Privacy Policy — kera77 Data Commitment

kera77 ("the Company", "we", "our", "us") operates the online betting platform accessible at kera77.cam and its associated sub-domains. We are committed to protecting the privacy and personal data of every individual who accesses, registers with, or uses our platform ("you", "the Player").

This Privacy Policy sets out the basis on which we collect, process, store, and disclose personal data in connection with your use of the kera77 platform. It applies to all Players, prospective Players, and any individual whose personal data we hold in connection with our services.

This Policy is to be read in conjunction with kera77's Terms & Conditions and Responsible Gaming Policy, which together form the complete framework governing your relationship with kera77. By registering an account or using the platform, you confirm your acceptance of this Privacy Policy in its entirety.

We periodically review and update this Policy to reflect changes in our data practices or applicable law. The effective date at the top of this document indicates the version currently in force. We will notify registered Players of material changes via email or in-platform notification no fewer than seven (7) days before the revised Policy takes effect.

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

kera77 collects personal data through several channels: directly from you during registration and account management, automatically through your use of the platform, and from third-party service providers where permitted. The categories of data we collect are as follows:

a) Registration and Identity Data

• Full legal name (as it appears on your government-issued Indonesian identity card, KTP)
• Date of birth (to verify the 21+ age requirement)
• Indonesian National Identity Number (NIK)
• Residential address in Indonesia
• Email address and mobile phone number
• Chosen username and encrypted password

b) Financial and Transaction Data

• Bank account details for deposit and withdrawal processing (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata)
• E-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja)
• Transaction history — amounts, timestamps, payment method used, and transaction reference numbers
• Account balance history and withdrawal records

c) KYC Verification Data

• Scanned copies or photographs of government-issued identity documents
• Selfie or liveness-check images submitted for facial verification
• Proof of address documentation
• Source of funds declarations where required by AML procedures

d) Gameplay and Behavioural Data

• Betting history across all product categories (sports, live casino, togel, slots)
• Session duration, frequency of play, and stake patterns
• Game preferences, bonus utilisation, and promotional responses
• Responsible gaming tool usage (deposit limits, session reminders, self-exclusion requests)

e) Technical and Device Data

• IP address and approximate geographic location at the time of login
• Device type, operating system, and browser version
• Unique device identifiers and mobile advertising IDs
• Log files recording platform interactions, error reports, and access timestamps

f) Communications Data

• Content of live chat, email, and support ticket interactions with kera77's customer service team
• Feedback, complaints, and survey responses voluntarily submitted by Players

kera77 processes personal data for specific, documented purposes only. The table below maps each processing activity to its corresponding purpose and legal basis:

kera77 will never use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or establishing a separate legal basis for the new processing activity.

kera77 processes your personal data on one or more of the following legal grounds, depending on the nature of the processing activity:

• Contractual necessity: Processing is required to perform the contract between kera77 and you — specifically, to operate your account, process bets, and handle deposits and withdrawals.
• Legal obligation: Processing is necessary to comply with applicable laws and regulations, including AML obligations, KYC requirements imposed by our licensing authority, and responses to lawful requests from competent authorities.
• Legitimate interests: Processing is necessary for kera77's legitimate business interests — including fraud prevention, platform security, and service improvement — provided those interests are not overridden by your rights and freedoms.
• Consent: Where processing is not covered by the above grounds (for example, sending optional marketing communications), kera77 will seek your explicit consent before proceeding. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
• Vital interests: In exceptional circumstances, processing may be necessary to protect the vital interests of you or another individual — for example, where disclosing data to a crisis support service is warranted by a responsible gaming concern.

kera77 does not sell, rent, or trade your personal data to unaffiliated third parties for their own commercial purposes. We share personal data only in the following limited, documented circumstances:

• Payment processors: We share the financial data necessary to execute your deposit or withdrawal with your selected Indonesian bank (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata) or e-wallet provider (OVO, DANA, GoPay, ShopeePay, LinkAja). These entities act as independent data controllers for their own services and are governed by their own privacy policies.
• KYC and identity verification partners: We engage certified third-party KYC providers to conduct identity and document verification. These providers process data solely on our instructions and under binding data processing agreements.
• Game content studios: Certified studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft may receive limited technical data (such as session tokens and stake amounts) necessary to deliver their game content. They do not receive your full identity or financial records.
• Fraud prevention services: We may share data with industry fraud-prevention databases and risk-scoring services to protect the integrity of our platform and other Players' funds.
• Regulatory and legal authorities: kera77 will disclose personal data to competent regulatory bodies, law enforcement agencies, or courts where required by law, a valid court order, or our licensing obligations — without prior notice to the Player where legally prohibited from providing such notice.
• Corporate restructuring: In the event of a merger, acquisition, or sale of all or part of kera77's business, personal data may be transferred to the acquiring entity, subject to equivalent data protection commitments.

