Privacy Policy

01 Definitions

For the purposes of this Privacy Policy, the following terms have the meanings set out below:

• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to name, date of birth, residential address, email address, phone number, payment account details, and device identifiers.
• "Processing" means any operation performed on Personal Data, including collection, storage, retrieval, use, disclosure, transmission, erasure, or destruction.
• "Data Subject" means the individual to whom Personal Data relates — in this context, the registered gtr77 player.
• "Data Controller" means the entity that determines the purposes and means of processing Personal Data — in this context, gtr77 and its operating entity.
• "Third Party" means any entity other than the Data Subject, gtr77, and persons authorized by gtr77 to process Personal Data under direct authority.
• "Cookies" means small text files stored on a user's device by a web browser to track session state, preferences, and behavioral data.

02 Data Controller

gtr77 is the Data Controller responsible for Personal Data collected through the platform at https://gtr77.cam. gtr77 operates as an internationally licensed offshore betting and casino platform. Our primary point of contact for data privacy matters is our support team, reachable at the contact details provided in Clause 15 of this policy.

Players who are residents of Indonesia acknowledge that gtr77 processes their data in accordance with international data protection standards as adopted by gtr77's licensing jurisdiction, and that gtr77 cooperates with legitimate law enforcement or regulatory inquiries where legally required to do so.

03 Data We Collect

gtr77 collects the following categories of Personal Data in the course of operating the platform:

Category	Examples	Collection Point
Identity Data	Full legal name, date of birth, nationality, government ID number	Account registration, KYC verification
Contact Data	Email address, WhatsApp/phone number, residential address in Indonesia	Account registration, support interactions
Financial Data	Bank account name and number (BCA, BRI, BNI, Mandiri, CIMB Niaga), e-wallet account (OVO, DANA, GoPay, ShopeePay, LinkAja), transaction amounts in IDR	Deposit and withdrawal requests
Verification Data	Copies of government-issued ID (KTP, passport), selfie with ID, proof of address, proof of payment method ownership	KYC process
Technical Data	IP address, device type and OS, browser type and version, session timestamps, geolocation data (country/city level)	Automatic collection via platform access
Usage Data	Games played, bets placed, wager amounts, win/loss history, pages visited, feature interactions	Automatic collection during platform use
Communications Data	Live chat transcripts, WhatsApp message content, email correspondence	Support interactions
Marketing Preferences	Opted-in/out status for promotional communications, preferred contact channel	Account settings, opt-in forms

gtr77 does not intentionally collect sensitive personal data categories such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, health data, or sexual orientation. If such data is inadvertently submitted through a support channel, it will be deleted promptly.

04 How We Collect Data

gtr77 collects Personal Data through the following channels:

• Direct Provision: Data you actively submit when registering an account, completing KYC verification, making deposits or withdrawals, or contacting our support team.
• Automated Technical Collection: Data collected automatically when you access the platform, including IP address, device identifiers, browser fingerprint, session duration, and navigation data, collected via server logs, cookies, and similar technologies.
• Third-Party Payment Processors: Transaction confirmation data received from Indonesian banking partners (BCA, BRI, BNI, Mandiri) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) to verify deposit and withdrawal status.
• Game Providers: Aggregated gameplay event data received from third-party game studios (Pragmatic Play, Evolution Gaming, PG Soft, and others) for settlement, dispute resolution, and responsible gaming monitoring purposes.
• Fraud Prevention Services: Risk signals and device reputation data from third-party fraud detection tools used to protect the integrity of the platform.

05 Purpose & Legal Basis for Processing

gtr77 processes Personal Data for the following purposes, each with a corresponding legal basis:

• Account Management — To create, maintain, and operate your gtr77 account. Legal basis: performance of a contract.
• Identity Verification (KYC) — To verify your identity and age (21+ requirement) before processing withdrawals. Legal basis: legal obligation and legitimate interests.
• Payment Processing — To process deposits and withdrawals in IDR via local Indonesian banks and e-wallets. Legal basis: performance of a contract.
• Fraud Prevention & Platform Security — To detect and prevent fraudulent activity, money laundering, bonus abuse, and unauthorized account access. Legal basis: legitimate interests and legal obligation.
• Responsible Gaming Monitoring — To monitor gameplay patterns for indicators of problematic gambling behavior and to apply player-requested limits or exclusions. Legal basis: legal obligation and legitimate interests.
• Customer Support — To respond to account queries, complaints, and technical issues. Legal basis: performance of a contract and legitimate interests.
• Marketing Communications — To send promotional offers, bonus alerts, and news about gtr77 products. Legal basis: consent (opt-in only). You may withdraw consent at any time.
• Platform Analytics & Improvement — To analyze usage patterns and improve the performance, usability, and game selection of the platform. Legal basis: legitimate interests.
• Regulatory Compliance — To maintain records and respond to lawful requests from licensing authorities and law enforcement agencies. Legal basis: legal obligation.

