At top77, your privacy is a core priority. This Privacy Policy explains exactly what personal data we collect, why we collect it, how it is used and protected, and what rights you hold as a top77 member. We are committed to transparency — no hidden data practices, no surprises.
Every data exchange between your device and top77's servers is protected by industry-standard 256-bit SSL/TLS encryption. Your login credentials, financial details, and personal information travel across our network in an unreadable, fully encrypted state at all times.
top77 does not sell, rent, or broker your personal data to any third party for commercial gain. Data sharing is limited strictly to the service providers — such as KYC verification partners and payment processors — who are contractually bound to protect it.
As a top77 member, you have the right to access, correct, export, or request deletion of your personal data at any time. Submit a data request via our support team and we will respond within 30 days in compliance with internationally recognised data protection standards.
top77 processes all financial transactions via certified payment partners supporting BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, and LinkAja. Full bank account and card details are never stored directly on top77 servers.
Identity documents (such as KTP or passport copies) submitted during KYC verification are stored in isolated, access-controlled environments. Access is restricted to authorised compliance personnel only, and documents are retained no longer than required by applicable regulations.
top77 uses cookies and similar tracking technologies solely to improve your browsing experience, maintain your session, and analyse platform performance. We do not use third-party advertising trackers. You can manage cookie preferences through your browser settings at any time.
This Privacy Policy applies to all personal data collected and processed by top77 in connection with the Platform at https://top77.ws. By registering an account or continuing to use the Platform, you acknowledge that you have read, understood, and agreed to the practices described in this Policy. If you do not agree, please discontinue use of the Platform and contact support to close your account.
The following terms, when used in this Privacy Policy, carry the meanings defined below. Capitalised terms not defined here carry the meanings given to them in the top77 Terms & Conditions.
| Term | Meaning |
|---|---|
| "Personal Data" | Any information relating to an identified or identifiable natural person — including name, identification number, location data, email address, financial account details, or any combination of factors that can directly or indirectly identify that person. |
| "Processing" | Any operation or set of operations performed on Personal Data, including collection, recording, storage, modification, retrieval, consultation, use, transmission, restriction, erasure, or destruction. |
| "Controller" | top77, the entity that determines the purposes and means of processing your Personal Data as described in this Policy. |
| "Processor" | A third-party service provider that processes Personal Data on behalf of top77 under a data processing agreement, strictly for the purposes directed by top77. |
| "Member" | Any individual who has registered an account on the top77 Platform, as defined in the Terms & Conditions. |
| "Platform" | The top77 website accessible at https://top77.ws and any associated interfaces through which top77 Services are delivered. |
| "KYC Data" | Identity documents and associated verification materials submitted by a Member to satisfy top77's Know Your Customer requirements, including national identity cards (KTP), passports, selfie photographs, and supporting address documents. |
| "Cookies" | Small text files placed on a Member's device by the Platform to store session information, preferences, and analytics data, as further described in Section 7 of this Policy. |
top77 collects only the categories of Personal Data that are necessary to provide, secure, and improve the Services. The categories of data we collect include the following:
2.1 Registration Data. When you create a top77 account, we collect your full legal name, date of birth, email address, mobile telephone number, and residential address (including city, province, and postal code within Indonesia). This data is required to establish and maintain your account identity.
2.2 KYC & Identity Verification Data. To comply with due-diligence obligations and to verify that you meet our 21+ age requirement, we collect government-issued identity documents (KTP, passport, or driving licence), a facial photograph or selfie, and, where required, a proof-of-address document such as a utility bill or bank statement dated within the last three months.
2.3 Financial Data. We collect the payment method details you provide when making deposits or requesting withdrawals — including your bank account name, bank account number (for BCA, BRI, BNI, Mandiri, and CIMB Niaga transfers), and the registered mobile number or account identifier associated with your e-wallet (OVO, DANA, GoPay, ShopeePay, or LinkAja). Full bank account credentials are never stored in plain text on top77's servers.
2.4 Transaction & Activity Data. We record all deposits, withdrawals, bets placed, games played, bonus claims, and account-balance changes associated with your account. This includes timestamps, transaction reference numbers, bet amounts in Indonesian Rupiah (IDR), game identifiers, and settlement outcomes.
2.5 Device & Technical Data. We automatically collect your IP address, browser type and version, operating system, device type, screen resolution, time zone setting, and referring URL when you access the Platform. This data is used for security monitoring, fraud detection, and performance optimisation.
2.6 Behavioural & Analytics Data. We collect data about how you interact with the Platform — including pages visited, session duration, navigation path, game preferences, search queries, and feature usage patterns. This data is processed in aggregated or pseudonymised form where possible and is used to improve Platform usability and personalise your experience.
