Privacy Policy — mak77
Your Data, Our Responsibility

For the purposes of this Privacy Policy, the following terms bear the meanings set out below.

• "mak77" / "we" / "us" / "our" — The online betting and gaming platform operated at https://mak77.cam and its operating entity.
• "Personal Data" — Any information that identifies or could reasonably identify a living individual, including name, contact details, payment information, device identifiers, and behavioural data.
• "Member" / "you" / "your" — Any individual who registers an Account on mak77 or visits the platform.
• "Processing" — Any operation performed on Personal Data, including collection, storage, use, disclosure, or deletion.
• "Controller" — The entity that determines the purposes and means of processing Personal Data — in this case, mak77.
• "Processor" — Any third party that processes Personal Data on behalf of mak77 under a data-processing agreement.
• "KYC" — Know Your Customer — the identity and address verification process required by mak77's licence obligations before withdrawals are permitted.
• "Cookie" — A small text file placed on your device by a web server to facilitate session management, preferences, or analytics.

This Privacy Policy applies to all Personal Data collected by mak77 through the https://mak77.cam website and any associated mobile-optimised interface, customer support channels, and communications. It forms part of the overall agreement between mak77 and its Members, alongside the Terms & Conditions and Responsible Gaming Policy.

mak77 operates as an internationally licensed online betting platform serving English-preference Indonesian players across all 34 provinces, including Jakarta, Surabaya, Medan, Bandung, Bali, and Yogyakarta. This policy reflects internationally recognised privacy principles, including those embodied in the EU General Data Protection Regulation (GDPR), which mak77 adopts as a baseline standard regardless of the jurisdiction from which a Member accesses the platform.

mak77 collects Personal Data through three primary channels: information you provide directly, information generated automatically by your use of the platform, and information received from third-party verification and payment partners.

mak77 does not collect sensitive Personal Data (such as racial or ethnic origin, religious beliefs, or health data) except where strictly required by KYC or responsible gaming obligations — for example, a voluntary self-exclusion request that references a gambling-related health concern.

mak77 uses the Personal Data it collects for the following purposes only:

mak77 processes Personal Data only where a valid legal basis exists. The applicable bases for each processing purpose are as follows:

• Contract Performance: Processing necessary to perform the Account agreement between you and mak77 — account creation, deposit processing, withdrawal payments, and wager settlement.
• Legal Obligation: Processing required to comply with KYC/AML obligations under mak77's licence, or to respond to lawful authority requests.
• Legitimate Interests: Processing for fraud prevention, platform security, and aggregated analytics — where those interests are not overridden by your data-protection rights.
• Consent: Where you have provided explicit consent — for example, voluntary participation in responsible gaming monitoring programmes or optional marketing communications (if any are introduced in the future). You may withdraw consent at any time.

mak77 does not sell, rent, or license your Personal Data to any third party for commercial purposes. We share data only in the limited circumstances described below, and only to the minimum extent necessary.

• Payment Processors: BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, and LinkAja receive the transaction data necessary to execute your deposit or withdrawal request. Each provider's own privacy policy governs their handling of that data.
• KYC Verification Partners: Where we use a third-party identity-verification service to assist with KYC processing, your identity documents are shared solely for that purpose under a data-processing agreement.
• Fraud Prevention Services: Anonymised or pseudonymised technical signals may be shared with fraud-detection partners to protect the platform against abuse.
• Legal & Regulatory Authorities: We disclose Personal Data to law enforcement agencies, regulatory bodies, or courts where required by law, court order, or to protect the rights, property, or safety of mak77, its Members, or the public.
• Corporate Successors: In the event of a merger, acquisition, or sale of all or part of mak77's assets, Personal Data may be transferred to the successor entity, which will be required to honour this Privacy Policy.

mak77 uses cookies and similar technologies (such as local storage and session storage) to operate and improve the platform. The cookies we use fall into the following categories:

mak77 does not use third-party advertising cookies, retargeting pixels, or social media tracking scripts. You may manage cookie preferences through your browser settings; disabling strictly necessary cookies will impair your ability to use the platform.

mak77 retains Personal Data for the minimum period necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following retention periods apply as a general guide:

• Active Account Data: Retained for the duration of your Account and for a period of 5 years following Account closure, to satisfy AML record-keeping obligations under our international licence.
• KYC Documents: Retained for a minimum of 5 years following the date of verification or Account closure (whichever is later), in line with standard AML retention requirements.
• Transaction Records: Retained for 7 years following the transaction date, as required by financial record-keeping standards applicable to licensed betting operators.
• Customer Support Communications: Retained for 3 years following resolution of the relevant issue, to allow follow-up and quality assurance.
• Technical & Log Data: Retained for up to 12 months, after which it is anonymised or deleted.
• Marketing Consent Records (if applicable): Retained for the duration of consent and for 3 years after withdrawal, as evidence of lawful marketing activity.

