Privacy Policy — How hero77 Protects Your Data

1. Introduction

This Privacy Policy governs the collection, use, storage, and disclosure of personal information by hero77 (referred to as "we", "us", "our", or "the Company") in relation to the operation of the hero77 platform at https://hero77.cam. This Policy applies to all players who register an account, place wagers, make deposits or withdrawals, interact with customer support, or otherwise use any part of the hero77 services. We operate in full compliance with internationally recognized data protection principles and apply the highest practical security standards to safeguard your information.

2. Data We Collect

hero77 gathers personal information across several categories depending on how you interact with the platform. The data we collect falls into the following groups:

3. How We Use Your Data

hero77 collects and processes personal information for clearly defined and lawful purposes:

• Account Creation and Management: to register your account, verify your identity, and maintain your player profile;
• Age Verification: to confirm that all players are 21 years of age or older, in line with our strict policy prohibiting underage gambling;
• Fraud Prevention and AML: to detect and prevent money laundering, bonus abuse, chargebacks, and other fraudulent activity;
• Transaction Processing: to manage deposits and withdrawals through your chosen Indonesian banking or e-wallet channels;
• Customer Support: to respond to account inquiries, payment queries, and technical issues raised through our support channels;
• Responsible Gaming: to enable voluntary tools such as deposit limits, session tracking, time-outs, and self-exclusion;
• Compliance: to meet our legal and regulatory obligations, including record-keeping requirements;
• Service Communications: to send transactional notices and, with your consent, promotional offers and updates about new games or features.

4. Legal Grounds for Processing

Where applicable law requires a lawful basis for processing personal data, hero77 relies on the following grounds:

1. Contractual necessity: processing required to perform our agreement with you, including operating your account and processing your wagers and withdrawals;
2. Legal obligation: processing required to comply with anti-money laundering, counter-terrorism financing, and KYC regulations;
3. Legitimate interests: processing to prevent fraud, secure the platform, improve our services, and protect the integrity of our games and promotions;
4. Consent: processing for marketing communications, which you may withdraw at any time.

5. Data Sharing

hero77 does not sell, rent, or trade your personal information to third parties for marketing purposes. We share data only where necessary to operate the platform and to comply with the law:

• Payment Processors: banks and e-wallet providers (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay) to process your deposits and withdrawals;
• KYC and Compliance Partners: identity verification providers that assist in confirming your identity and age;
• Game Studio Providers: certified game developers (Pragmatic Play, Evolution Gaming, NetEnt, and others) to the extent necessary to operate their games for you;
• Hosting and Security Services: technical infrastructure providers that host and secure the platform;
• Regulatory and Law Enforcement Authorities: where disclosure is required by applicable law, court order, or valid legal process.

All third-party service providers are bound by contractual obligations to protect your data and may only process it strictly for the purposes we specify.

6. Cookies & Tracking Technologies

hero77 uses cookies and similar technologies to enhance your browsing experience, remember your preferences, and ensure the platform functions correctly. The categories of cookies we use include:

You may adjust your browser settings to refuse non-essential cookies at any time. Please note that disabling certain cookies may affect the functionality of specific platform features. hero77 does not use third-party advertising networks or sell cookie data to external parties.

7. Data Security

hero77 implements a comprehensive set of technical and organizational security measures designed to protect your personal information against unauthorized access, disclosure, alteration, or destruction. Our security infrastructure includes:

• 256-bit SSL/TLS Encryption: all data transmitted between your device and the hero77 platform is encrypted in transit using industry-standard Transport Layer Security protocols;
• Password Hashing: your account password is never stored in plain text — it is hashed using a strong one-way cryptographic algorithm before storage;
• Access Controls: personal data is accessible only to authorized hero77 personnel who require it to perform their specific job functions. All staff access is logged and audited;
• Regular Security Audits: our platform undergoes periodic vulnerability assessments and penetration testing to identify and address potential weaknesses;
• Two-Factor Authentication (2FA): we strongly encourage all players to enable 2FA on their accounts as an additional layer of login security.

8. Data Retention

hero77 retains your personal information only for as long as is necessary to fulfill the purposes set out in this Privacy Policy, and in accordance with our legal obligations. The specific retention periods we apply are as follows:

• Account Records: retained for the duration of your account's active life plus a minimum of five (5) years following account closure, to satisfy anti-money laundering and regulatory record-keeping obligations;
• Transaction Records: deposit, withdrawal, and wagering history is retained for a minimum of five (5) years to comply with financial regulations;
• KYC Documents: identity verification documents are retained for a minimum of five (5) years after the date of submission or account closure, whichever is later;
• Support Communications: records of customer support interactions are retained for up to three (3) years;
• Marketing Consent Records: records of your marketing consent or opt-out are retained for as long as your account is active and for one (1) year thereafter.

Upon expiry of the applicable retention period, your data is securely deleted or anonymized so that it can no longer be attributed to you as an individual.

9. Your Data Rights

Subject to applicable law and the specific circumstances of your request, you have the following rights regarding the personal data hero77 holds about you:

• Right of Access: you may request a copy of the personal information we hold about you, along with information about how it is processed;
• Right to Rectification: you may request correction of inaccurate or incomplete personal data held in your account profile;
• Right to Erasure: in certain circumstances, you may request deletion of your personal data. Note that this right may be limited where we are required by law to retain data;
• Right to Restrict Processing: you may request that we limit how we use your data in specific circumstances, for example while a dispute is being resolved;
• Right to Data Portability: you may request that we provide your personal data in a structured, machine-readable format where technically feasible;
• Right to Object: you may object to processing based on our legitimate interests, including profiling for responsible gaming monitoring;
• Right to Withdraw Consent: where we rely on your consent to send marketing communications, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of the rights above, please contact our support team at [email protected]. We aim to respond to all data rights requests within 30 calendar days. In some cases, we may need to verify your identity before processing a request.

10. Minors and Age Restriction

The hero77 platform is strictly intended for adults aged 21 years and older. We do not knowingly collect personal information from individuals under the age of 21. If you are a parent or guardian and believe that a minor has registered an account or provided personal data to hero77 without your consent, please contact us immediately at [email protected]. Upon verification, we will take prompt steps to close the account and securely delete all associated data.

11. Changes to This Privacy Policy

hero77 may update this Privacy Policy from time to time to reflect changes in our practices, the services we offer, or applicable legal requirements. When we make material changes, we will display a prominent notice on the platform and, where appropriate, send a notification to your registered email address at least seven (7) days before the updated Policy takes effect. The "Effective Date" shown at the top of this page will always indicate when the current version came into force. We encourage you to review this Policy periodically so that you remain informed about how we protect your personal data. Your continued use of the platform following the effective date of any update constitutes acceptance of the revised Privacy Policy.

12. Contact & Data Inquiries

If you have any questions about this Privacy Policy, wish to exercise your data rights, or want to raise a concern about how hero77 processes your personal information, please reach out to our dedicated support team:

Our support team is staffed 24 hours a day, 7 days a week by native Indonesian-speaking agents who can assist you in understanding your data rights and any aspect of this Privacy Policy. All formal data rights requests will be acknowledged within two business days and fully resolved within 30 calendar days, subject to identity verification.