organisational Measures. Access to personal data is restricted on a need-to-know basis. All gus77 staff and contractors with access to personal data are subject to confidentiality obligations and receive regular training on data protection and information security practices. Access privileges are reviewed periodically and revoked promptly upon termination of employment or contract.

9.3 Payment Security. All payment transactions on the Platform are processed through certified third-party payment gateways aligned with PCI-DSS standards. gus77 does not handle or store unencrypted payment credentials. Deposits and withdrawals via BCA, BRI, BNI, Mandiri, and e-wallets such as OVO, DANA, and GoPay are processed securely through the respective provider's own authenticated payment environment.

9.4 Your Responsibility. The security of your gus77 account also depends on you maintaining the confidentiality of your login credentials. gus77 strongly recommends enabling two-factor authentication (2FA) and using a unique, strong password for your account. You must notify us immediately if you suspect any unauthorised access to your account.

Subject to applicable law and our legal retention obligations, you have the following rights in respect of your personal data held by gus77. To exercise any of these rights, contact our privacy team at [email protected] with the subject line "Privacy Rights Request — [Your Full Name] — [Account ID]". We will acknowledge your request within 5 business days and respond in full within 30 calendar days.

• Right of Access: You have the right to request a copy of the personal data gus77 holds about you, together with information about how it is processed. We will provide this in a structured, commonly used, machine-readable format upon request.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data we hold about you. For account details you can update directly (such as email address or phone number), you may do so via the Account Settings in the Platform.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you have withdrawn consent and there is no other legal basis for processing. This right is subject to our legal retention obligations; we cannot erase data that we are required by law to retain.
• Right to Restriction of Processing: You may request that gus77 restricts its processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or where you have objected to processing pending verification of our legitimate grounds.
• Right to Data Portability: Where processing is carried out by automated means on the basis of contract or consent, you have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another data controller.
• Right to Object: You have the right to object to processing of your personal data for direct marketing purposes at any time, with immediate effect. You may also object to processing based on our legitimate interests; we will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing already carried out prior to withdrawal.
• Right Relating to Automated Decision-Making: You have the right not to be subject to a decision based solely on automated processing — including profiling — that produces significant legal or similarly significant effects on you. Where such automated decisions are made, you may request human review by contacting our support team.

11.1 Cross-Border Processing. gus77 operates as an internationally licensed offshore gaming platform. Your personal data may be transferred to, stored in, and processed in countries outside Indonesia — including the jurisdiction in which the Company holds its gaming licence, and the countries where our third-party service providers (including cloud hosting providers, KYC verification services, and game studios) operate their infrastructure.

11.2 Safeguards. Where personal data is transferred internationally, gus77 takes appropriate steps to ensure that your data receives an equivalent level of protection to that required under applicable data protection standards. These steps include entering into standard contractual clauses or equivalent data transfer agreements with recipient entities, and conducting transfer impact assessments where required.

11.3 Indonesia-Specific Context. Indonesian players acknowledge that, as gus77 is an offshore platform, their personal data will be processed outside Indonesia. By registering an account and using the Platform, Indonesian players explicitly consent to this international transfer and processing of their personal data in accordance with this Privacy Policy.

gus77 strictly prohibits the use of the Platform by any person under the age of 21. The Platform is not directed at children or minors and we do not knowingly collect personal data from any individual under 21 years of age. Age verification is a mandatory component of the gus77 registration and KYC process.

If gus77 becomes aware that personal data has been collected from a person under 21 years of age, we will immediately suspend the relevant account, void any associated transactions, and delete the personal data of the minor from our systems, subject only to any retention obligations required by law.

If you are a parent or guardian and believe that your child under the age of 21 has registered an account on the Platform, please contact us immediately at [email protected] so that we can take appropriate action. For guidance on parental controls and preventing underage access to online gambling platforms, please visit our Responsible Gaming page.

The Platform may contain references to third-party payment providers and game studios whose services are integrated into the gus77 experience. While gus77 carefully selects its technology and payment partners, we are not responsible for the privacy practices of third parties, and this Privacy Policy does not apply to data processed independently by those parties under their own privacy policies.

We encourage you to review the privacy policies of any third-party service providers whose services you use in connection with your gus77 account — in particular, the privacy policies of your nominated payment provider (e.g., BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja) and any game studio whose games you access through the Platform.

14.1 Right to Update. gus77 reserves the right to modify, update, or replace this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, regulatory guidance, or business operations. The updated policy will be published on this page with a revised effective date.

14.2 Notification of Material Changes. Where changes to this Privacy Policy are material — meaning they significantly affect the way we process your personal data or the rights available to you — gus77 will notify registered players by email at least 14 days before the revised policy takes effect. Continued use of the Platform after the effective date of a revised Privacy Policy constitutes your acceptance of the updated terms.

14.3 Version History. gus77 maintains an internal version history of this Privacy Policy. If you wish to obtain a copy of a prior version of this policy, please submit a request to [email protected] with the subject line "Privacy Policy Version Request".

14.4 Governing Language. This Privacy Policy is written in English. In the event of any inconsistency between the English version and any translated or localised version, the English version shall prevail in all respects.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way gus77 processes your personal data, please contact our privacy and support team through the following channels. Our Indonesian-speaking support agents are available 24 hours a day, 7 days a week — including during Ramadhan, Idul Fitri, Lebaran, Nyepi, and all Indonesian national public holidays.

• Email: [email protected] — please use the subject line "Privacy Enquiry — [Your Full Name] — [Account ID]" for all data protection correspondence. We aim to respond to privacy-related emails within 24 hours for general enquiries and within 5 business days for formal rights requests.
• Live Chat: Available directly from the Platform — average response time under 60 seconds for general support queries.
• Support Hours: 24/7 — Western Indonesia Time (WIB, UTC+7). WITA (UTC+8) and WIT (UTC+9) players are equally welcome; our team operates continuously across all Indonesian time zones.
• Serving: Jakarta, Surabaya, Bandung, Medan, Semarang, Makassar, Yogyakarta, Bali, Palembang, and all of Indonesia.