Privacy Policy

1. Introduction

Welcome to ml77's Privacy Policy. This document explains how ml77 ("we," "us," "our") collects, uses, stores, protects, and shares personal information from players ("you," "your") who access and use our online gaming platform at https://ml77.cam and associated services.

By registering an account, depositing funds, or using any ml77 services, you acknowledge that you have read, understood, and agree to this Privacy Policy in its entirety. If you do not agree with our data handling practices, you should not use ml77 services.

ml77 is committed to data protection and privacy compliance. We operate in accordance with international data protection standards, including principles inspired by the European Union's General Data Protection Regulation (GDPR), adapted for the online gaming industry and Indonesian market context.

2. Information We Collect

ml77 collects various types of information to provide, maintain, improve, and secure our services. The information we collect falls into three categories:

2.1 Information You Provide Directly

When you register an account or use ml77 services, you voluntarily provide the following personal information:

• Identity Information: Full legal name, date of birth, gender, nationality, government-issued ID number (KTP for Indonesian residents)
• Contact Information: Email address, mobile phone number, residential address (street, city, province, postal code)
• Account Credentials: Username, password (stored in encrypted form only)
• Financial Information: Bank account details (bank name, account holder name, account number), e-wallet identifiers (OVO, DANA, GoPay account numbers), transaction history
• Verification Documents: Scanned copies of government-issued photo ID (KTP, passport, or driver's license), proof of address documents (utility bills, bank statements), selfies holding ID documents
• Communication Data: Messages sent via live chat, email correspondence, WhatsApp messages, customer support tickets
• Voluntary Information: Optional profile details such as preferred language, communication preferences, marketing consent status

2.2 Information Collected Automatically

When you access ml77 services, we automatically collect certain technical and usage information:

• Device Information: Device type (desktop, mobile, tablet), operating system (Windows, macOS, iOS, Android), browser type and version, screen resolution, device identifiers
• Connection Data: IP address, internet service provider (ISP), approximate geographic location (city/region level, not precise GPS coordinates), time zone
• Usage Data: Pages visited, features used, games played, time spent on site, clickstream data, referral source (how you found ml77)
• Gaming Activity: Bets placed, wins and losses, game preferences, betting patterns, session timestamps, deposit and withdrawal amounts and frequencies
• Performance Data: Page load times, error messages, crash reports, technical issues encountered

2.3 Information from Third Parties

In limited circumstances, ml77 may receive information about you from external sources:

• Payment Processors: Transaction confirmation data from Indonesian banks (BCA, BRI, BNI, Mandiri) and e-wallet providers (OVO, DANA, GoPay) to verify deposits and process withdrawals
• Identity Verification Services: Age verification, identity confirmation, and fraud prevention data from third-party KYC (Know Your Customer) service providers
• Fraud Prevention Databases: Information from industry-wide fraud databases to detect and prevent bonus abuse, multiple accounts, and other prohibited activities
• Marketing Partners: If you clicked an affiliate link to reach ml77, we may receive anonymous referral data (not personally identifiable) to credit the referring partner

3. How We Use Your Information

ml77 uses the collected information for the following legitimate business purposes:

3.1 Account Management and Service Provision

• Create and maintain your player account
• Process deposits, withdrawals, and in-game transactions
• Enable gameplay across casino games, live dealer tables, sports betting, and other gaming products
• Track your balance, transaction history, and account status
• Process bonuses, promotions, and VIP program benefits
• Provide customer support via live chat, email, WhatsApp, and in-app messaging

3.2 Verification, Security, and Compliance

• Verify your identity and age to comply with 21+ age restrictions
• Conduct Know Your Customer (KYC) and Anti-Money Laundering (AML) checks as required by international gaming regulations
• Detect, prevent, and investigate fraud, bonus abuse, multiple accounts, and other prohibited activities
• Secure your account against unauthorized access, hacking attempts, and account takeovers
• Monitor gameplay for signs of problem gambling and proactively offer responsible gaming resources
• Comply with legal obligations, court orders, or requests from law enforcement agencies

