kapital77 Casino & Sportsbook Data Care

This page describes what we collect when you use kapital77 and how we keep that data protected. We at kapital77 handle your personal information—email, identity documents, payment details, and betting history—with strict security practices. We do not sell your data to third parties. We use it only to verify your account, process your deposits and withdrawals, settle your bets, and comply with legal obligations.

Our privacy commitments apply equally whether you access kapital77 from Jakarta, Surabaya, Bandung, Medan, or anywhere else. Your data is encrypted, stored securely, and accessible only to authorized staff. If you have questions about your data or how we handle it, contact our support team—we respond within one business day.

Our services are available only where local law permits. Your jurisdiction determines what data rights you have; if you are in a region with strong data-protection laws, we comply with those laws. We also comply with anti-money-laundering (AML) regulations, which may require us to share limited data with authorities if legally compelled.

What data we collect on kapital77

We collect several types of data when you create a kapital77 account. First, account credentials: your email address, password (hashed and salted—we never store plain-text passwords), and preferred language. Second, identity verification data: your government ID number, ID scan, address proof, and a selfie. This data is mandatory for KYC compliance. Third, payment information: the bank account, e-wallet ID, or virtual account number you register for deposits and withdrawals. Fourth, transaction history: every deposit, withdrawal, stake, and win/loss tied to your account.

We also collect device and usage data: your IP address, device type, browser, and approximate location (derived from IP). This helps us detect fraud and account hijacking. If you enable two-factor authentication (2FA), we store a hash of your SMS or authenticator secret. We do not store SMS content itself.

We do not collect cookies for tracking or profiling. Our website uses technical cookies only—to maintain your session and remember your login state. You can disable these cookies in your browser, but you will need to log in again each time you visit kapital77.

How we use your data on kapital77

We use your identity data to verify your age, confirm your jurisdiction, and prevent fraud and money laundering. We cross-check your ID against sanctions lists and AML databases. We use your payment information to process deposits from DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, and mobile banking—and to route withdrawals to the same account you registered.

We use your transaction history to settle bets, track wagering requirements on bonuses, and generate account statements. We use your device and IP data to detect unusual login attempts (e.g., login from a new city immediately after a login in another city), multiple accounts on the same device, and potential bot activity.

We do not use your data for marketing emails unless you opt in. We send transactional emails only—account confirmations, deposit alerts, withdrawal confirmations, and support replies. If you wish to unsubscribe from marketing, you can do so in account settings; transactional emails cannot be unsubscribed.

KYC data

Your ID, address proof, and selfie—used to verify identity and check sanctions lists

Payment data

Bank account or e-wallet details—stored encrypted, used only for deposit/withdrawal routing

Transaction history

All bets, wins, losses, deposits, and withdrawals—retained for 7 years for legal compliance

Device and IP data

IP address, browser, device type—used to detect fraud and unauthorized access attempts

Third parties and data processors

We use third-party processors for specific functions. Payment processors (banks and e-wallet providers) receive your payment information to execute deposits and withdrawals. Identity verification services (KYC providers) receive your ID and selfie to verify your identity. Fraud and AML monitoring services receive your transaction patterns and IP data to detect suspicious activity.

We do not authorize these third parties to use your data for their own marketing or profiling. Their use is limited to the service they provide us. We enter data-processing agreements with all third parties to ensure they meet our security standards.

Our servers may sit outside your jurisdiction—for example, your data may be stored in data centers in Southeast Asia or globally. We ensure these data centers comply with international security standards (ISO 27001, SOC 2). If you have concerns about international data transfer, contact support.

Data retention and deletion

We retain your KYC data (ID, address proof, selfie) for the duration of your account and for 7 years after closure. This complies with AML regulations requiring record retention. We retain transaction history (bets, deposits, withdrawals) for 7 years for legal and tax compliance. You can request export of your transaction history anytime via account settings.

If you close your account, we do not immediately delete your data. We retain it in secure backup storage for the mandatory retention period. After 7 years, we purge it. If you request deletion before the retention period ends, we anonymize your data instead—removing identifiers so you cannot be identified, but retaining records for compliance.

You have the right to request what personal data we hold about you. Contact support and request a "data subject access request" (DSAR). We respond with your data within 30 days. We charge no fee for this service.

Your rights and our kapital77 security practices

You have the right to access your data, correct inaccurate information, request deletion (subject to legal retention requirements), and object to processing. To exercise these rights, contact our support team. We honor these requests within 30 days.

We secure your data using industry-standard encryption (TLS for data in transit, AES-256 for data at rest). Our staff access data only under strict need-to-know policies. We audit access logs regularly and alert you if we detect suspicious access to your account. We conduct annual security audits and penetration testing to identify and fix vulnerabilities.

If we discover a data breach affecting your kapital77 account, we notify you by email and SMS within 24 hours. We provide details of the breach, the data affected, and steps you should take (e.g., change your password, enable 2FA). We work with legal counsel to comply with notification laws in your jurisdiction.

Children and age verification

Our services are not intended for minors. We do not knowingly collect data from anyone under legal age in their jurisdiction. If we discover you are underage, we close your account and, if applicable, refund your balance to your registered payment method.

We use age-verification services during KYC to confirm you are of legal age. If you dispute our age determination, contact support with evidence. We will review and reconsider.

Contact and updates to this policy

If you have questions about our privacy practices, contact kapital77 support via email or chat. We respond within one business day. We may update this privacy policy periodically. We notify you of material changes by email and post changes to this page. Continued use of kapital77 after notification constitutes acceptance of the updated policy.

Your data privacy is important to us. We at kapital77 treat your information with the care we would want for our own. Whether you are placing a bet on Liga 1, enjoying live-dealer tables, or playing slots, your personal data remains protected and separate from our operational use of kapital77.