Last Updated: January 1, 2026. This Privacy Policy supersedes all prior versions. Continued use of vt777 after the effective date constitutes your acceptance of this Policy.
Section 1
Definitions
Throughout this Privacy Policy, the following terms carry the meanings set out below:
- "Personal Data" — any information that identifies or can reasonably be used to identify a living individual, including name, email address, phone number, bank account details, IP address, and device identifiers.
- "Processing" — any operation performed on Personal Data, whether automated or manual, including collection, recording, storage, retrieval, use, disclosure, erasure, or destruction.
- "Data Controller" — the entity that determines the purposes and means of processing Personal Data. For all Members of vt777, the Data Controller is the operator of the vt777 platform.
- "Data Processor" — a third party that processes Personal Data on behalf of the Data Controller under a binding data processing agreement.
- "Member" — any individual who has registered a vt777 account or otherwise provided Personal Data to vt777.
- "Services" — all gaming, betting, payment, promotional,
and support services provided through the vt777 platform at https://vt777.onl.
- "Cookies" — small text files stored on your device by your browser when you visit the vt777 platform, used to remember preferences, session state, and analytical data.
Section 2
Data Controller
The Data Controller responsible for your Personal Data collected through the vt777 platform is the operator of vt777, an internationally licensed online gaming platform serving Members in Indonesia. All data-related inquiries, requests, and complaints should be directed to our dedicated privacy team using the contact details provided in Section 15 of this Policy.
vt777 operates as an internationally licensed and regulated gaming platform. Our data handling practices are designed to meet internationally recognized privacy standards, including principles of data minimization, purpose limitation, storage limitation, and data subject rights, consistent with global best practices for online gaming operators serving the Indonesian market.
Indonesia Market Notice: vt777 is designed exclusively for adult residents of Indonesia aged 21 and above. Personal Data collected through this platform is processed in the context of providing online gaming services to Indonesian Members, with all financial transactions conducted in Indonesian Rupiah (IDR) through Indonesian payment channels including BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, and LinkAja.
Section 3
Data We Collect
vt777 collects the following categories of Personal Data from Members and visitors:
| Category |
Specific Data Points |
When Collected |
| Identity Data |
Full legal name, date of birth, nationality, government-issued ID number (KTP, passport, or SIM) |
Registration & KYC verification |
| Contact Data |
Email address, Indonesian mobile phone number, city of residence (e.g., Jakarta, Surabaya, Bandung, Bali) |
Registration |
| Financial Data |
Bank account number, bank name (BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata, BSI), e-wallet ID (OVO, DANA, GoPay, ShopeePay, LinkAja), deposit and withdrawal transaction records |
Deposit / withdrawal requests |
| Technical Data |
IP address, browser type and version, operating system, device type, screen resolution, time zone (WIB/WITA/WIT) |
Automatic on site visit |
| Usage Data |
Pages visited, games played, bets placed, session duration, click paths, search queries on platform |
Automatic during sessions |
| Communication Data |
Live chat transcripts, email correspondence, support ticket content |
When you contact support |
| KYC Documents |
Scanned or photographed copies of government-issued ID, selfie with ID, proof of address documents, proof of payment method ownership |
KYC verification process |
Data Minimization: vt777 collects only the Personal Data that is strictly necessary for the purposes described in Section 6 of this Policy. We do not collect sensitive special-category data such as racial or ethnic origin, political opinions, religious beliefs, or health data unless legally required for responsible gaming interventions.
Section 4
How We Collect Data
vt777 collects Personal Data through the following mechanisms:
- Direct submission: Data you provide during account registration, KYC verification, deposit and withdrawal requests, support inquiries, and promotion opt-ins.
- Automated technical collection: When you access the vt777 platform, our servers automatically record Technical Data and Usage Data as described in Section 3. This occurs via server logs, cookies, and similar tracking technologies detailed in Section 8.
- Payment processors: When you initiate a deposit or withdrawal via BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, or LinkAja, transaction confirmation data is passed to vt777 by the payment processor to reconcile your Account Balance.
- Identity verification providers: Where vt777 uses a licensed third-party KYC provider to verify your identity documents, that provider returns a verification result (pass/fail/refer) and a confidence score to vt777. The raw document data is handled by the KYC provider under their own privacy policy, which vt777 reviews and approves as part of its vendor due-diligence process.
