eos77 Privacy Policy

Introduction

eos77 ("we", "us", "our") operates the online gaming platform accessible at https://eos77.club. We are committed to safeguarding the privacy and personal data of every individual who visits, registers with, or transacts on our Platform. This Privacy Policy ("Policy") sets out our practices in relation to the collection, use, disclosure, and protection of personal data in a manner consistent with internationally recognised data protection principles.

This Policy applies to all personal data processed by eos77 in connection with your use of the Platform, whether you access it via desktop browser, mobile browser, or any other device. It should be read in conjunction with our Terms & Conditions and Responsible Gaming policy, which together form the complete framework governing your relationship with eos77.

By registering an Account or otherwise using the Platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not agree with any part of this Policy, you should discontinue use of the Platform and may request Account closure by contacting [email protected].

Definitions

For the purposes of this Privacy Policy, the following terms carry the meanings assigned below:

Data We Collect

eos77 collects only the Personal Data that is necessary for the purposes described in this Policy. The categories of data we collect are set out below:

3.1 Identity & Contact Data

• Full legal name (as it appears on your Indonesian National Identity Card / KTP or passport)
• Date of birth and age verification information
• Residential address (including city — Jakarta, Surabaya, Bandung, Medan, Bali, Yogyakarta, etc.)
• Email address and mobile telephone number
• Copies of KTP, passport, or other government-issued identification documents submitted during KYC

3.2 Financial Data

• Bank account details used for deposits and withdrawals (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon)
• E-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja)
• Transaction history, including deposit amounts, withdrawal amounts, and timestamps, all denominated in Indonesian Rupiah (IDR)
• Wagering history and game session records

3.3 Technical & Usage Data

• IP address and approximate geographic location derived from IP
• Device type, operating system, browser type and version
• Session duration, pages visited, game titles accessed, and clickstream data
• Login timestamps and session activity logs

3.4 Communications Data

• Records of live chat conversations with our support team
• Email correspondence sent to and from [email protected]
• Responses to surveys, feedback forms, or promotional opt-ins (where applicable)

3.5 Responsible Gaming Data

• Self-exclusion requests and cooling-off period preferences
• Deposit limit settings and session time reminder configurations
• Any disclosures made to our responsible gaming team regarding gambling behaviour

How We Collect Your Data

eos77 collects Personal Data through the following channels:

• Direct submission: Information you provide when registering an Account, completing KYC verification, making a deposit or withdrawal, contacting support, or responding to a promotion.
• Automated collection: Technical and usage data gathered automatically when you access the Platform, via server logs, cookies, and similar tracking technologies described in Section 09.
• Third-party sources: Identity verification data returned by our KYC and AML screening partners; fraud-risk signals from payment processors; publicly available sanctions and politically exposed persons (PEP) databases consulted as part of our compliance obligations.
• Payment providers: Transaction confirmation data shared by BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja, and other integrated payment channels to reconcile deposits and withdrawals against your Account.

Purpose & Legal Basis for Processing

We process your Personal Data only where we have a legitimate legal basis for doing so. The table below maps each processing purpose to its corresponding legal basis:

Where we rely on legitimate interests as our legal basis, we have assessed that our interests are not overridden by your data protection rights. You may object to processing based on legitimate interests at any time — see Section 11 for details.

Data Sharing & Disclosure

eos77 does not sell, rent, or trade your Personal Data to any third party for their own marketing purposes. We share your data only in the circumstances described below:

• Service providers (Processors): We engage trusted third-party companies to perform services on our behalf, including KYC identity verification, payment processing, fraud detection, cloud infrastructure, and customer support tooling. All Processors are bound by data processing agreements that restrict how they may use your data and require them to apply security standards no less stringent than our own.
• Payment partners: Financial data necessary to execute your deposit or withdrawal is shared with the relevant payment institution (e.g., BCA, BRI, OVO, GoPay) solely for the purpose of completing your transaction.
• Game studio providers: When you play a game hosted by a third-party studio (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, or PG Soft), your Account identifier and session token are transmitted to that studio's servers. These studios operate under their own privacy frameworks; their processing of technical session data is governed by their respective licences and our contractual obligations to them.
• Regulatory and law enforcement authorities: We may disclose Personal Data to competent regulatory bodies, law enforcement agencies, or courts where we are legally required to do so, including in response to valid subpoenas, court orders, or regulatory investigations.
• AML and sanctions databases: As part of our anti-money laundering obligations, we may screen your name and identity details against third-party PEP and sanctions lists. The results of such checks are used solely for compliance purposes and are not shared further.
• Business transfers: In the event of a merger, acquisition, or sale of all or substantially all of eos77's assets, your Personal Data may be transferred to the acquiring entity, subject to equivalent data protection commitments. You will be notified of any such transfer in advance.

