Privacy Policy

1. Introduction

ruko77 ("we", "us", "our", "the Company") operates the online betting and gaming platform accessible at https://ruko77.cam ("the Platform", "the Service"). This Privacy Policy ("Policy") sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by ruko77.

We take your privacy seriously. ruko77 processes personal data in accordance with internationally recognized data protection principles, including purpose limitation, data minimization, storage limitation, and the requirement to maintain appropriate technical and organizational security measures.

This Policy applies to all Users who access, register on, or otherwise interact with the ruko77 Platform, including visitors from Jakarta, Surabaya, Medan, Bandung, Bali, Makassar, and across Indonesia. By using the ruko77 Service, you confirm that you have read and understood this Policy and that you consent to the collection and processing of your personal data as described herein.

This Policy should be read alongside our Terms & Conditions and Responsible Gaming Policy, which form part of the overall agreement governing your use of the Platform.

2. Personal Data We Collect

ruko77 collects different categories of personal data depending on your interaction with the Platform. The categories we collect are as follows:

2.1 Identity Data

• Full legal name (as it appears on government-issued ID)
• Date of birth
• Gender
• Nationality
• Indonesian National Identity Number (NIK), passport number, or driver's license number (collected during KYC verification)
• Photographs of identity documents submitted for verification

2.2 Contact Data

• Email address
• Mobile phone number
• Residential address (including city, province, and postal code)

2.3 Financial Data

• Bank account name and number (for withdrawal processing) — applicable banks include BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, BSI, and Bank Permata
• E-wallet account details for OVO, DANA, GoPay, ShopeePay, and LinkAja
• Deposit and withdrawal transaction history
• Account balance and bonus balance records

2.4 Betting & Gaming Activity Data

• Full betting and gaming history (sport, event, amount wagered, odds, outcome)
• Game session logs (duration, games played, wins and losses)
• Bonus usage records and wagering progress
• Responsible gaming tool settings (deposit limits, session limits, self-exclusion status)

2.5 Technical Data

• IP address and approximate geolocation derived from IP
• Device type, operating system, and browser version
• Unique device identifiers
• Login timestamps and session duration
• Pages visited and navigation paths on the Platform

2.6 Communications Data

• Records of your communications with our customer support team (live chat transcripts, email correspondence)
• Feedback and survey responses submitted voluntarily
• Marketing preferences and opt-in/opt-out status

3. How We Collect Your Data

ruko77 collects personal data through the following methods:

3.1 Direct Collection

You provide data directly to us when you:

• Create an Account on the Platform
• Complete KYC identity verification
• Make a deposit or request a withdrawal
• Contact our customer support team
• Opt in to marketing communications or promotional campaigns
• Participate in surveys, competitions, or feedback programs

3.2 Automated Collection

We automatically collect certain technical and behavioral data when you access or use the Platform, including:

• Browser cookies, session tokens, and local storage data
• Server logs recording IP addresses and request timestamps
• Analytics tools that track page views, click events, and navigation behavior
• Device fingerprinting for fraud prevention purposes

3.3 Third-Party Sources

In some cases, we may receive data about you from third parties, including:

• Payment processors and banking partners (transaction verification data)
• Identity verification service providers (KYC/AML compliance checks)
• Fraud prevention and risk assessment services
• Publicly available sources (regulatory watchlists, sanctions databases)

4. How We Use Your Personal Data

ruko77 uses collected data for the following purposes:

5. Legal Basis for Processing

ruko77 processes your personal data on one or more of the following legal bases:

• Contract Performance: Processing is necessary to provide the betting and gaming services you have registered for, including account management, payment processing, and game delivery.
• Legal Obligation: We are required to process certain data to comply with applicable anti-money laundering (AML) regulations, Know Your Customer (KYC) requirements, and licensing conditions imposed by our regulatory authority.
• Legitimate Interests: We process data where it is in our legitimate business interests to do so, provided those interests are not overridden by your data protection rights. This includes fraud prevention, platform security, responsible gaming monitoring, and general analytics.
• Consent: Where we rely on your consent to process personal data (for example, for marketing communications), you have the right to withdraw that consent at any time by contacting our support team or using the opt-out function in any marketing email.

