At api77, protecting your personal information is as important to us as delivering a world-class betting experience. This Privacy Policy explains precisely what data we collect, how we use it, who we share it with, and how you can exercise your rights as a registered Indonesian player.
api77 ("we", "us", "our", or the "Company") is the operator of the online betting and gaming platform available at https://api77.bio. We are committed to handling all personal data entrusted to us with the highest standards of care, transparency, and security. This Privacy Policy is addressed to all users of the api77 platform, with particular relevance to registered Players based in Indonesia and other jurisdictions where the platform is accessed.
This Privacy Policy describes: (a) the categories of personal data we collect; (b) the purposes for which we process that data; (c) the legal bases on which processing rests; (d) the circumstances in which we share data with third parties; (e) how long we retain your data; (f) the security measures we apply to protect your data; and (g) the rights you hold with respect to your personal data and how to exercise them.
This Policy should be read alongside the api77 Terms & Conditions and Responsible Gaming Policy, which together form the complete agreement governing your relationship with the Company. In the event of any conflict between this Privacy Policy and the Terms & Conditions on matters of data privacy, this Privacy Policy shall prevail.
We collect only the personal data that is necessary and proportionate for the lawful purposes described in Section 4. The categories of personal data we process are set out below.
| Category | Examples | When Collected |
|---|---|---|
| Identity Data | Full legal name, date of birth, nationality, government-issued ID number (KTP/SIM/passport) | Registration & KYC verification |
| Contact Data | Email address, mobile phone number, city of residence (e.g., Jakarta, Surabaya, Bandung, Bali) | Registration & account updates |
| Financial Data | Indonesian bank account details (BCA, BRI, BNI, Mandiri, CIMB Niaga), e-wallet identifiers (OVO, DANA, GoPay, ShopeePay), transaction history in IDR | Deposit & withdrawal processing |
| Verification Data | Copies of KTP, SIM, or passport; proof of address documents; selfie photographs for liveness checks | KYC and AML compliance |
| Betting & Gaming Data | Wager history, game sessions, odds accepted, winnings, bonus utilisation, mix parlay selections, slot game activity | Ongoing platform use |
| Technical Data | IP address, device type, operating system, browser fingerprint, session timestamps, geolocation (country-level) | Automatic — each session |
| Communications Data | Live chat transcripts, support email content, feedback submissions | Customer support interactions |
| Marketing Preferences | Opt-in/opt-out status for promotional emails, notification preferences, preferred contact language | Registration & account settings |
api77 collects personal data through the following channels:
You provide data directly when you register an Account, complete a KYC verification request, make a deposit or withdrawal, contact our support team, or update your Account profile. This is the primary source of your Identity, Contact, Financial, and Verification Data.
When you access the api77 platform, we automatically collect Technical Data through server logs, cookies, pixel tags, and similar tracking technologies. This includes your IP address, browser type, device model, operating system, pages visited, session duration, and click-path data. See Section 7 for full details of our cookie practices.
We may receive personal data from third parties in limited circumstances, including: (a) identity verification service providers who confirm the authenticity of KTP or passport documents; (b) fraud prevention and AML screening databases that flag suspicious activity patterns; (c) payment processors who confirm the status of deposit and withdrawal transactions via BCA, BRI, BNI, Mandiri, OVO, DANA, or GoPay; and (d) analytics partners who provide aggregated, anonymised behavioural insights about platform usage trends.
We may derive additional insights from the data you provide — for example, inferring your preferred betting markets from your game history, or inferring your preferred language from your browser settings — for the purposes of personalising your platform experience. This inferred data does not constitute a separate personal data record and is processed under the same terms as the source data from which it is derived.
We process your personal data exclusively for the following defined purposes. We do not process personal data in any manner incompatible with the purposes listed here without first seeking your explicit consent or establishing a new lawful basis.
