ls777 Privacy Policy

Definitions

The following terms are used throughout this Privacy Policy and carry the meanings set out below:

• "ls777" / "we" / "us" / "our" — refers to the ls777 online gambling platform operated at ls777.org and all associated services.
• "Member" / "you" / "your" — any individual who has registered an account on ls777 or who browses the ls777 website.
• "Personal Data" — any information that identifies or could reasonably be used to identify a natural person, directly or indirectly, including name, email address, device identifiers, IP address, and financial account details.
• "Processing" — any operation performed on Personal Data, including collection, storage, use, disclosure, transfer, deletion, and destruction.
• "Data Controller" — ls777, which determines the purposes and means by which Personal Data is processed.
• "Data Processor" — a third party that processes Personal Data on behalf of ls777 under a written data processing agreement.
• "Cookies" — small text files placed on your device by the ls777 website to enable functionality, remember preferences, and support analytics.
• "KYC" — Know Your Customer — the identity and age verification process conducted to confirm member eligibility and comply with anti-money laundering obligations.
• "Sensitive Data" — Personal Data revealing racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data. ls777 does not intentionally collect Sensitive Data unless required by law.

Data We Collect

ls 777 collects only the personal data necessary to operate the platform, verify member identity, process transactions, and comply with applicable regulatory obligations. The categories of data we collect are as follows:

How We Collect Your Data

ls777 collects personal data through the following channels:

• Direct submission: Data you provide when registering an account, completing KYC verification, making a deposit or withdrawal request, contacting customer support, or participating in a promotion.
• Automated technical collection: Data collected automatically when you access the ls777 website, including IP address, device identifiers, browser fingerprint, and navigation behavior captured via cookies, session storage, and server logs.
• Payment processors: Transaction confirmation data returned by partner payment systems including local Indonesian bank transfer gateways and e-wallet providers.
• Identity verification partners: Results of identity document checks and database lookups conducted by third-party KYC service providers engaged by ls777.
• Third-party game providers: Game session logs and round-result data submitted by licensed studios such as Pragmatic Play, Evolution Gaming, Pocket Games Soft, NetEnt, and Microgaming as part of normal game platform integration.
• Publicly available sources: In limited circumstances — for example, when conducting enhanced due diligence on high-value accounts or investigating suspected fraud — ls777 may reference publicly available information consistent with applicable data protection standards.

How We Use Your Data

ls777 uses personal data only for defined, legitimate purposes. The primary purposes for which we process member data are:

• Account management: Creating and maintaining your ls777 member account, authenticating your identity at login, and managing your account preferences and settings.
• KYC and age verification: Verifying that you are at least 21 years of age and eligible to use the ls777 platform in accordance with our Terms & Conditions, and meeting applicable regulatory KYC obligations.
• Transaction processing: Executing deposit and withdrawal transactions via BCA, BRI, BNI, Mandiri, and affiliated e-wallet systems; reconciling account balances; and maintaining financial records.
• Fraud and AML compliance: Monitoring transactions and behavior patterns to detect, investigate, and prevent fraud, collusion, bonus abuse, money laundering, and other prohibited conduct described in the ls777 Terms & Conditions.
• Platform operation and improvement: Diagnosing technical issues, analyzing usage patterns, improving game and product offerings, and optimizing the platform experience for members across Indonesia.
• Responsible gaming: Monitoring play patterns to identify indicators of problem gambling behavior; delivering responsible gaming notifications, reality checks, and self-exclusion functionality in accordance with Clause 11 of the ls777 Terms & Conditions.
• Customer support: Responding to queries, resolving disputes, and managing complaints submitted by members via live chat, email, or other support channels.
• Marketing communications: Sending promotional emails and SMS messages to members who have opted in to receive them, including bonus offers, seasonal promotions, and platform news. You may opt out of marketing communications at any time by contacting support or using the unsubscribe mechanism in any marketing email.
• Legal and regulatory compliance: Meeting ls777's legal obligations including record retention, tax reporting, response to lawful law enforcement requests, and compliance with anti-money laundering directives.

Legal Basis for Processing

ls777 processes personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contract performance: Processing necessary to fulfill ls777's contractual obligations to you as a registered member — including account creation, transaction processing, and game platform delivery.
• Legal obligation: Processing required to comply with applicable law, including KYC verification, anti-money laundering record-keeping, and responding to lawful requests from regulatory authorities.
• Legitimate interests: Processing necessary for ls777's legitimate business interests — including fraud prevention, platform security, responsible gaming monitoring, and service improvement — provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing based on your freely given, specific, and informed consent — primarily applicable to marketing communications. Where consent is the legal basis, you have the right to withdraw it at any time without affecting the lawfulness of prior processing.

