Privacy Policy

This Privacy Policy ("Policy") applies to mono77 ("we", "us", "our", "Company"), the operator of the mono77 online gaming platform accessible at https://mono77.cam (the "Platform"). It governs the collection, processing, storage, disclosure, and protection of personal data relating to users of our Platform ("you", "your", "User").

mono77 operates primarily to serve Indonesian players and processes personal data in accordance with internationally recognised data-protection principles, including those reflected in Indonesia's Personal Data Protection Law (UU No. 27/2022) and equivalent international standards. By registering an account or otherwise using our Services, you acknowledge that you have read, understood, and consent to the data practices described in this Policy.

This Policy should be read together with our Terms & Conditions and Responsible Gaming policy, both of which are incorporated by reference.

• "Personal Data" means any information that identifies or could reasonably be used to identify a natural person, directly or indirectly.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, and deletion.
• "Data Controller" means mono77, the entity that determines the purposes and means of processing Personal Data.
• "Data Processor" means any third party that processes Personal Data on behalf of mono77 under a written data-processing agreement.
• "Sensitive Data" means Personal Data revealing racial or ethnic origin, religious beliefs, political opinions, health data, biometric data, or financial account details.
• "Cookies" means small text files placed on your device by our Platform to enable certain functionality and analytics.
• "Services" means the casino games, sports betting, live dealer products, and related features offered through the mono77 Platform.

3.1 Registration and Account Data

When you create a mono77 account, we collect:

• Full legal name as it appears on your government-issued identification
• Date of birth (to verify you are at least 21 years of age)
• Residential address, including city, province, and postal code
• Email address and mobile phone number
• Username and hashed password
• Preferred language and currency (IDR)

3.2 Identity Verification (KYC) Data

To comply with our anti-money laundering obligations and to prevent underage gambling, we may request:

• Copy of a valid government-issued photo ID (KTP, SIM, or passport)
• Proof of residential address (utility bill, bank statement, or official correspondence dated within 90 days)
• Selfie photograph alongside your ID document
• Proof of payment-method ownership (e.g., bank account statement matching your registered name for BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, or Bank Danamon accounts)

3.3 Financial and Transaction Data

• Deposit and withdrawal transaction records, including amount, date, time, and payment method
• Bank account or e-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja) used for deposits and withdrawals
• Transaction history, betting records, game play logs, and bonus redemption history

3.4 Technical and Usage Data

• IP address and geolocation data (country and city level)
• Device type, operating system, browser type and version
• Session duration, pages visited, features accessed, and interaction patterns
• Referral source and marketing attribution data
• Log files and error reports generated during Platform use

3.5 Communications Data

• Records of customer support interactions (live chat transcripts, email correspondence)
• Feedback, survey responses, and voluntary communications you send to us

mono77 collects Personal Data through the following channels:

• Directly from you: During account registration, identity verification, deposit/withdrawal requests, support interactions, and promotional opt-ins.
• Automatically: Through cookies, web beacons, pixel tags, server logs, and similar tracking technologies when you browse or use the Platform.
• From third parties: From identity verification providers, fraud detection services, payment processors, and analytics platforms that assist us in operating our Services.
• From public sources: Publicly available databases used for sanctions screening and fraud prevention.

5.1 Service Delivery

• Creating and maintaining your mono77 account
• Processing deposits, withdrawals, and bet settlements
• Providing customer support in English and Bahasa Indonesia
• Delivering personalised game recommendations and promotional offers
• Administering VIP loyalty tiers and reward programs

5.2 Legal and Compliance Obligations

• Verifying your identity and age (must be 21+) through KYC procedures
• Complying with anti-money laundering (AML) and counter-terrorism financing (CTF) obligations
• Detecting, investigating, and preventing fraudulent or suspicious activity
• Responding to lawful requests from regulatory or law-enforcement authorities

5.3 Responsible Gaming

• Monitoring play patterns to identify signs of problem gambling
• Enforcing self-exclusion, deposit limits, and cooling-off periods you request
• Sending responsible gaming communications and intervention messages where appropriate

5.4 Platform Improvement

• Analysing aggregated usage data to improve game performance and user experience
• Conducting A/B tests and product research
• Diagnosing technical issues and ensuring Platform stability

5.5 Marketing and Communications

With your consent, mono77 may send promotional emails, SMS messages, or in-platform notifications about bonuses, new games, or special events. You may withdraw consent and unsubscribe at any time by contacting our support team at [email protected] or by adjusting your account notification preferences.

mono77 processes your Personal Data on the following legal grounds:

• Contractual necessity: Processing required to perform the agreement between you and mono77 (e.g., account creation, transaction processing).
• Legal obligation: Processing required to comply with applicable laws, such as AML/KYC regulations and age-verification requirements.
• Legitimate interests: Processing necessary for fraud prevention, platform security, and service improvement, where your interests and rights do not override ours.
• Consent: Processing for direct marketing or optional analytics where you have given explicit, freely revocable consent.

mono77 does not sell your Personal Data. We may share your information only in the following circumstances:

7.1 Authorised Service Providers

We engage trusted third-party Data Processors under binding data-processing agreements, including payment gateway operators (for processing transactions via BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, and other Indonesian payment channels), identity verification and KYC providers, fraud-detection and cybersecurity services, cloud infrastructure and hosting providers, and customer support platform providers.