06 Data Sharing

gtr77 does not sell your Personal Data. We share data only with the following categories of recipients and only to the extent strictly necessary for the stated purpose:

• Payment Partners: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) receive transaction data necessary to process deposits and withdrawals. These partners process data under their own privacy policies and applicable Indonesian banking regulations.
• Game Studios & Content Providers: Third-party game providers (Pragmatic Play, Evolution Gaming, PG Soft, Microgaming, and others) receive anonymized or pseudonymized player session identifiers necessary for game round settlement and dispute resolution.
• Identity Verification Services: KYC document data may be shared with contracted identity verification service providers for automated or manual document review. These providers operate under strict data processing agreements with gtr77.
• Fraud Prevention & Security Services: Technical and behavioral data may be shared with fraud detection partners to identify and prevent platform abuse.
• Legal & Regulatory Authorities: gtr77 will disclose Personal Data to competent authorities where required to do so by a valid legal order, court order, or regulatory requirement from gtr77's lic ensing authority.
• Group Companies: Personal Data may be shared with affiliated entities within the gtr77 group of companies for internal administrative purposes, subject to the same data protection standards described in this policy.

07 Cookies & Tracking Technologies

gtr77 uses cookies and similar tracking technologies to operate and improve the platform. The following categories of cookies are in use:

• Strictly Necessary Cookies: Essential for the platform to function. These include session authentication tokens, load balancing identifiers, and security cookies. They cannot be disabled without impairing platform functionality.
• Functional Cookies: Store your preferences such as preferred language and display settings to improve your experience between sessions.
• Analytics Cookies: Collect aggregated, anonymized data about how players use the platform — which pages are visited most frequently, where users exit the funnel, and how features perform. This data is used solely to improve the platform.
• Security & Fraud Prevention Cookies: Track device fingerprint signals to detect suspicious access patterns and protect your account from unauthorized login attempts.

gtr77 does not use third-party advertising or retargeting cookies. You may configure your browser to reject or delete cookies at any time; however, disabling strictly necessary cookies will prevent you from logging in to your gtr77 account.

08 Data Retention

gtr77 retains Personal Data for the periods set out below, after which data is securely deleted or irreversibly anonymized:

• Account and Identity Data: Retained for the duration of the account relationship and for a minimum of five years after account closure, to satisfy anti-money laundering record-keeping requirements.
• Transaction Data: Retained for a minimum of five years from the date of each transaction for financial audit and regulatory compliance purposes.
• KYC Verification Documents: Retained for the duration of the account relationship and for a minimum of five years after account closure. Physical or digital copies of identity documents are stored in encrypted form.
• Communications Data: Live chat transcripts, emails, and WhatsApp logs are retained for a maximum of three years from the date of the interaction unless the communication is relevant to an open dispute or investigation.
• Technical and Usage Data: Server logs and session data are retained for up to twelve months for security monitoring purposes, after which they are purged or anonymized.
• Marketing Preference Data: Retained until you withdraw consent. Records of opt-out actions are retained indefinitely to prevent inadvertent re-subscription.

09 International Data Transfers

As an internationally licensed offshore platform, gtr77 may process and store Personal Data on servers located outside of Indonesia. Where Personal Data is transferred to a jurisdiction that does not provide a level of data protection equivalent to international standards, gtr77 implements appropriate safeguards including:

• Contractual clauses requiring recipient parties to process data to the same standard as gtr77's own privacy obligations.
• Technical security controls including encryption at rest and in transit.
• Access controls limiting which personnel can access transferred data and under what circumstances.

By registering on the gtr77 platform, you consent to the transfer of your Personal Data to gtr77's servers and authorized processors, which may be located outside Indonesia, subject to the safeguards described above.

10 Your Data Rights

As a Data Subject, you hold the following rights with respect to your Personal Data held by gtr77. To exercise any of these rights, contact our support team using the details in Clause 15. gtr77 will respond within 30 calendar days of receiving a verifiable request.

