Privacy Policy

laku77 operates Indonesia's trusted online betting and casino platform, offering sports betting, live casino, RNG slots, togel (Indonesia's traditional numbers lottery), Sic Bo, in-play betting, and a range of promotional products. In delivering these services to members across Indonesia — from Jakarta and Surabaya to Medan, Bandung, Bali, and beyond — we necessarily collect and process certain personal data.

We take that responsibility seriously. This Privacy Policy has been drafted to give you a clear and complete picture of our data handling practices in plain, accessible English. We are committed to processing your personal data lawfully, fairly, and transparently, and to protecting it with technical and organisational measures appropriate to the sensitivity of the information concerned.

This policy should be read alongside our Terms & Conditions, which govern the overall contractual relationship between you and laku77. Where this Privacy Policy conflicts with any other document, this policy governs on all matters relating to personal data.

For the purposes of this Privacy Policy, laku77 acts as the data controller in respect of the personal data of its members. The data controller is the entity that determines the purposes and means of processing personal data.

All data-related enquiries, requests, and complaints should be directed to the laku77 Data Protection team via the contact details listed in Clause 13. We aim to respond to all privacy-related requests within 14 calendar days of receipt.

laku77 collects personal data through several channels: directly from you when you register and use the platform, automatically as you interact with our website, and occasionally from third-party verification and fraud-prevention partners. The categories of data we collect are described in the table below.

We do not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health information. Where KYC documentation incidentally reveals such information (for example, religion field on an Indonesian KTP), that information is not extracted, stored separately, or processed for any purpose beyond identity verification.

laku77 uses personal data only for specific, documented purposes. We do not use your data in ways that are incompatible with the purposes for which it was originally collected. The table below maps each use case to its purpose and legal basis.

1. Account creation and management: To set up, maintain, and administer your laku77 account, including processing login requests, managing account settings, and maintaining an accurate account history.
2. Processing deposits and withdrawals: To execute financial transactions via your nominated Indonesian bank or e-wallet, verify that the payment account is registered in your name, and maintain a complete transaction ledger in IDR.
3. Identity and age verification (KYC): To confirm that you are at least 21 years of age and are the individual you claim to be, in accordance with responsible gaming obligations and applicable regulations. We may share identity documents with accredited third-party KYC verification partners for this purpose.
4. Fraud prevention and anti-money laundering (AML): To monitor transactions and account activity for patterns indicative of fraud, collusion, multi-accounting, or money laundering. Suspicious activity may be reported to relevant financial authorities as required by applicable law.
5. Customer support: To respond to your enquiries, complaints, and requests via live chat, email, and WhatsApp, and to maintain a record of support interactions for quality assurance purposes.
6. Responsible gaming compliance: To monitor gaming activity for indicators of problem gambling behaviour, enforce deposit limits and self-exclusion requests, and contact you proactively if our monitoring systems flag a concern.
7. Promotional communications: Where you have opted in, to send you notifications about bonuses, seasonal promotions (including Idul Fitri, Imlek, and Indonesian Independence Day offers), and new product launches via email, SMS, or WhatsApp. You may withdraw consent at any time.
8. Analytics and platform improvement: To analyse aggregated, anonymised usage data to understand how members interact with the platform, identify technical issues, and improve the quality and performance of our services.
9. Legal and regulatory compliance: To fulfil obligations imposed on us by applicable law, regulatory bodies, and court orders — including record-keeping obligations tied to our international operating licence.

laku77 processes personal data on one or more of the following legal grounds, depending on the specific processing activity:

• Contractual necessity: Processing your identity data, financial data, and transaction data is necessary to perform the contract between you and laku77 — i.e., to provide the betting and gaming services you have signed up for.
• Legal obligation: KYC verification, AML monitoring, and certain record-keeping activities are required to comply with applicable financial regulations and our operating licence conditions.
• Legitimate interests: Fraud detection, platform security, analytics, and quality assurance activities are conducted on the basis of laku77's legitimate interest in operating a secure, fair, and commercially viable platform — provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: Sending marketing communications (email, SMS, WhatsApp) and placing non-essential cookies are conducted on the basis of your freely given, specific, informed consent. You may withdraw this consent at any time without affecting the lawfulness of processing carried out before withdrawal.

