Privacy Policy

kebo77 ("we", "us", "our") operates the online betting and gaming platform accessible at https://kebo77.cam (the "Platform"). This Privacy Policy describes how kebo77 collects, processes, stores, and protects the personal data of users ("you", "your") who access or use the Platform, including players located in Indonesia and other permitted jurisdictions.

By registering an account on kebo77 or continuing to use the Platform after this Privacy Policy has been published or updated, you acknowledge that you have read this document in full and consent to the data practices described herein. If you do not agree with any part of this Privacy Policy, you must discontinue use of the Platform immediately.

This Privacy Policy should be read alongside kebo77's Terms & Conditions and Responsible Gaming Policy, which form part of the agreement between you and kebo77.

For the purposes of applicable data protection legislation, kebo77's operating company (the "Company") acts as the data controller in respect of personal data submitted by users of the Platform. The Company is responsible for determining the purposes and means of processing your personal data.

The Company holds an international gaming operating licence and is subject to the data governance requirements of its licensing jurisdiction. Where applicable, the Company complies with internationally recognised data protection standards including those comparable to the General Data Protection Regulation (GDPR) framework.

All data-related enquiries, subject access requests, and deletion requests should be directed to the Company's Data Protection team at the contact details provided in Section 16 of this Policy.

kebo77 collects personal data in the following categories, depending on your interaction with the Platform:

kebo77 collects personal data through the following means:

• Direct submission: When you register an account, complete KYC verification, make a deposit or withdrawal request, contact our support team, or participate in any promotion, you provide data directly to kebo77.
• Automated collection: When you visit and interact with the Platform, our servers automatically log technical and usage data including your IP address, device identifiers, session data, and interaction events.
• Cookies and similar technologies: kebo77 uses first-party cookies and session storage to maintain your login session, remember platform preferences, and collect aggregated usage statistics. See Section 8 for full cookie details.
• Third-party sources: We may receive identity verification data from our KYC verification partners, fraud prevention data from our security providers, and payment confirmation data from banking intermediaries (including BCA, BRI, BNI, Mandiri, and e-wallet platforms OVO, DANA, and GoPay).
• Publicly available sources: In limited circumstances — for example, to verify information provided during KYC — we may cross-reference data against publicly available official records.

kebo77 processes personal data only where a valid legal basis exists. The applicable legal bases are:

• Contractual necessity: Processing required to register your account, manage your balance, process deposits and withdrawals, and deliver the core betting and gaming services you have requested.
• Legal obligation: Processing required to comply with anti-money laundering (AML) obligations, Know Your Customer (KYC) requirements, responsible gaming regulations, and fraud prevention mandates imposed by our licensing jurisdiction.
• Legitimate interests: Processing conducted to protect the security and integrity of the Platform, detect and prevent fraud, improve platform performance, and conduct internal analytics — provided such interests are not overridden by your fundamental rights.
• Consent: Processing conducted for optional purposes where you have provided freely given, specific, and informed consent — principally for the delivery of marketing communications. You may withdraw consent at any time by contacting our support team.

kebo77 uses collected personal data for the following purposes:

• To create, maintain, and manage your kebo77 account and associated profile.
• To verify your identity and age in accordance with KYC requirements (including processing your KTP and supporting documents).
• To process deposits from and withdrawals to your designated bank accounts (BCA, BRI, BNI, Mandiri) or e-wallets (OVO, DANA, GoPay).
• To detect, investigate, and prevent fraudulent transactions, money laundering, account sharing, bonus abuse, and other prohibited conduct described in our Terms & Conditions.
• To operate and improve the kebo77 platform, including personalising your game recommendations and promotional offers based on your usage history.
• To communicate with you about your account, transactions, platform changes, and — where you have consented — promotional offers and VIP programme updates.
• To monitor your gaming behaviour in the context of our Responsible Gaming obligations and to intervene where patterns suggest problem gambling. See Responsible Gaming for details.
• To comply with applicable legal, regulatory, and licensing obligations, including retention of transaction records and audit trails.
• To resolve disputes, enforce our Terms & Conditions, and respond to legal process.

kebo77 does not sell, rent, or trade your personal data with third-party marketers or data brokers under any circumstances. We share personal data only in the following limited, controlled situations:

• Service providers and processors: Trusted third-party companies that process data on our behalf under contractual data processing agreements — including KYC verification vendors, payment processors (intermediaries facilitating BCA, BRI, BNI, Mandiri, OVO, DANA, and GoPay transactions), fraud detection providers, cloud infrastructure operators, and customer support platform providers. These parties are permitted to use your data only as directed by kebo77 and are prohibited from using it for their own purposes.
• Game content providers: Where necessary to facilitate gameplay, basic session identifiers may be shared with licensed game studios (such as Evolution Gaming, Pragmatic Play, Pocket Games Soft, and NetEnt) to initialise and authenticate your gaming session. These providers do not receive your full identity or financial data.
• Regulatory and law enforcement authorities: kebo77 will disclose personal data to regulators, licensing authorities, law enforcement agencies, or courts where required to do so by applicable law, court order, or our licensing obligations — including AML reporting requirements.
• Group companies: Personal data may be shared within the kebo77 corporate group for operational, compliance, and risk management purposes, subject to the same data protection standards as described in this Policy.
• Business transfers: In the event of a merger, acquisition, or sale of substantially all of the Company's assets, user data may be transferred to the successor entity, subject to equivalent privacy protections.

kebo77 uses cookies and similar client-side storage technologies to operate core platform functionality, maintain session security, and collect aggregated analytics data. The cookies we use fall into the following categories:

