dojo77 Privacy Policy

This Privacy Policy ("Policy") describes how dojo77 ("dojo77", "we ", "us", or "our") collects, uses, stores, discloses, and protects personal data in connection with the dojo77 online gaming platform accessible at https://dojo77.pro (the "Platform").

This Policy applies to all individuals who visit the Platform, register an account, place bets or wagers, contact our customer support team, or otherwise interact with any dojo77 service — collectively referred to as "Members" or "you". By accessing or using the Platform, you acknowledge that you have read and understood this Policy and consent to the data practices described herein.

This Policy should be read alongside the dojo77 Terms & Conditions, which govern the overall use of the Platform. In the event of any conflict between this Policy and the Terms & Conditions on a privacy matter, this Policy prevails.

dojo77 acts as the data controller for all personal data collected through the Platform. As data controller, dojo77 determines the purposes and means by which your personal data is processed. Where dojo77 engages third-party service providers to process data on its behalf, those providers act as data processors under written agreements that require them to handle your data only according to dojo77's documented instructions and to maintain appropriate technical and organizational security measures.

For all privacy-related enquiries, data rights requests, or concerns about this Policy, contact dojo77 using the details provided in Section 13 of this document.

dojo77 collects personal data through several channels. The categories of data we collect, and the circumstances in which we collect them, are described below.

3.1 Registration and Account Data

When you create a dojo77 account, we collect the information you provide, including:

• Full legal name as it appears on your government-issued identity document;
• Date of birth (used to verify that you are at least 21 years of age);
• Indonesian residential address;
• Valid mobile telephone number (Indonesian format);
• Active email address;
• Username and hashed password (passwords are never stored in plain text).

3.2 Identity Verification (KYC) Data

To comply with our anti-money laundering obligations and to verify your eligibility to use the Platform, dojo77 may request:

• A copy of a government-issued photo ID (KTP, SIM, or Passport);
• Proof of Indonesian residential address dated within the preceding 90 days;
• A selfie photograph alongside your submitted identity document;
• Proof of ownership of the bank account or e-wallet registered for withdrawals (e.g., a bank statement header from BCA, BRI, BNI, or Mandiri showing your name and account number).

3.3 Financial Transaction Data

When you deposit or withdraw funds, dojo77 records transaction details including: transaction date and time (WIB, UTC+7), transaction amount in IDR, payment method used (bank transfer via BCA/BRI/BNI/Mandiri/BSI/CIMB Niaga/Bank Permata or e-wallet via OVO/DANA/GoPay/ShopeePay/LinkAja), and transaction reference numbers. dojo77 does not store full bank account credentials; only masked account identifiers and the last four digits of account numbers are retained.

3.4 Gaming Activity Data

dojo77 logs your gaming activity on the Platform, including bets placed, games played (slots, live baccarat, togel (Indonesia's traditional numbers lottery), sportsbook markets), wager amounts, game outcomes, session duration, and bonus usage. This data is used for account management, dispute resolution, responsible gaming monitoring, and platform improvement.

3.5 Technical and Device Data

When you access the Platform, our servers automatically collect certain technical information, including:

• IP address and approximate geographic location derived from it;
• Browser type and version;
• Operating system and device type;
• Referral URL (the page that directed you to dojo77, if applicable);
• Pages visited on the Platform and time spent on each page;
• Session timestamps and interaction logs.