laku77 does not sell, rent, or otherwise commercialise your personal data. We share data only where strictly necessary with the following categories of recipient:

laku77 uses cookies and similar technologies (including local storage and session storage) to enable core platform functionality, analyse site usage, and support fraud prevention. The types of cookies we use are described below:

• Strictly necessary cookies: These are essential for the platform to function. They include session authentication tokens, CSRF protection tokens, and load-balancing cookies. These cookies cannot be disabled without breaking core functionality.
• Analytics cookies: We use aggregated, anonymised analytics to understand how members navigate the platform, which pages are most visited, and where technical errors occur. Analytics data is not linked back to individual member identities.
• Fraud prevention cookies: These track device fingerprint characteristics and behavioural signals to detect multi-accounting, bot activity, and other prohibited behaviours as described in our Terms & Conditions.
• Preference cookies: These remember your language and display preferences so the platform behaves consistently across sessions.

You can manage or disable non-essential cookies through your browser settings. Note that disabling certain cookies may limit your access to specific features of the platform. laku77 does not use third-party advertising cookies or cross-site tracking networks.

laku77 retains personal data for as long as it is necessary to fulfil the purpose for which it was collected, subject to any longer retention period required by applicable law or our operating licence. Our standard retention schedule is as follows:

Once the applicable retention period has elapsed, personal data is securely deleted or anonymised in a manner that prevents reconstruction of the original data.

As a laku77 member, you have the following rights in respect of your personal data. To exercise any of these rights, contact our support team using the details in Clause 13. We will respond within 14 calendar days.

laku77 takes the security of your personal data seriously and has implemented a multi-layered set of technical and organisational safeguards to protect it against unauthorised access, alteration, disclosure, or destruction:

• Transport security: All data transmitted between your device and our servers is protected by 256-bit SSL/TLS encryption. Our HTTPS certificate is maintained at all times.
• Access controls: Access to member data within laku77's internal systems is restricted on a strict need-to-know basis. All staff with data access are subject to confidentiality obligations and regular security training.
• Password hashing: Account passwords are stored as salted cryptographic hashes. laku77 staff cannot retrieve your plain-text password and will never ask you for it.
• Fraud detection systems: Automated systems monitor account activity 24/7 for anomalous patterns, including unusual login locations, atypical transaction volumes, and device fingerprint mismatches.
• Penetration testing: laku77 conducts periodic penetration tests and vulnerability assessments to identify and remediate security weaknesses before they can be exploited.
• Incident response: In the event of a personal data breach that poses a risk to your rights and freedoms, laku77 will notify affected members promptly and take immediate steps to contain and remediate the breach.

While laku77 takes all reasonable steps to protect your data, no internet transmission is completely immune to risk. You are responsible for keeping your account credentials confidential and for notifying us immediately at [email protected] if you suspect unauthorised access to your account.

laku77 operates a strict 21+ policy. Our platform is not intended for, directed at, or accessible to individuals under 21 years of age. We do not knowingly collect personal data from minors.

If laku77 discovers that a member is under 21, or that a minor has been allowed to use an adult member's account, the account will be immediately suspended, all balances will be withheld pending investigation, and any personal data collected in connection with the minor will be deleted as soon as legally permissible.

If you are a parent or guardian and believe that a person under 21 in your care has registered a laku77 account or accessed our platform, please contact us immediately at [email protected] so that we can take appropriate action without delay.

laku77 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or regulatory requirements. When we make material changes, we will:

1. Update the "Last updated" date at the top of this page.
2. Send a notification to your registered email address summarising the key changes, at least 14 days before the revised policy takes effect.
3. Display a prominent notice on the laku77 platform for a minimum of 14 days prior to the effective date of the changes.

Your continued use of the laku77 platform after the effective date of a revised Privacy Policy constitutes your acceptance of that revised policy. If you do not agree to the revised terms, you must cease using the platform and may request account closure in accordance with our Terms & Conditions.

The version of this Privacy Policy currently published at https://laku77.ws/privacy-policy is the version in force. We recommend reviewing this page periodically to stay informed of any updates.

For any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data, please contact the laku77 Data Protection team through any of the following channels:

• Live Chat: Available 24/7 directly on the laku77 platform. Our support agents, including Indonesian-speaking staff, are on standby around the clock.
• Email: [email protected] — please use the subject line "Privacy Request" to ensure your message is routed to our Data Protection team promptly. We aim to respond within 14 calendar days.
• WhatsApp: +62 811 0000 7700 — available during business hours (WIB, UTC+7).