3.3 Service Improvement and Personalization

• Analyze usage patterns to improve website performance, game selection, and user experience
• Personalize game recommendations based on your play history and preferences
• Optimize mobile and desktop interfaces for better usability
• Test new features, games, and functionalities through A/B testing and user research
• Understand which payment methods, sports betting markets, and game types are most popular among Indonesian players

3.4 Marketing and Communications (With Your Consent)

• Send promotional emails about new games, bonuses, and special offers (only if you've opted in)
• Send SMS or WhatsApp messages about exclusive VIP promotions (only with explicit consent)
• Notify you about important account updates, security alerts, and policy changes (essential communications, no opt-out available)
• Display targeted advertisements on ml77 website based on your gaming preferences (internal advertising only, not third-party ad networks)

Important Note: You can opt out of marketing communications at any time by clicking "Unsubscribe" in emails, adjusting preferences in your account settings, or contacting customer support. Essential account-related communications (security alerts, withdrawal confirmations, policy updates) cannot be opted out of as they are necessary for service operation.

4. Information Sharing and Disclosure

ml77 does not sell, rent, or trade your personal information to third parties for their own marketing purposes. However, we may share your information in the following limited circumstances:

4.1 Service Providers and Business Partners

We share information with trusted third-party service providers who assist in operating ml77 services:

• Payment Processors: Indonesian banks (BCA, BRI, BNI, Mandiri) and e-wallet providers (OVO, DANA, GoPay) receive necessary financial information to process deposits and withdrawals
• Game Providers: Software developers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe) receive anonymized gameplay data to operate their games on ml77 platform
• Identity Verification Services: Third-party KYC providers receive documents and personal information solely for age and identity verification purposes
• Cloud Hosting Providers: Secure server infrastructure providers host ml77 databases and applications (all data encrypted at rest and in transit)
• Customer Support Tools: Live chat software providers process support conversations to enable real-time assistance
• Email Service Providers: Email delivery platforms send transactional and promotional emails on ml77's behalf

All third-party service providers are contractually obligated to protect your data, use it only for the specified purpose, and comply with applicable data protection laws. They are prohibited from using your information for their own purposes or sharing it with other parties.

4.2 Legal Obligations and Safety

ml77 may disclose your information when required or permitted by law:

• To comply with court orders, subpoenas, or legal processes
• To respond to lawful requests from government authorities, law enforcement agencies, or regulatory bodies
• To enforce our Terms and Conditions or investigate violations
• To protect the rights, property, and safety of ml77, our users, or the public
• To prevent or investigate fraud, security breaches, or illegal activity
• In connection with anti-money laundering (AML) investigations or suspicious activity reports

4.3 Business Transfers

In the event that ml77 is involved in a merger, acquisition, sale of assets, bankruptcy, or similar business transaction, your personal information may be transferred to the acquiring entity. In such cases, we will provide notice and ensure the new entity honors this Privacy Policy.

4.4 With Your Consent

Beyond the circumstances described above, we will only share your personal information with third parties if you provide explicit consent. For example, if you request that we share your gameplay statistics with a third-party analytics service of your choice.

5. Data Security Measures

ml77 employs industry-standard security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction:

5.1 Technical Security

• 256-bit SSL Encryption: All data transmitted between your device and ml77 servers is encrypted using bank-grade SSL/TLS protocols
• Password Encryption: Your password is stored using one-way cryptographic hashing (bcrypt), meaning even ml77 staff cannot view your plain-text password
• Two-Factor Authentication (2FA): Optional 2FA adds an extra security layer requiring SMS or email verification for logins and sensitive actions
• Database Encryption: Personal information stored in our databases is encrypted at rest using AES-256 encryption
• Secure Payment Gateways: All financial transactions are processed through PCI-DSS Level 1 compliant payment gateways
• Firewall Protection: Multi-layer firewall systems protect ml77 infrastructure from external attacks
• DDoS Protection: Distributed Denial of Service (DDoS) mitigation ensures service availability during attacks
• Intrusion Detection: Real-time monitoring systems detect and block suspicious access attempts