- Game studios: Game providers such as Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Pocket Games Soft, and Spribe may transmit game session identifiers and round outcomes to vt777's platform for account crediting and dispute resolution purposes.
Section 5
Legal Basis for Processing
vt777 processes your Personal Data on one or more of the following legal bases:
- Contractual necessity: Processing is necessary to perform the contract between you and vt777 — specifically, to register your Account, process deposits and withdrawals, credit game winnings, and provide customer support.
- Legal obligation: vt777 is required to collect and retain certain data — particularly identity and financial records — to comply with applicable anti-money laundering (AML) and know-your-customer (KYC) obligations under internationally recognized financial crime prevention standards.
- Legitimate interests: vt777 processes Technical Data and Usage Data on the basis of its legitimate interest in maintaining platform security, detecting fraud and bonus abuse, improving the user experience, and conducting anonymized analytics. These interests are balanced against your privacy rights, and we apply proportionality in all such processing activities.
- Consent: Where vt777 sends you promotional communications (such as bonus offers, seasonal promotions tied to Idul Fitri, Imlek, or Indonesian Independence Day), we rely on your affirmative opt-in consent. You may withdraw this consent at any time by updating your communication preferences in your Account settings or by contacting our support team.
Section 6
Purposes of Processing
vt777 uses your Personal Data for the following specific purposes:
- Account management: Creating, maintaining, verifying, and — where applicable — closing your vt777 Member Account.
- Service delivery: Enabling you to place bets on the sportsbook (including BRI Liga 1, EPL, La Liga, Serie A, Bundesliga, Champions League, and AFF Cup markets), play slot games from Pragmatic Play, Microgaming, NetEnt, and partner studios, participate in live casino games including Dragon Tiger via Evolution Gaming, and play Crash Game via Spribe.
- Payment processing: Facilitating IDR deposits and withdrawals through BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata, OCBC NISP, BSI, OVO, DANA, GoPay, ShopeePay, and LinkAja.
- Identity verification (KYC): Confirming your identity, age (21+), and payment method ownership before processing your first withdrawal or when required by our compliance team.
- Fraud prevention and security: Detecting unauthorized access, duplicate accounts, collusion, bonus abuse, money laundering, and other prohibited conduct as defined in the vt777 Terms & Conditions.
- Responsible gaming: Monitoring gaming patterns to identify potential problem gambling behavior and, where appropriate, proactively contacting Members who may benefit from responsible gaming tools such as deposit limits, session reminders, cool-off periods, or self-exclusion. For more information, see our Responsible Gaming page.
- Customer support: Responding to your inquiries, resolving disputes, and providing assistance via live chat and email ([email protected]) in both English and Bahasa Indonesia, 24/7.
- Marketing communications: Sending you personalized bonus offers, promotional campaigns, and seasonal promotions — only where you have provided opt-in consent and subject to your ongoing communication preferences.
- Platform improvement: Using anonymized and aggregated Usage Data to understand how Members interact with the platform, optimize game placement and navigation, and improve overall site performance.
- Legal compliance: Retaining records as required by applicable AML regulations and responding to lawful requests from regulatory or law enforcement authorities.
⚠ Purpose Limitation: vt777 will not use your Personal Data for any purpose that is incompatible with the purposes listed above without first notifying you and, where required, obtaining your consent.
Section 7
Data Sharing
vt777 does not sell your Personal Data to any third party. We may share your data only in the following strictly controlled circumstances:
- Payment processors: BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata, OCBC NISP, BSI, OVO, DANA, GoPay, ShopeePay, and LinkAja receive only the transaction data strictly necessary to execute your deposit or withdrawal. vt777 does not share your game history or other Account data with payment processors.
- KYC and identity verification providers: Licensed third-party KYC providers receive your identity document data solely for the purpose of verifying your identity. These providers are bound by strict data processing agreements and are prohibited from using your data for any other purpose.
- Game studios: Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Pocket Games Soft, Spribe, and other platform game providers receive session tokens and anonymized player identifiers to facilitate game delivery. They do not receive your full identity or financial data.
- IT infrastructure and security providers: Cloud hosting, content delivery, and cybersecurity vendors that support the vt777 platform may process Technical Data as Data Processors under binding agreements that prohibit any independent use of that data.