• Right of Access: You may request a copy of all Personal Data gtr77 holds about you, along with information about how it is processed.
• Right to Rectification: You may request correction of any Personal Data that is inaccurate or incomplete. For certain fields (such as registered name or date of birth), updated KYC documentation may be required.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your Personal Data. This right is subject to overriding legal obligations — gtr77 is required to retain certain data for regulatory compliance even after account closure.
• Right to Restriction of Processing: You may request that gtr77 temporarily restrict the processing of your Personal Data while an accuracy dispute or objection is being resolved.
• Right to Data Portability: You may request that gtr77 provide your Personal Data in a structured, commonly used, machine-readable format so that you can transfer it to another service provider.
• Right to Object: You may object to processing based on legitimate interests — in particular, you may opt out of marketing communications at any time by contacting support or updating your account preferences.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal.

11 Minors

The gtr77 platform is strictly for adults. You must be at least 21 years of age to register and use the platform. 21+ Only

gtr77 does not knowingly collect Personal Data from individuals under the age of 21. If we become aware that a registered account belongs to a person under 21, the account will be suspended immediately, all wagers voided, and deposited funds returned to the original payment source. Any Personal Data collected in connection with such an account will be deleted upon closure, except where retention is required by law.

If you believe a minor has registered on gtr77, please contact our support team immediately at [email protected] so we can investigate and take appropriate action.

12 Third-Party Services

The gtr77 platform integrates third-party services including game studios, live streaming technology providers, and payment gateways. These third parties operate their own privacy policies and data handling practices. gtr77 is not responsible for the privacy practices of third-party game providers or payment partners beyond the contractual obligations gtr77 has established with those partners.

gtr77 does not embed third-party advertising networks, social media tracking pixels, or external analytics services that would allow those third parties to build independent behavioral profiles of our players without their knowledge.

13 Security Measures

gtr77 implements a layered set of technical and organizational security measures to protect Personal Data against unauthorized access, disclosure, alteration, or destruction:

• Encryption: All data in transit is protected by 256-bit SSL/TLS encryption. Passwords are stored as salted cryptographic hashes. Payment account details are tokenized and never stored in plaintext.
• Access Controls: Access to Personal Data is restricted to gtr77 personnel and contractors who require it for their specific role. Access is granted on a least-privilege basis and is logged and audited.
• Two-Factor Authentication (2FA): Internal systems holding Personal Data require multi-factor authentication for staff access. Players are encouraged to use strong, unique passwords for their accounts.
• Intrusion Detection: gtr77's infrastructure is monitored continuously for anomalous access patterns, unauthorized login attempts, and potential data exfiltration activity.
• Regular Security Reviews: gtr77 conducts periodic security assessments of its platform and data handling infrastructure. Critical vulnerabilities are remediated on an emergency basis without waiting for scheduled maintenance windows.
• Incident Response: gtr77 maintains a documented data breach response plan. In the event of a confirmed breach affecting player data, affected individuals will be notified without undue delay as described in our introductory commitments above.

While gtr77 takes all reasonable steps to protect your Personal Data, no internet-based system can guarantee absolute security. You are responsible for maintaining the security of your own device and gtr77 account credentials.

14 Policy Changes

gtr77 may update this Privacy Policy from time to time to reflect changes in our data processing practices, regulatory requirements, or platform functionality. When a material change is made, we will:

• Update the "Last Updated" date at the top of this page.
• Display a notification within the platform for a period of at least 14 days following the change.
• Where practically possible, notify registered players by email to their registered address.

Your continued use of the gtr77 platform after the effective date of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not accept the revised policy, you must cease using the platform and contact support to request account closure and data deletion where applicable.

15 Contact & Complaints

For any questions, concerns, or formal requests relating to your Personal Data or this Privacy Policy, please contact the gtr77 data privacy team through any of the following channels:

• Email: [email protected] (plain text — not a clickable link)
• WhatsApp: +62 811 9999 777
• Live Chat: Available directly on the platform, 00:00–24:00 WIB, every day of the year.

gtr77 aims to acknowledge all data rights requests and privacy complaints within 72 hours and to provide a substantive response or resolution within 30 calendar days. Where a request is complex or involves a large volume of data, we may extend the response period by a further 30 days, in which case we will notify you of the extension and the reason for it.

If you are not satisfied with gtr77's handling of your Personal Data or your data rights request, you may escalate your complaint to the relevant data protection authority in gtr77's licensing jurisdiction or seek independent legal advice.