International Data Transfers

eos77 operates as an internationally licensed platform. Some of the third-party Processors we engage — including cloud infrastructure providers and game studio technology partners — may process your Personal Data in jurisdictions outside Indonesia. Where such transfers occur, we take the following measures to ensure an equivalent level of data protection:

• We enter into Standard Contractual Clauses (SCCs) or equivalent contractual mechanisms with all Processors handling Personal Data in third countries.
• We conduct transfer impact assessments where required to evaluate the legal landscape of the destination country and implement supplementary technical safeguards (such as end-to-end encryption) where necessary.
• We only transfer data to Processors whose security and privacy practices we have independently reviewed and approved.

If you would like further information about the specific safeguards applied to any international transfer of your Personal Data, you may request this by contacting [email protected].

Data Retention

eos77 retains Personal Data only for as long as necessary to fulfil the purposes described in this Policy, or as required by applicable law. The following retention schedule applies:

At the end of the applicable retention period, Personal Data is securely deleted or anonymised in accordance with our internal data disposal procedures. Anonymised data (where re-identification is not technically feasible) may be retained indefinitely for statistical and product analytics purposes.

Cookies & Tracking Technologies

The eos77 Platform uses cookies and similar tracking technologies to enable core functionality, measure performance, and improve your experience. The categories of cookies we use are as follows:

• Strictly necessary cookies: Required for the Platform to function. These include session authentication cookies, load-balancing cookies, and security tokens. They cannot be disabled without impairing your ability to use the Platform.
• Functional cookies: Remember your preferences such as language setting, preferred payment method display, and session time reminder configurations. Disabling these may reduce the personalisation of your experience.
• Analytics cookies: Collect anonymised data about how Players navigate the Platform — pages visited, time on page, game categories browsed — to help us optimise site performance and identify usability issues. No personally identifiable information is captured in analytics cookies.
• Marketing cookies: Used only where you have expressly opted into receiving personalised promotions. These cookies enable us to deliver relevant bonus offers based on your game preferences and activity patterns. You may withdraw consent at any time via your Account settings.

You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent the Platform from functioning correctly. For full details of the specific cookies deployed on the Platform and their respective lifespans, please contact [email protected].

Security Measures

eos77 implements a layered security framework designed to protect your Personal Data against unauthorised access, loss, destruction, or alteration. Our key security measures include:

• 256-bit SSL/TLS encryption: All data transmitted between your browser or device and the eos77 Platform is encrypted in transit using enterprise-grade TLS 1.2 or higher.
• Encryption at rest: Sensitive data fields — including KYC document images, bank account details, and password hashes — are encrypted in our database using AES-256 encryption. Passwords are never stored in plaintext; we use one-way cryptographic hashing with salting.
• Access controls: Access to Personal Data within eos77's internal systems is governed by role-based access control (RBAC). Only staff with a documented operational need may access Player data, and all access events are logged and audited.
• Penetration testing: Our Platform undergoes regular independent security assessments, including penetration testing and vulnerability scanning, to identify and remediate potential weaknesses before they can be exploited.
• Incident response: In the event of a confirmed data breach that is likely to result in a risk to your rights and freedoms, eos77 will notify affected Players without undue delay and, where required, report the incident to the relevant supervisory authority.

While we apply rigorous security controls, no system can guarantee absolute security. You are responsible for maintaining the confidentiality of your Account credentials and for notifying us immediately at [email protected] if you suspect unauthorised access to your Account.

