vm777 Privacy Policy

1 Definitions

The following terms carry specific meanings throughout this Privacy Policy:

• "vm777", "we", "us", or "our" refers to the vm777 platform accessible at https://vm777.buzz and its operating entity.
• "Platform" means the vm777 website, all associated pages, mobile-optimised views, software, and any services delivered through them.
• "Member", "you", or "your" refers to any individual who registers an Account on the Platform or otherwise interacts with it.
• "Personal Data" means any information that identifies or can reasonably be used to identify you as a natural person — including your name, email address, phone number, national identity number, financial account details, IP address, and device identifiers.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, retrieval, use, disclosure, or deletion.
• "KYC" (Know Your Customer) means the identity-verification process required to validate a Member's identity in accordance with our anti-money-laundering obligations.
• "Cookies" means small text files placed on your device by the Platform to enable core functionality, analytics, and personalisation.

2 Data We Collect

vm777 collects only the Personal Data necessary to operate the Platform, verify identities, process payments, prevent fraud, and comply with applicable regulatory requirements. The categories of data we collect are set out in the table below:

Category	Examples	Purpose
Identity Data	Full name, date of birth, KTP / passport / SIM number, nationality	Account registration, KYC verification, age enforcement (21+)
Contact Data	Email address, Indonesian mobile phone number, residential address	Account communications, transaction notifications, support
Financial Data	Bank account name and number (BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata, BSI, OCBC NISP), e-wallet account details (OVO, DANA, GoPay, ShopeePay, LinkAja), transaction history, deposit and withdrawal amounts in IDR	Payment processing, fraud prevention, withdrawal verification
Technical Data	IP address, browser type and version, device identifiers, operating system, screen resolution, time zone (WIB / WITA / WIT)	Platform security, fraud detection, session management
Usage Data	Pages visited, games played, wagers placed, session duration, click paths, search queries on the Platform	Platform improvement, personalised game recommendations, responsible gaming monitoring
Communications Data	Live chat transcripts, email correspondence, WhatsApp messages to support	Customer support, dispute resolution, quality assurance
Document Data	Scanned copies or photos of identity documents and proof-of-address documents submitted during KYC	Identity verification, regulatory compliance, anti-money-laundering checks

We do not collect sensitive personal data such as biometric data, health records, racial or ethnic origin, political opinions, religious beliefs, or criminal records, except where this is required by law or expressly requested by a relevant regulatory authority.

3 How We Collect Data

vm777 collects Personal Data through the following channels:

• Direct interactions: Data you provide when registering an Account, completing KYC, making a deposit or withdrawal request, contacting support via live chat, email, or WhatsApp, or responding to promotions.
• Automated technologies: As you navigate the Platform, we automatically collect Technical Data and Usage Data via cookies, web beacons, server logs, and similar tracking technologies. See Section 9 for full details on cookies.
• Third-party sources: We may receive data from identity-verification service providers, payment processors (including local Indonesian banks and e-wallet operators), fraud-prevention partners, and game-data providers — all of whom are bound by confidentiality obligations.
• Publicly available sources: In limited circumstances required for fraud prevention or due-diligence checks, we may consult publicly available records such as government sanction lists or publicly registered business databases.

4 How We Use Your Data

vm777 uses your Personal Data for the following specific purposes. We will not use your data for any purpose incompatible with those listed here without first obtaining your explicit consent or as required by law:

• Account management: Creating, maintaining, and securing your vm777 Account, including enforcing our one-account-per-member rule.
• Identity verification: Conducting KYC checks to confirm your identity and verify that you are at least 21 years of age, in compliance with our responsible gaming obligations.
• Payment processing: Facilitating IDR deposits via local Indonesian banks (BCA, BRI, BNI, Mandiri, and others) and e-wallets (OVO, DANA, GoPay, ShopeePay, LinkAja), and processing withdrawal requests to your verified payment method.
• Platform security and fraud prevention: Monitoring for unusual activity, detecting and investigating fraud, money laundering, and other prohibited conduct as defined in our Terms & Conditions.
• Legal and regulatory compliance: Retaining transaction records and identity documents to satisfy applicable anti-money-laundering and counter-terrorism-financing obligations.
• Customer support: Responding to your queries, resolving disputes, and managing complaints through our 24/7 live chat, email, and WhatsApp support channels.
• Responsible gaming: Monitoring usage patterns to identify indicators of problem gambling and, where appropriate, contacting Members to offer support tools such as deposit limits, session timers, and self-exclusion.
• Service improvement and personalisation: Analysing aggregated usage data to improve Platform performance, enhance the game library, and personalise your experience — for example, surfacing game categories most relevant to your interests.
• Marketing and promotions: Sending you information about relevant vm777 promotions, bonuses, and seasonal offers (such as Idul Fitri and Ramadhan promotions) where you have opted in to receive marketing communications. You may opt out at any time.

