Privacy Policy — onic77 Data Commitment

1Definitions

In this Privacy Policy, the following terms carry the meanings set out below:

• "onic77" — the online gaming platform operated at https://onic77.cam, including all associated services, features, and customer communication channels.
• "Personal Data" — any information that identifies or could reasonably be used to identify a living individual, including name, email address, phone number, financial details, IP address, and device identifiers.
• "Processing" — any operation performed on Personal Data, including collection, recording, storage, retrieval, use, disclosure, erasure, or destruction.
• "Data Controller" — onic77, as the entity that determines the purposes and means of processing Personal Data collected through the Platform.
• "Data Processor" — any third party that processes Personal Data on behalf of onic77 under a written data-processing agreement.
• "Player" / "You" / "Your" — any registered member of onic77 or visitor to the Platform whose Personal Data is processed under this policy.
• "KYC" — Know Your Customer identity verification procedures, including document checks and biometric validation where applicable.
• "Cookies" — small text files placed on your device by the Platform to support session management, security, and analytics functions.

2Data We Collect

onic77 collects the following categories of Personal Data from its members and platform visitors:

3How We Collect Data

onic77 collects Personal Data through the following methods:

• Direct Collection: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting customer support, or updating account preferences.
• Automated Collection: Technical and Usage Data collected automatically via cookies, web beacons, server logs, and analytics tools whenever you access the Platform.
• Third-Party Sources: Identity verification data obtained from KYC service providers; payment confirmation data received from banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) when you transact with us.
• Public Sources: Where legally permitted, onic77 may cross-reference your provided identity data against publicly available sanctions lists and fraud databases to meet our anti-money-laundering obligations.

4Purposes of Processing

onic77 processes your Personal Data for the following purposes:

1. Account Management: To create, maintain, and administer your onic77 account, including login authentication and password resets.
2. Transaction Processing: To process deposits, withdrawals, bonus credits, and bet settlements in Indonesian Rupiah (IDR/Rp) via your chosen payment method.
3. Regulatory Compliance: To verify your identity (KYC), confirm you are at least 21 years of age, and comply with anti-money-laundering (AML) and counter-terrorist-financing (CTF) requirements under applicable international gaming regulations.
4. Fraud Prevention: To detect and prevent duplicate accounts, bonus abuse, collusion, match-fixing, arbitrage betting, and other prohibited activities that violate our Terms & Conditions.
5. Customer Support: To respond to your inquiries via live chat, email, or other support channels, and to maintain records of our communications for quality assurance purposes.
6. Platform Security: To monitor system integrity, prevent unauthorized access, detect distributed denial-of-service (DDoS) attacks, and protect against hacking attempts.
7. Marketing Communications: Where you have consented, to send promotional offers, bonus announcements, and gaming news via email or SMS. You may withdraw consent at any time via account settings.
8. Responsible Gaming: To enforce deposit limits, loss limits, session controls, and self-exclusion measures you have activated, and to monitor for patterns of problematic gambling behavior.
9. Analytics & Improvement: To analyze platform usage, game performance, popular markets (such as togel draws, bandar bola sports betting on BRI Liga 1 and international football, slots, live casino), and player preferences to improve service quality.
10. Legal Obligations: To respond to lawful requests from regulatory authorities, law enforcement, or courts of competent jurisdiction.

5Legal Basis for Processing

onic77 processes your Personal Data under one or more of the following legal bases, depending on the purpose of processing:

• Contractual Necessity: Processing is necessary to perform our contract with you (the Terms & Conditions you agreed to upon registration), including account creation, transaction processing, and customer support.
• Legal Obligation: Processing is required to comply with applicable laws, including KYC/AML/CTF regulations, tax reporting, record-keeping obligations, and responses to lawful legal process.
• Legitimate Interests: Processing is necessary for onic77's legitimate business interests, including fraud prevention, platform security, analytics, and operational improvement, provided these interests do not override your fundamental privacy rights.
• Consent: Where processing is based solely on your consent (e.g., marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing conducted prior to withdrawal.