5.2 Organizational Security

• Access Controls: Employee access to personal data is restricted on a need-to-know basis using role-based permissions
• Staff Training: All employees receive data protection training and sign confidentiality agreements
• Security Audits: Regular third-party security audits and penetration testing identify and address vulnerabilities
• Incident Response Plan: Documented procedures for responding to data breaches or security incidents
• Vendor Management: Third-party service providers undergo security assessments before integration

6. Cookies and Tracking Technologies

ml77 uses cookies and similar tracking technologies to enhance your browsing experience, remember your preferences, and analyze site usage.

6.1 What Are Cookies?

Cookies are small text files stored on your device by your web browser when you visit a website. They contain information such as session IDs, user preferences, and analytics data. Cookies do not contain personal information like your name or payment details unless you explicitly provide that information to the site.

6.2 Types of Cookies We Use

• Essential Cookies: Required for basic site functionality including login, account access, and secure transaction processing. These cannot be disabled without breaking core features.
• Performance Cookies: Collect anonymous data about how users interact with ml77, including page views, error messages, and load times. This helps us optimize site performance.
• Functional Cookies: Remember your preferences such as language selection, game favorites, and display settings to personalize your experience.
• Analytics Cookies: Track usage patterns and demographic data (e.g., what percentage of users access via mobile) to improve services and understand player behavior.

6.3 Managing Cookies

You can control cookie settings through your browser preferences. Most browsers allow you to:

• Block all cookies
• Accept only first-party cookies (from ml77 directly, not third parties)
• Receive notifications when websites set cookies
• Delete existing cookies

Note that blocking essential cookies may prevent you from logging in or using key features of ml77. For instructions on managing cookies in your specific browser, visit your browser's help documentation.

7. Data Retention

ml77 retains your personal information for as long as necessary to provide services, comply with legal obligations, resolve disputes, and enforce agreements.

7.1 Active Accounts

While your account remains active, we retain all personal information, transaction history, and gameplay records to operate your account and provide customer support.

7.2 Closed Accounts

If you close your account, we retain certain information for legal and regulatory compliance:

• Financial Records: Retained for 7 years to comply with anti-money laundering regulations and tax requirements
• Identity Documents: Retained for 5 years in accordance with KYC compliance obligations
• Gameplay History: Retained for 2 years for dispute resolution and responsible gaming monitoring
• Communication Records: Retained for 2 years for customer service quality assurance and dispute resolution

After the applicable retention period expires, personal information is securely deleted or anonymized beyond recovery.

7.3 Legal Holds

If your account is involved in ongoing legal proceedings, investigations, or disputes, we may retain relevant information beyond standard retention periods until the matter is resolved.

8. Your Privacy Rights

ml77 respects your privacy rights and provides mechanisms to exercise control over your personal information. Depending on your jurisdiction, you may have the following rights:

8.1 Right of Access

You have the right to request a copy of the personal information ml77 holds about you. This includes your account details, transaction history, gameplay records, and communication logs. To request your data, contact our privacy team at [email protected]. We will provide the information in a commonly used electronic format (PDF or CSV) within 30 days.

8.2 Right to Correction

If your personal information is inaccurate, incomplete, or outdated, you have the right to request corrections. You can update most information directly through your account settings. For information you cannot edit yourself (e.g., date of birth, legal name), contact customer support with supporting documentation.

