sob77 is committed to protecting the privacy and personal data of every Member. This Privacy Policy explains exactly what information we collect, why we collect it, how we use it, and the rights you have over your own data.
This Privacy Policy ("Policy") describes how sob77, operating through the domain sob77.bio ("Platform", "we", "us", "our"), collects, processes, stores, and protects the personal data of individuals who register for, access, or otherwise interact with the sob77 platform ("Members", "you", "your").
sob77 operates primarily in the Indonesian market and serves Members located in Indonesia. By creating an account on sob77 or continuing to use the Platform after the effective date of this Policy, you acknowledge that you have read and understood this Policy and that you consent to the collection and use of your personal data as described herein.
This Privacy Policy should be read in conjunction with sob77's Terms & Conditions, which govern your overall use of the Platform. In the event of any conflict between this Policy and the Terms & Conditions on data-related matters, the provisions of this Policy shall prevail.
For the purposes of this Privacy Policy, the following terms have the meanings set out below:
| Term | Meaning |
|---|---|
| Personal Data | Any information relating to an identified or identifiable natural person, including name, date of birth, email address, phone number, IP address, device identifiers, and financial account details. |
| Processing | Any operation performed on Personal Data, including collection, recording, storage, adaptation, retrieval, consultation, use, disclosure, erasure, or destruction. |
| Data Controller | sob77, the entity that determines the purposes and means of processing Members' Personal Data. |
| Data Processor | A third party that processes Personal Data on sob77's behalf in accordance with sob77's instructions — for example, payment gateway providers and cloud hosting partners. |
| KYC Data | Identity verification documents and associated data submitted by a Member as part of the Know Your Customer process, including KTP scans, selfie photographs, and payment method ownership evidence. |
| Cookies | Small text files placed on a Member's device by sob77's web servers to facilitate session management, preference storage, and analytics. |
| IDR / Rp | Indonesian Rupiah, the sole transaction currency on the sob77 platform. |
sob77 collects Personal Data across several categories, each serving a distinct operational or compliance purpose:
When you create a sob77 account, we collect your full legal name (as it appears on your Indonesian KTP), your email address, your Indonesian mobile phone number, your date of birth, your chosen username, and your encrypted password. This data is required to establish and maintain your account.
To comply with anti-money laundering obligations and to enforce our minimum age requirement of 21 years, sob77 collects identity documents including your KTP (Indonesian National Identity Card), a verification selfie, and proof of payment method ownership. KYC Data is treated with the highest level of confidentiality and is accessed only by authorised compliance personnel.
sob77 records all deposit and withdrawal transactions made through your account, including the payment method used (e.g., BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Permata, BSI, OVO, DANA, GoPay, ShopeePay, or LinkAja), the transaction amount in IDR, timestamps, and transaction reference numbers. sob77 does not store full bank account credentials or e-wallet passwords — payment authentication is handled directly by the respective payment providers.
sob77 records all bets placed, games played, wager amounts, outcomes, bonus usage, and session activity associated with your account. This data is used to calculate account balances, administer promotions, monitor for responsible gaming indicators, and detect irregular betting patterns that may signal fraud or match-fixing.
sob77 automatically collects technical information when you access the Platform, including your IP address, browser type and version, operating system, device model, screen resolution, referring URL, page visit timestamps, and session duration. This data is used for security monitoring, fraud prevention, and platform performance optimisation.
sob77 retains records of all communications between you and our support team, including live chat transcripts, email correspondence, and any complaints or formal escalations. These records are retained to ensure service quality and to provide an accurate account history in the event of a dispute.
If you have opted in to receive promotional communications from sob77, we retain your marketing preferences and a record of the communications sent to you, including which promotions you have viewed or claimed. You may update or withdraw your marketing consent at any time through your account settings or by contacting support.
sob77 collects Personal Data through the following channels:
sob77 processes your Personal Data under one or more of the following legal bases, depending on the specific processing activity:
| Legal Basis | Processing Activities Covered |
|---|---|
| Contractual Necessity | Processing required to create and manage your account, process deposits and withdrawals in IDR, calculate and credit winnings, and administer bonuses. |
| Legal Obligation | KYC identity verification, age verification (21+ requirement), transaction record-keeping for anti-money laundering compliance, and responding to lawful requests from competent authorities. |
| Legitimate Interests | Fraud detection and prevention, security monitoring, responsible gaming monitoring, platform analytics and performance improvement, and investigating complaints. |
| Consent | Sending promotional emails, push notifications, or SMS communications about sob77 offers, new games, and seasonal promotions. You may withdraw this consent at any time. |
sob77 uses the Personal Data we collect for the following specific purposes:
To create, verify, maintain, and secure your sob77 account, including authenticating your login sessions, processing password resets, and applying account-level responsible gaming tools such as deposit limits and self-exclusion at your request.
