Our Privacy Commitments to You
End-to-End Encryption
All data transmitted between your device and laju77 servers is protected by 256-bit SSL/TLS encryption — the same standard used by major Indonesian banks. Your login credentials, personal details, and financial information are never transmitted in plain text.
No Data Sold to Third Parties
laju77 does not sell, rent, or trade your personal information to any third party for their own marketing purposes. Data shared with service providers is strictly limited to what is necessary to operate the platform and is governed by binding confidentiality agreements.
You Control Your Data
You have the right to access, correct, or request deletion of your personal data at any time. Submit a data request via our support team and we will respond within 30 days. Account closure requests include full data removal subject to legal retention obligations.
Minimal Data Collection
We collect only the data necessary to operate our platform, verify identities, process payments, and fulfil our regulatory obligations. We do not collect sensitive categories of data (health, religion, political views) beyond what is strictly required for KYC compliance.
Opt-Out of Marketing
Promotional communications from laju77 are entirely opt-in. You may update your notification preferences within your account settings at any time, or contact support to be removed from all marketing lists. Transactional messages (deposit confirmations, withdrawal receipts) cannot be disabled as they are essential to your account.
Regulatory Compliance
laju77 processes personal data in accordance with international data protection standards and the requirements of our licensing jurisdiction. Where Indonesian players' data is concerned, we apply additional safeguards consistent with Indonesian personal data protection principles.
Table of Contents
- 1. Definitions
- 2. Data We Collect
- 3. How We Collect Data
- 4. Purposes of Processing
- 5. Legal Basis for Processing
- 6. Data Sharing & Disclosure
- 7. Data Retention
- 8. Data Security
- 9. Cookies & Tracking Technologies
- 10. Your Privacy Rights
- 11. Minors & Age Verification
- 12. International Data Transfers
- 13. Changes to This Policy
- 14. Contact & Data Requests
1Definitions
Throughout this Privacy Policy, the following terms carry the meanings set out below:
| Term | Meaning |
|---|---|
| "laju77" / "we" / "us" / "the Company" | The operator of the online gaming platform at https://laju77.cam, incorporated and licensed under international gaming law. |
| "Platform" | The laju77 website, any associated mobile applications, and all related services made available to registered users. |
| "Player" / "User" / "you" | Any individual who accesses, registers on, or interacts with the Platform. |
| "Personal Data" | Any information that identifies or can reasonably be used to identify you as an individual, including name, national ID number, email address, device identifiers, and financial account details. |
| "Processing" | Any operation performed on Personal Data, including collection, storage, use, disclosure, transfer, or deletion. |
| "KYC" | Know Your Customer — the identity and address verification procedures required by our licensing authority before withdrawals are processed. |
| "Data Controller" | laju77, as the entity that determines the purposes and means of processing your Personal Data. |
| "Service Provider" | A third-party organisation that processes Personal Data on behalf of laju77 under a data processing agreement (e.g., payment processors, KYC vendors, cloud hosting providers). |
| "Cookies" | Small text files placed on your device by the Platform to enable functionality, remember preferences, and collect analytical data. |
2Data We Collect
laju77 collects Personal Data across several categories, depending on your level of interaction with the Platform:
A. Registration & Identity Data
- Full legal name as it appears on your Indonesian National ID (KTP).
- Date of birth (used to verify the mandatory 21+ age requirement).
- Nationality and country of residence.
- Residential address, including kelurahan, kecamatan, city, and province.
- Email address and mobile phone number.
- Copies of identity documents submitted for KYC (KTP photograph, selfie with KTP, proof of address such as a bank statement or utility bill).
B. Financial Data
- Bank account details for deposits and withdrawals: bank name (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, BSI, Bank Permata), account number, and account holder name.
- E-wallet identifiers for OVO, DANA, GoPay, ShopeePay, and LinkAja (registered phone number or user ID).
- Transaction history: deposit amounts, withdrawal amounts, timestamps, and reference numbers — all denominated in Indonesian Rupiah (IDR).
C. Gaming Activity Data
- Bet placement records: event, market, stake, odds, and outcome for all sports bets.
- Casino and slot game session logs: game title, provider, session duration, stakes, and results.
- Bonus and promotion usage history.
- Responsible gaming tool settings and self-exclusion records.
D. Technical & Device Data
- IP address and approximate geographic location derived from it.
- Device type, operating system, browser version, and screen resolution.
- Session timestamps, login and logout times, and pages visited within the Platform.