- Legal and regulatory authorities: vt777 may disclose Personal Data to regulatory bodies, law enforcement agencies, or courts of competent jurisdiction where required by applicable law, court order, or where disclosure is necessary to protect the rights, property, or safety of vt777, its Members, or the public.
- Business transfers: In the event of a merger, acquisition, or sale of substantially all assets of the vt777 operator, your Personal Data may be transferred to the acquiring entity, subject to equivalent data protection obligations. You will be notified of any such transfer.
No Cross-Selling: vt777 strictly prohibits sharing Member data with unaffiliated third-party marketers, data brokers, or advertising networks. Your Personal Data is used exclusively to provide and improve the vt777 Services and to fulfill our legal obligations.
Section 8
Cookies & Tracking Technologies
vt777 uses cookies and similar tracking technologies to operate the platform effectively and to improve your experience. The following categories of cookies are in use:
- Strictly necessary cookies: Essential for core platform functionality such as maintaining your login session, remembering your balance state between page loads, and processing transactions securely. These cookies cannot be disabled without impacting platform functionality.
- Functional cookies: Remember your preferences such as preferred odds format (decimal, fractional, or Indonesian), language display settings, and game lobby filters. Disabling these cookies will cause the platform to revert to its default settings on each visit.
- Analytics cookies: Collect anonymized Usage Data (pages visited, session duration, click paths) to help vt777 understand platform usage patterns and prioritize improvements. vt777 uses self-hosted analytics tools; your data is not shared with third-party analytics providers for their independent use.
- Security cookies: Used to detect fraudulent login attempts, CSRF (cross-site request forgery) attacks, and bot activity. These cookies are strictly necessary and cannot be disabled.
Most browsers allow you to control cookies through their settings panel. You may choose to block or delete non-essential cookies at any time. However, please note that disabling cookies beyond strictly necessary ones may impair your ability to use certain vt777 features, including saved preferences, session continuity, and personalized game recommendations.
No Third-Party Advertising Cookies: vt777 does not deploy third-party advertising cookies, retargeting pixels, or social media tracking scripts on its platform. Your browsing activity on vt777 is not shared with Facebook, Google Ads, or any other advertising platform.
Section 9
Data Retention
vt777 retains Personal Data for no longer than is necessary for the purposes described in this Policy. The following retention periods apply:
- Active Account data: Retained for the full duration of your membership and for a period of 5 years following permanent account closure, to satisfy AML record-keeping obligations and to handle any post-closure disputes or regulatory inquiries.
- KYC documents: Retained for a minimum of 5 years following account closure or the completion of the relevant KYC verification event, consistent with internationally recognized AML retention standards.
- Financial transaction records: Retained for 5 years following each transaction date, in line with standard financial record-keeping obligations.
- Support communications: Live chat transcripts and email correspondence are retained for 2 years following the close of the relevant support case.
- Technical and Usage Data: Anonymized and aggregated analytics data may be retained indefinitely for platform improvement purposes. Non-anonymized Technical Data (e.g., IP logs associated with a specific account) is retained for 12 months.
- Marketing consent records: Records of your opt-in consent for marketing communications are retained for the duration of your membership and for 2 years thereafter as evidence of consent.
When Personal Data is no longer required for its original purpose and no legal retention obligation applies, vt777 securely deletes or irreversibly anonymizes the data using industry-standard data destruction methods.
Section 10
Data Security
vt777 implements a multi-layered security architecture to protect your Personal Data against unauthorized access, accidental loss, alteration, or disclosure. Our security measures include:
- Transport encryption: All data in transit between your device and vt777 servers is encrypted using TLS 1.3 with 256-bit SSL certificates. This applies to all platform pages, including login, deposit, withdrawal, and support interfaces.
- Data at rest encryption: Personal Data and KYC documents stored on vt777 infrastructure are encrypted at rest using AES-256 encryption.
- Access controls: Access to Personal Data is granted on a strict need-to-know basis. All vt777 staff with data access undergo mandatory privacy and security training and are bound by confidentiality obligations.
- Two-factor authentication: Members are strongly encouraged to enable 2FA on their Accounts. vt777 internal administrative systems require 2FA for all personnel with access to Member data.
- Penetration testing: vt777 conducts periodic security assessments and penetration tests of its platform infrastructure to identify and remediate vulnerabilities proactively.
