Privacy Policy

1. Introduction

kafe77 ("we," "us," or "our") is committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your data when you use our online casino and sports betting platform at https://kafe77.cam (the "Website") and associated services (collectively, the "Services"). This policy applies to all Indonesian players and visitors who access or use kafe77.

We recognize that privacy is a fundamental right, particularly in the context of financial transactions and gaming activities. This Privacy Policy has been designed to comply with international data protection standards and reflects our commitment to transparency in all data handling practices. By using kafe77 Services, you acknowledge that you have read, understood, and consent to the practices described in this Privacy Policy.

If you do not agree with the terms of this Privacy Policy, please discontinue use of our Services immediately. Your continued use of kafe77 following any modifications to this Privacy Policy constitutes acceptance of those changes.

2. Data Controller Information

kafe77 acts as the data controller for personal information collected through our platform. As the data controller, we determine the purposes and means of processing your personal data and are responsible for ensuring compliance with applicable privacy regulations.

For questions, concerns, or requests related to your personal information or this Privacy Policy, you may contact our Data Protection Officer at:

• Email: [email protected]
• Subject Line: Privacy Inquiry / Data Protection Request
• Response Time: We aim to respond to all privacy-related inquiries within 7 business days

3. Information We Collect

kafe77 collects several categories of personal information necessary to provide our Services, ensure platform security, comply with legal obligations, and improve user experience. The types of information we collect include:

3.1 Information You Provide Directly

Registration Information

When you create an account with kafe77, we collect the following mandatory information:

• Full legal name (as it appears on government-issued identification)
• Date of birth (to verify you are 21 years or older)
• Email address
• Mobile phone number
• Residential address (street, city, province, postal code)
• Username and password (password is stored in encrypted form)
• Preferred language and currency (Indonesian Rupiah/IDR)

Identity Verification (KYC) Documents

To comply with anti-money laundering regulations and prevent fraud, we require the following verification documents before processing withdrawals:

• Government-issued photo identification (Indonesian KTP - Kartu Tanda Penduduk, or valid passport)
• Selfie photograph holding your ID document with your face clearly visible
• Proof of address document dated within 90 days (utility bill, bank statement, or government correspondence)

These documents are securely stored in encrypted databases and accessed only by authorized compliance personnel.

Financial Information

To process deposits and withdrawals, we collect:

• Bank account details (bank name, account number, account holder name)
• Transaction history (deposit amounts, withdrawal requests, dates, and times)
• Payment method preferences

We do not store complete credit card numbers or CVV codes. Payment processing is handled through secure, PCI-DSS compliant payment gateways.

3.2 Information Collected Automatically

Technical and Usage Data

When you access kafe77, we automatically collect certain technical information about your device and how you interact with our platform:

• IP address and geolocation data (to verify you are accessing from Indonesia)
• Device information (device type, operating system, browser type and version)
• Session information (login times, logout times, session duration)
• Gameplay data (games played, bet amounts, win/loss records, bonus usage)
• Navigation patterns (pages visited, features used, time spent on pages)
• Referral source (how you found kafe77 - search engine, direct visit, referral link)

Communications

We retain records of communications between you and kafe77, including:

• Customer support chat transcripts and email correspondence
• Survey responses and feedback submissions
• Marketing preference selections (opt-in/opt-out status)

4. How We Use Your Information

kafe77 processes your personal information for specific, legitimate purposes related to providing and improving our Services. The primary uses of your data include:

4.1 Account Management and Service Delivery

• Creating and maintaining your player account
• Processing deposits, withdrawals, and other financial transactions
• Providing access to casino games, sports betting markets, and promotional offers
• Managing your account preferences and settings
• Communicating important account information, transaction confirmations, and service updates

4.2 Legal Compliance and Security

• Verifying your identity and age (21+ requirement enforcement)
• Complying with Know Your Customer (KYC) and Anti-Money Laundering (AML) regulations
• Detecting, preventing, and investigating fraudulent activity, collusion, and cheating
• Monitoring for problem gambling behaviors and enforcing responsible gaming limits
• Responding to legal requests from government authorities and law enforcement
• Protecting kafe77's legal rights and property

4.3 Platform Improvement and Analytics

• Analyzing user behavior to improve website functionality and user experience
• Conducting market research and statistical analysis
• Testing new features and game offerings
• Optimizing platform performance and mobile compatibility
• Identifying and resolving technical issues

4.4 Marketing and Communications (With Your Consent)

• Sending promotional emails about new games, bonuses, and special offers (you may opt out at any time)
• Personalizing content and recommendations based on your gaming preferences
• Notifying you of tournaments, leaderboard positions, and loyalty rewards

You can update your marketing preferences or unsubscribe from promotional communications via your account settings or by clicking the "unsubscribe" link in any marketing email.

