Privacy Policy

Definitions

The following terms are used throughout this Privacy Policy with the meanings defined below:

Data Controller

fio777 acts as the data controller in respect of all Personal Data collected through the Platform. This means that fio777 determines the purposes for which your Personal Data is processed and the methods by which that processing takes place.

Where fio777 engages third-party service providers (such as KYC verification partners, payment processors, and game software providers) to process data on its behalf, those parties act as data processors under agreements that bind them to process your data only on fio777's documented instructions and to implement appropriate technical and organisational security measures.

Data We Collect

fio777 collects the following categories of Personal Data:

fio777 does not collect sensitive Personal Data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, biometric data (other than as may be contained in identity documents submitted for KYC), or data relating to criminal convictions, unless required by applicable law.

How We Collect Data

fio777 collects Personal Data through the following means:

• Direct Provision: Data you actively provide during account registration, KYC verification, payment transactions, support interactions, and any feedback or contact forms submitted on the Platform.
• Automated Collection: Data collected automatically as you navigate the Platform, including IP addresses, device identifiers, session data, and cookie-derived information. See Section 9 for full details on our use of cookies.
• Third-Party Sources: Data received from KYC and identity verification partners (such as document verification providers), payment processors, and fraud-prevention service providers, for the purpose of verifying your identity and protecting the platform against financial crime.
• Game and Betting Activity: Transactional data generated by your betting activity, game participation, and use of fio777 promotional features, recorded automatically by the Platform's systems.

Purposes & Legal Bases for Processing

fio777 processes your Personal Data only where a lawful basis exists. The primary purposes and their corresponding legal bases are as follows:

1. Contract Performance: Processing necessary to fulfil our contractual obligations to you under the Terms & Conditions — including operating your account, processing deposits and withdrawals, settling bets, and communicating with you about your account.
2. Legal Obligation: Processing required to comply with applicable legal obligations, including anti-money-laundering (AML) regulations, counter-terrorism financing (CTF) requirements, identity verification obligations, and any mandatory reporting requirements imposed by competent regulatory authorities.
3. Legitimate Interests: Processing carried out for fio777's legitimate business interests where these interests are not overridden by your rights and freedoms — including platform security, fraud prevention, responsible gaming monitoring, and service improvement through aggregated analytics.
4. Consent: Where fio777 relies on your consent for processing — specifically, sending marketing and promotional communications — you may withdraw that consent at any time by contacting us at the address listed in Section 14. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

Data Sharing & Third Parties

fio777 does not sell, rent, or trade your Personal Data to third parties for their own marketing or commercial purposes. Your data may be shared with the following categories of recipients, solely to the extent necessary for the stated purpose:

• Payment Processors: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon) and e-wallet providers (OVO, DANA, GoPay, ShopeePay) receive the financial data necessary to process your deposit and withdrawal transactions.
• KYC & Compliance Partners: Specialist identity verification and anti-money-laundering service providers receive identity documents and associated data to perform verification checks required by our compliance obligations.
• Game Software Providers: Third-party game studios and live casino operators (including Evolution Gaming and Pragmatic Play) receive transaction and session data necessary to deliver their games and settle game outcomes within your fio777 account.
• Fraud Prevention Services: Specialist fraud-detection platforms receive technical and transactional data to identify and prevent fraudulent activity on the Platform.
• Legal & Regulatory Authorities: Competent courts, regulatory bodies, and law enforcement agencies may receive your data where fio777 is legally obligated to disclose it or where disclosure is necessary to protect our legal rights.
• IT & Infrastructure Providers: Cloud hosting, data storage, and content-delivery network providers operate under strict data-processing agreements and have access only to the data required to perform their infrastructure services.

Data Retention

fio777 retains your Personal Data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following retention guidelines apply:

• Account and Identity Data: Retained for the lifetime of your account and for a minimum of five (5) years following account closure, to meet AML record-keeping obligations and to defend against any legal claims arising from your use of the Platform.
• KYC Documents: Retained for a minimum of five (5) years from the date of submission, in accordance with standard anti-money-laundering compliance requirements.
• Financial Transaction Records: Retained for a minimum of seven (7) years following the date of each transaction, to meet applicable financial record-keeping requirements.
• Communications Data: Support correspondence and live-chat transcripts are retained for a minimum of two (2) years for quality assurance and complaint resolution purposes.
• Technical and Behavioural Data: Aggregated and anonymised analytics data may be retained indefinitely. Individually identifiable session data is retained for no longer than 12 months unless required for an ongoing investigation.
• Marketing Preferences: Records of your consent to, or withdrawal from, marketing communications are retained for the duration of your account and for two (2) years following account closure.