- Cookie identifiers and analytics data as described in Section 9.
E. Communications Data
- Records of customer support interactions via live chat, WhatsApp, Telegram, and email.
- Responses to surveys, feedback forms, or promotional enquiries, if you choose to participate.
- Marketing communication preferences and consent records.
3How We Collect Data
laju77 collects Personal Da ta through the following channels:
- Direct submission: Information you provide when registering an account, completing KYC verification, making a deposit or withdrawal request, or contacting our support team.
- Automated collection: Technical and device data collected automatically when you access the Platform, including via cookies, web beacons, and server logs.
- Third-party KYC providers: Identity verification data returned by our licensed KYC partners after you submit your documents. These partners process your data solely on laju77's instructions and under binding confidentiality obligations.
- Payment processors: Transaction confirmation data received from Indonesian banks (BCA, BRI, BNI, Mandiri, and others) and e-wallet operators (OVO, DANA, GoPay, ShopeePay, LinkAja) when you deposit or withdraw funds.
- Fraud and AML screening tools: Risk-scoring data generated when your account activity is passed through automated anti-money-laundering and fraud detection systems operated by our compliance service providers.
- Game studios: Session outcome data returned by third-party game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft when you play games hosted on their servers.
4Purposes of Processing
laju77 processes your Personal Data for the following purposes:
| Purpose | Description |
|---|---|
| Account Management | Creating and maintaining your laju77 account, authenticating logins, and managing account preferences and security settings. |
| Identity Verification (KYC) | Confirming that you meet the 21+ age requirement and residency eligibility criteria before permitting withdrawals or full platform access. |
| Payment Processing | Facilitating deposits via local Indonesian banks and e-wallets, processing withdrawal requests, and reconciling transaction records in IDR. |
| Gaming Operations | Delivering sports betting, live casino, and slot game services; settling bets; crediting winnings; and maintaining an accurate game history. |
| Regulatory Compliance & AML | Meeting our obligations under international anti-money-laundering regulations, reporting suspicious activity to competent authorities as required, and maintaining records for audit purposes. |
| Fraud Prevention & Security | Detecting and investigating suspicious account activity, protecting players from unauthorised access, and preventing multi-accounting and bonus abuse. |
| Responsible Gaming | Monitoring gaming behaviour for signs of problem gambling, enforcing self-exclusion and deposit limit settings, and connecting at-risk players with support resources. |
| Customer Support | Responding to enquiries, resolving disputes, and improving the quality of our support services using interaction records. |
| Marketing & Promotions | Sending personalised promotional offers and bonus notifications to players who have opted in to receive marketing communications from laju77. |
| Platform Improvement | Analysing aggregated usage data to improve website performance, game selection, payment flow, and overall player experience. |
5Legal Basis for Processing
laju77 relies on the following legal bases when processing your Personal Data:
- Contractual necessity: Processing required to fulfil the Terms & Conditions you agreed to when registering — including account management, payment processing, and game delivery.
- Legal obligation: Processing required to comply with applicable anti-money-laundering laws, licensing conditions, and regulatory reporting requirements.
- Legitimate interests: Processing necessary for fraud prevention, platform security, responsible gaming monitoring, and business analytics — where these interests are not overridden by your privacy rights.
- Consent: Processing of your data for optional marketing communications and non-essential cookies, where your explicit opt-in consent has been obtained. You may withdraw consent at any time without affecting your ability to use the Platform.
6Data Sharing & Disclosure
laju77 does not sell your Personal Data. We share it only in the following circumstances and with appropriate safeguards in place:
- KYC and identity verification partners: Licensed identity verification vendors receive the documents you submit during KYC. They process this data solely to return a verification result to laju77 and are prohibited from using it for any other purpose.
- Payment processors and Indonesian banks: Transaction details are shared with BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, BSI, Bank Permata, OVO, DANA, GoPay, ShopeePay, and LinkAja to the extent necessary to process your deposit or withdrawal.
- Game studios: Your account ID and session data are shared with game providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Pocket Games Soft, and others) to deliver and log game rounds played on their platforms.
- Fraud detection and AML service providers: Anonymised or pseudonymised risk-scoring data may be shared with compliance technology vendors for screening purposes.
- Cloud infrastructure providers: laju77 uses reputable international cloud hosting providers. Your data is stored on their servers under strict data processing agreements that prohibit independent use of the data.
- Regulatory and law enforcement authorities: We will disclose Personal Data to government bodies, regulators, or law enforcement agencies when required to do so by applicable law, a valid legal order, or our licensing authority's instructions. We will notify you of such disclosures where legally permitted to do so.
