Privacy Policy

indobola77 ("we", "us", "our", "the Operator", "the Platform") is committed to protecting the personal data and privacy of every individual who accesses, registers on, or interacts with our platform at https://indobola77.cam. This Privacy Policy ("Policy") describes our practices with respect to the collection, storage, use, disclosure, and protection of personal data submitted to or collected by the Platform.

This Policy applies to all users of the indobola77 Platform, including registered account holders, visitors browsing without an account, and individuals who contact our support team. By accessing the Platform or creating an account, you acknowledge that you have read and understood this Policy and consent to the collection and use of your personal data as described herein.

This Policy should be read alongside our Terms & Conditions and Responsible Gambling Policy, all of which collectively govern your relationship with indobola77. Where any conflict exists between this Policy and the Terms & Conditions, the Terms & Conditions shall prevail with respect to matters of contract, while this Policy shall govern all matters relating to personal data processing.

For the purposes of this Privacy Policy, the following terms carry the meanings specified:

• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to name, identification number, contact details, financial information, IP address, and device identifiers.
• "Processing" means any operation or set of operations performed on Personal Data, including collection, recording, storage, adaptation, retrieval, use, disclosure, erasure, or destruction.
• "Data Controller" refers to indobola77, the entity that determines the purposes and means of processing Personal Data.
• "Data Processor" refers to any third party that processes Personal Data on behalf of indobola77 pursuant to a written data processing agreement.
• "Consent" refers to any freely given, specific, informed, and unambiguous indication of the Data Subject's agreement to the processing of their Personal Data.
• "Data Subject" refers to the individual whose Personal Data is being processed — in the context of this Platform, primarily the registered Player or site visitor.
• "Cookies" refers to small data files placed on a user's device by the Platform to enable certain functionality, session management, and analytical tracking.
• "KYC Data" refers to identity verification documents and information collected as part of the Know Your Customer compliance process, including government-issued identification and proof of address.

indobola77 collects Personal Data across several categories depending on the nature of your interaction with the Platform. The categories of data we collect are as follows:

Registration & Account Data

• Full legal name
• Date of birth (to verify age eligibility — players must be 21 or above)
• Email address
• Mobile phone number
• Username and encrypted password
• Preferred currency (Malaysian Ringgit / MYR as default)
• Country and city of residence (e.g., Kuala Lumpur, Penang, Johor Bahru)

KYC Verification Data

• Malaysian Identity Card (MyKad) number and scan
• Passport details (where MyKad is not applicable)
• Proof of residential address (utility bill, bank statement dated within 3 months)
• Selfie or live photo for facial comparison purposes
• Source of funds documentation where required by AML obligations

Financial & Transaction Data

• Deposit and withdrawal transaction records
• Payment method identifiers (e-wallet account references, bank account last-four digits, FPX reference numbers)
• Account balance history
• Bonus and promotional participation records
• Cryptocurrency wallet addresses where applicable

Behavioural & Usage Data

• Betting history, game play records, and wagering patterns
• Login timestamps and session duration
• Pages visited, features accessed, and interaction events
• Device type, operating system, browser version
• IP address and approximate geolocation

Communications Data

• Support chat transcripts and email correspondence
• Feedback submissions and complaint records
• Promotional opt-in and opt-out preferences

indobola77 collects Personal Data through the following channels and methods:

Directly from You

The majority of Personal Data we hold is provided directly by you when you register an account, complete KYC verification, make a deposit or withdrawal request, contact our support team, or opt in to a promotional offer. You control this data submission and may decline to provide certain information, though doing so may limit your ability to use specific features of the Platform.

Automatically Through Platform Use

When you browse or interact with the indobola77 Platform, we automatically collect technical data including your IP address, device identifiers, browser type and version, referring URL, pages visited, and session timestamps. This data is collected through server logs, cookies, and similar tracking technologies and is used primarily for security monitoring, fraud prevention, and service optimisation.

