mio77 Privacy Policy

Throughout this Privacy Policy, the following terms carry the meanings set out below:

• "Platform" — The mio77 website at https://mio77.cam and all associated services, features, and tools made available to Members.
• "mio77" / "We" / "Us" / "Our" — The operator of the Platform, its owners, directors, employees, data protection officers, and authorized agents.
• "Member" / "You" / "Your" — Any individual who has registered an account on the Platform or who accesses the Platform as a visitor.
• "Personal Data" — Any information that identifies or can reasonably be used to identify an individual, including name, date of birth, email address, residential address, bank account details, device identifiers, and behavioral data tied to an identifiable person.
• "Processing" — Any operation performed on Personal Data, including collection, storage, use, disclosure, transfer, or deletion.
• "Data Processor" — A third-party service provider that processes Personal Data on behalf of mio77 under a formal data processing agreement.
• "Cookies" — Small text files placed on a Member's device by the Platform to store session information, preferences, and behavioral analytics.
• "KYC" — Know Your Customer — the identity verification process required for account compliance purposes.

This Privacy Policy applies to all Personal Data collected and processed by mio77 in connection with the operation of the Platform. It applies to all current and former Members, as well as visitors who access the Platform without registering an account.

The mio77 Platform is designed for use by residents of Indonesia who are at least 21 years of age. By accessing or registering on the Platform, you confirm that you reside in Indonesia, that you are at least 21 years old, and that you consent to the collection and processing of your Personal Data as described in this Policy.

This Policy does not apply to third-party websites, applications, or services that may be linked to or referenced on the Platform. mio77 is not responsible for the privacy practices of any third-party operator. We encourage you to review the privacy policies of any third-party services before providing them with your personal information.

mio77 collects the following categories of Personal Data in connection with the services we provide:

Registration & Identity Data

• Full legal name as it appears on your government-issued identification document
• Date of birth (to verify you are at least 21 years of age)
• Residential address in Indonesia (city, province, postal code)
• Email address and mobile phone number
• Username and encrypted password

Identity Verification (KYC) Data

• Copy of Indonesian National Identity Card (KTP), passport, or other government-issued photo ID
• Proof of residential address (utility bill, bank statement dated within 90 days)
• Proof of payment method ownership (bank account statement, e-wallet screenshot)
• Selfie photograph for facial verification, where required

Financial & Transaction Data

• Indonesian bank account details (bank name, account number, account holder name) for withdrawal purposes
• E-wallet account identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja)
• Deposit and withdrawal transaction records, including amounts in IDR, timestamps, and payment method used
• Betting history, game session records, and wagering activity

Technical & Device Data

• IP address and approximate geolocation derived from IP
• Device type, operating system, and browser version
• Session timestamps, page navigation paths, and time-on-page metrics
• Cookie identifiers and session tokens

Communications Data

• Records of live chat conversations, email correspondence, and support ticket history
• Responses to surveys, feedback forms, and promotions (where voluntarily provided)

mio77 collects Personal Data through the following mechanisms:

• Directly from you: When you register an Account, complete identity verification, make a deposit or withdrawal, contact support, participate in a promotion, or voluntarily provide information through any feature of the Platform.
• Automatically through the Platform: Technical and device data is collected automatically through cookies, server logs, and analytics tools when you browse or interact with the Platform. See Section 8 (Cookies & Tracking) for full details.
• From payment providers: When you initiate a transaction via BCA, BRI, BNI, Mandiri, CIMB Niaga, or an Indonesian e-wallet, the relevant payment processor may share transaction confirmation data with mio77 to facilitate account crediting or withdrawal processing.
• From identity verification services: Where mio77 uses a third-party KYC service provider to verify identity documents, that provider may share verification outcome data (pass/fail status and flagged discrepancies) with mio77.
• From fraud prevention services: mio77 may receive signals from third-party fraud detection systems identifying IP addresses, device fingerprints, or behavioral patterns associated with fraudulent activity.

mio77 processes your Personal Data for the following specific purposes:

mio77 processes your Personal Data on the following legal bases:

• Contractual necessity: Processing required to provide you with the services you have registered for — including account management, transaction processing, game delivery, and customer support. Without this processing, we cannot provide the Platform's core services.
• Legal obligation: Processing required to comply with applicable anti-money-laundering (AML) regulations, identity verification requirements, fraud reporting obligations, and data retention mandates under applicable law.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, aggregated analytics, and service improvement — where our legitimate operational interests are proportionate and do not override your fundamental privacy rights.
• Consent: Processing for direct marketing communications (promotional emails, SMS, or in-platform notifications about bonuses and offers). You may withdraw this consent at any time without affecting the lawfulness of processing prior to withdrawal. See Section 13 (Marketing) for details.

mio77 does not sell or trade your Personal Data. We share data with third parties only in the following limited circumstances:

Authorized Data Processors

mio77 works with carefully selected third-party service providers who process Personal Data on our behalf under formal data processing agreements that require them to maintain equivalent data security standards. These include:

• Payment processors: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) — for the sole purpose of processing deposits and withdrawals.
• KYC and identity verification providers: Third-party identity verification platforms used to authenticate government-issued ID documents submitted during the KYC process.
• Fraud detection services: Specialized providers that analyze behavioral and technical signals to identify and prevent fraudulent account activity.
• Game content providers: Licensed game studios (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft) may receive anonymized session identifiers necessary to deliver their game content via the Platform.
• Platform analytics providers: Providers of aggregated, anonymized session and performance analytics used to improve Platform functionality.