3.6 Customer Support Communications

When you contact dojo77's support team — whether by email, live chat, or any other channel — we retain records of those communications, including any personal data you voluntarily provide within the conversation, to assist with resolution and quality assurance.

dojo77 uses the personal data we collect for the following specific purposes:

dojo77 will not use your personal data for any purpose that is materially different from those listed above without first notifying you and, where required, obtaining your consent.

dojo77 processes your personal data on one or more of the following legal bases:

• Contractual necessity: processing that is required to perform the contract between you and dojo77 — including account management, payment processing, and game delivery. Without this processing, dojo77 cannot provide the Platform services.
• Legal obligation: processing required to comply with applicable laws and regulations, including anti-money laundering obligations, KYC requirements, and responses to lawful regulatory or law enforcement requests.
• Legitimate interests: processing that serves dojo77's legitimate business interests — such as fraud prevention, Platform security, and aggregated analytics — provided those interests are not overridden by your rights and interests.
• Consent: where you have given explicit, freely given, specific, and informed consent to a processing activity — such as receiving marketing communications — we rely on that consent. You may withdraw consent at any time by contacting us using the details in Section 13, without affecting the lawfulness of processing carried out before withdrawal.

dojo77 does not sell, rent, or trade your personal data to unaffiliated third parties. We may share your data with the following categories of recipients, strictly to the extent necessary for the stated purpose:

• KYC and identity verification providers: third-party services that assist dojo77 in verifying the authenticity of identity documents and confirming your eligibility to use the Platform.
• Payment processing partners: local Indonesian banks (BCA, BRI, BNI, Mandiri, BSI, CIMB Niaga, Bank Permata) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) who process deposit and withdrawal transactions. These partners receive only the minimum data required to execute the transaction.
• Game studio technology partners: providers such as Pragmatic Play, Evolution Gaming, Pocket Games Soft, NetEnt, Microgaming, and Spribe, who deliver game content through the Platform. These partners may receive anonymized session identifiers but do not receive your full identity or financial data.
• Cloud infrastructure and hosting providers: dojo77 operates on secure international cloud infrastructure. Hosting providers process technical and operational data under strict data processing agreements.
• Fraud prevention and security services: specialized providers that help dojo77 identify suspicious activity, prevent bonus abuse, and protect the Platform from unauthorized access.
• Legal and regulatory authorities: dojo77 may disclose personal data to law enforcement agencies, regulatory bodies, or courts when required to do so by applicable law, or when dojo77 reasonably believes disclosure is necessary to protect the rights, property, or safety of dojo77, its Members, or the public.

dojo77 uses cookies and similar technologies (such as local storage and session tokens) to operate and improve the Platform. The cookies we use fall into the following categories:

• Strictly necessary cookies: these are essential for the Platform to function. They maintain your login session, remember your game state, and enable secure navigation. You cannot opt out of strictly necessary cookies without losing access to the Platform.
• Performance and analytics cookies: these collect anonymized data about how Members use the Platform — pages visited, time on page, errors encountered — to help dojo77 improve site performance and user experience. No personally identifiable information is associated with these cookies.
• Preference cookies: these remember your Platform settings — such as your preferred display language and notification preferences — so you do not need to re-enter them on each visit.

dojo77 does not deploy third-party advertising or behavioral tracking cookies that follow your activity across external websites. The cookies placed by dojo77 are first-party cookies scoped to the dojo77.pro domain.

Most web browsers allow you to control cookies through browser settings. Disabling cookies may impair the functionality of certain Platform features. Please consult your browser's help documentation for instructions on managing cookie preferences.

dojo77 implements a layered set of technical and organizational security measures designed to protect your personal data against unauthorized access, accidental loss, destruction, or disclosure. These measures include:

• TLS/SSL encryption for all data in transit between your device and dojo77's servers;
• AES-256 encryption for sensitive data stored at rest, including identity documents and financial records;
• Password hashing using industry-standard one-way hashing algorithms — your password is never stored in a readable format;
• Access controls that restrict internal access to personal data on a strict need-to-know basis, with all access events logged and audited;
• Regular security assessments including vulnerability scanning and penetration testing conducted by qualified independent parties;
• Incident response procedures that enable dojo77 to detect, contain, and respond to data security incidents promptly.