5 Legal Basis for Processing

vm777 processes your Personal Data on the following legal bases:

• Contractual necessity: Processing required to perform the contract between you and vm777 — including Account creation, payment processing, and customer support.
• Legal obligation: Processing required to comply with applicable laws and regulations, including anti-money-laundering requirements and age-verification obligations.
• Legitimate interests: Processing carried out to pursue vm777's legitimate business interests — including fraud prevention, Platform security, and service improvement — provided these interests are not overridden by your data-protection rights.
• Consent: Processing based on your freely given, specific, and informed consent — primarily for optional marketing communications. Where consent is the basis, you have the right to withdraw it at any time without affecting the lawfulness of prior processing.

6 Data Sharing & Disclosure

vm777 does not sell, rent, or trade your Personal Data to third parties. We may share your data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data-protection safeguards:

6.1 Service Providers

We engage trusted third-party service providers who process Personal Data on our behalf and under our instruction. These include identity-verification providers, payment processors (Indonesian banks and e-wallet operators), cloud-hosting providers, IT security vendors, and customer-support software providers. All service providers are contractually obligated to protect your data and to use it only for the purposes specified by vm777.

6.2 Game Studios and Content Partners

Licensed game studios — including Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, and PG Soft (Pocket Games Soft) — may receive Technical Data and session-level Usage Data necessary to deliver and monitor game functionality. These studios operate under their own independently audited security and privacy standards.

6.3 Legal and Regulatory Authorities

vm777 will disclose Personal Data to competent governmental authorities, law-enforcement agencies, or financial intelligence units where required by law, court order, or to protect the rights and safety of vm777, its Members, or the public. We will notify you of any such disclosure where permitted by law.

6.4 Business Transfers

In the event of a merger, acquisition, or sale of substantially all of vm777's assets, Personal Data held by vm777 may be transferred to the acquiring entity, provided that the receiving party agrees to protect your Personal Data in a manner consistent with this Privacy Policy. Members will be notified prior to any such transfer taking effect.

7 Data Retention

vm777 retains your Personal Data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. Our standard retention periods are as follows:

• Active Account data (identity, contact, financial records): retained for the duration of your membership and for a minimum of five (5) years after Account closure to satisfy anti-money-laundering retention obligations.
• KYC documents (scanned identity documents, proof of address): retained for five (5) years from the date of submission or Account closure, whichever is later.
• Transaction records (deposit/withdrawal history, wager records): retained for five (5) years from the date of each transaction.
• Communications Data (support chat transcripts, emails): retained for two (2) years from the date of the interaction.
• Technical and Usage Data (logs, IP addresses, session data): retained for twelve (12) months from collection date, unless longer retention is required for an active fraud investigation.
• Marketing preferences and consent records: retained for the duration of your membership and for one (1) year after opt-out or Account closure.

When retention periods expire, Personal Data is securely deleted or anonymised so that it can no longer be associated with you.

8 Data Security

vm777 implements a layered, industry-standard security framework to protect your Personal Data from unauthorised access, loss, alteration, or disclosure. Our security measures include:

• TLS 1.3 encryption for all data transmitted between your device and vm777 servers — the same standard used by Indonesia's leading banks.
• AES-256 encryption at rest for all stored Personal Data and KYC documents.
• Role-based access controls limiting access to Personal Data to authorised personnel who require it to perform their specific job function.
• Two-factor authentication (2FA) for all internal staff accessing systems that hold Personal Data.
• Regular penetration testing and vulnerability assessments conducted by independent third-party security firms.
• Continuous monitoring and anomaly detection to identify and respond to suspicious activity in real time.

Despite best efforts, no data transmission or storage system can be guaranteed 100% secure. In the event of a data breach that is likely to result in a significant risk to your rights and freedoms, vm777 will notify affected Members without undue delay and take all reasonable steps to mitigate the impact.