To process all IDR deposits and withdrawals through your nominated local bank account or e-wallet, to reconcile your account balance in real time, and to maintain a complete and auditable record of all financial activity on your account.
To conduct KYC verification, to screen transactions against anti-money laundering indicators, to detect and investigate suspicious betting patterns or account duplication, and to respond to lawful requests from regulatory or law enforcement authorities.
To respond to your enquiries and complaints through live chat or email, to investigate disputes relating to game outcomes or payment transactions, and to maintain a service record that supports consistent and accurate assistance.
To monitor gaming activity for indicators of problem gambling behaviour, to enforce deposit limits and cooling-off periods you have set, to apply self-exclusion restrictions, and to deliver responsible gaming notifications where our monitoring systems identify activity that warrants a check-in.
To analyse aggregated and anonymised usage patterns, to identify and resolve technical issues, to test new features, and to improve the overall performance, layout, and content of the sob77 platform for Indonesian Members.
To send you promotional offers, reload bonuses, free bet credits, and seasonal promotions by email or in-platform notification — but only where you have given your explicit consent to receive such communications. sob77 will not send unsolicited marketing messages to Members who have not opted in.
sob77 uses the following categories of cookies when you access the Platform:
| Cookie Type | Purpose | Retention |
|---|---|---|
| Essential Cookies | Required for login session management, security token validation, and maintaining your authenticated state while browsing sob77. These cannot be disabled without breaking core platform functionality. | Session / up to 30 days |
| Analytics Cookies | Collect anonymised data on how Members navigate sob77 — which pages are visited most frequently, where users drop off, and how long sessions last. Used solely to improve platform usability. | Up to 12 months |
| Preference Cookies | Store non-sensitive user preferences such as display settings and last-visited game categories so that your experience is consistent across sessions. | Up to 6 months |
| Security Cookies | Support fraud detection by recording device fingerprint signals and flagging anomalous login attempts for review by sob77's security team. | Up to 90 days |
You may manage or disable non-essential cookies through your browser settings at any time. Please note that disabling Essential Cookies will prevent you from logging in to your sob77 account and will substantially degrade your experience on the Platform. sob77 does not respond to browser "Do Not Track" signals at this time.
sob77 does not sell, rent, or trade your Personal Data. We share your data only in the following limited and controlled circumstances:
To complete deposit and withdrawal transactions, sob77 shares the minimum necessary transaction data (your registered name, account reference, and transaction amount in IDR) with the relevant Indonesian bank or e-wallet provider — BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Permata, BSI, OVO, DANA, GoPay, ShopeePay, or LinkAja. Each payment provider processes this data under their own privacy policy and applicable Indonesian financial regulations.
To deliver live casino, slot, and RNG games, sob77 shares your Member ID, session token, and wager data with third-party studio providers including Pragmatic Play, Evolution Gaming, Microgaming, Pocket Games Soft, and Spribe. These providers receive only the data necessary to operate the game session and return the result; they do not receive your name, contact details, or payment information.
sob77 may engage a third-party identity verification service to assist with KYC document checks. Any such partner is bound by a data processing agreement requiring them to process your identity documents solely for the purpose of verification and to delete their copy of the documents upon completion of the review.
sob77 may disclose Personal Data to law enforcement agencies, regulatory bodies, courts, or other competent authorities where required to do so by a binding legal obligation, a valid court order, or where sob77 reasonably believes that disclosure is necessary to prevent an imminent threat to safety or to protect sob77's legal rights.
In the event of a merger, acquisition, asset sale, or corporate restructuring involving sob77, your Personal Data may be transferred to the acquiring entity as part of that transaction. sob77 will notify affected Members of any such transfer and the applicable privacy terms before the transfer takes effect.
sob77 may store or process your Personal Data on servers located outside Indonesia, including in jurisdictions where data protection laws may differ from those applicable in Indonesia. Where such transfers occur, sob77 implements appropriate contractual safeguards — such as standard data processing agreements — to ensure that your Personal Data receives a level of protection consistent with this Policy.
By using sob77 and accepting this Privacy Policy, you acknowledge that your Personal Data may be transferred to and processed in countries outside Indonesia for the purposes described in this Policy.
sob77 retains your Personal Data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following standard retention periods apply:
| Data Category | Retention Period |
|---|---|
| Account Registration Data | For the duration of the active account, plus 5 years after account closure. |
| KYC Identity Documents | For the duration of the active account, plus 5 years after account closure, in line with standard anti-money laundering record-keeping requirements. |
| Financial Transaction Records | 7 years from the date of each transaction, consistent with financial record-keeping obligations. |
| Gaming Activity Logs | 3 years from the date of each recorded session or bet. |
| Customer Support Communications | 3 years from the date of the last interaction in a support thread. |
| Marketing Preference Records | Until you withdraw consent, plus 1 year thereafter to evidence that the withdrawal was actioned. |
| Technical and Device Logs | 90 days from the date of collection, unless retained for longer in connection with an active security investigation. |
Upon expiry of the applicable retention period, sob77 will securely delete or anonymise the relevant data in a manner that makes re-identification impossible.
sob77 applies a layered set of technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, destruction, or disclosure:
As a Member of sob77, you have the following rights in relation to your Personal Data. To exercise any of these rights, please contact sob77 support via live chat or by emailing [email protected]. sob77 will respond to all verified data rights requests within 30 days of receipt.