- Business transfers: In the event of a merger, acquisition, or sale of laju77 or its assets, your Personal Data may be transferred to the acquiring entity. We will notify you before your data becomes subject to a different privacy policy.
No Third-Party Marketing: laju77 does not share your Personal Data with any third party for their own marketing, advertising, or profiling purposes. If a future partnership involves data sharing for marketing, we will seek your explicit consent before any such sharing takes place.
7Data Retention
laju77 retains your Personal Data only for as long as necessary to fulfil the purpose for which it was collected, or as required by law. The following general retention periods apply:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account registration data | Duration of account + 5 years post-closure | Regulatory and licensing requirements |
| KYC documents | 5 years from date of verification | AML compliance obligations |
| Financial transaction records | 7 years from transaction date | Tax and AML record-keeping |
| Gaming activity logs | 3 years from session date | Dispute resolution and game audit |
| Customer support communications | 3 years from last interaction | Quality assurance and dispute evidence |
| Marketing consent records | Duration of consent + 2 years post-withdrawal | Proof of consent compliance |
| Technical / server logs | 90 days rolling | Security monitoring and fraud detection |
When data reaches the end of its retention period, it is securely deleted or irreversibly anonymised so that it can no longer be attributed to you as an individual. Anonymised aggregated data may be retained indefinitely for statistical and business intelligence purposes.
8Data Security
laju77 employs a layered set of technical and organisational security measures to protect your Personal Data against unauthorised access, loss, alteration, or destruction:
- Transport encryption: All data in transit is protected by 256-bit SSL/TLS encryption. HTTPS is enforced across the entire laju77 Platform with HSTS headers.
- Storage encryption: Sensitive data fields (national ID numbers, bank account numbers, KYC document files) are encrypted at rest using AES-256 before being written to disk.
- Access controls: Access to production systems containing Personal Data is restricted to authorised laju77 personnel on a strict need-to-know basis, enforced through role-based access controls and multi-factor authentication.
- Password security: Account passwords are stored as salted cryptographic hashes using industry-standard algorithms. laju77 employees cannot retrieve your plain-text password.
- Penetration testing: Our Platform undergoes regular security assessments by independent third-party security professionals to identify and remediate vulnerabilities before they can be exploited.
- Incident response: In the event of a confirmed data breach affecting your Personal Data, laju77 will notify affected players within 72 hours of becoming aware of the incident, describing the nature of the breach and the steps taken to contain it.
Your Role in Security: While laju77 maintains robust platform-level security, you are responsible for keeping your account credentials confidential. Use a strong, unique password and enable two-factor authentication where available. Do not share your login details with anyone, including family members. If you suspect your account has been compromised, contact our support team immediately.
9Cookies & Tracking Technologies
laju77 uses cookies and similar tracking technologies to operate the Platform, remember your preferences, and analyse usage patterns. The following categories of cookies are used:
- Strictly Necessary Cookies: Essential to the operation of the Platform. They enable core functions such as login session management, shopping cart functionality (for deposit flows), and security token validation. These cookies cannot be disabled without impairing your ability to use the Platform.
- Functional Cookies: Remember your preferences such as preferred language display, notification settings, and odds format (decimal / fractional / American). Disabling these cookies means your preferences will not be saved between sessions.
- Analytical Cookies: Collect anonymised data about how players navigate the Platform — which pages are visited most, where users drop off in the deposit flow, and how long sessions last. This data is used solely to improve Platform performance and user experience. laju77 uses privacy-respecting analytics tools configured to anonymise IP addresses before storage.
- Marketing Cookies (opt-in only): Used to deliver personalised promotional content based on your gaming preferences and interaction history. These cookies are only set with your explicit consent and can be withdrawn at any time via your account notification settings.
You may manage cookie preferences through your browser settings. Note that disabling all cookies may prevent certain features of the Platform from functioning correctly. Most modern browsers allow you to block third-party cookies specifically while permitting first-party (laju77-set) cookies, which is the configuration we recommend for the best balance of privacy and usability.
10Your Privacy Rights
As a laju77 player, you hold the following rights with respect to your Personal Data. To exercise any of these rights, contact our support team as described in Section 14. We will acknowledge your request within 5 business days and fulfil it within 30 calendar days.
Right of Access
Request a copy of all Personal Data laju77 holds about you, along with information on how it is processed and shared.