kera77 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following retention periods apply as a general guide:

When personal data is no longer required, kera77 will securely delete or anonymise it so that it can no longer be linked to any identifiable individual. Anonymised aggregate data may be retained indefinitely for analytical purposes.

kera77 implements a comprehensive suite of technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, or disclosure. Our core security controls include:

• Bank-grade SSL/TLS encryption: All data transmitted between your device and the kera77 platform is encrypted using industry-standard TLS 1.2 or higher. Our SSL certificate is independently verified and renewed continuously.
• Encryption at rest: Sensitive personal data stored in our databases — including passwords, identity document scans, and bank account details — is encrypted using AES-256 at rest.
• Password security: Player passwords are hashed using a one-way cryptographic function and are never stored in plain text. kera77 staff cannot retrieve your password; only a reset is possible.
• Access controls: Access to personal data within kera77 is restricted on a strict need-to-know basis. Staff with data access privileges are subject to background checks and regular security training.
• Two-factor authentication (2FA): Players are encouraged to enable 2FA on their accounts. kera77's internal administrative systems require 2FA for all staff accessing Player data.
• Penetration testing: kera77 engages independent security firms to conduct regular penetration testing and vulnerability assessments of the platform infrastructure.
• Incident response: In the event of a confirmed data breach that poses a risk to Players, kera77 will notify affected individuals and relevant regulatory authorities within 72 hours of becoming aware of the breach, where technically and legally feasible.

kera77 uses cookies and similar tracking technologies to ensure the platform functions correctly, to remember your preferences, and to understand how Players navigate the site. The categories of cookies we use are as follows:

• Essential cookies: Strictly necessary for the platform to operate — including session management, login state, and security tokens. These cookies cannot be disabled without significantly impairing platform functionality.
• Functional cookies: Used to remember your preferences such as language settings, default deposit method, and responsible gaming limits you have set.
• Analytics cookies: Used to collect aggregated, anonymised data on how Players interact with the platform — including pages visited, features used, and session duration. This data informs platform improvements and does not identify individual Players.
• Marketing and attribution cookies: Used where you have consented, to measure the effectiveness of promotional campaigns and, where applicable, to attribute your registration to a specific referral source.

You may manage your cookie preferences through your browser settings. Note that disabling essential cookies will affect your ability to use the platform. kera77 does not use third-party advertising networks that track your browsing activity across unrelated websites.

We may also use pixel tags, web beacons, and local storage mechanisms to supplement cookie-based tracking. All such technologies are subject to the same data minimisation and purpose-limitation principles as cookies.

As a Player whose personal data is processed by kera77, you hold the following rights. You may exercise any of these rights at any time by contacting our Data Protection team at [email protected] with the subject line "Data Rights Request":

kera77 will respond to all verified data rights requests within thirty (30) calendar days of receipt. Where a request is complex or voluminous, we may extend this period by a further sixty (60) days, with written notice provided within the initial thirty-day window. Exercising your rights is free of charge in most circumstances; kera77 reserves the right to charge a reasonable administrative fee for manifestly unfounded or repetitive requests.

Parents and guardians who believe that a minor may have accessed or registered on the kera77 platform are urged to contact us immediately at [email protected]. We will treat all such reports as a priority and act without delay. We strongly recommend that households with minors use parental-control software to restrict access to online betting platforms.

kera77 reviews this Privacy Policy at least annually and following any material change to our data practices, product offerings, or applicable regulatory requirements. When we make changes, we update the effective date shown at the top of this document.

For material changes — those that meaningfully affect how we process your personal data or the rights you hold — we will notify you via the email address registered to your account and/or via a prominent in-platform notification at least seven (7) days before the new version takes effect. Minor editorial or clarificatory changes may be made without advance notice.

Continued use of the kera77 platform after the effective date of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree to the revised Policy, you must cease using the platform and contact us to close your account and arrange the return of any withdrawable balance.

If you have any questions, concerns, or complaints relating to this Privacy Policy or the manner in which kera77 processes your personal data, please reach out to our team through the following channel:

kera77 is committed to resolving all privacy complaints in a fair, transparent, and timely manner. If you remain unsatisfied after engaging with our support team, you may escalate your complaint to the relevant data protection supervisory authority in the jurisdiction in which kera77 holds its operating licence.

This Privacy Policy was last reviewed and updated on 1 January 2026. The most current version of this Policy is always accessible at kera77.cam/privacy-policy. For archived versions or a record of material changes, contact us at [email protected].