2.7 Communications Data. When you contact top77 support — via live chat, email, or any other channel — we retain records of the communication, including the content, date, time, and resolution outcome. This data is used for quality assurance, dispute resolution, and training purposes.
2.8 Responsible Gaming Data. If you activate any of top77's responsible gaming tools (such as deposit limits, session time limits, cool-off periods, or self-exclusion), we record the details of those settings and their activation dates. This data is treated with the highest level of sensitivity and is accessible only to authorised responsible gaming compliance staff.
top77 collects Personal Data through the following channels:
3.1 Directly from You. The majority of the Personal Data we hold is provided directly by you — at account registration, during KYC verification, when making financial transactions, when using live chat or email support, and when updating your account profile or preferences.
3.2 Automatically via the Platform. Certain technical and behavioural data is collected automatically when you access the Platform, through server logs, cookies, web beacons, and similar tracking technologies. This automatic collection occurs as a standard feature of web-based platform operation and does not require separate user action.
3.3 From Third-Party Verification Partners. During the KYC process, top77 works with certified identity verification service providers who may return enriched verification data — such as a confirmed date of birth, document validity status, or watchlist screening result — which is then associated with your account record.
3.4 From Payment Processors. Payment confirmation data — such as transaction reference numbers, payment status, and the last four digits of an account identifier — may be returned to top77 by our payment processing partners upon completion of a deposit or withdrawal transaction.
3.5 From Fraud and Security Services. top77 may receive data flags or risk scores from third-party fraud detection services based on signals such as device fingerprinting, IP reputation analysis, and transaction pattern analysis. These signals are used solely to protect the security of the Platform and its members.
top77 processes your Personal Data only for specific, clearly defined purposes. The table below maps each processing activity to its purpose:
| Processing Activity | Purpose |
|---|---|
| Account creation & management | To establish and maintain your member account, authenticate your identity at login, and manage account settings and preferences. |
| KYC verification | To confirm that you are at least 21 years of age, verify your identity, and comply with internationally recognised due-diligence standards for online gaming platforms. |
| Payment processing | To facilitate deposits and withdrawals via your chosen Indonesian bank or e-wallet, reconcile transactions, and maintain accurate financial records. |
| Game & betting services | To deliver the games, sportsbook markets, and other Services available on the Platform, record results, and calculate and credit winnings. |
| Fraud prevention & security | To detect and prevent fraudulent activity, money laundering, account takeover, and other prohibited conduct; to monitor for collusion, bonus abuse, and platform manipulation. |
| Responsible gaming | To administer deposit limits, session controls, cool-off periods, and self-exclusion tools; to identify members who may be showing signs of problematic gambling behaviour. |
| Customer support | To respond to inquiries, investigate and resolve disputes, and maintain records of support interactions for quality-assurance and training purposes. |
| Platform improvement | To analyse usage patterns, diagnose technical issues, test new features, and improve the overall performance, design, and security of the Platform. |
| Marketing communications | To send promotional offers, bonus alerts, and event announcements to members who have opted in to marketing communications. Members may opt out at any time. |
| Legal & regulatory compliance | To comply with applicable laws, respond to lawful requests from authorities, and enforce the top77 Terms & Conditions. |
top77 does not use your Personal Data for automated decision-making that produces significant legal effects without human oversight. Where automated processes influence account actions (such as fraud-triggered account flags), a human compliance review is conducted before any material action is taken.
top77 processes your Personal Data on the basis of one or more of the following legal grounds, consistent with internationally recognised data protection principles:
Contractual Necessity. Processing is required to perform the contract between top77 and you as a Member — including account creation, payment processing, game delivery, and customer support. Without this processing, top77 cannot provide the Services you have requested.
Legitimate Interests. top77 processes certain data (such as device and behavioural data) on the basis of its legitimate interests in operating a secure, fair, and well-functioning online gaming platform — provided those interests are not overridden by your fundamental rights and freedoms. Fraud prevention, security monitoring, and platform improvement fall under this basis.
Legal Obligation. top77 is required to process KYC data, transaction records, and certain communications data to comply with internationally recognised anti-money-laundering (AML) standards, due-diligence frameworks, and other applicable regulatory requirements.
Consent. Where top77 seeks to send you marketing communications or deploy non-essential cookies, we do so on the basis of your explicit consent. You may withdraw consent at any time by updating your communication preferences in your account settings or adjusting your browser's cookie controls, without any negative effect on your ability to use the Platform's core Services.
top77 does not sell your Personal Data. We share your data only in the limited circumstances described below, and only to the minimum extent necessary for the stated purpose:
6.1 Payment Processors. To execute deposits and withdrawals, top77 shares relevant transaction and account-identification data with certified payment processing partners who support Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga) and e-wallets (OVO, DANA, GoPay, ShopeePay, LinkAja). These partners are contractually bound by strict data confidentiality obligations.
