online177 Privacy Policy – Data Protection & Your Rights

This page describes what we collect when you use online177 and how we keep that data protected. Many gaming operators share payment data with third parties; we minimize that practice and encrypt all sensitive information at rest and in transit. We do not sell your personal data to marketers or data brokers, nor do we process data outside the legal frameworks that apply in your jurisdiction.

We collect information necessary to verify your account, process deposits and withdrawals, comply with anti-money-laundering (AML) regulations, and improve our service. This includes your full name, date of birth, email, phone number, government-issued ID number, proof of address, IP address, and payment method details. We use this information only to operate online177 securely and in compliance with applicable law.

If you have questions about how we handle your data, what rights you have, or how to request deletion, contact our support team. We respond to data requests within 5–10 business days.

What We Collect on online177

We collect account registration data: full legal name, date of birth, email address, phone number, and username. We require government-issued ID (National ID, passport, or driver's license) and proof of address (utility bill or bank statement dated within 3 months) before your first withdrawal. During deposit and withdrawal, we collect payment method details (DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, e-wallet account identifiers) and transaction history.

We also collect technical data: your IP address, browser type, device type, operating system, and timestamps of login and activity. This helps us detect fraudulent access attempts and prevent account takeovers. We do not collect location data beyond what your IP address reveals. We do not track your activity outside online177 or build profiles to sell to advertisers.

How We Use Your Data

We use your personal data to: verify your identity before account activation, process deposits and withdrawals, comply with anti-money-laundering (AML) and know-your-customer (KYC) regulations, detect and prevent fraud, respond to support requests, and improve our platform. We may contact you via email or SMS to confirm deposits, alert you to large withdrawals, or notify you of account security issues. We use technical data to diagnose network problems, optimize mobile app performance, and track which games are most used—not to profile you for marketing.

Third-Party Processors and Payment Partners

We use third-party processors to handle payments. When you deposit or withdraw via mobile banking, local payment, online payment, e-wallet, or mobile banking, those platforms process your transaction and receive only the information necessary to complete the payment (amount, timestamp, transaction ID). We do not share your government ID or proof of address with payment processors. Bank virtual account transfers (local payment, online payment, e-wallet, mobile banking) are processed by the respective banks; we share only your username and the generated account number.

We use a third-party hosting provider to store account data, game history, and transaction logs. Our hosting is located outside Indonesia but complies with data protection standards. We use a third-party email provider to send password-reset links and account alerts; your email address is shared only for these purposes. All third-party processors are contractually obligated to protect your data and use it only for the stated purpose.

Cookies and Tracking Technologies

We use cookies to remember your login session, store your language preference, and track which games you viewed (so we can show relevant updates in your feed). These are functional cookies; they do not collect personal data. We do not use advertising cookies or third-party tracking pixels. You can disable cookies in your browser settings, but you will need to log in again on each visit, and some features may not work correctly.

We use basic analytics to count total users, track which games are popular, and measure page load times. We do not use Google Analytics or other third-party analytics tools that track users across websites. Analytics data is anonymous and aggregated; we cannot link it back to individual users.

We at online177 do not sell, rent, or trade your personal data. Your information is protected, not monetised.

How We Protect Your Data

We encrypt all account data and payment information using industry-standard protocols (TLS 1.2+). Your password is hashed and salted; we do not store it in plain text. We do not store full payment card or virtual account details; we retain only the last four digits for reference. Access to personal data is restricted to staff who need it for their role—support team members, compliance officers, and engineers—and all access is logged.

We require strong passwords (minimum 8 characters, mixed case, numbers). We offer two-factor authentication (OTP via SMS); we recommend enabling it in your account settings. If you believe your account has been compromised, change your password immediately and contact support. We conduct annual security audits and penetration testing to identify vulnerabilities.

Your Rights on online177

You have the right to request a copy of all personal data we hold about you. Submit a request via our support form with the subject "Data Access Request"; we will provide a downloadable file within 5–10 business days. You have the right to request deletion of your account and associated data, subject to legal retention requirements (see below). You have the right to correct inaccurate information; update your profile directly or contact support.

You have the right to withdraw consent for marketing communications at any time. You have the right to object to automated decision-making (e.g., automatic fraud holds); all account holds are reviewed by human staff before enforcement. We do not use purely automated profiling or algorithms to make final decisions about your account. If you disagree with our handling of your data, contact our privacy officer via email; we will investigate and respond within 5 business days.

Data Retention

We retain account registration data and transaction history for seven years from the date of account closure or last transaction, as required by anti-money-laundering regulations. We retain technical data (IP logs, login timestamps) for 12 months. We retain support correspondence (emails, chat transcripts) for three years. After these periods, data is securely deleted or anonymised. You cannot request deletion of transaction data during the seven-year retention period if the account was active; this is a legal requirement, not our choice.

Jurisdiction and International Data Transfer

We operate online177 in Indonesia and other supported jurisdictions where online gaming is permitted by law. Our hosting servers may be located outside Indonesia; your data may be transferred internationally. By using online177, you consent to this transfer. We comply with data protection laws applicable in your jurisdiction. Users in Jakarta, Surabaya, Bandung, Medan, Semarang, and Yogyakarta benefit from the same encryption and access controls regardless of server location.

1. Account creation

   We collect your name, email, phone, and date of birth.

2. Verification

   We request government ID and proof of address before your first withdrawal.

3. Payment processing

   We collect DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, e-wallet details to process deposits and withdrawals.

4. Compliance

   We retain your data for seven years to comply with AML regulations.

Contact Us About Privacy

If you have questions about this policy, want to request your data, or have a privacy concern, contact our support team. Send an email with the subject "Privacy Request" to our support email address listed on the platform. You can also use the live chat feature during business hours. We aim to respond to all data and privacy inquiries within 5 business days.

This privacy policy is effective as of the date you first register on online177. We may update this policy from time to time to reflect changes in our practices or legal requirements. If we make material changes, we will notify you via email. Your continued use of online177 after an update constitutes acceptance of the updated policy.

We are committed to protecting your privacy while operating online177 securely and in compliance with law. Thank you for trusting us with your data.