Data Sharing & Disclosure

ls777 does not sell, rent, or trade your personal data to third parties for their own commercial marketing purposes. ls777 may share your personal data in the following circumstances only:

• Licensed game providers: Game studios including Pragmatic Play, Evolution Gaming, Pocket Games Soft, NetEnt, and Microgaming receive the minimum data necessary to authenticate your game session and record game results. These studios operate under their own data protection frameworks and are independently licensed and audited.
• Payment processors and banking partners: Local Indonesian bank transfer gateways and e-wallet operators (OVO, DANA, GoPay, ShopeePay, LinkAja) receive the account and transaction data required to execute deposits and withdrawals.
• KYC and identity verification providers: Third-party services engaged by ls777 to conduct document verification and identity database checks receive identity document images and personal details necessary for the verification process.
• IT infrastructure and hosting providers: Cloud hosting, database management, and content delivery partners process technical data on ls777's behalf under strict data processing agreements that prohibit independent use of member data.
• Legal and regulatory authorities: ls777 will disclose personal data to Indonesian or international law enforcement, regulatory bodies, or courts when compelled by law, court order, or regulatory directive, or where ls777 in good faith believes disclosure is necessary to protect the rights, property, or safety of ls777 or its members.
• Business transfers: In the event of a merger, acquisition, or sale of all or substantially all of ls777's business assets, personal data held by ls777 may be transferred to the acquiring entity, subject to that entity's commitment to honor this Privacy Policy or provide equivalent protections.

All third parties with whom ls777 shares personal data are required to process that data only for the specific purposes for which it was shared and in accordance with applicable data protection standards.

International Data Transfers

ls777 operates as an international online platform, and certain personal data may be transferred to and processed in countries outside Indonesia. This includes transfers to countries where ls777's game provider partners, KYC vendors, and hosting infrastructure are located.

When personal data is transferred internationally, ls777 takes the following steps to ensure an adequate level of data protection:

• Entering into data processing agreements with receiving parties that incorporate standard contractual clauses equivalent to internationally recognized data protection standards.
• Conducting transfer impact assessments where the receiving country's data protection framework presents material risk to member rights.
• Limiting transferred data to the minimum necessary for the specific purpose of the transfer.

By using the ls777 platform, you acknowledge that your personal data may be processed in jurisdictions outside Indonesia. ls777 is committed to ensuring your data receives an equivalent level of protection regardless of where it is processed.

Data Retention

ls777 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The general retention principles ls777 applies are:

• Active account data: Identity, contact, and financial data associated with an active ls777 account is retained for the duration of your membership and for a period of at least five (5) years following account closure, to meet AML record-keeping requirements.
• Transaction records: All deposit, withdrawal, and betting transaction logs are retained for a minimum of five (5) years from the date of the transaction, consistent with financial record-keeping standards.
• KYC documents: Identity verification documents (KTP, passport scans) are retained for the period required by the applicable KYC regulatory framework and for a minimum of five (5) years following account closure.
• Support communications: Live chat transcripts and support email correspondence are retained for three (3) years from the date of the interaction, for quality assurance and dispute resolution purposes.
• Marketing data: Email and SMS marketing preferences and opt-in records are retained while your account is active and for a period of one (1) year following account closure or opt-out, to maintain suppression records.
• Technical and usage logs: Server logs and anonymized usage analytics are retained for up to 24 months, after which they are deleted or irreversibly anonymized.

When personal data is no longer required, ls777 securely destroys it in accordance with industry-standard data disposal practices. Data retained solely for compliance purposes is stored in restricted-access environments and is not used for operational or marketing activities.

Cookies & Tracking Technologies

The ls777 website uses cookies and similar tracking technologies to enable core platform functionality, improve your browsing experience, and support security and analytics. The categories of cookies ls777 uses are:

• Strictly Necessary Cookies: Essential for the website to function. These cookies enable session management, security token storage, and login state persistence. They cannot be disabled without impairing basic platform functionality.
• Functional Cookies: Remember your preferences, such as your selected language, display settings, and responsible gaming tool configurations. Disabling these cookies may result in loss of personalized settings between sessions.
• Analytics Cookies: Collect anonymized data about how members navigate and interact with the ls777 platform, enabling ls777 to identify usability improvements and measure the performance of new features. Analytics data is aggregated and does not personally identify individual members.
• Security Cookies: Assist in detecting and preventing fraudulent access, credential stuffing attacks, and bot traffic. These cookies are part of ls777's active security infrastructure and cannot be individually disabled.

Your Data Rights

As a member of ls777, you hold the following rights over your personal data. To exercise any of these rights, contact the ls777 support team or Data Protection Officer (see Section 15). ls777 will respond to all verified data rights requests within 30 calendar days.

ls777 may need to verify your identity before processing a data rights request to prevent unauthorized disclosure of another member's data. Requests that are manifestly unfounded, excessive, or repetitive may be subject to a reasonable administrative charge or may be declined, with written notice of the reason.