For each processing purpose, api77 relies on one or more of the following legal bases:
| Processing Purpose | Legal Basis |
|---|---|
| Account registration, payment processing, game delivery | Contract performance — processing is necessary to perform the services you have requested |
| KYC/AML identity verification, sanctions screening | Legal obligation — required under our international gaming licence and AML compliance framework |
| Fraud prevention, platform security, abuse detection | Legitimate interests — protecting the integrity of the platform and financial security of Players |
| Responsible gaming monitoring and interventions | Legitimate interests / Legal obligation — duty of care under licensing conditions |
| Marketing communications and personalised promotions | Consent (where opt-in is obtained) or Legitimate interests (for existing Players who have not opted out) |
| Analytics and platform improvement | Legitimate interests — improving services for all Players, using anonymised or aggregated data where possible |
| Compliance with court orders, regulatory requests | Legal obligation |
api77 does not sell, rent, or trade your personal data to any third party for their own commercial purposes. We share your data only in the limited circumstances described below, and always under contractual obligations of confidentiality and data protection.
We share Financial Data and Identity Data with Indonesian payment processors and gateway partners as strictly necessary to execute your deposit and withdrawal instructions via BCA, BRI, BNI, Mandiri, OVO, DANA, and GoPay. These providers are contractually bound to process your data solely for payment settlement purposes.
We engage specialist third-party KYC and AML service providers to verify identity documents, screen against sanctions databases, and detect unusual transaction patterns. These providers receive only the minimum data necessary to perform their verification function and are prohibited from retaining or repurposing it.
To deliver live casino and slot products, we share session data with licensed game studio partners including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Pocket Games Soft. These providers may receive anonymised player session identifiers to render real-time game states and record outcomes. They do not receive your full identity or financial data.
We may disclose personal data to regulators, licensing authorities, tax agencies, or law enforcement bodies when required to do so by applicable law, court order, or regulatory direction. We will notify you of any such disclosure unless we are legally prohibited from doing so.
In the event of a merger, acquisition, restructuring, or sale of all or substantially all of our assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such change and your rights will remain protected under the terms of this Privacy Policy or a materially equivalent replacement.
api77 uses cookies and similar technologies to deliver a functional, personalised, and secure platform experience. A cookie is a small text file stored on your device when you visit the platform. The cookies we deploy fall into the following categories:
| Cookie Type | Purpose | Duration |
|---|---|---|
| Strictly Necessary | Maintain your login session, store security tokens, enable core platform functions (bet placement, balance display) | Session / up to 24 hours |
| Functional | Remember your language preference, display settings, sports market favourites, and notification opt-ins | Up to 90 days |
| Analytics | Track page views, navigation flows, feature engagement, and session depth to improve platform usability | Up to 13 months |
| Marketing | Measure the effectiveness of promotional campaigns, attribute registrations to traffic sources, and limit ad frequency | Up to 30 days |
You may manage or withdraw your consent to non-essential cookies at any time via your browser settings. Blocking strictly necessary cookies will impair core platform functionality and may prevent you from accessing your Account. Removing or blocking analytics and marketing cookies will not affect your ability to bet or withdraw funds.
We retain personal data for as long as is necessary to fulfil the purposes for which it was collected and to comply with applicable legal and regulatory obligations. The general retention principles we apply are:
At the end of each applicable retention period, personal data is securely deleted, anonymised, or pseudonymised in accordance with our internal data lifecycle management procedures.
api77 implements a comprehensive, multi-layered security programme to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our security measures include:
All data transmitted between your device and the api77 platform is encrypted using industry-standard TLS 1.2 or higher (HTTPS). Sensitive data fields at rest — including financial data and identity documents — are encrypted using AES-256 encryption.
Access to personal data within api77's systems is governed by strict role-based access controls. Only authorised personnel with a legitimate business need may access Player data. All internal access is logged and subject to regular audit review.
Our platform is hosted on secure, certified infrastructure with continuous network monitoring, intrusion detection systems (IDS), Web Application Firewalls (WAF), and DDoS mitigation capabilities. We conduct regular penetration testing and vulnerability assessments.