8.3 Right to Deletion ("Right to Be Forgotten")

You may request deletion of your personal information under certain circumstances. However, we may be unable to delete all information if:

• We are legally required to retain it (e.g., financial records for tax compliance)
• It is necessary to complete transactions or provide services you requested
• It is needed to detect, prevent, or investigate fraud and security incidents
• It is required to resolve disputes or enforce our Terms and Conditions

8.4 Right to Data Portability

You have the right to receive your personal data in a structured, machine-readable format (e.g., CSV, JSON) and transmit it to another service provider. This right applies to data you provided directly to ml77 and data processed automatically (e.g., gameplay history).

8.5 Right to Object and Restrict Processing

You may object to certain types of data processing, such as:

• Marketing communications (opt out via email unsubscribe links or account settings)
• Profiling for personalized game recommendations (opt out in account settings)
• Analytics and performance tracking (adjust cookie preferences)

Note that objecting to essential processing (e.g., identity verification, fraud prevention) may prevent us from providing services and could result in account closure.

8.6 Right to Withdraw Consent

Where we process your data based on consent (e.g., marketing emails, optional data collection), you may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing conducted before withdrawal.

8.7 How to Exercise Your Rights

To exercise any of these rights, contact ml77's Data Protection Officer via:

• Email: [email protected]
• Subject Line: "Privacy Rights Request – [Your Request Type]"
• Include: Your full name, registered email address, account username, and specific details of your request

We will respond to your request within 30 days. In complex cases, we may extend this period by an additional 60 days with notification. We may request additional information to verify your identity before processing requests.

9. Children's Privacy

ml77 is an adult-only online gaming platform. We do not knowingly collect personal information from individuals under 21 years of age. Our Terms and Conditions explicitly prohibit account registration by anyone under 21.

If we discover that we have inadvertently collected personal information from a minor, we will immediately:

• Suspend the account permanently
• Delete all personal information associated with the account
• Forfeit all account balances and winnings
• Notify the email address on file of the account closure

Parents or guardians who believe their child has registered an account on ml77 should contact us immediately at [email protected] with evidence of age. We take underage gambling extremely seriously and cooperate fully with authorities to prevent it.

10. International Data Transfers

ml77 operates internationally and may transfer your personal information to servers located outside Indonesia. While our primary target market is Indonesia, our technical infrastructure and service providers may be located in various jurisdictions including Europe, Singapore, and other regions with robust data protection laws.

When we transfer your data internationally, we ensure appropriate safeguards are in place:

• Standard Contractual Clauses: We use EU-approved Standard Contractual Clauses (SCCs) with service providers to ensure GDPR-level protection
• Adequacy Decisions: We prioritize data transfers to jurisdictions recognized as providing adequate data protection
• Encryption in Transit: All international data transfers are encrypted using TLS 1.3 protocols
• Limited Access: Only authorized personnel in approved locations can access personal data

By using ml77 services, you consent to the transfer of your information to countries outside Indonesia where data protection laws may differ. We commit to maintaining the same level of protection regardless of where data is processed.

11. Policy Updates

ml77 reserves the right to update this Privacy Policy to reflect changes in our practices, services, legal requirements, or technological developments. When we make material changes, we will:

• Update the "Last Updated" date at the top of this page
• Send email notification to all registered users
• Display a prominent notice on the ml77 homepage for 30 days
• For significant changes affecting your rights, request explicit consent before continuing service

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Continued use of ml77 services after policy updates constitutes acceptance of the revised terms.

Previous versions of this Privacy Policy are archived and available upon request by contacting [email protected].

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or ml77's data handling practices, please contact us through the following channels:

Data Protection Officer

• Email: [email protected]
• Subject: "Privacy Inquiry – [Brief Description]"
• Response Time: Within 5 business days for general inquiries, 30 days for formal data rights requests

General Customer Support

• 24/7 Live Chat: Available on all ml77 pages
• Email: [email protected]
• WhatsApp: +62 812 3456 7890

For urgent security concerns (suspected account breach, unauthorized access), please contact our 24/7 security team immediately via live chat or email [email protected] with "URGENT SECURITY" in the subject line.