From Third-Party Payment Providers

When you transact through Malaysian payment providers such as Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank2u, CIMB Clicks, Public Bank Online, or Hong Leong Connect, these providers may transmit transaction confirmation data and reference identifiers to indobola77 for the purpose of crediting your account and reconciling financial records. We do not receive your full payment credentials from these providers.

From Identity Verification Partners

Where we engage third-party KYC service providers to assist with identity verification, those providers may supply verification outcome data, document authenticity scores, and fraud risk ratings based on the documents you submit. All KYC partners are contractually bound to process your data solely for verification purposes in accordance with this Policy.

indobola77 processes your Personal Data for the following defined purposes:

indobola77 does not sell your Personal Data to third parties for commercial marketing purposes. We do not engage in profiling that produces legally significant automated decisions without human review.

indobola77 processes your Personal Data on the following legal grounds:

• Contractual Necessity: Processing required to fulfil our obligations under the Terms & Conditions, including account management, payment processing, and bet settlement.
• Legal Obligation: Processing required to comply with applicable legal requirements, including AML legislation, KYC mandates under our international gaming licence, and responses to lawful regulatory or court orders.
• Legitimate Interests: Processing carried out to pursue the Operator's legitimate business interests, including fraud prevention, platform security, responsible gambling monitoring, and service improvement, where such interests are not overridden by your rights and interests.
• Consent: Processing for optional purposes such as marketing communications and non-essential cookies, where your prior, informed, and freely given consent has been obtained. You may withdraw consent at any time without affecting the lawfulness of processing that occurred prior to withdrawal.

indobola77 does not sell, rent, or trade your Personal Data to unaffiliated third parties for their own marketing purposes. We may share your Personal Data with the following categories of recipients where necessary to deliver our services or comply with legal obligations:

Payment Service Providers

We share transaction-related data with Malaysian payment providers (including Touch 'n Go eWallet, DuitNow, FPX, Maybank2u, CIMB Clicks, Public Bank, and Hong Leong Connect) and cryptocurrency processing partners solely for the purpose of processing your deposits and withdrawals. These providers are bound by their own privacy obligations and do not receive data beyond what is necessary for transaction completion.

KYC and Identity Verification Providers

Identity documents submitted during the KYC process may be transmitted to authorised third-party identity verification service providers under data processing agreements that restrict use to verification purposes only. These providers operate under equivalent data protection standards to those applied by indobola77.

Regulatory and Law Enforcement Authorities

We are required by our licensing obligations and applicable law to cooperate with regulatory authorities, financial intelligence units, and law enforcement agencies. Where required by a valid court order, regulatory directive, or legal obligation, we will disclose Personal Data without prior notice to the Data Subject. We will not disclose more than is strictly required by the relevant legal instrument.

Gaming and Technology Service Providers

Third-party game studios whose content is hosted on the indobola77 Platform may receive anonymised or pseudonymised gameplay data for the purpose of game integrity verification, RNG auditing, and technical support. Such providers do not receive directly identifying personal information beyond what is required for their specific technical functions.

Group Companies

Where indobola77 operates as part of a broader corporate group, Personal Data may be shared with affiliated entities for internal administrative purposes, consolidated AML monitoring, and group-level compliance functions. All such transfers are governed by intra-group data sharing agreements.

indobola77 uses cookies and similar tracking technologies to enable essential Platform functionality, maintain your logged-in session, remember your preferences, and support security monitoring. We also use analytical cookies to understand how players navigate the Platform so that we can continuously improve the user experience.

Categories of Cookies We Use

• Essential Cookies: Required for the Platform to function. These include session authentication tokens, security identifiers, and load-balancing cookies. Essential cookies cannot be disabled without impairing Platform functionality.
• Functional Cookies: Used to remember your preferences, such as preferred language, time zone, and display settings. These cookies improve your experience but are not strictly necessary.
• Analytical Cookies: Used to collect anonymised data on how players use the Platform, including pages visited, features accessed, and session duration. This data helps us identify areas for improvement.
• Security Cookies: Used to support fraud detection systems, identify suspicious login patterns, and flag potentially compromised accounts for review.