You have the right to request a copy of the Personal Data that sob77 holds about you, together with a plain-English explanation of how that data is being used. sob77 will provide this information in a structured, commonly used format.
If any of the Personal Data sob77 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. For account registration data, minor corrections (e.g., email address updates) can be made directly through your account settings. For KYC data corrections, please contact our compliance team.
You have the right to request that sob77 delete your Personal Data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where processing is unlawful. This right is subject to sob77's legal obligation to retain certain data — particularly KYC and financial transaction records — for the minimum periods prescribed by applicable law.
You have the right to request that sob77 restrict the processing of your Personal Data in specific circumstances — for example, while the accuracy of data you have disputed is being verified, or where processing is unlawful but you prefer restriction to deletion.
You have the right to receive a machine-readable copy of the Personal Data you have provided to sob77 and to request that sob77 transmit that data to another service provider, where technically feasible.
You have the right to object to processing of your Personal Data that is based on sob77's legitimate interests, including profiling for responsible gaming monitoring purposes. Where you object, sob77 will cease the processing unless sob77 can demonstrate compelling legitimate grounds that override your interests.
Where sob77 processes your data on the basis of your consent (e.g., sending marketing communications), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that occurred prior to the withdrawal.
sob77 is strictly an adults-only platform. The minimum age to register for and use sob77 is 21 years. sob77 does not knowingly collect Personal Data from any individual under the age of 21. If sob77 becomes aware that a person under 21 has registered an account or submitted Personal Data, that account will be immediately suspended, all associated Personal Data will be deleted, and any deposited funds will be returned to the originating payment method.
If you believe that a minor may have accessed sob77 using your credentials or by creating an account without your knowledge, please contact our support team immediately at [email protected]. sob77 will treat such reports as priority cases and respond within 24 hours.
The sob77 platform may from time to time display information about or references to third-party game studios, payment providers, or sports leagues. sob77 does not operate external websites and does not include outbound hyperlinks to third-party sites within the Platform's navigation. If you independently navigate to a third-party website after using sob77, that site's own privacy policy governs the collection and use of your data in that context. sob77 is not responsible for the privacy practices of any third party.
sob77 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or Platform functionality. When a material change is made, sob77 will update the "Last Updated" date at the top of this page and will notify active Members via an in-platform notification at the time of their next login, or by email where the change is particularly significant.
Your continued use of sob77 after the revised Policy has been posted constitutes your acceptance of the updated terms. If you do not agree with any change to this Policy, you must stop using the Platform and may request account closure in accordance with the Terms & Conditions. sob77 recommends that you review this Policy periodically to stay informed of how your data is being handled.
If you have any questions about this Privacy Policy, wish to exercise a data rights request, or want to raise a concern about how sob77 has handled your Personal Data, please contact us through the following channels:
sob77 takes all data privacy complaints seriously. If you have submitted a complaint and are not satisfied with the outcome, you retain the right to escalate the matter to any competent data protection supervisory authority or dispute resolution body with jurisdiction over your situation.
Our Privacy Commitments
Privacy at sob77 is not a checkbox exercise — it is a core operational standard built into every system and process we operate. Here is a summary of the commitments that underpin this Policy.
Every byte of data exchanged between your device and sob77's servers is encrypted using 256-bit TLS. Your account credentials, KYC documents, and IDR transaction details travel over the network in a form that is unreadable to any intercepting third party.
sob77 does not sell, rent, or trade your Personal Data to any third party for commercial purposes. Your email address, phone number, and identity documents are used exclusively to operate your sob77 account — never monetised as a data asset.
sob77 collects only the data that is genuinely necessary to operate the Platform, verify your identity, process your IDR transactions, and comply with applicable legal obligations. We do not collect data speculatively or build marketing profiles beyond what is required to serve you on sob77.
sob77 provides every Member with a clear set of data rights — access, rectification, erasure, portability, restriction, and objection. You can exercise any of these rights at any time by contacting our support team, and we commit to responding within 30 days.
sob77 does not hold your data indefinitely. Every data category has a defined maximum retention period, after which your data is securely deleted or anonymised. KYC documents, for example, are deleted five years after account closure — not retained in perpetuity.
sob77's 24/7 support team includes staff trained to handle data privacy requests with the appropriate level of care and confidentiality. Native Indonesian-speaking agents are available around the clock. Formal privacy complaints receive a written response within 30 days.
You now have a complete picture of how sob77 handles your data. Log in to your account, explore our full range of casino games, or check our FAQ if you have any remaining questions.