• Strictly necessary cookies: Essential for the Platform to function. These include your session authentication token, CSRF protection token, and language/currency preference. These cookies cannot be disabled without breaking core functionality.
• Functional cookies: Used to remember your preferences — such as your preferred deposit method, notification settings, and UI customisation choices — between sessions.
• Analytics cookies: First-party analytics cookies that collect anonymised, aggregated data about how users navigate the Platform — which pages are most visited, where users drop off in registration flows, and similar performance metrics. This data does not identify individual users.
• Security cookies: Used by our fraud detection system to establish a device fingerprint for the purpose of identifying suspicious login patterns or multi-account abuse. These cookies do not track your activity on other websites.

kebo77 does not use third-party advertising cookies, retargeting pixels, or social media tracking scripts. You can manage cookie settings through your browser's privacy controls, though disabling strictly necessary cookies will prevent you from logging in or using the Platform.

kebo77 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law and our licensing obligations. The following general retention schedules apply:

• Active account data: Retained for the duration of your active account relationship with kebo77, plus a minimum retention period of five (5) years following account closure — as required by AML and gaming audit regulations.
• KYC and identity documents: Retained for a minimum of five (5) years following account closure or the last date of service, in compliance with international anti-money laundering standards.
• Financial transaction records: Retained for a minimum of seven (7) years following each transaction date, in line with financial record-keeping obligations.
• Customer support communications: Retained for three (3) years following the closure of each support ticket or the resolution of any related dispute.
• Marketing preference data: Retained until you withdraw consent or request deletion, whichever occurs first.
• Technical and usage logs: Retained for up to twelve (12) months for security and performance analysis purposes, after which they are aggregated or deleted.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be attributed to an identifiable individual.

kebo77 implements a multi-layered security architecture to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security measures include:

• 256-bit SSL/TLS encryption on all data transmitted between your device and kebo77's servers.
• At-rest encryption for sensitive stored data, including identity documents and financial records.
• Role-based access controls ensuring that only authorised personnel with a legitimate operational need can access personal data.
• Regular security penetration testing and vulnerability assessments conducted by qualified third-party security firms.
• Intrusion detection systems and 24/7 security monitoring of platform infrastructure.
• Multi-factor authentication (MFA) available on all kebo77 accounts and mandatory for internal administrative systems.
• Staff data protection training and binding confidentiality obligations for all employees and contractors with access to personal data.

In the event of a personal data breach that poses a significant risk to your rights and freedoms, kebo77 will notify affected users and relevant authorities within the timeframes prescribed by applicable law.

As an internationally operated platform serving users primarily in Indonesia, kebo77 may transfer your personal data to servers, service providers, or group entities located outside of Indonesia. Where such transfers occur, kebo77 ensures that appropriate safeguards are in place to protect your data, including:

• Contractual data processing agreements incorporating standard data protection clauses equivalent to those recognised under major international privacy frameworks.
• Transfer to jurisdictions that have been assessed as providing an adequate level of data protection relative to the international standards kebo77 upholds.
• Binding corporate rules or equivalent intra-group data sharing agreements where data is transferred to kebo77 group entities.

By using the kebo77 platform, you acknowledge that your data may be processed in jurisdictions outside Indonesia and consent to such transfers subject to the protections described in this section.

Subject to applicable law and certain limited exceptions, you have the following rights in relation to your personal data held by kebo77:

To exercise any of the above rights, contact kebo77's Data Protection team using the details in Section 16. We will respond to verified requests within thirty (30) days. We may need to verify your identity before processing your request.

kebo77 is strictly an adults-only platform. The minimum age requirement to register and use kebo77 is 21 years of age. We do not knowingly collect, store, or process personal data from individuals under the age of 21.

If we become aware that personal data has been collected from a person under the age of 21 — whether through a false age declaration during registration or any other means — we will immediately suspend the relevant account, void any associated balance or winnings, and securely delete the data as soon as retention obligations permit.

If you believe that a minor has submitted personal data to kebo77, please contact our support team immediately at the address provided in Section 16.

The kebo77 Platform may contain references to or content from third-party game providers (Evolution Gaming, Pragmatic Play, NetEnt, Pocket Games Soft, Spribe, and others). While kebo77 selects partners carefully, we are not responsible for the privacy practices of these third parties.

Game sessions hosted in third-party iFrames or redirected environments may be subject to the respective game provider's privacy notices. We recommend reviewing the privacy policies of any game provider whose content you access through the Platform. kebo77 does not share your full identity or financial data with game providers beyond what is necessary to authenticate your gaming session.

kebo77 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform functionality. When we make material changes to this Policy, we will notify you by displaying a prominent notice on the Platform and, where appropriate, by sending an email notification to the address associated with your account.

The "Last Updated" date at the top of this document indicates when the most recent revision was made. We encourage you to review this Privacy Policy periodically. Continued use of the Platform following notification of a material change constitutes your acceptance of the revised Policy.

For all privacy-related enquiries, subject access requests, data correction requests, deletion requests, or consent withdrawal notices, please contact kebo77's Data Protection team using the following details:

Please include your registered kebo77 username and a clear description of your request. To protect your privacy, we may require you to verify your identity before processing any data access or deletion request. We will not charge a fee for reasonable requests but reserve the right to charge an administrative fee for manifestly unfounded or excessive requests.

If you are not satisfied with kebo77's response to a privacy concern, you have the right to escalate the matter to the relevant regulatory or data protection authority in your jurisdiction.