While dojo77 takes all reasonable steps to protect your personal data, no method of transmission over the internet or electronic storage is completely infallible. You are responsible for keeping your account credentials confidential and for notifying dojo77 immediately if you suspect unauthorized access to your account.

dojo77 retains personal data only for as long as necessary to fulfill the purposes for which it was collected, subject to applicable legal retention obligations. The following retention periods apply as a general guide:

• Active account data: retained for the duration of your account's active status and for a period of five years following permanent account closure, to satisfy anti-money laundering record-keeping requirements.
• Financial transaction records: retained for a minimum of five years from the date of the transaction, in line with internationally recognized financial record-keeping standards.
• KYC identity documents: retained for five years from the date of account closure or from the date of the last transaction, whichever is later.
• Customer support communications: retained for three years from the date of the most recent interaction in a support thread.
• Technical and device logs: retained for up to 12 months for security and Platform performance analysis purposes, then deleted or fully anonymized.
• Marketing preferences and consent records: retained for the duration of your active account, and for three years following account closure as evidence of consent history.

When personal data is no longer required and no legal retention obligation applies, dojo77 will securely delete or anonymize it so that it can no longer be associated with any individual.

As a Member of dojo77, you hold the following rights with respect to your personal data. To exercise any of these rights, submit a written request to the contact address in Section 13:

• Right of access: you may request a copy of the personal data dojo77 holds about you, along with information about how it is used and with whom it has been shared.
• Right to rectification: if any personal data dojo77 holds about you is inaccurate or incomplete, you may request that it be corrected. For account details, many fields can be updated directly via your account settings page.
• Right to erasure: you may request that dojo77 delete your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (and no other legal basis applies), or where you object to processing based on legitimate interests. This right is subject to overriding legal retention obligations — for example, dojo77 must retain financial records for at least five years regardless of a deletion request.
• Right to restriction: you may request that dojo77 restrict the processing of your personal data in certain circumstances, such as while the accuracy of data is being contested.
• Right to data portability: where processing is based on consent or contractual necessity and carried out by automated means, you may request that your personal data be provided to you in a structured, commonly used, machine-readable format.
• Right to object: you may object at any time to the processing of your personal data where dojo77 relies on legitimate interests as the legal basis. dojo77 will cease processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing that occurred before withdrawal.

dojo77 will respond to all data rights requests within 30 calendar days of receipt. Where a request is complex or dojo77 receives a high volume of requests, we may extend this period by a further 60 days, in which case we will notify you of the extension and the reason for it before the initial 30-day period expires.

The dojo77 Platform is strictly for adults aged 21 and over. dojo77 does not knowingly collect personal data from any individual under the age of 21. If dojo77 discovers or is notified that personal data has been collected from a person under 21 years of age, we will take immediate steps to delete that data and close the associated account.

If you are a parent or guardian and believe that your child has registered an account on dojo77 or submitted personal data to the Platform, please contact us immediately using the details in Section 13 so that we can investigate and take appropriate action without delay.

Age verification is a mandatory step in the dojo77 onboarding process. All accounts are screened for age eligibility, and accounts where age cannot be confirmed to our satisfaction will be suspended pending KYC completion.

dojo77 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we offer. When material changes are made, dojo77 will notify active Members by sending a notification to the email address registered to their account and will update the "Last Updated" date at the top of this document.

Your continued use of the Platform after the effective date of any updated Policy constitutes your acceptance of the revised terms. If you do not agree to the updated Policy, you must discontinue use of the Platform and may request account closure by contacting the support team at the address below.

dojo77 recommends reviewing this Policy periodically — particularly if you have been away from the Platform for an extended period — to stay informed of how your personal data is handled.

For all privacy-related enquiries, data rights requests, or concerns about this Privacy Policy, please contact the dojo77 Data Privacy team through the following channel:

For general account support, game enquiries, or responsible gaming assistance, please also visit our FAQ page or our Responsible Gaming page. Our support team is available 24 hours a day, 7 days a week, including Indonesian public holidays such as Idul Fitri and Nyepi.