Right to Rectification
Request correction of any inaccurate or incomplete Personal Data. Some corrections may require re-submission of KYC documents.
Right to Erasure
Request deletion of your Personal Data where it is no longer necessary for the purpose it was collected, subject to our legal retention obligations.
Right to Object
Object to processing based on our legitimate interests, including direct marketing. We will cease that processing unless we can demonstrate compelling grounds that override your interests.
Right to Restriction
Request that we restrict processing of your data while a rectification or objection request is under review, or where processing is unlawful but you prefer restriction over deletion.
Right to Portability
Receive a structured, machine-readable copy of the Personal Data you provided to laju77 directly, for transfer to another service provider.
Right Against Automated Decisions
Request human review of any decision made solely by automated means that significantly affects you, such as account suspension triggered by fraud detection algorithms.
Right to Withdraw Consent
Withdraw consent for marketing communications or non-essential cookies at any time, without affecting your right to continue using the Platform.
11Minors & Age Verification
The laju77 Platform is strictly intended for adults aged 21 and over. We do not knowingly collect Personal Data from individuals under the age of 21. Age verification is a mandatory step in the account registration process, and full KYC verification — including submission of a government-issued Indonesian National ID (KTP) — is required before any withdrawal is processed.
If laju77 becomes aware that Personal Data has been collected from an individual who is under 21 years of age, we will immediately:
- Suspend the account and prevent further gaming activity.
- Return any verifiable real-money deposits to the originating payment method.
- Permanently delete the minor's Personal Data from our systems, except where retention is required to document the incident for regulatory purposes.
If you believe a minor has registered on the laju77 Platform, please contact us immediately at [email protected] so we can investigate and take prompt action.
12International Data Transfers
laju77 operates internationally and may transfer your Personal Data to servers or service providers located outside Indonesia. Such transfers occur for purposes including cloud hosting, KYC verification processing, and game studio integration.
Whenever your Personal Data is transferred outside Indonesia, laju77 ensures that appropriate safeguards are in place to maintain a level of protection equivalent to that afforded within Indonesia. These safeguards include:
- Data processing agreements containing standard contractual clauses that bind recipient organisations to strict data protection obligations.
- Transfer only to jurisdictions that offer adequate levels of data protection as assessed by recognised international frameworks.
- Technical measures such as end-to-end encryption during transit to prevent interception of data in transit between jurisdictions.
Your Consent to Transfer: By registering an account and using the laju77 Platform, you acknowledge that your Personal Data may be processed in countries outside Indonesia as described in this section. If you have concerns about international data transfers, please contact us before registering.
13Changes to This Privacy Policy
laju77 may update this Privacy Policy from time to time to reflect changes in our data practices, regulatory requirements, or the services we offer. The "Effective Date" and "Version" indicator at the top of this document will always reflect the most current revision.
Where changes are material — affecting your rights, the categories of data we collect, or the purposes for which we use it — we will notify you by:
- Displaying a prominent notice on the laju77 homepage and your account dashboard for a minimum of 14 days prior to the change taking effect.
- Sending an email notification to the address registered on your account, at least 7 days before the updated policy becomes effective.
Your continued use of the Platform after the stated effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with the changes, you should cease using the Platform and contact support to request account closure.
Non-material changes — such as typographical corrections or clarifications that do not affect your rights — may be made without advance notice.
14Contact & Data Requests
For all privacy-related enquiries, requests to exercise your data rights, or concerns about how laju77 handles your Personal Data, please contact our Data Protection team using the details below. All communications must be in English.
- Support Email (plain text — not a clickable link): [email protected]
- Subject line for data requests: Please use "Privacy Request — [Your Registered Name]" to ensure your email is routed directly to the Data Protection team.
- Live Chat: Available 24/7 via the chat widget on the laju77 Platform for general privacy questions. Formal data requests must be submitted by email for audit trail purposes.
- Response time: We acknowledge all privacy requests within 5 business days and complete them within 30 calendar days. For complex requests, we may extend this period by a further 30 days, notifying you of the extension in advance.
- Identity verification for data requests: To protect your data, we are required to verify your identity before fulfilling any access, rectification, or erasure request. We will ask you to confirm details that match your registered account.
Related Policies: This Privacy Policy should be read alongside our Terms & Conditions and our Responsible Gaming policy, which together govern your relationship with laju77 and your rights as a player on our Platform.
Have Questions About Your Privacy?
Our support team is available around the clock to address any data protection concerns. You can also explore our FAQ for quick answers, or review our full Terms & Conditions.