In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify affected Players and the relevant supervisory authority within the timeframes required by applicable data protection law — typically seventy-two (72) hours of becoming aware of the breach. Notification to you will include the nature of the breach, the categories of data affected, and the steps we have taken to mitigate the impact.
As a Player whose personal data is processed by api77, you hold the following rights with respect to that data. To exercise any of these rights, please contact our support team at [email protected] with your registered Account username and a description of your request.
We will respond to all verified privacy rights requests within thirty (30) days of receipt. In cases of complexity or high volume, we may extend this period by a further thirty (30) days, in which case we will notify you of the extension and the reason for it.
The api77 platform is strictly intended for adults aged 21 and over. We do not knowingly collect personal data from any person under the age of 21. Age verification is a mandatory step in the KYC process for all Players seeking to make a withdrawal or complete full Account verification.
If we become aware, or have reasonable grounds to suspect, that a registered Player is under 21 years of age, we will immediately suspend the Account, freeze the associated balance, conduct an age verification investigation, and return any real-money deposits to the funding source upon confirmation that the Player is underage. All winnings generated during the period of underage play will be forfeited.
Parents and legal guardians are responsible for implementing appropriate parental controls on devices accessible to minors to prevent underage access to online gambling platforms. If you believe a person under 21 has registered on api77 using false details, please notify us immediately at [email protected].
The api77 platform may contain references to third-party services — such as live game studio providers — that operate under their own privacy policies. api77 is not responsible for the privacy practices of any third party and this Privacy Policy does not extend to any external service, website, or application. We encourage you to review the privacy policies of any third-party service you engage with in connection with your use of the api77 platform.
Game content delivered by Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Pocket Games Soft may involve data processing by those studios for the purposes of game delivery and integrity monitoring. Such processing is governed by the respective studio's own data protection policies, and api77 contractually requires all studio partners to maintain adequate data protection standards.
api77 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, regulatory guidance, or the services we offer. When material changes are made, we will update the "Effective Date" at the top of this page and, where practicable, notify registered Players via email or in-platform notification at least seven (7) days before the amended Policy takes effect.
Your continued use of the api77 platform after the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. If you do not agree to the revised Policy, you must cease using the platform and may request voluntary Account closure as described in the api77 Terms & Conditions.
We encourage you to review this Privacy Policy periodically to stay informed about how we protect your data. Previous versions of this Policy are available upon written request to our support team.
For all privacy-related enquiries, rights requests, or concerns regarding the processing of your personal data by api77, please contact our Data Protection team through the following channel:
Write to us at [email protected] with the subject line "Privacy Request — [Your Username]". Our team will acknowledge receipt within 48 hours (WIB, UTC+7) and provide a substantive response within thirty (30) days. Formal privacy rights requests must be submitted in writing via email; we cannot process rights requests made verbally over live chat.
For general questions about how api77 handles your data — as opposed to formal rights requests — you are welcome to raise them via our 24/7 live chat service, available in both Indonesian and English directly from the platform once you are logged in.
Your Data, Protected
Six core commitments that underpin our approach to data privacy for every Indonesian player on the api77 platform.
All data exchanged between your device and api77 servers is protected by TLS 1.2+ encryption. Your credentials, financial details, and personal information are never transmitted in plain text.
Every Player undergoes identity verification before withdrawals are processed. We confirm your age (21+), identity, and source of funds to protect the platform community and comply with AML standards.
Personal data at rest is encrypted using AES-256. Access to production databases is restricted to a minimal set of authorised personnel, and all access events are logged and audited regularly.
api77 never sells, rents, or trades your personal data to third parties for their own marketing purposes. Your data is shared only with service partners strictly necessary to operate the platform.
You control your marketing preferences at all times. Opt out of promotional emails, push notifications, or personalised offers instantly from your Account settings — no cooling-off period required.
We do not retain your data indefinitely. Clear retention schedules govern every data category, and data is securely deleted or anonymised once its retention period expires — giving you long-term privacy confidence.
Your data is protected, your identity is secure, and your rights are respected. Explore our full suite of sports betting markets, live casino tables, and slot gacor titles — all on a platform built around player trust.