6. Data Sharing and Disclosure

ruko77 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We share data only in the following limited circumstances:

6.1 Service Providers

We share data with carefully selected third-party service providers who process data on our behalf and under our instructions, including:

• Payment processors and banking partners (BCA, BRI, BNI, Mandiri, and e-wallet providers) for transaction processing
• KYC/identity verification providers
• Game content providers (Pragmatic Play, Evolut ion Gaming, NetEnt, Microgaming, Spribe, Pocket Games Soft) who may receive session and activity data
• Customer support platform providers
• Analytics and fraud prevention services
• Cloud hosting and infrastructure providers

All service providers are contractually obligated to maintain the confidentiality and security of your data and to process it only for the purposes we specify.

6.2 Legal and Regulatory Disclosure

We may disclose your personal data to law enforcement agencies, regulatory bodies, or other competent authorities where we are legally required to do so, or where we have a good-faith belief that such disclosure is necessary to:

• Comply with a legal obligation or court order
• Prevent or investigate suspected fraud, money laundering, or other illegal activity
• Protect the rights, property, or safety of ruko77, our players, or the public
• Fulfill our obligations under our international gaming license

6.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of ruko77's assets, your personal data may be transferred to the acquiring entity. We will notify you of any such change and provide you with the opportunity to review the new entity's privacy terms before the transfer takes effect.

6.4 No Sale of Personal Data

ruko77 will never sell, lease, or auction your personal data to any third party for commercial or advertising purposes. Your data is used solely to operate, improve, and secure the ruko77 Service.

7. Cookies and Tracking Technologies

ruko77 uses cookies and similar tracking technologies to operate the Platform effectively, remember your preferences, and understand how users interact with our Service. The types of cookies we use are as follows:

7.1 Essential Cookies

These cookies are strictly necessary for the Platform to function. They include session authentication tokens, security cookies, and load-balancing identifiers. You cannot opt out of essential cookies while continuing to use the Service.

7.2 Functional Cookies

Functional cookies remember your preferences such as language settings, display options, and recently played games. They improve your experience but are not strictly necessary for basic functionality.

7.3 Analytics Cookies

We use analytics cookies to understand how players navigate and use the Platform. This data is aggregated and anonymized where possible and helps us identify areas for improvement. We do not use third-party advertising cookies or behavioral targeting cookies.

7.4 Fraud Prevention Cookies

Certain cookies and device fingerprinting technologies are used exclusively for fraud detection and security purposes, helping us identify unusual account activity or unauthorized access attempts.

7.5 Managing Your Cookie Preferences

You can control non-essential cookies through your browser settings. Most browsers allow you to block or delete cookies. Please note that disabling functional or analytics cookies may affect the quality of your experience on the Platform. Essential and fraud prevention cookies cannot be disabled.

8. Data Retention

ruko77 retains your personal data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable law and our regulatory obligations. Our standard retention periods are as follows:

• Account and identity data: Retained for the duration of your Account plus 5 years after closure, to comply with AML record-keeping requirements
• Financial transaction records: Retained for a minimum of 5 years from the date of the transaction
• KYC verification documents: Retained for 5 years following Account closure or the last transaction date, whichever is later
• Betting and gaming history: Retained for 3 years from the date of each bet or game session
• Customer support communications: Retained for 2 years from the date of the interaction
• Marketing preference records: Retained until you withdraw consent or close your Account, plus 1 year for compliance auditing
• Technical and analytics logs: Retained in identifiable form for up to 12 months, then anonymized or deleted

When data is no longer required, ruko77 will securely delete or anonymize it in accordance with our internal data destruction procedures.

9. Data Security

ruko77 implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. Our security infrastructure includes:

• SSL/TLS Encryption: All data transmitted between your device and the ruko77 Platform is encrypted using industry-standard TLS 1.3 protocols
• Data-at-Rest Encryption: Sensitive data stored on our servers (including financial records and identity documents) is encrypted using AES-256 encryption
• Access Controls: Strict role-based access controls ensure that only authorized personnel can access personal data, and only to the extent necessary for their specific job function
• Two-Factor Authentication (2FA): Available and strongly recommended for all player accounts to prevent unauthorized access
• Regular Security Audits: We conduct periodic security assessments and penetration testing to identify and address potential vulnerabilities
• Fraud Monitoring: Real-time fraud detection systems monitor for suspicious transactions and login attempts around the clock

10. Your Data Rights

As a user of the ruko77 Platform, you hold the following rights with respect to your personal data. To exercise any of these rights, please contact our Data Protection team at [email protected]. We will respond to all valid requests within 30 calendar days.

