vo777 Privacy Policy

This Privacy Policy applies to all personal data processed by vo777 in connection with the operation of the online betting and gaming platform accessible at https://vo777.bio (the "Platform"). It covers data processed when you visit the Platform as a guest, when you register as a member, when you place bets or wagers, when you contact our support team, and when you engage with any promotional communication sent by vo777.

For the purposes of applicable data protection law, the data controller responsible for your personal information is vo777, operating as a Licensed and Regulated International Platform. All data-related inquiries may be directed to our designated Privacy Contact via the details in Section 13 of this Policy.

This Policy should be read alongside our Terms & Conditions and our Responsible Gaming Policy. Where a conflict exists between this Privacy Policy and any other document, this Privacy Policy governs data handling practices.

vo777 collects personal data across several categories depending on how you interact with the Platform. The table below provides a structured overview of the categories of data we collect and representative examples within each category.

vo777 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data except where a member voluntarily discloses such information in the course of a support communication. Any such incidental disclosure is not stored as a discrete data point and is not used for profiling purposes.

vo777 collects your personal data through three primary channels:

Direct Collection: Information you provide voluntarily when you register an account, complete KYC verification, make a deposit or withdrawal request, submit a support ticket, opt into a promotion, or update your account profile. This is the primary source of Identity Data, Contact Data, Financial Data, and Verification Documents.

Automated Collection: When you visit or use the Platform, our servers and analytics systems automatically record Technical Data and Usage Data. This includes standard web server logs (IP address, request timestamps, page paths) and, where you have consented, first-party analytics cookies that track session behaviour to help us improve the Platform experience. See Section 8 for full details on our use of cookies.

Third-Party Sources: vo777 may receive supplementary data about you from the following third-party sources in limited circumstances:

• Payment Processors: Confirmation of transaction status from your bank (BCA, BRI, BNI, Mandiri, and others) or e-wallet provider (OVO, DANA, GoPay, ShopeePay, LinkAja) — vo777 receives only a transaction confirmation reference and masked account details, never your full bank account credentials.
• Game Providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft may share game-session outcome data (bet amounts, win/loss results, session timestamps) with vo777's back-office systems for accounting and dispute resolution purposes.
• Identity Verification Services: Where vo777 uses a third-party identity verification platform to assist with KYC, that provider may return a verification pass/fail result and document authenticity score to vo777. Raw document images are processed by the verification provider under their own privacy terms.
• Fraud Prevention Networks: Anonymised device fingerprint and behavioural risk signals from industry fraud-prevention consortia, used solely to protect the Platform from fraudulent account creation and payment fraud.

vo777 processes your personal data only for specific, lawful purposes. The following table maps each processing purpose to the category of data involved and the legal basis under which that processing takes place.

Where vo777 relies on legitimate interests as the legal basis for processing, we have assessed that our interests are not overridden by your fundamental privacy rights. You may request a copy of our Legitimate Interests Assessment by contacting our Privacy Contact at the address in Section 13.

Where processing is based on consent — specifically for marketing communications — you may withdraw that consent at any time via your account settings or by contacting support. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

vo777 does not sell, rent, or trade your personal data to any third party for commercial advertising or marketing purposes. Data is shared with external parties only in the following limited circumstances, and only to the minimum extent necessary for the stated purpose:

• Payment Service Providers: Your financial and identity data is shared with the relevant bank (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Permata, BSI) or e-wallet operator (OVO, DANA, GoPay, ShopeePay, LinkAja) solely to execute your requested deposit or withdrawal transaction.
• Game Providers: A session token and anonymised player identifier are passed to our Game Provider partners (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Pocket Games Soft) to initiate your game session. These providers do not receive your full name, contact details, or financial data.
• KYC & Identity Verification Partners: Verification document images are shared with our contracted identity verification provider for the sole purpose of authenticating your identity and confirming your age eligibility (21+). This provider operates under a strict data processing agreement with vo777.
• Fraud Prevention & Security Services: Anonymised technical signals (device fingerprint, IP risk score) may be shared with industry fraud-prevention networks to protect all members on the Platform.
• Legal & Regulatory Authorities: vo777 will disclose personal data to law enforcement agencies, courts, or regulatory bodies where required to do so by a valid legal order, court judgment, or under the obligations of our international gaming licence. vo777 will notify affected members of such disclosure requests to the extent permitted by law.
• Professional Advisors: In the context of a legal dispute, audit, or corporate transaction, personal data may be disclosed on a confidential basis to vo777's legal counsel, external auditors, or financial advisors.

vo777 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by our licensing obligations and applicable law. The following retention periods apply as a general guide:

Following the expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised such that it can no longer be linked to any identifiable individual. Anonymised, aggregated data (e.g., aggregate bet volumes, platform usage statistics) may be retained indefinitely for business analytics purposes.

