umi77 Privacy Policy

1. Introduction and Scope

This Privacy Policy applies to all personal information collected by umi77 through our website at https://umi77.cam, mobile applications, and any other digital platforms or services we operate. This policy governs data collection from users in Indonesia and explains your rights under applicable Indonesian data protection regulations.

umi77 operates as an online betting platform offering sports betting, live casino games, slot games, and related gambling services to Indonesian residents aged 21 and over. We collect and process personal data necessary to provide these services, comply with legal obligations, and improve your gaming experience.

2. Information We Collect

2.1 Information You Provide Directly

When you register for an umi77 account or use our services, you provide us with personal information including:

• Identity Information: Full name, date of birth, national identification number (KTP), passport details, and government-issued ID documents for verification purposes.
• Contact Information: Email address, phone number, residential address, and postal code.
• Financial Information: Bank account details (account number, bank name such as BCA, BRI, BNI, Mandiri), e-wallet information (OVO, DANA, GoPay, ShopeePay, LinkAja), payment card details, transaction history, deposit and withdrawal records.
• Account Credentials: Username, password, security questions and answers, and two-factor authentication details.
• Communications: Messages you send to customer support, feedback forms, survey responses, and any other correspondence with umi77.

2.2 Information We Collect Automatically

When you access umi77 services, we automatically collect certain technical and usage information:

• Device Information: IP address, device type, operating system, browser type and version, device identifiers, and mobile network information.
• Usage Data: Pages visited, links clicked, betting history, game preferences, session duration, login timestamps, features accessed, and interaction patterns.
• Location Data: Geographic location derived from IP address to verify Indonesian residency and comply with geographical restrictions.
• Cookies and Tracking Technologies: We use cookies, web beacons, and similar technologies to recognize your device, remember preferences, analyze site usage, and improve platform performance. See our Cookie Policy for details.

2.3 Information from Third Parties

We may receive information about you from third-party sources including:

• Payment Processors: Transaction verification and fraud detection data from banks and e-wallet providers.
• Identity Verification Services: Background checks, age verification, and identity authentication results from third-party verification providers.
• Marketing Partners: Aggregated demographic and interest data to improve targeting and personalization.
• Public Databases: Information from publicly available sources to verify identity and prevent fraud.

3. How We Use Your Information

umi77 uses your personal information for the following purposes:

3.1 Service Delivery and Account Management

• Creating, maintaining, and managing your umi77 account.
• Processing deposits, withdrawals, and bet settlements.
• Providing customer support and responding to inquiries.
• Verifying your identity and age to ensure compliance with 21+ age restrictions.
• Administering bonuses, promotions, loyalty programs, and VIP benefits.
• Sending transactional notifications including account confirmations, payment receipts, and security alerts.

3.2 Legal Compliance and Fraud Prevention

• Complying with Indonesian gambling regulations and legal obligations.
• Conducting Know Your Customer (KYC) and anti-money laundering (AML) checks.
• Detecting, preventing, and investigating fraud, security breaches, and prohibited activities.
• Monitoring betting patterns to identify irregular play, collusion, or bonus abuse.
• Responding to legal requests from law enforcement, courts, and regulatory authorities.
• Enforcing our Terms & Conditions and protecting the rights and safety of umi77 and our users.

3.3 Platform Improvement and Personalization

• Analyzing usage patterns to improve website functionality and user experience.
• Personalizing content, game recommendations, and promotional offers based on your preferences.
• Conducting market research and gathering feedback to develop new features.
• Testing and optimizing platform performance, speed, and reliability.
• Troubleshooting technical issues and providing software updates.

3.4 Marketing and Communications

• Sending promotional emails about bonuses, tournaments, and special offers (you can opt out at any time).
• Displaying personalized advertisements and recommendations based on your activity.
• Conducting promotional campaigns tied to Indonesian holidays such as Indonesian Independence Day, Idul Fitri, Chinese New Year (Imlek), and other cultural events.
• Inviting you to participate in surveys, contests, and loyalty programs.

4. Legal Basis for Processing

Under Indonesian data protection laws and international privacy standards, umi77 processes your personal data based on the following legal grounds:

• Contractual Necessity: Processing is necessary to fulfill our contract with you and provide betting services you've requested.
• Legal Obligation: We must process your data to comply with Indonesian gambling regulations, KYC/AML requirements, tax obligations, and court orders.
• Legitimate Interests: Processing serves our legitimate business interests in fraud prevention, platform security, customer service improvement, and business analytics, balanced against your privacy rights.
• Consent: For marketing communications and certain optional services, we obtain your explicit consent, which you may withdraw at any time.

5. How We Share Your Information

umi77 does not sell your personal information to third parties. However, we may share your data with the following categories of recipients:

Recipient Category	Purpose of Sharing	Examples
Service Providers	Technical infrastructure, payment processing, customer support	Cloud hosting, payment gateways, email services, live chat software
Payment Processors	Processing deposits and withdrawals	Indonesian banks (BCA, BRI, BNI, Mandiri), e-wallet providers (OVO, DANA, GoPay)
Identity Verification	Age and identity verification, fraud prevention	KYC verification services, document authentication providers
Game Providers	Delivering casino games and slot content	Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi
Marketing Partners	Advertising, analytics, promotional campaigns	Analytics platforms, affiliate networks, email marketing services
Legal Authorities	Compliance with legal obligations	Indonesian law enforcement, courts, regulatory bodies, tax authorities
Business Transfers	Mergers, acquisitions, or asset sales	Potential buyers or successors in the event of business restructuring

All third parties with whom we share data are contractually required to protect your information and use it only for specified purposes. We conduct due diligence to ensure service providers maintain adequate security standards.

