Privacy Policy

uji777 ("we", "us", "our") is committed to protecting the privacy and personal data of every individual who interacts with our platform — whether as a registered Member, a prospective Member, or a general visitor to https://uji777.app. This Privacy Policy sets out a transparent and comprehensive account of our data practices, written in plain English so that every Member can understand exactly how their information is handled.

We recognise that the trust of our Members — particularly those based in Indonesia — is foundational to everything we do. In an industry where personal and financial data is highly sensitive, we hold ourselves to the highest standards of data stewardship. Our data practices are guided by internationally recognised principles of data protection: lawfulness, fairness, transparency, purpose limitation, data minimisation, accuracy, storage limitation, integrity, confidentiality, and accountability.

This policy applies to all data processing activities conducted by uji777, including data collected through our website, mobile-optimised platform, customer support channels (live chat, email, WhatsApp), and any promotional communications you may receive from us. It does not apply to third-party websites or services that may be linked from our platform — those entities operate under their own privacy policies.

If you have any questions about this policy or wish to exercise any of the rights described herein, please contact our Data Protection team at [email protected].

uji777 collects personal data in several categories depending on the nature of your interaction with the platform. The categories below describe what we collect, with examples of specific data points within each category.

uji777 collects personal data through the following channels and mechanisms:

• Direct Submission: When you complete the uji777 registration form, submit KYC documents, make a deposit or withdrawal request, contact our support team via live chat, email, or WhatsApp, or participate in a promotional offer, you provide data directly to us.
• Automated Collection: When you visit and interact with the uji777 platform, our servers and analytics tools automatically record technical and usage data such as your IP address, device fingerprint, session duration, and navigation path.
• Cookies and Similar Technologies: uji777 uses cookies, web beacons, pixel tags, and local storage objects to enhance platform functionality, maintain session state, and gather anonymised usage analytics. See Section 7 (Cookies & Tracking) for full details.
• Third-Party Verification Providers: During KYC verification, identity and address data may be cross-referenced against government databases and third-party identity verification services. These providers supply us with verification outcomes and confidence scores but do not retain your raw document data beyond their own retention policies.
• Payment Processors: When you initiate a deposit or withdrawal via a local Indonesian bank (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI) or e-wallet (OVO, DANA, GoPay, ShopeePay, LinkAja), transaction confirmation data is transmitted to uji777 by the relevant payment intermediary.
• Game Studios & Platform Partners: Where you play games powered by third-party studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, or Spribe, anonymised session data and game-round results may be shared between the studio's systems and ours for settlement and dispute-resolution purposes.

uji777 processes your personal data for specific, documented purposes only. We do not use your data for any purpose incompatible with those stated at the time of collection. Our primary processing purposes are as follows:

1. Account Management: Creating and maintaining your uji777 account, authenticating your identity at login, managing account settings and preferences, and communicating important account notices.
2. Payment Processing: Facilitating deposits in IDR via supported Indonesian banks and e-wallets, processing withdrawal requests to verified accounts, reconciling transaction records, and generating financial statements.
3. KYC & Compliance: Verifying your identity and age (21+ requirement), screening against sanctions and PEP lists, fulfilling anti-money laundering (AML) and counter-financing of terrorism (CFT) obligations, and maintaining compliant records for regulatory inspection.
4. Platform Operations & Security: Delivering the uji777 sportsbook, casino, slots, video poker, and online poker services; detecting and preventing fraud, account takeovers, bonus abuse, collusion, and other prohibited conduct; maintaining platform stability and performance.
5. Customer Support: Responding to your enquiries, resolving disputes, processing complaints, and maintaining support quality through conversation review and agent training.
6. Responsible Gaming: Monitoring gaming behaviour for indicators of problem gambling, enforcing deposit limits, session limits, cooling-off periods, and self-exclusions you have set, and proactively reaching out where our systems detect elevated risk patterns.
7. Marketing & Personalisation: Sending promotional offers, bonus notifications, and product updates via email or WhatsApp — but only where you have explicitly opted in to marketing communications. You may withdraw your marketing consent at any time by contacting support or updating your account preferences.
8. Analytics & Product Development: Analysing aggregated and anonymised usage data to improve platform features, optimise user experience, and develop new products. This analytics processing does not identify individual Members.
9. Legal Obligations: Complying with lawful requests from regulatory authorities, court orders, law enforcement agencies, and other legally mandated disclosures.

