At upo777, protecting your personal data is a core responsibility. This Privacy Policy explains precisely what information we collect, why we collect it, how it is used, and the rights available to you as a platform user.
Six principles that guide how upo777 collects, handles, and safeguards your personal information
We collect only the personal information that is strictly necessary for account operation, identity verification, payment processing, and regulatory compliance. We do not collect data beyond what is proportionate to these purposes.
All personal data held by upo777 is stored on encrypted, access-controlled servers. We apply industry-standard SSL/TLS encryption to all data in transit and at rest, ensuring your information is protected against unauthorized access.
upo777 does not sell, rent, or trade your personal data to third parties for marketing purposes. Data is shared only with trusted service providers necessary for platform operation, and only under binding confidentiality agreements.
You have the right to access, correct, and request deletion of your personal data. You may also restrict certain types of data processing. Requests can be submitted at any time by contacting our data protection team via email.
We are committed to full transparency about how your data is used. This Policy is written in clear language so that every upo777 player — whether based in Jakarta, Surabaya, Bali, or elsewhere — can understand their rights and our obligations.
upo777 processes personal data in accordance with applicable international data protection standards. Our compliance program is reviewed regularly to reflect changes in applicable law and best-practice guidance from recognized data protection authorities.
In this Privacy Policy, the following terms carry the meanings defined below:
The Data Controller responsible for your Personal Data under this Privacy Policy is upo777, operating the Platform at https://upo777.cam under applicable international licensing arrangements.
All queries regarding data protection, including requests to exercise your rights under Section 10, should be directed to our data protection contact:
upo777 collects the following categories of Personal Data, depending on how you interact with the Platform:
| Category | Examples | When Collected |
|---|---|---|
| Identity Data | Full legal name, date of birth, nationality, government ID number (e.g., Indonesian KTP) | Registration & KYC verification |
| Contact Data | Email address, WhatsApp number, residential address | Registration & account updates |
| Financial Data | Bank account name and number (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP), e-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja) | Deposit & withdrawal processing |
| Transaction Data | Deposit history, withdrawal history, bet records, game session data, bonus usage | Ongoing platform use |
| Technical Data | IP address, device type, browser type and version, operating system, screen resolution, session timestamps | Automatic collection on site access |
| Usage Data | Pages visited, features used, click paths, game preferences, session duration | Automatic collection during session |
| Communications Data | Content of support chat, email, and WhatsApp interactions with the upo777 team | When you contact support |
| KYC Document Data | Scanned copies of photo ID, proof of address, payment method proof | KYC verification process |
We do not knowingly collect sensitive special-category data (such as health data, racial or ethnic origin, or political opinions) unless explicitly required by regulatory compliance in specific circumstances, in which case we will seek your explicit consent.
Your Personal Data is collected through the following channels:
We process your Personal Data only where a valid legal basis exists. The primary purposes and their corresponding legal bases are set out below:
| Purpose | Legal Basis |
|---|---|
| Creating and managing your upo777 player account | Performance of contract |
| Processing deposits and withdrawals in IDR | Performance of contract |
| Conducting KYC / age and identity verification (21+ requirement) | Legal obligation & performance of contract |
| Anti-money-laundering and fraud prevention screening | Legal obligation & legitimate interests |
| Providing customer support (24/7 Indonesian-speaking agents) | Performance of contract |
| Sending transactional notifications (deposit confirmations, withdrawal updates) | Performance of contract |
| Responsible gaming monitoring and intervention | Legal obligation & legitimate interests |
| Platform analytics and performance improvement | Legitimate interests |
| Sending promotional and bonus communications (where consented) | Consent (withdrawable at any time) |
| Complying with applicable laws and regulatory requirements | Legal obligation |
Where processing is based on your consent, you may withdraw that consent at any time by contacting [email protected] or adjusting your account c ommunication preferences. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
upo777 does not sell, rent, or trade your Personal Data. We share data only in the following limited and controlled circumstances:
We retain your Personal Data only for as long as is necessary to fulfill the purposes for which it was collected and to comply with our legal, regulatory, and contractual obligations. The following general retention periods apply:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account and Identity Data | Duration of account + 5 years after closure | Legal obligation (AML / KYC regulations) |
| Financial Transaction Records | 7 years from transaction date | Legal obligation (financial record-keeping) |
| KYC Documentation | 5 years after account closure | Legal obligation (AML regulations) |
| Communications and Support Records | 3 years from last interaction | Legitimate interests (dispute resolution) |
| Technical and Usage Data | 13 months from collection | Legitimate interests (platform analytics) |
| Marketing Consent Records | 3 years from consent or last interaction | Legal obligation (consent audit trail) |
Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymized so that it can no longer be associated with any identifiable individual. Where anonymized data is retained for aggregate analytics, it no longer constitutes Personal Data and is not subject to this Policy.