Upon expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymised. mak77 conducts periodic data audits to ensure retention periods are observed.

mak77 implements a layered security architecture to protect Personal Data against unauthorised access, disclosure, alteration, and destruction. Key security measures include:

• TLS 1.3 Encryption: All data in transit between your device and mak77 servers is encrypted using industry-standard TLS 1.3 (minimum) protocols.
• Data-at-Rest Encryption: Personal Data stored on mak77 servers is encrypted using AES-256 or equivalent standards.
• Access Controls: Access to Personal Data is restricted to authorised personnel only, governed by role-based access controls and monitored via access logging.
• Infrastructure Redundancy: Data is hosted across geographically redundant data centres to ensure continuity and disaster recovery.
• Regular Security Audits: mak77 conducts periodic penetration testing and security reviews, engaging independent specialists where appropriate.
• Staff Training: All personnel with access to Personal Data receive regular data protection and security awareness training.

In the event of a Personal Data breach that poses a high risk to your rights and freedoms, mak77 will notify affected Members without undue delay and, where required, report the breach to relevant regulatory authorities.

mak77 is operated by an entity incorporated in an offshore jurisdiction and your Personal Data may be transferred to, stored in, and processed in countries outside Indonesia. These countries may not have data protection laws equivalent to those in force in the European Union or other high-standard jurisdictions.

Where such transfers occur, mak77 ensures an appropriate level of protection through one or more of the following mechanisms: binding contractual clauses incorporating GDPR standard contractual provisions; transfer to a jurisdiction that has been assessed as providing adequate protection; or express consent from the data subject in appropriate circumstances.

Specifically, your data may be processed in the country where mak77's servers are hosted and in the jurisdictions of our third-party payment partners (BCA, BRI, BNI, and Mandiri operate primarily in Indonesia; OVO, DANA, GoPay, ShopeePay, and LinkAja are also Indonesia-based e-wallet providers). Server hosting may occur in Singapore, Hong Kong, or other data centre regions with robust security certifications.

mak77 is strictly an adults-only platform. The minimum age of eligibility is 21 years, and age verification is a mandatory step of the Account registration and KYC process. mak77 does not knowingly collect Personal Data from individuals under the age of 21.

If mak77 becomes aware that Personal Data has been collected from a person under the age of 21 without verified parental consent, we will immediately suspend the Account, delete the associated Personal Data, and return any real-money balance to the deposit source after completing applicable compliance checks.

If you believe a person under 21 has registered on mak77 or is using your Account, please contact [email protected] immediately. See our Responsible Gaming page for additional guidance on underage gambling prevention.

The mak77 platform may from time to time reference or integrate with third-party services — including payment gateways operated by BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, and LinkAja. These services operate independently of mak77 and are governed by their own privacy policies.

mak77 is not responsible for the data practices of any third party. We encourage you to review the privacy policies of any third-party service you use in connection with your mak77 Account, particularly your chosen payment provider, before sharing personal or financial information with them.

mak77 uses account activity data — including deposit frequency, session duration, wager volumes, and loss patterns — to support our responsible gaming obligations. This monitoring is conducted in the Member's interest and is a condition of our operating licence.

Where our systems detect patterns consistent with problematic gambling behaviour, a member of our responsible gaming team may contact you via your registered email address or live chat to offer support resources or to enquire whether you wish to activate a responsible gaming tool. This outreach is not promotional — it is a player-protection measure.

Self-exclusion data — including the fact that a self-exclusion is in force and its duration — is treated as sensitive data and is not shared with any third party except as required by our licence or by law. Self-exclusion records are retained for a minimum of 5 years from the date of the request to ensure the exclusion can be reinstated if needed and to satisfy audit obligations.

For full details of available responsible gaming tools, visit our Responsible Gaming page. Adults only — 21+.

mak77 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. Material changes — those that significantly affect your rights or how your Personal Data is used — will be communicated via the email address registered on your Account at least 14 days before the revised policy takes effect.

Non-material changes (such as typographical corrections, additional examples, or minor clarifications that do not reduce your rights) may be published without advance notice. The effective date at the top of this page will always reflect the most recent revision.

Continued use of the mak77 platform following the effective date of a revised Privacy Policy constitutes acceptance of the updated terms. If you do not accept a material change, you must contact us to close your Account before the revised policy takes effect.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or wish to raise a complaint about how mak77 has handled your Personal Data, please contact us using the details below. All contact details are provided as plain text only.

mak77 will acknowledge all formal data rights requests within 5 business days (WIB) and provide a substantive response within 30 calendar days. In complex cases, this period may be extended by a further 60 days, in which case we will notify you of the extension and the reason for it.

If you are not satisfied with mak77's response to your complaint, you have the right to lodge a complaint with the relevant data protection authority in your jurisdiction. mak77 encourages all unresolved complaints to be escalated and will cooperate fully with any resulting investigation.

This Privacy Policy was last reviewed and updated on 1 January 2026. The English-language version is the authoritative version; any translation provided for convenience does not supersede this text.