When Personal Data is no longer required, fio777 will securely delete or anonymise it in accordance with industry-standard data destruction procedures.

Security Measures

fio777 implements a layered security framework to protect your Personal Data against unauthorised access, loss, alteration, disclosure, or destruction. The measures in place include:

• Transport Encryption: All data transmitted between your device and the fio777 Platform is encrypted using TLS 1.2 or higher (256-bit SSL), ensuring that data in transit cannot be intercepted by third parties.
• Data-at-Rest Encryption: Sensitive data stored in fio777's databases — including KYC documents and payment details — is encrypted at rest using industry-standard encryption algorithms.
• Access Controls: Access to production systems and Personal Data is restricted on a strict need-to-know basis. All staff with access to Personal Data are subject to confidentiality obligations and undergo regular data-security training.
• Two-Factor Authentication: Player accounts support two-factor authentication (2FA) to provide an additional layer of account security beyond the password.
• Automated Threat Detection: fio777 operates continuous automated monitoring for unusual access patterns, brute-force attempts, and other indicators of account compromise.
• Penetration Testing: The Platform undergoes regular security assessments, including periodic penetration testing by independent third-party security specialists.

While fio777 maintains robust security measures, no internet-connected system can guarantee absolute security. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, fio777 will notify affected users without undue delay in accordance with applicable data-protection requirements.

Cookies & Tracking Technologies

fio777 uses cookies and similar tracking technologies (including web beacons and local storage) to operate the Platform, improve user experience, and — where you have consented — to deliver personalised content. The categories of cookies used are:

You may manage your cookie preferences through your browser settings. Most browsers allow you to refuse new cookies, delete existing cookies, and set preferences for specific websites. Please note that disabling essential cookies will impair your ability to use the Platform. For detailed guidance on managing cookies in your specific browser, refer to your browser's help documentation.

Your Rights

Subject to applicable law and certain conditions, you hold the following rights in relation to the Personal Data that fio777 holds about you:

To exercise any of the rights listed above, submit a request to [email protected] (plain text only — not a clickable link). fio777 will respond within 30 days of receiving a valid, verifiable request. We may need to verify your identity before processing a rights request to ensure we do not disclose data to an unauthorised party.

Minors

fio777 is strictly an adults-only platform. You must be at least 21 years of age to create an account, place bets, or otherwise use the Platform. fio777 does not knowingly collect Personal Data from individuals under the age of 21.

If we become aware that Personal Data has been collected from a person under 21, we will take immediate steps to delete that data and close the associated account. If you believe that a minor has registered on fio777, please notify us immediately at the support email listed in Section 14.

International Data Transfers

fio777 is an internationally operated platform and, as such, your Personal Data may be transferred to, stored in, or processed in countries other than Indonesia. This includes transfers to countries where fio777's cloud infrastructure, KYC partners, game providers, and payment processing partners operate.

Where Personal Data is transferred outside your country of residence, fio777 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required within your jurisdiction. These safeguards may include:

• Contractual clauses in data-processing agreements that require recipient parties to apply equivalent data-protection standards;
• Transfers to countries recognised as providing an adequate level of data protection by relevant regulatory authorities;
• Technical security measures (encryption, pseudonymisation) applied to data prior to transfer.

You may request further information about the safeguards applicable to a specific international transfer by contacting us at the address listed in Section 14.

Amendments to This Policy

fio777 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data-processing practices, applicable law, or Platform features. Material changes — those that significantly affect your rights or how your data is used — will be communicated to registered users via email and/or a prominent notice on the Platform at least 7 days before the revised policy takes effect.

The "Effective Date" displayed at the top of this page indicates when the current version was last updated. We encourage you to review this Privacy Policy periodically to stay informed about how fio777 protects your data. Your continued use of the Platform following any amendment constitutes acceptance of the revised policy.

Previous versions of this Privacy Policy are available on request by contacting us at the details provided in Section 14.

Contact & Complaints

For any questions, concerns, or requests related to this Privacy Policy or to the Personal Data that fio777 holds about you, please contact our support team using the details below:

If you are not satisfied with fio777's response to a privacy concern, you have the right to escalate your complaint to the relevant data-protection authority in your jurisdiction. fio777 is committed to cooperating with competent supervisory authorities in the resolution of privacy complaints that cannot be resolved directly between us and the user.