5. Legal Basis for Processing

Under international data protection principles, kafe77 must have a lawful basis for processing your personal information. We rely on the following legal grounds:

• Contractual Necessity: Processing is necessary to perform our contract with you (providing gaming services, processing transactions, managing your account).
• Legal Obligation: Processing is required to comply with legal and regulatory requirements, including KYC/AML compliance, age verification, and gaming license conditions.
• Legitimate Interests: Processing serves our legitimate business interests in fraud prevention, security, platform improvement, and customer service, provided these interests do not override your fundamental rights.
• Consent: For marketing communications and certain optional features, we obtain your explicit consent, which you may withdraw at any time.

6. Information Sharing and Disclosure

kafe77 does not sell, rent, or trade your personal information to third parties for their marketing purposes. We share your data only in the following limited circumstances:

6.1 Service Providers

We engage trusted third-party service providers to perform functions on our behalf, including:

• Payment Processors: To handle deposits and withdrawals via Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon)
• Game Suppliers: Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, and other licensed providers who deliver casino games and sports betting platforms
• Identity Verification Services: Specialized KYC/AML compliance providers who verify document authenticity
• Cloud Hosting Providers: Secure data center operators who host our platform infrastructure
• Customer Support Tools: Live chat, email, and ticketing system providers

All service providers are contractually obligated to protect your data, use it only for authorized purposes, and comply with applicable privacy laws.

6.2 Legal Requirements

We may disclose your information when required by law, including:

• In response to valid subpoenas, court orders, or other legal processes
• To comply with gaming regulatory authority requests
• To cooperate with law enforcement investigations of suspected criminal activity
• To enforce our Terms & Conditions or protect our legal rights
• To prevent fraud, security threats, or harm to individuals

6.3 Business Transfers

In the event of a merger, acquisition, sale of assets, or bankruptcy, your personal information may be transferred to the acquiring entity, subject to the same privacy protections outlined in this policy.

7. Data Security Measures

Protecting your personal and financial information is a top priority at kafe77. We implement comprehensive security measures aligned with industry best practices:

7.1 Technical Security

• Encryption: All data transmission between your device and our servers uses 256-bit SSL (Secure Socket Layer) encryption, the same standard used by international banks.
• Secure Storage: Personal data is stored in encrypted databases with restricted access controls. Sensitive information such as passwords is hashed using advanced cryptographic algorithms.
• Firewall Protection: Our servers are protected by enterprise-grade firewalls and intrusion detection systems.
• Regular Security Audits: Independent security experts conduct penetration testing and vulnerability assessments to identify and address potential weaknesses.
• DDoS Protection: Distributed denial-of-service mitigation systems ensure platform availability and data integrity during attack attempts.

7.2 Organizational Security

• Access Controls: Only authorized personnel with legitimate business needs can access personal data, and all access is logged and monitored.
• Employee Training: All staff members receive regular training on data protection, privacy best practices, and security protocols.
• Confidentiality Agreements: Employees and contractors are bound by strict confidentiality obligations.
• Incident Response Plan: We maintain a comprehensive plan for detecting, responding to, and recovering from data breaches.

7.3 Your Role in Security

You play a crucial role in protecting your account. We recommend the following best practices:

• Choose a strong, unique password combining uppercase and lowercase letters, numbers, and symbols
• Never share your login credentials with anyone
• Log out after each session, especially on shared or public devices
• Enable two-factor authentication if available
• Keep your email account secure (password reset requests are sent to your registered email)
• Report suspicious activity or unauthorized access immediately

Despite our best efforts, no security system is impenetrable. In the unlikely event of a data breach that poses a risk to your rights, we will notify affected users and relevant authorities in accordance with legal requirements.

8. Data Retention

kafe77 retains your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

8.1 Active Accounts

While your account remains active, we retain all associated personal information to provide ongoing Services, maintain transaction history, and comply with regulatory requirements.