7.2 Game Providers

For the purpose of delivering games, aggregated or pseudonymised session data may be shared with our licensed game providers such as Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, and Pocket Games Soft. These providers operate under their own regulatory frameworks and data-handling standards.

7.3 Regulatory and Legal Authorities

mono77 will disclose Personal Data to competent authorities where required by law, court order, or regulatory direction. We will notify you of any such disclosure where legally permissible to do so.

7.4 Business Transfers

In the event of a merger, acquisition, or sale of all or a portion of our assets, Personal Data may be transferred to the successor entity. We will notify affected Users before their data becomes subject to a materially different privacy policy.

mono77 uses cookies and similar technologies to enable core Platform functionality, remember your session preferences, and analyse usage patterns. The principal cookie categories we deploy are:

• Strictly Necessary Cookies: Essential for session management, authentication, and fraud prevention. These cannot be disabled without impairing Platform functionality.
• Functional Cookies: Remember your language preferences, display settings, and saved account options.
• Analytics Cookies: Collect aggregated, anonymised data about how Users navigate the Platform. This helps us identify usability issues and prioritise improvements.
• Marketing Cookies: Used, with your consent, to measure the effectiveness of our promotional campaigns and to deliver relevant offers.

You may manage cookie preferences through your browser settings. Disabling certain cookies may affect Platform performance. By continuing to use mono77 after acknowledging this Policy, you consent to our use of strictly necessary and functional cookies.

mono77 retains Personal Data for as long as your account remains active or as required to fulfil the purposes described in this Policy. Specific retention periods are as follows:

• Account and KYC records: Retained for a minimum of 5 years following account closure, in compliance with AML regulatory requirements.
• Transaction and betting records: Retained for a minimum of 5 years from the date of each transaction.
• Customer support communications: Retained for 3 years from the date of the interaction.
• Marketing consent records: Retained for the duration of your account and for 2 years following withdrawal of consent.
• Technical log files: Retained for up to 12 months for security and diagnostic purposes, then securely deleted.

Upon expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymised so that it can no longer be linked to any individual.

mono77 implements a comprehensive set of technical and organisational security measures to protect your Personal Data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers — the same standard used by international banking institutions.
• Encryption at rest for all databases containing Personal Data and financial records.
• Multi-factor authentication (MFA) options for User accounts and mandatory MFA for all internal administrative access.
• Role-based access controls ensuring that staff members access only the data necessary for their specific function.
• Regular penetration testing and vulnerability assessments conducted by independent cybersecurity firms.
• Continuous intrusion detection monitoring with automated alerting for anomalous activity.
• Data breach response procedures with a commitment to notify affected Users and relevant authorities within the timeframes required by applicable law.

Despite these measures, no system is entirely immune to risk. You are responsible for keeping your account credentials confidential and for notifying us immediately at [email protected] if you suspect any unauthorised access to your account.

Subject to applicable law and our legitimate operational and legal obligations, you hold the following rights with respect to your Personal Data:

• Right of Access: You may request a copy of the Personal Data we hold about you, along with information about how it is processed.
• Right to Rectification: You may request correction of inaccurate or incomplete Personal Data without undue delay.
• Right to Erasure: You may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to Restriction: You may request that we restrict processing of your Personal Data in certain circumstances, such as while a disputed accuracy claim is being resolved.
• Right to Data Portability: Where processing is based on your consent or on a contract, you may request that we provide your data in a structured, commonly used, machine-readable format.
• Right to Object: You may object to processing based on our legitimate interests, including direct marketing communications.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of these rights, please contact our support team at [email protected]. We will respond to all verified requests within 30 calendar days. We may ask you to verify your identity before actioning any request to protect against unauthorised access to your data.

mono77 Services are strictly intended for adults aged 21 and over. We do not knowingly collect or process Personal Data from individuals under the age of 21. If we become aware that a minor has registered an account or provided us with Personal Data, we will immediately suspend the account, delete all associated data, and refund any balance to the payment source from which it originated. If you believe a minor has accessed our Platform, please notify us immediately at [email protected] so that we can take prompt action.

To deliver our Services, mono77 may transfer your Personal Data to servers or service providers located outside Indonesia. Wherever such transfers occur, we ensure that appropriate safeguards are in place, including contractual clauses that impose data-protection obligations equivalent to those applicable in Indonesia. By using our Services, you acknowledge and consent to the transfer of your Personal Data to jurisdictions outside your country of residence for the purposes described in this Policy.

mono77 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. When we make material changes, we will update the "Last Updated" date at the top of this page and, where appropriate, notify you via email or an in-platform notification. Your continued use of our Services after any such changes constitutes your acceptance of the revised Policy. We encourage you to review this page periodically to stay informed about how we protect your information.

If you have any questions, concerns, or complaints regarding this Privacy Policy or our data-handling practices, please reach out to our dedicated privacy team:

• Email: [email protected]
• Support Hours: 24/7, including public holidays
• Languages: English and Bahasa Indonesia
• Response Time: Within 30 calendar days for formal privacy requests; within 24 hours for general enquiries

We are committed to resolving all privacy-related concerns fairly and transparently. If you remain dissatisfied after contacting us, you may have the right to lodge a complaint with the relevant data-protection authority in your jurisdiction.