6.2 KYC & Identity Verification Partners. top77 works with specialist identity verification service providers to conduct KYC checks. These providers receive only the data necessary to perform the verification task and may not use your data for any other purpose.
6.3 Fraud Detection & Security Providers. top77 may share hashed or pseudonymised technical identifiers (such as device fingerprints and IP-derived risk signals) with fraud detection service providers to identify and prevent fraudulent activity. These providers are engaged as data Processors under binding contractual terms.
6.4 Game Studio Providers. Where games on the Platform are delivered by third-party studios — including Pragmatic Play, Evolution Gaming, PG Soft, NetEnt, Microgaming, and Spribe — limited session data (such as a pseudonymous player identifier and bet amount) is shared with the relevant studio to facilitate game delivery and result settlement. These studios do not receive your full name, contact details, or financial account information.
6.5 Legal & Regulatory Authorities. top77 may disclose Personal Data to law enforcement agencies, regulatory bodies, or courts when required to do so by a lawful order, warrant, or legal obligation. Where permitted by law, top77 will notify the affected Member before complying with such a request.
6.6 Business Transfers. In the event that top77 undergoes a merger, acquisition, restructuring, or sale of assets, your Personal Data may be transferred to the acquiring entity as part of that transaction. top77 will provide reasonable advance notice of any such transfer, and the recipient will be required to honour the commitments made in this Privacy Policy.
top77 does not share your Personal Data with online advertising networks, social media platforms, data brokers, or any other commercial third parties for marketing or profiling purposes. Our data-sharing is limited strictly to the operational categories listed above.
7.1 What Are Cookies. Cookies are small text files placed on your device when you visit a website. They enable the website to remember information about your visit — such as your session state, language preference, and navigation history — making subsequent interactions faster and more personalised.
7.2 How top77 Uses Cookies. top77 uses the following categories of cookies:
| Cookie Type | Purpose | Duration |
|---|---|---|
| Strictly Necessary | Maintain your logged-in session, remember your account state, and enable core Platform functionality. Cannot be disabled without breaking core features. | Session / up to 24 hours |
| Performance & Analytics | Collect anonymised data on page load times, error rates, and navigation patterns to help top77 identify and fix performance issues. | Up to 12 months |
| Functional | Remember your preferences such as display settings and last-used game category so your experience is consistent across sessions. | Up to 6 months |
| Security | Support fraud detection and account security functions, including device fingerprinting tokens used to identify suspicious login attempts. | Up to 90 days |
7.3 No Third-Party Advertising Cookies. top77 does not deploy third-party advertising or retargeting cookies. You will not be tracked across other websites by top77 for the purpose of serving targeted advertisements.
7.4 Managing Cookies. You can manage or delete cookies at any time through your browser's settings. Disabling strictly necessary cookies will affect your ability to log in and use core Platform features. Disabling analytics or functional cookies will not prevent you from using the Platform but may reduce the quality of your experience.
top77 retains your Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply as a general guide:
| Data Category | Retention Period |
|---|---|
| Account & Registration Data | For the duration of the active account relationship, plus 5 years after account closure. |
| KYC & Identity Documents | 5 years from the date of submission, or longer if required by applicable AML regulations or an ongoing legal investigation. |
| Transaction & Financial Records | 7 years from the date of each transaction, consistent with standard financial record-keeping requirements. |
| Betting & Game Activity Logs | 3 years from the date of each betting or gaming session. |
| Customer Support Communications | 2 years from the date of the final communication in each support thread. |
| Responsible Gaming Records | For the duration of the self-exclusion or restriction period, plus 5 years after its expiry, to prevent circumvention. |
| Marketing Consent Records | For the duration of the active consent, plus 2 years after withdrawal of consent. |
| Technical & Log Data | Up to 12 months from collection, unless required for an ongoing security investigation. |
Upon expiry of the applicable retention period, top77 will securely delete or irreversibly anonymise your Personal Data. Where anonymisation is applied, the resulting data set — which can no longer identify you — may be retained indefinitely for statistical and analytical purposes.
top77 applies a comprehensive, layered security framework to protect your Personal Data against unauthorised access, disclosure, alteration, or destruction. Our security measures include:
No security system is entirely immune to breach. In the event of a data security incident that poses a material risk to your rights, top77 will notify affected Members and relevant authorities as required by applicable data protection standards, without undue delay.
As a top77 member whose Personal Data is processed by top77, you hold the following rights in relation to that data. To exercise any of these rights, please contact the top77 support team at the details provided in Section 14. top77 will respond to all verified data rights requests within 30 days.