8.2 Closed Accounts

After account closure, we retain certain information for the following periods:

Data Type	Retention Period	Purpose
Transaction Records	7 years	Tax and financial audit compliance, dispute resolution
KYC Documents	7 years	AML/KYC regulatory requirements
Gaming History	5 years	Gaming license compliance, dispute resolution
Communications	3 years	Customer service quality, dispute resolution
Marketing Preferences	Until withdrawal of consent	Honoring opt-out requests

8.3 Self-Excluded Accounts

For players who self-exclude due to problem gambling concerns, we retain account information for the duration of the exclusion period plus 7 years to prevent re-registration and honor the exclusion commitment.

9. Your Privacy Rights

As a kafe77 user, you have the following rights regarding your personal information:

9.1 Right to Access

You may request a copy of the personal data we hold about you. We will provide this information in a commonly used electronic format within 30 days of your request.

9.2 Right to Rectification

You can update inaccurate or incomplete personal information through your account settings or by contacting customer support. Certain information (such as date of birth once verified) cannot be changed due to regulatory requirements.

9.3 Right to Erasure ("Right to Be Forgotten")

You may request deletion of your personal data under certain circumstances. However, we may be required to retain certain information to comply with legal obligations (e.g., financial transaction records for tax purposes).

9.4 Right to Restrict Processing

You can request that we limit how we use your data, for example, if you contest the accuracy of the information or object to processing based on legitimate interests.

9.5 Right to Data Portability

You have the right to receive your personal data in a structured, machine-readable format and transmit it to another service provider where technically feasible.

9.6 Right to Object

You may object to processing based on legitimate interests, including profiling for marketing purposes. You can opt out of marketing communications at any time.

9.7 Right to Withdraw Consent

Where processing is based on consent (e.g., marketing emails), you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

How to Exercise Your Rights: To exercise any of these rights, contact our Data Protection Officer at [email protected] with subject line "Privacy Rights Request." We may require identity verification to process your request. We aim to respond within 30 days.

10. Cookies and Tracking Technologies

kafe77 uses cookies and similar tracking technologies to enhance your experience, analyze platform usage, and deliver personalized content.

10.1 What Are Cookies?

Cookies are small text files stored on your device when you visit websites. They enable websites to remember your preferences, login status, and browsing behavior.

10.2 Types of Cookies We Use

• Essential Cookies: Required for basic platform functionality (login, account access, transaction processing). These cannot be disabled without severely impacting your ability to use kafe77.
• Performance Cookies: Collect anonymous information about how users interact with the site (pages visited, time spent, error messages) to help us improve performance.
• Functionality Cookies: Remember your preferences (language, currency, display settings) to personalize your experience.
• Analytics Cookies: Help us understand aggregate user behavior patterns through tools like Google Analytics.

10.3 Managing Cookies

Most web browsers allow you to control cookies through settings. You can block or delete cookies, though this may limit platform functionality. Consult your browser's help documentation for specific instructions.

11. International Data Transfers

kafe77 primarily serves Indonesian players, and we store data in secure facilities designed to meet international data protection standards. Some of our service providers (game suppliers, payment processors) may be located outside Indonesia, which means your data may be transferred to, stored, or processed in other jurisdictions.

When we transfer data internationally, we ensure appropriate safeguards are in place, including:

• Standard contractual clauses approved for international data transfers
• Data processing agreements with all third-party providers
• Verification that receiving jurisdictions provide adequate data protection

12. Children's Privacy

kafe77 strictly prohibits use by individuals under 21 years of age. We do not knowingly collect personal information from minors. Our age verification processes include:

• Date of birth declaration during registration
• KYC document verification confirming age 21+
• Ongoing monitoring for suspicious activity suggesting underage access

If we discover that a minor has created an account, we will immediately close the account, delete associated data, and refund any deposited funds to the source. Parents and guardians concerned about underage gambling should contact us immediately at [email protected].

13. Changes to This Privacy Policy

kafe77 reserves the right to modify this Privacy Policy at any time to reflect changes in our practices, technology, legal requirements, or business operations. Material changes will be communicated through:

• Prominent notice on the website homepage
• Email notification to registered users
• Updated "Last Modified" date at the top of this policy

Your continued use of kafe77 Services after policy changes constitutes acceptance of the revised terms. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

14. Contact Us

For questions, concerns, or requests related to this Privacy Policy or our data handling practices, please contact us:

• Email: [email protected]
• Subject Line: Privacy Policy Inquiry
• Response Time: Within 7 business days
• Data Protection Officer: Available for privacy-specific concerns

We are committed to addressing your privacy concerns promptly and transparently. Thank you for trusting kafe77 with your personal information.