8.1 Cross-Border Processing. As an internationally operating platform, upo777 may transfer your Personal Data to servers and service providers located outside Indonesia. Such transfers occur only where adequate safeguards are in place to ensure that your data receives a level of protection equivalent to that afforded within Indonesia.
8.2 Safeguards Applied. Wherever Personal Data is transferred internationally, we apply one or more of the following protective measures:
8.3 Player Rights Unaffected. Any international transfer of your data does not diminish the rights afforded to you under Section 10 of this Policy. You retain full rights to access, correct, and request deletion of your data regardless of where it is processed.
9.1 What Are Cookies. Cookies are small text files placed on your device when you visit the Platform. They enable the Platform to recognize your device, maintain your session, and deliver a personalized experience. upo777 also uses similar technologies such as web beacons and local storage objects for equivalent purposes.
9.2 Categories of Cookies Used.
9.3 Managing Cookies. You may control cookie settings through your browser preferences. Most browsers allow you to block or delete cookies. Please note that disabling strictly necessary cookies will affect the functionality of the Platform and may prevent you from accessing certain features, including account login and payment processing.
Subject to applicable law and certain conditions, you have the following rights in relation to your Personal Data held by upo777:
To exercise any of the above rights, please submit a written request to [email protected], clearly marked as a "Data Subject Rights Request." We will respond within 30 days of receipt of a valid request. In complex cases, this period may be extended by a further 30 days, with prior notification to you.
11.1 Age Restriction. The Platform is strictly intended for adults aged 21 years and above. upo777 does not knowingly collect Personal Data from individuals under the age of 21. If we become aware that Personal Data has been collected from a person under this age threshold, the associated account will be suspended immediately and the data will be deleted as soon as practicable.
11.2 Parental Responsibility. Parents and guardians are encouraged to take an active role in monitoring the online activity of minors in their care. If you believe that a minor has registered an account on the Platform or that their data has been collected without appropriate authorization, please notify us immediately at [email protected] so that we may take prompt remedial action.
11.3 Age Verification Enforcement. As part of the KYC process, upo777 requires documentary proof that all players meet the 21+ age requirement before withdrawal privileges are granted. Our systems also include automated checks designed to detect registration patterns inconsistent with adult use.
12.1 Technical Measures. upo777 applies the following technical safeguards to protect your Personal Data against unauthorized access, alteration, disclosure, or destruction:
12.2 Organizational Measures. Access to Personal Data is restricted to upo777 staff and authorized processors who have a legitimate business need for that access. All personnel with access to Personal Data are subject to strict confidentiality obligations and undergo regular data protection training.
12.3 Data Breach Response. In the event of a Personal Data breach that poses a risk to your rights and freedoms, upo777 will notify affected individuals and relevant authorities within the timeframes required by applicable law. Notification will include a description of the breach, its likely consequences, and the measures taken or proposed to address it.
12.4 Player Responsibility. You are responsible for maintaining the security of your own account credentials. upo777 will never ask you to disclose your password via email, WhatsApp, or any other communication channel. If you suspect that your account has been compromised, please contact us immediately.
13.1 Right to Update. upo777 reserves the right to amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, or our data processing practices. The date at the top of this page indicates when the Policy was most recently revised.
13.2 Notification of Material Changes. Where amendments are material — meaning they significantly affect how your Personal Data is processed or reduce the protections afforded to you — we will notify you by email to your registered address or via a prominent notice on the Platform at least 14 days before the changes take effect.
13.3 Continued Use. Your continued use of the Platform following the effective date of any amendment constitutes your acknowledgment of the revised Policy. If you do not agree with any changes, you should discontinue use of the Platform and may request account closure in accordance with the Terms and Conditions.
13.4 Previous Versions. Archived versions of this Privacy Policy are available upon written request submitted to [email protected], marked "Privacy Policy — Previous Version Request."
If you have any questions, concerns, or complaints regarding this Privacy Policy or the manner in which upo777 processes your Personal Data, you are welcome to contact us through the following channels:
For formal data protection inquiries, please mark your communication clearly as "Data Protection Query — Privacy Policy". We commit to acknowledging all data protection queries within 5 business days and providing a substantive response within 30 days.
If you are not satisfied with our response to a data protection complaint, you have the right to escalate your concern to a relevant data protection supervisory authority in your jurisdiction.
Our Indonesian-speaking support team is available around the clock to address any data protection concerns. You can also explore our Terms & Conditions or visit the FAQ for further guidance on how upo777 operates.
Back to Home Terms & Conditions View FAQ