uji777 processes personal data on the following legal bases, which collectively cover all processing activities described in this policy:

Where uji777 relies on legitimate interests as the legal basis for processing, a balancing test is conducted to ensure that our interests do not override the privacy rights of individual Members. Records of these assessments are maintained internally and are available to relevant regulatory authorities upon request.

uji777 does not sell, rent, or exchange your personal data with any third party for their own commercial purposes. We share data only in the following limited and controlled circumstances:

• Payment Processors & Banks: Transaction data is shared with the relevant Indonesian bank (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata) or e-wallet provider (OVO, DANA, GoPay, ShopeePay, LinkAja) solely to process your deposit or withdrawal.
• KYC & Identity Verification Providers: Identity documents and biometric data submitted during KYC verification are processed by contracted third-party verification services operating under strict data processing agreements and applicable privacy standards.
• Game Studios & Software Providers: Anonymised session identifiers and game-round data are exchanged with licensed studios (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Pocket Games Soft) to facilitate real-time game delivery, result settlement, and technical support.
• Fraud Prevention & Security Partners: Technical identifiers (IP address, device fingerprint) may be shared with contracted fraud-detection services to identify and prevent account takeovers, multi-accounting, and other prohibited activities.
• Legal & Regulatory Authorities: uji777 may disclose personal data to law enforcement agencies, regulatory bodies, courts, or other public authorities when required to do so by law, court order, or where necessary to protect the rights, property, or safety of uji777 or its Members.
• Corporate Transactions: In the event of a merger, acquisition, restructuring, or sale of substantially all of the assets of uji777, your personal data may be transferred to the successor entity. You will be notified of any such transfer and the privacy terms applicable to your data post-transfer.

All third-party service providers with whom uji777 shares personal data are bound by written data processing agreements that require them to implement appropriate technical and organisational safeguards, process data only for the specified purposes, and comply with applicable privacy law.

uji777 uses cookies and similar tracking technologies to operate the platform effectively, maintain session continuity, and gather anonymised performance data. The following categories of cookies are in use:

You can manage your cookie preferences at any time through your browser settings. Note that disabling strictly necessary cookies may impair platform functionality, including your ability to log in and place wagers. Disabling other cookie categories will not affect your ability to use the core platform but may reduce the relevance of any promotional content you see.

uji777 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law or regulation. The following retention principles apply:

• Active Account Data: All personal data associated with an active uji777 account is retained for the duration of the membership and for a period of five (5) years following the date of permanent account closure, to satisfy financial record-keeping, AML, and dispute-resolution obligations.
• KYC Documents: Identity and address verification documents are retained for a minimum of five (5) years following the end of the business relationship, in line with standard AML record-keeping requirements.
• Transaction Records: Deposit, withdrawal, and wagering transaction records are retained for a minimum of five (5) years to support financial auditing, regulatory inspection, and dispute resolution.
• Support Communications: Live chat transcripts, email correspondence, and support ticket records are retained for three (3) years following the resolution of the relevant enquiry or complaint.
• Marketing Data: If you withdraw your consent to marketing communications, your marketing preference record will be updated immediately and any data held solely for marketing purposes will be deleted or anonymised within 30 days.
• Technical Logs: Server logs, access logs, and security event logs are retained for twelve (12) months and then deleted or anonymised, unless a specific security or legal matter requires their preservation.

When retention periods expire, personal data is securely deleted or irreversibly anonymised using industry-standard data destruction methods. Anonymised aggregate data may be retained indefinitely for statistical analysis, as it no longer constitutes personal data.

uji777 implements a comprehensive suite of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include, but are not limited to:

• Encryption in Transit: All data transmitted between your device and uji777 servers is encrypted using TLS 1.2 or higher with 256-bit AES cipher suites.
• Encryption at Rest: Sensitive data stored in our databases — including financial information, identity documents, and account credentials — is encrypted at rest using AES-256 encryption.
• Access Controls: Internal access to personal data is governed by a strict role-based access control (RBAC) model. Employees access only the data required for their specific job function, and all access is logged and regularly audited.
• Two-Factor Authentication (2FA): All internal administrative systems require 2FA for login. Members are also strongly encouraged to enable 2FA on their personal uji777 accounts.
• Penetration Testing: uji777 commissions independent security assessments and penetration tests on a regular basis to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: A documented incident response plan is in place to ensure rapid detection, containment, and communication in the event of a security incident. Affected Members will be notified without undue delay where an incident is likely to result in a high risk to their rights and freedoms.
• Staff Training: All uji777 staff with access to personal data receive regular data protection and security awareness training. Access permissions are reviewed and updated whenever roles change.