Where a member requests account closure, vo777 will cease active processing of their data for marketing and platform operation purposes immediately. However, data subject to a mandatory retention period under our licensing obligations will continue to be stored in a restricted-access archive until the relevant period expires.

The security of your personal data is a foundational priority at vo777. We implement a layered security architecture that combines technical controls, organisational policies, and contractual safeguards to protect your data against unauthorised access, accidental loss, destruction, or disclosure.

Technical Controls in Place:

• 256-bit SSL/TLS Encryption: All data transmitted between your browser or device and vo777's servers is encrypted using industry-standard TLS 1.2 or TLS 1.3 protocols — the same standard used by major Indonesian financial institutions including BCA Internet Banking.
• Encryption at Rest: All personal data and financial records stored in vo777's databases are encrypted at rest using AES-256 encryption. Database access is restricted to authorised personnel via role-based access controls.
• Secure Password Hashing: Member passwords are never stored in plain text. They are processed using a one-way cryptographic hash function with per-account salting, ensuring that even an internal actor cannot retrieve your password.
• Two-Factor Authentication (2FA): Members are strongly encouraged to enable 2FA on their accounts via the security settings panel. 2FA adds a second layer of verification at login and at withdrawal request.
• Intrusion Detection & Monitoring: vo777's infrastructure is monitored around the clock for anomalous access patterns, brute-force attempts, and data exfiltration indicators. Automated alerts trigger an immediate security response protocol.
• Regular Penetration Testing: vo777 engages independent cybersecurity firms to conduct periodic penetration tests against the Platform's infrastructure. Findings are remediated under a prioritised patching schedule.

Organisational Controls: Access to personal data within vo777 is restricted on a strict need-to-know basis. All personnel with access to member data are subject to confidentiality obligations. Data handling procedures are reviewed at least annually. Any suspected data breach triggers an immediate incident response process, and affected members will be notified without undue delay where the breach is likely to result in a high risk to their rights and freedoms.

vo777 uses cookies and similar tracking technologies on the Platform to ensure its correct technical operation, to remember your preferences, and — where you have consented — to analyse your usage patterns and deliver a more personalised experience. A cookie is a small text file placed on your device by the Platform's server.

The following categories of cookies are used on the vo777 Platform:

• Strictly Necessary Cookies: These cookies are essential for the Platform to function. They include session authentication tokens, CSRF protection tokens, and load-balancer affinity cookies. These cookies cannot be disabled without breaking core Platform functionality. No consent is required for strictly necessary cookies.
• Functional Cookies: These cookies remember your preferences such as your selected language, preferred lobby layout, and recent game history. They improve your experience but are not strictly required. Disabling them will not prevent you from using the Platform.
• Analytics Cookies: With your consent, vo777 uses first-party analytics cookies to collect aggregated data on how members navigate the Platform — which pages are visited most frequently, where users drop off during registration, and which game categories generate the most engagement. This data is used in anonymised, aggregated form to guide product improvements. vo777 does not use Google Analytics or other third-party analytics services that transmit member data to external servers.
• Security Cookies: These cookies support vo777's fraud detection systems by storing a device-level fingerprint token that helps identify suspicious login attempts from unrecognised devices.

You may manage your cookie preferences at any time via the Cookie Settings panel accessible from your account profile. Please note that disabling functional or analytics cookies will not affect the availability of any core Platform feature.

vo777 does not use third-party advertising cookies, behavioural profiling cookies, or cross-site tracking technologies that share your data with external advertisers.

As a member of vo777, you hold the following rights in respect of your personal data. vo777 will respond to all rights requests within 30 days of receipt. Where a request is complex or involves a large volume of data, the response period may be extended by a further 60 days, in which case you will be notified of the extension within the initial 30-day window.