Your Privacy Rights

Subject to applicable law and our legitimate processing obligations, you have the following rights in relation to your Personal Data held by eos77:

• Right of access: You may request a copy of all Personal Data we hold about you. We will provide this within 30 days of a verified request.
• Right to rectification: If any Personal Data we hold is inaccurate or incomplete, you may request that we correct it. Updates to core identity fields may require re-verification through KYC.
• Right to erasure ("right to be forgotten"): You may request deletion of your Personal Data. We will honour this request where there is no overriding legal obligation to retain the data (for example, AML record-keeping requirements may prevent full erasure of financial records). Where full erasure is not possible, we will anonymise the data instead.
• Right to restriction of processing: You may ask us to suspend active processing of your Personal Data in certain circumstances, such as while a rectification request is being assessed.
• Right to data portability: You may request that we provide your Personal Data in a structured, commonly used, machine-readable format (e.g., CSV or JSON) for transfer to another service provider.
• Right to object: You may object to processing based on legitimate interests or for direct marketing purposes. Objections to direct marketing will be honoured immediately; objections to other processing will be evaluated against our legitimate interests.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw consent at any time via Account settings or by emailing [email protected]. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, please submit a written request to [email protected], clearly identifying yourself and the right you wish to exercise. We may require identity verification before processing your request. We will respond within 30 days; complex requests may be extended by a further 60 days with notice.

Protection of Minors

eos77 operates a strict 21+ policy. We do not knowingly collect Personal Data from individuals under the age of 21. Our Platform is not directed at, and is not intended for use by, persons under 21 years of age. Access to the Platform by minors is prohibited.

As part of our registration process and ongoing KYC procedures, we verify the age of every Player before enabling full Account functionality. Where we discover — through KYC review, parental notification, or any other means — that a Player is under 21 years of age, we will:

• Immediately suspend the Account and freeze all associated balances.
• Delete all Personal Data collected from the minor, to the extent permitted by applicable legal and financial record-keeping obligations.
• Refund any real-money deposits made, after deducting any amounts required to satisfy legal obligations, to the originating payment method.

If you believe a person under 21 has registered an Account on eos77, please contact us immediately at [email protected]. We take the protection of minors extremely seriously and will act on all credible reports without delay.

Third-Party Services & Links

The eos77 Platform integrates third-party services including game studios (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, PG Soft, Spribe), payment gateways, and identity verification providers. While we have contractual arrangements in place governing how these parties handle data shared with them, their own privacy policies govern their independent data processing activities.

eos77 is not responsible for the privacy practices of third-party game studios in relation to data they collect independently within their own game environments. We encourage you to review the privacy policies of any third-party studio whose games you play if you have specific concerns about how your session data is handled at the studio level.

The Platform does not contain links to external third-party websites for commercial or advertising purposes. All links on the eos77 Platform direct you to pages within the eos77 domain.

Policy Amendments

eos77 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, our business practices, or the services we offer. Where amendments are material — for example, a change in the legal basis for processing, the introduction of a new category of data collection, or a change in data sharing arrangements — we will provide at least 7 days' advance notice by:

• Publishing the revised Policy on this page with an updated "Last Updated" date.
• Sending a notification to your registered email address (where the change directly affects your rights or our processing of your data).

Your continued use of the Platform after the effective date of any amended Policy constitutes your acknowledgement of the changes. If you do not agree with an amended Policy, you must discontinue use of the Platform and may request Account closure under Clause 11.1 of the Terms & Conditions.

Contact & Complaints

For all privacy-related enquiries, data subject access requests, or complaints regarding eos77's handling of your Personal Data, please contact our Data Protection team using the details below. We are committed to acknowledging all privacy enquiries within 48 hours and resolving them within 30 days during normal operating hours (07:00–23:00 WIB, Monday to Sunday).

• Email: [email protected]
• Subject line for data requests: Please use the format "Data Subject Request — [Your Full Name] — [Request Type]" to ensure prompt routing to the correct team.
• Live Chat: Available 24/7 within the Platform for general privacy questions. Formal data subject requests must be submitted in writing to the email address above.
• Registered address: Available on request for formal legal correspondence — please contact support to obtain our registered address.

If you are not satisfied with our response to a privacy complaint, you may escalate the matter to the relevant supervisory authority in your jurisdiction. Players based in Indonesia are advised to contact the relevant national authority responsible for personal data protection.