Minors & Age Verification

ls777 is strictly an adults-only platform. Access to and use of the ls777 platform is restricted to individuals who are at least 21 years of age. ls777 does not knowingly collect, process, or retain personal data from any person under the age of 21.

• All new members are required to confirm during registration that they are 21 years of age or older.
• ls777 conducts KYC age verification on member accounts and will request government-issued photo identification (KTP or passport) to confirm a member's date of birth where required.
• If ls777 discovers or reasonably suspects that a registered account is held by a person under the age of 21, the account will be immediately suspended pending investigation. Any balance held in the account will be handled in accordance with the ls777 Terms & Conditions and applicable law.
• Any personal data inadvertently collected from a person under the age of 21 will be permanently deleted from ls777's systems as soon as the underage account is identified.

Data Security

ls777 implements comprehensive technical and organizational security measures to protect member personal data against unauthorized access, accidental loss, alteration, disclosure, or destruction. Key security measures in place include:

• SSL / TLS Encryption: All data transmitted between your device and the ls777 platform is encrypted using industry-standard SSL/TLS protocols. ls777 enforces HTTPS across all pages and API endpoints.
• Data encryption at rest: Sensitive personal data — including identity documents, financial account details, and authentication credentials — is stored in encrypted form using AES-256 or equivalent encryption standards.
• Access controls: Access to systems that hold member personal data is restricted to authorized ls777 personnel on a strict need-to-know basis. All internal access is logged, monitored, and subject to regular audit.
• Password security: Member passwords are stored as salted cryptographic hashes and are never stored in plaintext. ls777 staff cannot view your password; only a password reset can be initiated if access is lost.
• Two-factor authentication: ls777 offers optional two-factor authentication (2FA) on member accounts. ls777 strongly recommends enabling 2FA to add an additional layer of protection beyond your password.
• Penetration testing and vulnerability management: ls777 conducts regular internal and third-party security assessments to identify and remediate vulnerabilities in its platform and infrastructure.
• Incident response: ls777 maintains a formal data breach incident response plan. In the event of a breach that poses a risk to member rights, ls777 will notify affected members and the relevant regulatory authority within the timeframes required by applicable law.

While ls777 takes all reasonable steps to protect your personal data, no internet-based platform can guarantee absolute security. You are also responsible for maintaining the security of your own account credentials. See Section 4 of the ls777 Terms & Conditions for your account security obligations.

Third-Party Services

The ls777 platform integrates with third-party services to deliver its full range of gaming and payment products. These third-party providers operate under their own privacy policies and data protection frameworks. ls777 is not responsible for the privacy practices of third-party services accessed independently of the ls777 platform.

• Game providers: Studios including Pragmatic Play, Evolution Gaming, Pocket Games Soft (PGSoft), NetEnt, Microgaming, and Spribe are licensed and independently audited by internationally recognized testing laboratories. Their game client software may collect technical session data as described in their own privacy documentation.
• Payment processors: Bank transfer gateway providers and e-wallet operators (OVO, DANA, GoPay, ShopeePay, LinkAja) are regulated financial entities subject to Bank Indonesia oversight and applicable Indonesian financial services regulation. Their handling of your payment data is governed by their own published privacy policies.
• KYC verification services: ls777 engages specialized identity verification providers to conduct KYC document checks. These providers are bound by contractual data processing obligations and applicable data protection law.

ls777 does not control and is not responsible for the content, privacy practices, or security of any third-party website that may be linked to or accessible from the ls777 platform. Links to third-party content are provided for informational purposes only.

Policy Amendments

ls777 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, data processing practices, or platform functionality. When material changes are made, ls777 will:

• Post the updated Privacy Policy at ls777.org/privacy-policy with a revised effective date displayed prominently in the document header.
• Notify active members via the email address registered to their account, providing at least seven (7) days' notice before material changes take effect, except where immediate amendment is required by law.
• Where a change requires fresh consent — for example, the introduction of a new category of data use — ls777 will seek your explicit consent before commencing the new processing activity.

Your continued use of the ls777 platform after the effective date of any amended Privacy Policy constitutes your acknowledgment of the updated document. If you do not agree with any amendment, you must stop using the platform and contact support to close your account before the effective date of the change.

Contact & Data Protection Officer

If you have any questions about this Privacy Policy, wish to exercise any of your data rights set out in Section 10, or wish to raise a concern about how ls777 handles your personal data, please contact us through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week via the chat widget on the ls777 platform. For data rights requests submitted via live chat, the agent will direct you to the formal data request process.
• Email (Data Rights & Privacy Inquiries): [email protected] — please include "Privacy Request" in your subject line. ls777 will acknowledge your request within 48 hours and provide a substantive response within 30 calendar days.
• General Support Email: [email protected] — for account-related and general platform inquiries.

For formal complaints that have not been satisfactorily resolved through ls777's internal process, you have the right to escalate to the relevant data protection authority in your jurisdiction. ls777 will cooperate fully with any investigation conducted by a regulatory authority.