6Data Sharing and Third-Party Disclosure

onic77 does not sell, rent, or trade your Personal Data to third parties. We do, however, share data with carefully selected service providers and partners under strict contractual safeguards in the following circumstances:

• Payment Processors: Your Financial Data (bank account details, e-wallet IDs) is shared with Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) as necessary to process deposits and withdrawals.
• KYC & Identity Verification Providers: Your Identity Data (ID scans, date of birth, legal name) is shared with third-party KYC vendors to verify your age and identity in compliance with regulatory requirements.
• Game Providers: Anonymized or pseudonymized gameplay data (bet amounts, game session IDs, win/loss outcomes) is shared with game studios (Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, Pocket Games Soft, and others) for technical integration, RNG auditing, and platform optimization. These providers do not receive identifiable Personal Data such as your name or contact details.
• Cloud Hosting & IT Infrastructure: Technical Data is processed by our cloud hosting providers to deliver platform availability, redundancy, and data backup. All such providers operate under strict data processing agreements with encryption and access controls.
• Customer Support Tools: Live chat and email communications are processed through third-party support platforms that operate under data processing agreements and are prohibited from using your data for their own purposes.
• Analytics Providers: Anonymized Usage Data is shared with web analytics tools to measure platform performance, user flows, and conversion rates. These tools do not identify you personally.
• Legal & Regulatory Authorities: Where required by law or lawful court order, onic77 will disclose Personal Data to regulatory bodies, law enforcement agencies, tax authorities, or other government entities. We will notify you of such disclosure where legally permitted to do so.
• Business Transfers: In the event of a merger, acquisition, sale of assets, or insolvency proceeding, your Personal Data may be transferred to a successor entity under terms no less protective than this Privacy Policy.

7Cookies and Tracking Technologies

onic77 uses cookies and similar technologies (web beacons, local storage, session tokens) to support platform functionality and improve user experience. The types of cookies we use include:

• Essential Cookies: Strictly necessary for login authentication, session management, security features (CSRF protection), and maintaining your account state across page navigation. These cookies cannot be disabled without impairing core platform functionality.
• Performance Cookies: Collect anonymized data on page load times, error rates, and platform responsiveness to help us identify and resolve technical issues.
• Functional Cookies: Remember your language preferences, display settings, and recently played games to personalize your experience.
• Analytics Cookies: Track aggregated usage patterns (most popular games, peak usage times, deposit/withdrawal trends) to inform platform improvements. These cookies do not identify you personally.

onic77 does not use third-party advertising cookies, retargeting pixels, or cross-site tracking technologies. All cookies deployed on the Platform are first-party cookies controlled by onic77 or essential service providers operating under our data processing agreements.

Most browsers allow you to block or delete cookies through their settings menu. Note that disabling Essential Cookies will prevent you from logging into your account or accessing core platform features.

8Data Retention

onic77 retains your Personal Data for the following periods, subject to applicable legal and regulatory requirements:

• Active Account Data: Retained for the duration of your membership plus six (6) years following account closure to comply with financial record-keeping, tax reporting, and AML obligations.
• KYC Documents: Identity verification records (ID scans, KYC reports) are retained for seven (7) years following account closure or the conclusion of your last transaction, whichever is later, in accordance with international AML standards.
• Transaction Records: Deposit, withdrawal, bet, and bonus records are retained for seven (7) years to support audit trails, dispute resolution, and tax reporting.
• Communications Data: Live chat transcripts and support emails are retained for three (3) years to support quality assurance, training, and dispute resolution.
• Marketing Data: Promotional preferences and consent records are retained for two (2) years following your last interaction with a marketing communication, or until you withdraw consent, whichever is earlier.
• Technical Logs: Server logs, IP addresses, and security event logs are retained for 90 days unless required for ongoing fraud investigation or legal proceedings.

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymized such that it can no longer identify you.

9Data Security Measures

onic77 employs industry-standard technical and organizational measures to protect your Personal Data against unauthorized access, accidental loss, alteration, or destruction. These measures include:

• Encryption: All data transmissions between your device and the Platform are protected by 256-bit SSL/TLS encryption. Sensitive data at rest (passwords, financial details) is encrypted using AES-256 encryption.
• Access Controls: Access to Personal Data is restricted on a role-based, need-to-know basis. Employees and contractors with data access are bound by confidentiality obligations and undergo regular security training.
• Firewall & Intrusion Detection: The Platform is protected by enterprise-grade firewalls, DDoS mitigation, and real-time intrusion detection systems that monitor for suspicious activity.
• Secure Data Centers: All data is stored in access-controlled, redundant data centers with physical security measures including 24/7 surveillance, biometric access controls, and environmental safeguards.
• Regular Audits: onic77 undergoes periodic third-party security audits and penetration testing to identify and remediate vulnerabilities.
• Incident Response: In the unlikely event of a data breach that poses a high risk to your rights and freedoms, onic77 will notify you and relevant regulatory authorities within 72 hours of becoming aware of the breach, as required by applicable law.