You may manage cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from accessing the Platform, but may affect personalisation features and certain functional conveniences. Disabling essential cookies may prevent you from logging in or completing transactions.

indobola77 retains your Personal Data for as long as is necessary to fulfil the purposes for which it was collected, and for as long as required by applicable legal, regulatory, or licensing obligations. The following retention periods apply as a general guide:

Where Personal Data is retained solely for compliance purposes following Account closure, access to that data will be restricted to authorised compliance personnel only. The data will not be used for any other purpose during the retention period.

Upon expiry of the applicable retention period, Personal Data will be securely deleted, anonymised, or pseudonymised in accordance with our internal data destruction procedures.

indobola77 implements industry-standard technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, disclosure, alteration, or destruction. Our security infrastructure includes the following controls:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the indobola77 Platform is encrypted in transit using SSL/TLS protocols. This applies to all page requests, login sessions, deposit flows, and API communications.
• Password Hashing: Account passwords are never stored in plaintext. All passwords are hashed using industry-standard one-way hashing algorithms with salt, meaning that even indobola77's own engineering team cannot retrieve your actual password.
• Two-Factor Authentication: Players are encouraged to enable two-factor authentication on their accounts as an additional layer of login security.
• Access Controls: Internal access to Personal Data is restricted to personnel whose job function requires it. Access logs are maintained and reviewed regularly as part of our internal audit programme.
• Penetration Testing: The Platform undergoes regular security assessments including third-party penetration testing to identify and remediate vulnerabilities.
• Incident Response: We maintain a documented data breach response procedure. In the event of a breach likely to result in material risk to your rights, we will notify affected players and relevant authorities within the timeframes required by applicable law.

Subject to applicable data protection law and the limitations set out below, you have the following rights in relation to your Personal Data held by indobola77. To exercise any of these rights, please contact us at the details provided in Section 14.

Please note that certain rights may be limited or unavailable where processing is required to comply with a legal obligation, to exercise or defend legal claims, or where mandatory KYC and AML retention periods apply. We will clearly explain any applicable limitations when responding to your request.

The indobola77 Platform is strictly intended for adults aged 21 years and above. We do not knowingly collect, process, or store Personal Data relating to individuals under the age of 21. The collection of date of birth during account registration is a mandatory step specifically designed to prevent underage access to the Platform.

If we become aware that Personal Data has been collected from an individual under the age of 21 — whether through inaccurate registration information or any other means — we will immediately suspend the relevant Account, forfeit any associated balance pending investigation, and permanently delete the associated Personal Data to the extent permitted by our legal obligations.

If you are a parent or guardian and have reason to believe that a minor under your care has registered or accessed the indobola77 Platform, please contact our support team immediately at the details provided in Section 14.

indobola77 reserves the right to amend this Privacy Policy at any time in response to changes in applicable law, our processing activities, licensing requirements, or operational practices. Where amendments are material — meaning they substantially affect how we use your Personal Data or the rights available to you — we will notify registered players via email or a prominent notice on the Platform prior to the changes taking effect.

Minor amendments, including clarifications of existing practices, corrections of typographical errors, or additions of new processing activities that are consistent with existing purposes, may be made without advance notice. The "Last Updated" date at the top of this page reflects the date of the most recent revision.

The current version of this Privacy Policy will always be accessible at https://indobola77.cam/privacy-policy. Your continued use of the Platform following the effective date of any amended Policy constitutes your acknowledgement of the changes. If you do not accept the revised Policy, you should discontinue use of the Platform and contact us to arrange closure of your Account.

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data by indobola77, please contact our Data Protection team using the details below. We will acknowledge all privacy-related requests within 48 hours and respond substantively within 30 calendar days.

When submitting a data rights request, please include your registered Account username and email address to allow us to verify your identity before processing the request. We will not action data rights requests from unverified individuals.