Legal Disclosures

mio77 may disclose Personal Data to governmental authorities, law enforcement agencies, or regulatory bodies where required by law, court order, or to protect the rights, safety, and property of mio77, its Members, or the public. We will notify affected Members of such disclosures where we are legally permitted to do so.

The mio77 Platform uses cookies and similar tracking technologies to enhance your experience, maintain session security, and gather aggregate analytics data. The following cookie categories are used:

• Strictly necessary cookies: Required for the Platform to function. These cookies maintain your login session, secure your account, prevent cross-site request forgery (CSRF), and remember your platform preferences. These cannot be disabled without impairing Platform functionality.
• Functional cookies: Used to remember your language preferences, game settings, and display preferences to personalize your experience on return visits.
• Analytics cookies: Used to collect anonymized data about how Members navigate the Platform — including page views, session durations, and feature usage — to identify areas for improvement. mio77 uses aggregated analytics data only; individual behavioral profiles are not created for marketing purposes.
• Security cookies: Used to detect unusual access patterns, bot activity, and potential account takeover attempts. These cookies are essential to platform security and cannot be disabled.

You can manage cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from using the Platform's core features but may affect personalization and certain optional functionality.

mio77 retains Personal Data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. The following retention schedules apply:

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymized in a manner that prevents reconstruction of individual identities.

mio77 implements a comprehensive set of technical and organizational security measures to protect your Personal Data against unauthorized access, disclosure, alteration, and destruction:

• Encryption: All data in transit between your device and the mio77 Platform is encrypted using TLS 1.2 or higher (256-bit SSL). Sensitive data stored in our databases — including financial account details and KYC document references — is encrypted at rest using AES-256 encryption.
• Access controls: Access to Personal Data is restricted to mio77 personnel who require it to perform their job functions. All access is authenticated via multi-factor authentication and is logged for audit purposes.
• Infrastructure security: The Platform's server infrastructure is hosted in secure data centers with physical access controls, redundant power systems, and intrusion detection systems. Regular penetration testing is conducted by independent security consultants.
• Incident response: mio77 maintains a formal data breach response plan. In the event of a data breach affecting your Personal Data, we will notify affected Members within 72 hours of becoming aware of the breach, unless the breached data was fully encrypted and therefore inaccessible to unauthorized parties.
• Employee training: All mio77 personnel who handle Personal Data receive regular training on data protection obligations and security best practices. Violations of data protection policy by employees are subject to disciplinary action.

As a Member of the mio77 Platform, you hold the following rights in relation to your Personal Data. To exercise any of these rights, contact our Data Privacy team at [email protected] with the subject line "Data Privacy Request".

mio77 will respond to all data rights requests within 30 calendar days of receipt. Where a request is complex or involves a large volume of data, we may extend this period by a further 30 days, in which case we will notify you of the extension and its reason within the initial 30-day window.

We may request proof of identity before processing a data rights request to ensure we are responding to a legitimate request from the account holder.

The mio77 Platform is strictly intended for adults aged 21 years or older. mio77 does not knowingly collect Personal Data from individuals under the age of 21. If we become aware that an account has been created by or on behalf of a person under 21, we will immediately:

• Suspend the account and void all pending bets;
• Return any real-money balance to the original deposit source; and
• Delete all Personal Data associated with the account within 30 days, subject to any legal obligations to retain records of the incident.

If you believe a person under the age of 21 has registered on the mio77 Platform, please contact us immediately at [email protected]. We take all such reports seriously and will investigate promptly.

mio77 may send you promotional communications about bonuses, new game launches, seasonal offers, and platform updates by email, SMS, or in-platform notification. We send marketing communications only with your explicit consent, which is requested during the registration process and at subsequent opt-in points on the Platform.

You may withdraw your consent to marketing communications at any time by:

• Clicking the "Unsubscribe" link included in every marketing email;
• Updating your notification preferences through your account settings; or
• Contacting mio77 support at [email protected] with the subject line "Unsubscribe".

Withdrawal of consent to marketing will take effect within 5 business days of receipt. Withdrawal of marketing consent does not affect the lawfulness of marketing communications sent prior to withdrawal, and it does not affect your ability to continue using the Platform's core services. mio77 will continue to send transactional and service-related communications (such as deposit confirmations, withdrawal notifications, and security alerts) regardless of marketing consent status, as these are necessary for account management.

mio77 may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or Platform services. When material changes are made, we will notify active Members by:

• Sending a notification to the email address registered on your account at least 14 days before the updated Policy takes effect; and
• Displaying a prominent notice on the Platform at login for the 14-day pre-effective period.

The "Last Updated" date at the top of this Policy will be revised with each update. We encourage you to review this Policy periodically. For minor, non-material changes (such as typographical corrections or clarifications that do not alter the substance of our practices), we may update the Policy without advance notice.

Continued use of the Platform after the effective date of an updated Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with a material change, you may close your account prior to the effective date by contacting our support team.

For any questions, concerns, or formal requests related to this Privacy Policy or your Personal Data, please contact the mio77 Data Privacy team through the following channels:

• Email (Privacy Requests): [email protected] — use the subject line "Data Privacy Request" for rights requests and "Privacy Enquiry" for general questions. Response time: within 5 business days for general enquiries; within 30 calendar days for formal rights requests.
• 24/7 Live Chat: Available directly on the Platform. Suitable for general privacy questions; formal data rights requests should be submitted via email to create a documented record.

When submitting a data rights request by email, please include:

1. Your full name as registered on your mio77 account;
2. Your registered email address or username;
3. A clear description of the right you wish to exercise and any relevant details; and
4. A copy of a valid government-issued ID (required to verify your identity before processing the request).