6. Data Security Measures

Our comprehensive security framework includes:

• 256-bit SSL Encryption: All data transmitted between your device and our servers is encrypted using Secure Socket Layer (SSL) technology, the same standard used by major Indonesian banks like BCA, BRI, and Mandiri.
• Secure Payment Gateways: Financial transactions are processed through PCI DSS-compliant payment gateways with tokenization and fraud detection.
• Firewalls and Intrusion Detection: Multi-layer firewalls and real-time intrusion detection systems monitor and block malicious traffic.
• Two-Factor Authentication (2FA): Optional additional login security layer using SMS or authenticator apps.
• Regular Security Audits: Independent third-party penetration testing and vulnerability assessments conducted quarterly.
• Access Controls: Strict internal policies limit employee access to personal data on a need-to-know basis, with comprehensive activity logging.
• Data Backup and Disaster Recovery: Encrypted backups stored in geographically distributed data centers ensure business continuity.
• Employee Training: All staff undergo regular data protection and security awareness training.

Despite our security measures, no system is completely invulnerable. You are responsible for maintaining the confidentiality of your login credentials and should immediately contact us if you suspect unauthorized account access.

7. Data Retention

umi77 retains your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy and comply with legal requirements:

• Active Accounts: Personal data is retained throughout the duration of your active account relationship with umi77.
• Closed Accounts: After account closure, we retain certain information for up to 7 years to comply with Indonesian financial record-keeping regulations, tax laws, and anti-money laundering requirements.
• Transaction Records: Financial transaction data is retained for 10 years as required by Indonesian banking and tax regulations.
• Marketing Data: If you opt out of marketing communications, your contact details are retained in a suppression list to honor your preference.
• Legal Claims: Information relevant to legal disputes or regulatory investigations is retained until the matter is resolved and applicable statute of limitations expires.

After the retention period expires, we securely delete or anonymize your personal data in accordance with our data destruction protocols.

8. Your Privacy Rights

Under Indonesian data protection regulations, you have the following rights regarding your personal information:

8.1 Right to Access

You may request a copy of the personal data we hold about you, including data sources, processing purposes, and recipient categories. Contact us at [email protected] to submit an access request.

8.2 Right to Rectification

You can update or correct inaccurate personal information through your account settings or by contacting customer support. We may request verification before processing changes to sensitive data.

8.3 Right to Erasure

You may request deletion of your personal data, subject to legal retention obligations. Note that we must retain certain information for regulatory compliance even after account closure.

8.4 Right to Restrict Processing

You can request that we limit how we use your personal data in certain circumstances, such as while disputing data accuracy or processing lawfulness.

8.5 Right to Data Portability

You may request a machine-readable copy of your personal data to transfer to another service provider where technically feasible.

8.6 Right to Object

You can object to processing based on legitimate interests or for direct marketing purposes. You may opt out of promotional emails by clicking the unsubscribe link in any marketing message.

8.7 Right to Withdraw Consent

Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of processing conducted before withdrawal.

To exercise any of these rights, contact us at [email protected] with your request and account details. We will respond within 30 days and may request identity verification to protect your data from unauthorized access.

9. Cookies and Tracking Technologies

umi77 uses cookies, web beacons, and similar technologies to enhance your browsing experience, analyze site usage, and deliver personalized content. Cookies are small text files stored on your device that help us recognize you on return visits.

Types of Cookies We Use:

• Essential Cookies: Required for website functionality, authentication, and security. These cannot be disabled without affecting site usability.
• Performance Cookies: Collect anonymous usage statistics to help us understand how visitors interact with our platform and identify areas for improvement.
• Functionality Cookies: Remember your preferences such as language, currency, and display settings.
• Advertising Cookies: Used to deliver relevant advertisements and measure campaign effectiveness. These track your activity across websites.

You can manage cookie preferences through your browser settings, though disabling certain cookies may limit platform functionality. Most browsers accept cookies by default; consult your browser's help documentation for instructions on blocking or deleting cookies.

10. International Data Transfers

While umi77 primarily operates within Indonesia, some of our service providers and data processors are located outside Indonesia. When we transfer your personal data internationally, we ensure adequate safeguards are in place, including:

• Standard contractual clauses approved by Indonesian data protection authorities.
• Service providers certified under recognized international privacy frameworks.
• Data processing agreements requiring equivalent protection standards to Indonesian law.

11. Children's Privacy

umi77 services are strictly intended for individuals aged 21 and over. We do not knowingly collect personal information from anyone under 21 years of age. If we become aware that a user under 21 has provided personal data, we will immediately delete their account and associated information.

Parents or guardians who believe their child under 21 has created an umi77 account should contact us immediately at [email protected] so we can remove the account and data.

12. Changes to This Privacy Policy

umi77 reserves the right to update this Privacy Policy to reflect changes in our data practices, legal requirements, or business operations. We will notify you of material changes through email or prominent notice on our website at least 30 days before the changes take effect.

Your continued use of umi77 services after the effective date of policy changes constitutes acceptance of the updated terms. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

13. Contact Information and Data Protection Officer

If you have questions, concerns, or requests regarding this Privacy Policy or how umi77 handles your personal data, please contact us:

• Email: [email protected]
• Subject Line: "Privacy Policy Inquiry" or "Data Protection Request"
• Response Time: We will acknowledge your inquiry within 48 hours and provide a substantive response within 30 days.

For complaints related to data protection, you also have the right to lodge a complaint with the Indonesian data protection authority or relevant supervisory body.