• Right of Access
  You have the right to request a copy of the personal data ruko77 holds about you, along with information about how it is processed and why.
• Right to Rectification
  You have the right to request that inaccurate or incomplete personal data be corrected or updated. Some corrections (such as name changes) require supporting documentation.
• Right to Erasure ("Right to be Forgotten")
  You may request deletion of your personal data in certain circumstances. Note that this right is subject to our legal obligation to retain certain records (e.g., AML-mandated financial records) for specified retention periods.
• Right to Restrict Processing
  In certain circumstances, you may request that we restrict the processing of your data — for example, while a dispute is being investigated — without deleting it entirely.
• Right to Data Portability
  Where processing is based on your consent or a contract, you may request your data in a structured, commonly used, machine-readable format (e.g., CSV or JSON) for transfer to another service provider.
• Right to Object
  You may object to the processing of your data where it is based on legitimate interests, including profiling for marketing or behavioral analysis. We will cease such processing unless we can demonstrate compelling legitimate grounds.
• Right to Withdraw Consent
  Where processing is based on your consent (such as for marketing emails), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

11. Minors and Age Verification

The ruko77 Platform is strictly for adults aged 21 years or older. We do not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory step in our KYC process, and we use identity document checks to confirm that all registering users meet the minimum age requirement.

If ruko77 becomes aware that personal data belonging to a person under 21 has been collected without appropriate verification, we will:

• Immediately suspend the relevant Account
• Void all bets and gaming activity associated with the Account
• Delete the personal data as soon as it is no longer required for investigation or legal purposes
• Refund any net deposits made to the Account, minus any applicable administrative processing costs

If you are a parent or guardian and believe your child has registered on ruko77, please contact us immediately at [email protected] so we can take appropriate action.

12. International Data Transfers

ruko77 operates globally with infrastructure and service providers located in multiple jurisdictions outside of Indonesia. As a result, your personal data may be transferred to, stored in, and processed in countries other than Indonesia. Such countries may have different data protection standards from those applicable in Indonesia.

When we transfer personal data internationally, ruko77 takes appropriate safeguards to ensure that your data receives an equivalent level of protection, including:

• Entering into data processing agreements with service providers that incorporate internationally recognized standard contractual clauses for data protection
• Transferring data only to service providers that maintain ISO 27001 or equivalent information security certifications
• Conducting data transfer impact assessments where required

By using the ruko77 Platform, you acknowledge and consent to the transfer of your personal data to jurisdictions outside Indonesia as described in this Policy.

13. Changes to This Privacy Policy

ruko77 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, Platform features, or applicable legal requirements. When we make material changes, we will:

• Update the "Effective Date" and "Last Reviewed" date at the top of this Policy
• Display a notice on the Platform informing active users of the update
• Send an email notification to your registered email address for significant changes

Your continued use of the ruko77 Platform following the effective date of any revised Policy constitutes your acceptance of the updated terms. If you do not agree with the revised Policy, you should stop using the Platform and contact us to close your Account.

We encourage you to review this Policy periodically to stay informed about how ruko77 protects your personal data.

14. Contact and Data Protection Inquiries

If you have any questions, concerns, or requests regarding this Privacy Policy or the manner in which ruko77 processes your personal data, please contact our Data Protection team using the details below. All inquiries will be handled with strict confidentiality.

• Data Protection Contact: [email protected]
• Response Time: We aim to respond to all data-related inquiries within 5 business days and to fulfill formal data subject requests within 30 calendar days
• Support Hours: 24/7 (WIB timezone — UTC+7)

Please include "Privacy Request" in the subject line of your email, along with your full registered name and Account email address, so we can locate your records promptly.