• Right of Access: You have the right to request a copy of all personal data vo777 holds about you, together with an explanation of the purposes for which it is processed, the categories of recipients with whom it has been shared, and the applicable retention period.
• Right to Rectification: If any personal data vo777 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or completed. For account-level data (name, contact details), you may update most fields directly within your account profile settings.
• Right to Erasure ("Right to be Forgotten"): You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (and no other legal basis applies), or where the data has been processed unlawfully. This right is subject to override by our legal retention obligations — for example, transaction records required under our licensing framework cannot be deleted before the mandatory retention period expires.
• Right to Restriction of Processing: You may request that vo777 restrict the processing of your data in certain circumstances — for example, while the accuracy of data is being contested, or where you have objected to processing based on legitimate interests and a determination is pending.
• Right to Data Portability: You have the right to receive a copy of the personal data you have provided to vo777 in a structured, commonly used, and machine-readable format (such as CSV or JSON), and to have that data transmitted directly to another data controller where technically feasible.
• Right to Object: You have the right to object to processing based on vo777's legitimate interests, including profiling for responsible gaming monitoring. You also have an absolute right to object to processing for direct marketing purposes at any time, which vo777 will honour immediately.
• Rights Related to Automated Decision-Making: Where vo777 uses automated systems to make decisions that significantly affect you — for example, automated account suspension triggered by fraud-detection algorithms — you have the right to request human review of that decision.

To exercise any of the above rights, please submit a written request to our Privacy Contact at support@vo777.bio with the subject line "Data Rights Request — [Your Username]". We may request proof of identity before processing your request to ensure that data is not disclosed to an unauthorised third party.

The vo777 Platform is strictly intended for adults aged 21 and above. vo777 does not knowingly collect or process personal data from any individual under the age of 21. Age verification is a mandatory step in the account registration process, and additional KYC checks are conducted to confirm that registered members meet this requirement.

If vo777 becomes aware — through any means — that personal data has been collected from an individual under the age of 21, the following actions will be taken immediately:

• The associated account will be suspended and permanently closed.
• Any real-money balance remaining in the account will be returned to the originating payment method after investigation.
• All personal data associated with the underage account will be securely deleted from active systems, subject only to any retention obligations imposed by our licensing authority in connection with the investigation of underage gambling.
• Where applicable, the incident will be reported to our licensing authority in accordance with our regulatory obligations.

Parents and guardians who believe a minor may have registered on or accessed the vo777 Platform should contact our support team immediately at support@vo777.bio. vo777 takes all reports of underage access with the utmost seriousness and will act without delay.

vo777 operates as a Licensed and Regulated International Platform. As a result, your personal data may be transferred to, stored in, and processed in countries other than Indonesia. These international transfers are necessary to operate the Platform's global infrastructure, to engage Game Providers such as Pragmatic Play, Evolution Gaming, and Microgaming, and to utilise specialised KYC and fraud-prevention services.

In all cases where personal data is transferred internationally, vo777 ensures that appropriate safeguards are in place to protect the security and integrity of that data. These safeguards include:

• Data processing agreements with all third-party recipients, incorporating standard contractual clauses that require the recipient to maintain data protection standards at least equivalent to those applied by vo777.
• Transfer impact assessments where data is transferred to jurisdictions that may present elevated privacy risk, to ensure that the rights of Indonesian members are not undermined by the transfer.
• Technical security measures (encryption in transit and at rest) that apply regardless of where data is stored or processed.

You may request further information about the specific safeguards applicable to any international transfer of your personal data by contacting our Privacy Contact at the address provided in Section 13.

vo777 reserves the right to update or revise this Privacy Policy at any time. The most current version of this Policy is always accessible at https://vo777.bio/privacy-policy, and the "Last Updated" date at the top of the page will be revised with each change, regardless of the significance of the amendment.

Where a proposed change is material — for example, where we intend to process your data for a new purpose, share it with a new category of recipient, or significantly extend the retention period applicable to a data category — vo777 will provide at least 14 days' advance notice via a prominent notice on the Platform and, where we hold a valid email address for you, via a direct notification to that address.

Your continued use of the Platform following the effective date of any revised Policy constitutes your acceptance of the revised terms. If you do not agree with any material change, you may close your account and request deletion of your personal data (subject to mandatory retention obligations) before the effective date of the change.

If you have any questions, concerns, or requests relating to this Privacy Policy or to vo777's handling of your personal data, please contact our Privacy team using any of the following channels. All privacy-related correspondence is handled by a dedicated team separate from general customer support, ensuring specialist attention to data protection matters.

• Email (Privacy): support@vo777.bio — use subject line "Privacy Query — [Your Username]". Responses within 2–6 hours during standard operating hours (08:00–24:00 WIB).
• Live Chat: Available 24/7 on-platform. Select "Account & Privacy" from the support category menu to route your query to the correct team.
• WhatsApp: +62 811 7777 777 (plain text — not a link) — available 08:00–24:00 WIB. Our support team includes native Indonesian-speaking agents who can assist you in communicating your privacy concern, even though formal responses are issued in English.

For formal data rights requests (access, erasure, portability, etc.), please submit via email with the subject line format described in Section 9. vo777 will acknowledge all formal privacy requests within 3 business days and will provide a substantive response within 30 days.