Right of Access Request a copy of all Personal Data top77 holds about you, along with information about how it is used and with whom it has been shared.
Right to Rectification Request correction of any inaccurate or incomplete Personal Data. You may also update certain data directly through your account profile settings.
Right to Erasure Request deletion of your Personal Data where it is no longer necessary for the purposes it was collected, subject to legal retention obligations.
Right to Restriction Request that top77 restrict processing of your Personal Data in certain circumstances — for example, while a data accuracy dispute is under review.
Right to Portability Request a structured, machine-readable export of the Personal Data you have provided to top77, for transfer to another service provider.
Right to Object Object to processing of your Personal Data on the basis of legitimate interests, including for direct marketing. Marketing objections are always honoured immediately.
Right to Withdraw Consent Where processing is based on your consent, withdraw that consent at any time without penalty. Withdrawal does not affect the lawfulness of processing conducted prior to withdrawal.
Right Against Automated Decisions Request human review of any significant automated decision that materially affects your account status or access to Services.
top77 will not charge a fee for processing data rights requests unless a request is manifestly unfounded or excessive, in which case a reasonable administrative fee may apply. top77 may request additional verification before processing a rights request to confirm that the request is made by the account holder and not a third party.
11.1 top77 is strictly an adults-only platform. No person under the age of 21 is permitted to register an account, access the Platform, or use any of top77's Services. This age restriction is a non-negotiable condition of use.
11.2 top77 actively enforces the 21+ age requirement through mandatory KYC verification. Every Member is required to submit valid identity documentation confirming their date of birth before any withdrawal is processed and, in many cases, before full account functionality is unlocked. Accounts where age verification cannot be satisfactorily completed will be suspended.
11.3 top77 does not knowingly collect Personal Data from individuals under the age of 21. If top77 becomes aware — through our KYC process or any other means — that an account has been registered by a person below the minimum age, that account will be immediately closed, all associated data will be securely deleted (subject only to any legal retention obligations), and any deposits received will be returned to the depositing payment method after identity verification.
11.4 If you are a parent or guardian and believe a minor in your care has attempted to register or use the top77 Platform, please contact our support team immediately at the contact details in Section 14. We will investigate and respond within 24 hours.
12.1 top77 operates as an international online gaming platform. In the course of delivering its Services, Personal Data may be transferred to and processed in countries outside Indonesia — for example, where a payment processing partner or game studio provider operates its infrastructure.
12.2 When Personal Data is transferred internationally, top77 ensures that appropriate safeguards are in place to protect the data to a standard equivalent to that described in this Privacy Policy. These safeguards include contractual data protection clauses incorporated into all agreements with third-party Processors, and selection of providers who maintain internationally recognised data security certifications.
12.3 By registering a top77 account and accepting these terms, you acknowledge and consent to the international transfer of your Personal Data as described in this section, for the purposes of delivering the Services you have requested.
13.1 top 77 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable laws, or Platform functionality. The most current version of this Privacy Policy will always be available at https://top77.ws/privacy-policy.
13.2 When material changes are made to this Privacy Policy — changes that meaningfully affect how your Personal Data is collected, used, or shared — top77 will notify active Members via the email address associated with their account at least 14 days before the updated Policy takes effect. For minor or clarificatory changes, the Policy will be updated with a revised "Last Updated" date without individual notification.
13.3 Your continued use of the Platform after the effective date of any updated Privacy Policy constitutes your acknowledgment of and agreement to the revised terms. If you do not agree with a material amendment, you must discontinue use of the Platform and may request account closure by contacting our support team.
We recommend bookmarking this page and reviewing it periodically. The "Last Updated" date at the top of this Policy will always reflect the date of the most recent revision, making it easy to identify whether changes have been made since your last review.
If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your Personal Data, please reach out to the top77 Privacy & Data Protection team through any of the following channels:
Email Support: support@top77.ws
Live Chat: Available 24/7 directly on the Platform. Our Indonesian-speaking support agents can assist you in either English or Bahasa Indonesia.
Response Time: top77 aims to acknowledge all privacy-related inquiries within 24 hours (WIB, UTC+7) and to provide a substantive response or resolution within 30 days of receiving a verified request.
When submitting a data rights request, please include your registered Member username and email address so that our team can verify your identity and locate your account record efficiently. top77 will never request your account password via email or live chat.
For general support inquiries unrelated to data privacy — such as deposit and withdrawal assistance, game queries, or account access issues — please visit our FAQ page for immediate self-service guidance, or connect with our support team via live chat on the Platform.
Your privacy and security are the foundation of everything we build at top77. Browse our games, explore the sportsbook, or log in to your account — all protected by the same standards described in this Policy.
21+ only · Play responsibly · Trusted & Secure Platform