While we take every reasonable precaution to secure your data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and should notify us immediately at [email protected] if you suspect unauthorized access to your account.

10Your Privacy Rights

As a data subject, you hold the following rights over your Personal Data processed by onic77:

• Right of Access: You may request a copy of all Personal Data we hold about you. We will provide this in a structured, commonly used format (CSV or PDF) within 30 days of your request.
• Right to Rectification: You may request correction of any inaccurate or incomplete Personal Data. Updates to contact details and payment methods can be made directly via your account settings.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where processing is unlawful. This right is subject to overriding legal obligations (e.g., we must retain financial records for seven years under AML regulations).
• Right to Restriction of Processing: You may request that we temporarily suspend processing of your Personal Data while we investigate a dispute over accuracy or lawfulness of processing.
• Right to Data Portability: You may request that we transfer your account data directly to another service provider in a machine-readable format, where technically feasible.
• Right to Object: You may object to processing based on legitimate interests (e.g., marketing profiling) or direct marketing communications. Upon objection, we will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing emails), you may withdraw consent at any time via account settings or by clicking "Unsubscribe" in any marketing email. Withdrawal does not affect the lawfulness of prior processing.
• Right to Lodge a Complaint: You have the right to lodge a complaint with a supervisory data protection authority in your jurisdiction if you believe onic77 has violated your privacy rights.

To exercise any of these rights, please contact us at [email protected] with the subject line "Data Subject Request". We will respond within 30 days and may request additional identity verification to prevent fraudulent requests.

11International Data Transfers

onic77 operates globally and may transfer your Personal Data to servers or service providers located outside Indonesia. Where such transfers occur, we ensure an adequate level of protection through one or more of the following mechanisms:

• Standard Contractual Clauses (SCCs) approved by competent data protection authorities
• Binding Corporate Rules (BCRs) for intra-group transfers
• Certification under recognized data protection frameworks
• Explicit consent for specific transfers where required by law

Indonesian players acknowledge that international data transfers may be necessary to deliver the onic77 service, including integration with global payment networks, game providers, and cloud infrastructure. All transferred data remains subject to the protections outlined in this Privacy Policy.

12Minors and Age Verification

onic77 is strictly an adult-only platform. You must be at least 21 years of age to register an account or use any onic77 services. We do not knowingly collect, process, or retain Personal Data from individuals under the age of 21.

If we become aware that a registered member is under 21, or if we receive credible evidence that an account belongs to a minor, we will immediately:

• Suspend the account
• Void all transactions and winnings
• Return deposited funds (if verifiable) to the source payment method
• Delete or anonymize all associated Personal Data within 30 days

Parents or guardians who discover that a minor in their care has provided Personal Data to onic77 should contact us immediately at [email protected] so we can take corrective action.

13Third-Party Websites and Services

The onic77 Platform may contain links to third-party websites or services (such as payment provider portals or game provider homepages) for your convenience. onic77 is not responsible for the privacy practices or content of these external sites.

We strongly encourage you to review the privacy policies of any third-party website you visit. This Privacy Policy applies solely to Personal Data collected by onic77 through the Platform at https://onic77.cam and does not govern data collected by third parties, even if accessed via a link from our site.

14Policy Amendments and Updates

onic77 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. Material changes will be communicated to registered members via email and a prominent notice on the Platform at least 14 days before the revised policy takes effect.

Your continued use of the Platform following notice of changes constitutes your acceptance of the revised Privacy Policy. If you do not agree with any changes, you must cease using the Platform and may request account closure and data deletion as described in Section 10.

We recommend reviewing this Privacy Policy periodically. The "Last Updated" date at the top of this document indicates when the most recent revisions were made.

15Contact Us and Complaints

If you have any questions, concerns, or complaints regarding this Privacy Policy or our data processing practices, please contact us through the following channels:

• Email: [email protected] (plain text — not a clickable link)
• Subject Line for Data Requests: "Privacy Inquiry" or "Data Subject Request"
• Live Chat: Available 24/7 via the Platform's in-app support widget
• Response Time: Privacy-related enquiries are prioritized and will receive an acknowledgment within 24 hours (WIB, UTC+7) and a substantive response within 30 days

Our dedicated privacy team includes Indonesian-speaking specialists who can assist you with consent management, data subject requests, KYC inquiries, and any other privacy concerns. We are committed to resolving all complaints in good faith and in accordance with applicable data protection regulations.