- Incident response: vt777 maintains a documented data breach response procedure. In the event of a breach that poses a risk to your rights and freedoms, affected Members will be notified without undue delay and in accordance with applicable breach notification obligations.
⚠ Your Responsibility: No security system is impenetrable. You also play a role in protecting your data — use a strong unique password, enable 2FA, never share your credentials, and report any suspected unauthorized access to our support team immediately. vt777 will never ask for your password via email or live chat.
Section 11
Your Rights
As a Member of vt777, you have the following rights in relation to your Personal Data. To exercise any of these rights, contact our privacy team using the details in Section 15:
- Right of access: You may request a copy of the Personal Data vt777 holds about you. We will respond to verified access requests within 30 days.
- Right to rectification: If any of your Personal Data is inaccurate or incomplete, you may request that we correct or update it. For most data, you can update your details directly from within your Account dashboard.
- Right to erasure ("right to be forgotten"): You may request deletion of your Personal Data. Note that this right is subject to overriding legal obligations — vt777 is required to retain certain data for AML compliance purposes even after account closure, and erasure requests cannot override these obligations.
- Right to restriction of processing: In certain circumstances (e.g., while a rectification request is being resolved), you may request that vt777 temporarily restrict processing of your Personal Data.
- Right to data portability: You may request a machine-readable export of the Personal Data you have directly provided to vt777 (e.g., registration data, communication preferences) for the purpose of transferring it to another service provider.
- Right to object: You may object at any time to processing of your Personal Data for direct marketing purposes. Upon receipt of such an objection, vt777 will cease all marketing communications to you promptly.
- Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing that occurred prior to withdrawal.
Response Timelines: vt777 aims to acknowledge all privacy rights requests within 3 business days (WIB, UTC+7) and to provide a substantive response within 30 calendar days. Complex requests may require an extension of up to an additional 30 days, in which case you will be notified of the delay and the reason for it.
Section 12
Minors
vt777 is strictly an adults-only platform. Access to and use of the platform is limited to individuals who are 21 years of age or older. vt777 does not knowingly collect or process Personal Data from anyone under the age of 21.
During registration, all Members are required to affirm that they meet the minimum age requirement. vt777 enforces this requirement through mandatory KYC verification, which requires government-issued photo identification confirming date of birth. Any account found to be held by a person under 21 will be suspended immediately, all funds will be frozen pending a compliance review, and the data associated with the underage account will be handled in accordance with applicable child protection obligations.
If you are a parent or guardian and believe that a minor in your care has registered a vt777 account or submitted Personal Data to the platform, please contact our support team immediately at [email protected] so that we can investigate and take appropriate action without delay.
Section 13
Cross-Border Data Transfers
vt777 is an internationally operated platform. Certain service providers and technology partners engaged by vt777 — including game studios, KYC providers, and infrastructure vendors — may be located outside Indonesia, which means that some Personal Data may be transferred to and processed in other jurisdictions.
Where such cross-border transfers occur, vt777 ensures that appropriate safeguards are in place to protect your Personal Data, including:
- Contractual data protection clauses in all agreements with international service providers, ensuring equivalent protections to those described in this Privacy Policy.
- Transfer impact assessments for transfers to jurisdictions that do not maintain an equivalent level of data protection to internationally recognized standards.
- Limiting the data shared with international providers to the minimum necessary for the specific purpose (e.g., session tokens rather than full identity records for game studio integrations).
By registering a vt777 Account, you acknowledge that your Personal Data may be transferred internationally in the circumstances described above, subject to the safeguards set out in this Policy.
Section 14
Amendments to This Policy
vt777 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable legal requirements, or platform functionality. When material changes are made, we will:
- Update the "Last Updated" date at the top of this page.
- Notify registered Members via the email address on file with a summary of the key changes, at least 7 days before the amended Policy takes effect.
- Display a prominent notice on the vt777 platform for the duration of the 7-day notice period.
Your continued use of the vt777 platform after the effective date of any amended Privacy Policy constitutes your acknowledgment of and agreement to the updated terms. If you do not agree with the changes, you must cease using the platform and contact our support team to close your Account before the effective date of the amendment.
The current, binding version of this Privacy Policy is always accessible at https://vt777.onl/privacy-policy. Prior versions are available upon request by contacting our privacy team.