Privacy Policy

goto77 processes your personal data only where a lawful basis exists for doing so. The table below sets out the primary purposes for which we process personal data and the corresponding legal basis for each:

goto77 will not process your personal data for any purpose that is materially incompatible with the purposes listed above without first providing you with notice and, where required, obtaining your consent.

goto77 does not sell your personal data to any third party. We share your data only in the following limited circumstances, and only to the extent strictly necessary for the stated purpose:

6.1 Licensed Service Providers. goto77 works with a carefully selected group of third-party service providers who process personal data on our behalf under formal data-processing agreements. These include:

• Payment processors — to facilitate deposits and withdrawals via BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, LinkAja, and other supported payment methods;
• Identity verification providers — to conduct automated KYC document checks and liveness verification;
• Fraud prevention and AML screening services — to screen transactions and account activity against risk databases;
• Cloud hosting and infrastructure providers — to store and serve Platform data securely;
• Customer support platform providers — to manage and record support communications;
• Game content studios — including Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Pocket Games Soft, and Spribe, who may receive session-level technical data necessary to deliver game content. These studios do not receive your identity or financial data.

6.2 Regulatory and Law Enforcement Authorities. goto77 may be required by applicable law or by order of a competent court or regulatory authority to disclose certain personal data. In such cases, we will disclose only the minimum data required to comply with the legal obligation. Where legally permissible, goto77 will notify you of such a disclosure request before complying.

6.3 Business Transfers. In the event that goto77 undergoes a merger, acquisition, restructuring, or sale of all or substantially all of its assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and the acquiring entity will be bound by commitments no less protective than those set out in this Policy.

6.4 With Your Consent. goto77 may share your personal data with additional third parties where you have provided your explicit, informed consent to such sharing. You may withdraw this consent at any time by contacting support.

goto77 uses cookies and similar tracking technologies to operate the Platform effectively, maintain session security, and analyze how Members interact with the Platform. The following categories of cookies are used:

7.1 Strictly Necessary Cookies. These cookies are essential for the Platform to function. They maintain your login session, store your language and currency preferences, and protect the Platform against cross-site request forgery attacks. These cookies cannot be disabled without impairing your ability to use the Platform.

7.2 Performance and Analytics Cookies. These cookies collect aggregated, anonymized data about how Members navigate the Platform — which pages are visited most frequently, where users exit the site, and how long sessions last. This data is used exclusively to improve the Platform experience and is not linked to individual Member identities.

7.3 Functional Cookies. These cookies remember preferences you have set — such as your preferred sports league or table game lobby layout — so that the Platform can deliver a more personalized experience on return visits.

7.4 Security and Fraud Prevention Cookies. goto77 uses device-level identifiers and behavioral signals collected via cookies to detect suspicious login attempts, identify multi-account registrations, and flag unusual betting patterns that may indicate fraud or collusion.

Managing Cookies: You can control cookie settings through your browser's privacy settings. Disabling performance or functional cookies will not prevent you from using the Platform, but may affect the quality of your experience. Disabling strictly necessary cookies will prevent you from logging in.

goto77 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply as a general guide:

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymized so that it can no longer be associated with any individual. Where anonymization is applied, the resulting aggregate data may be retained indefinitely for statistical and analytical purposes.

goto77 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, alteration, disclosure, or destruction. Our security framework includes:

• Transport Layer Security (TLS 1.3): All data transmitted between your browser or device and goto77's servers is encrypted using TLS 1.3, the current industry standard for secure data transmission;
• AES-256 Encryption at Rest: Sensitive personal data and financial records stored on goto77's servers are encrypted at rest using AES-256 encryption;
• Access Controls: Access to personal data within goto77 is restricted on a strict need-to-know basis. Staff members are granted only the minimum level of data access required to perform their specific job function;
• Multi-Factor Authentication: Administrative access to goto77's internal systems requires multi-factor authentication, reducing the risk of unauthorized access arising from compromised credentials;
• Penetration Testing: goto77's Platform and supporting infrastructure are subject to regular third-party penetration testing to identify and remediate security vulnerabilities;
• Incident Response Plan: goto77 maintains a documented data breach incident response plan. In the event of a data breach that is likely to result in a high risk to Members, goto77 will notify affected Members without undue delay.

While goto77 takes all reasonable and practicable steps to protect your personal data, no method of electronic transmission or storage is completely secure. Members are encouraged to use strong, unique passwords and to enable any available two-factor authentication features on their Account to further reduce risk.

goto77 operates as an international platform with server infrastructure and service provider relationships that may involve the transfer of personal data across national borders. Your personal data may be processed in countries other than Indonesia, including countries where data protection laws differ from those applicable in your jurisdiction.

Where goto77 transfers personal data to a third country, we ensure that appropriate safeguards are in place to protect your data, including:

• Transferring data only to countries that have been assessed as providing an adequate level of data protection;
• Implementing standard contractual clauses or equivalent data transfer mechanisms in agreements with overseas service providers;
• Conducting transfer impact assessments where required to evaluate the risk to your rights and freedoms arising from the transfer.

You may request further information about the specific safeguards governing any international transfer of your personal data by contacting our Data Protection contact at [email protected].

goto77 respects your rights in relation to your personal data. The following rights are available to all Members. To exercise any of these rights, please submit a written request to [email protected] with the subject line "Data Rights Request". goto77 will respond within 30 calendar days of receiving a complete, verifiable request.

goto77 will not charge a fee for handling data rights requests in standard cases. Where a request is manifestly unfounded or excessive, goto77 reserves the right to charge a reasonable administrative fee or to decline the request, providing written reasons for the decision.

goto77 strictly prohibits access by individuals under the age of 21. The Platform is not directed at, and does not knowingly collect personal data from, any person under the age of 21. Age verification is a mandatory step in the goto77 KYC process; all Members are required to confirm their date of birth and provide supporting identification at the time of verification.

If goto77 discovers or has reasonable grounds to believe that an Account has been registered by an individual under the age of 21, we will:

• Immediately suspend the Account and freeze all associated balances;
• Initiate a review of all transactions conducted through the Account;
• Return any deposited funds that cannot reasonably be attributed to wagering activity to the payment method from which they originated, where legally permissible;
• Permanently delete any personal data collected in relation to the minor, except where retention is required for legal or regulatory purposes.

If you believe that a minor has accessed goto77, please report this immediately to [email protected] so that we can take prompt action.

goto77 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or Platform services. When a material change is made to this Policy, goto77 will notify Members by:

• Sending an email notification to the address registered on your Account;
• Displaying a prominent notice on the Platform for a period of not less than 7 days prior to the change taking effect;
• Updating the "Last Updated" date at the top of this page.

Your continued use of the Platform after the effective date of any amended Policy constitutes your acceptance of the changes. If you do not agree with the amended Policy, you must cease using the Platform and request account closure before the effective date.

We recommend that Members review this Privacy Policy periodically to stay informed of how goto77 protects their personal data.

If you have any questions, concerns, or requests relating to this Privacy Policy or to goto77's handling of your personal data, please contact our Data Protection team using the details below. All privacy-related inquiries are treated with strict confidentiality.

For general account support that is not related to privacy or data protection, please also use the same email address and our team will route your inquiry to the appropriate department.

This Privacy Policy was last revised on 1 January 2026 and supersedes all prior versions. © 2026 goto77. All rights reserved.