While uji777 takes every reasonable step to protect your personal data, no online platform can guarantee absolute security. You can contribute to your own account security by choosing a strong, unique password, enabling 2FA, and never sharing your login credentials with any third party.

As a uji777 Member, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, please contact our support team at [email protected] with a clear description of your request. We will respond within 30 calendar days. Where a request is complex or numerous, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it.

uji777 employs robust age verification controls as part of our KYC process. All Members are required to submit a government-issued photo ID — Indonesian National ID card (KTP), passport, or driving licence — which is verified by our identity verification provider to confirm both identity and date of birth prior to any withdrawal being processed.

Where our systems identify indicators that a registered account may be operated by, or on behalf of, an individual under the age of 21, the account will be immediately suspended pending further verification. If the suspicion is confirmed, the account will be permanently closed and any funds deposited will be returned to the payment source after deducting any losses incurred through betting activity, in line with applicable regulatory guidance.

If you are a parent or guardian and believe a minor has accessed the uji777 platform using your payment details or personal information, please contact us immediately at [email protected]. We will investigate the matter promptly and take all appropriate action.

uji777 operates as an international platform and, in the course of delivering its services, may transfer personal data to countries outside Indonesia. Such transfers may occur when data is processed by third-party service providers — including KYC verification partners, cloud infrastructure providers, fraud-detection services, or game studios — whose servers are located in other jurisdictions.

Whenever personal data is transferred internationally, uji777 ensures that appropriate safeguards are in place to protect the data to a standard equivalent to that required under the data protection principles described in this policy. These safeguards may include:

• Standard contractual clauses (SCCs) or equivalent contractual mechanisms between uji777 and the receiving entity, requiring the recipient to apply equivalent levels of data protection.
• Transfers to jurisdictions that maintain adequately recognised data protection frameworks.
• Binding corporate rules where the transfer is to an entity within a corporate group that has implemented group-wide data protection standards.

If you would like further information about the safeguards applicable to a specific international transfer, or wish to obtain a copy of the relevant contractual mechanisms, please contact us at [email protected].

The uji777 platform may contain references to or integrations with third-party services — for example, links to responsible gaming resources, game studios' own terms pages, or payment provider portals. Once you leave the uji777 platform and navigate to a third-party website or service, this Privacy Policy no longer applies.

Third-party websites and services operate under their own privacy policies and terms, and uji777 has no control over, and assumes no responsibility for, the content, privacy practices, or security of those external sites. We encourage you to review the privacy policy of any third-party site you visit, particularly before submitting any personal information to them.

Game studios integrated into the uji777 platform — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft — operate their game engines under their own licensing and data arrangements. While uji777 shares only the minimum necessary data with these providers to facilitate game delivery and settlement, each studio maintains its own privacy documentation. uji777 conducts due-diligence reviews of all studio partners prior to integration to ensure their data practices meet our minimum acceptable standards.

uji777 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, regulatory guidance, or platform features. When we make material changes to this policy, we will take the following steps to ensure you are informed:

• The revised policy will be published at https://uji777.app/privacy-policy with an updated "Last Updated" date prominently displayed at the top of the page.
• For material changes that significantly affect your rights or how we use your data, we will send a notification to the email address registered on your uji777 account at least 14 calendar days before the changes take effect.
• Where changes require fresh consent — for example, a new category of marketing communication or a new type of data processing — we will request your explicit consent before the new processing begins.

Your continued use of the uji777 platform after a revised Privacy Policy has taken effect constitutes your acknowledgement of the updated terms. If you do not agree with any change to this policy, you should cease using the platform and contact our support team to discuss your options, including account closure.

We encourage you to review this Privacy Policy periodically to stay informed about how uji777 protects your data. The "Last Updated" date at the top of this page indicates when the policy was most recently revised.

If you have any questions, concerns, or requests relating to this Privacy Policy or the personal data uji777 holds about you, please contact our Data Protection team using the details below. We are committed to resolving all privacy-related enquiries promptly and transparently.