9 Cookies & Tracking Technologies

vm777 uses cookies and similar technologies to ensure the Platform functions correctly, to measure performance, and to personalise your experience. The categories of cookies we use are:

Cookie Type	Purpose	Can You Opt Out?
Strictly Necessary	Enable core Platform functions — login sessions, Wallet balance display, game loading, and security checks. The Platform cannot operate without these.	No — required for operation
Performance / Analytics	Collect anonymised data on how Members use the Platform (pages visited, errors encountered) to help us improve stability and speed.	Yes — via browser settings
Functional	Remember your preferences (e.g., preferred game category, language display settings) to personalise your experience across sessions.	Yes — via browser settings
Marketing / Targeting	Track browsing behaviour to serve relevant promotional content on-Platform. vm777 does not serve cross-site retargeting ads to third-party platforms.	Yes — via browser settings or by contacting support

You can manage or disable non-essential cookies through your browser's privacy settings at any time. Disabling strictly necessary cookies will impair or prevent your ability to use the Platform. vm777 does not currently respond to "Do Not Track" browser signals.

10 Your Data Rights

As a Member of vm777, you hold the following rights with respect to your Personal Data. To exercise any of these rights, contact us at [email protected] with the subject line "Data Rights Request — [Your Username]". We will respond within 30 calendar days.

• Right of Access: You may request a copy of the Personal Data we hold about you, along with information about how it is being used.
• Right to Rectification: You may request correction of any inaccurate or incomplete Personal Data held on your Account. You can update most profile information directly through your Account dashboard.
• Right to Erasure: You may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations (see Section 7). Note that mandatory retention periods for financial and KYC records will override erasure requests for those data categories.
• Right to Restriction: You may request that we restrict the processing of your Personal Data in certain circumstances — for example, while an inaccuracy is being investigated.
• Right to Data Portability: You may request a machine-readable copy of the Personal Data you have provided to us, to facilitate transfer to another service provider where technically feasible.
• Right to Object: You may object to processing based on legitimate interests or for marketing purposes at any time. Marketing opt-outs take effect within 48 hours of request.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

11 Protection of Minors

vm777 is strictly an adults-only platform. We do not knowingly collect Personal Data from any person under the age of 21. The Platform employs mandatory age-verification checks during registration and KYC, and any Account found to be held by a person under 21 will be immediately suspended. All associated data will be handled in accordance with our underage access protocol, which includes notifying relevant authorities where required by law.

Parents and guardians who believe that a minor may have accessed the Platform using false information are encouraged to contact us immediately at [email protected] so that we can take appropriate action without delay.

12 Third-Party Services & Links

The vm777 Platform may reference or link to third-party services — including licensed game studios, payment processors, and support tools — whose data practices are governed by their own privacy policies. vm777 is not responsible for the privacy practices of third-party services. We encourage you to review the privacy policies of any third-party services you interact with in connection with your vm777 Account.

vm777 does not embed third-party advertising networks, cross-site tracking pixels from social-media platforms, or affiliate retargeting scripts within the core Platform environment.

13 International Data Transfers

To deliver a reliable and low-latency experience to Members primarily located in Indonesia — including major cities such as Jakarta, Surabaya, Medan, Bandung, Semarang, and Bali — vm777 may store or process your Personal Data on servers located outside Indonesia. Where such transfers occur, vm777 ensures that appropriate safeguards are in place, including:

• Contractual clauses with service providers that impose data-protection obligations equivalent to those applied within Indonesia.
• Transfer only to jurisdictions or providers that maintain security and privacy standards consistent with internationally recognised frameworks.
• Minimisation of the data transferred to only what is strictly necessary for the relevant processing activity.

By registering an Account with vm777, you acknowledge and consent to the transfer of your Personal Data outside Indonesia on the terms described above.

14 Policy Amendments

vm777 reserves the right to update this Privacy Policy at any time to reflect changes in our data-processing practices, technology, legal requirements, or regulatory guidance. When material changes are made, we will notify Members by email or through a prominent notice on the Platform at least seven (7) calendar days before the changes take effect. The "Last Updated" date at the top of this page will always reflect the current version. Your continued use of the Platform following the effective date of any amendment constitutes acceptance of the revised Privacy Policy. If you do not accept the revised terms, you must close your Account and cease using the Platform.

15 Contact Us

If you have questions, concerns, or requests relating to this Privacy Policy or to the processing of your Personal Data by vm777, please reach out through any of the following channels:

• Email: [email protected] — responses within 4 hours. For formal data rights requests, use the subject line "Data Rights Request — [Your Username]".
• Live Chat: Available 24/7 via the Platform's live chat widget — native Indonesian-speaking agents are on every shift.
• WhatsApp: +62 812 0000 7777 — available 08:00–00:00 WIB.

vm777 aims to acknowledge all Privacy Policy queries within 2 business days and to resolve substantive data rights requests within 30 calendar days of receipt of sufficient information to process the request.