Privacy Policy

1. Information We Collect

1.1 Personal Information You Provide

When you register an account with mag777, we collect the following personal information directly from you:

• Identity Information: Full name, date of birth, gender, nationality, Indonesian National ID (KTP) or passport number, and copies of government-issued identification documents for KYC (Know Your Customer) verification.
• Contact Information: Email address, phone number, residential address (street address, city, postal code, province).
• Account Credentials: Username, password (stored in encrypted form), and security questions for account recovery.
• Financial Information: Bank account details (bank name, account number, account holder name), e-wallet information (OVO, DANA, GoPay, ShopeePay account identifiers), payment transaction history, deposit and withdrawal records.
• Verification Documents: Scanned copies or photos of your Indonesian National ID (KTP), passport, driver's license, utility bills, bank statements, or other documents submitted for identity verification and address proof.

1.2 Information Collected Automatically

When you use mag777 services, we automatically collect certain technical and usage information:

• Device Information: IP address, device type (mobile, tablet, desktop), operating system, browser type and version, screen resolution, device identifiers (IMEI, advertising ID).
• Usage Data: Pages visited, games played, bets placed, betting patterns, session duration, referral source, clickstream data, timestamps of activity.
• Location Data: Approximate geographic location based on IP address (city and region level, not precise GPS coordinates).
• Cookies and Tracking Technologies: Information collected through cookies, web beacons, pixels, and similar tracking technologies (see Section 5 for details).

1.3 Information from Third Parties

We may receive information about you from third-party sources, including:

• Payment Processors: Transaction status, payment method details, fraud risk scores from our payment gateway partners (banks, e-wallet providers).
• Identity Verification Services: Document authentication results, watchlist screening (PEP, sanctions lists), fraud detection signals from KYC verification providers.
• Game Providers: Game session data, betting history, game results from third-party software providers like Pragmatic Play, Evolution Gaming, NetEnt, and Microgaming.
• Marketing Partners: Attribution data, referral sources, campaign performance metrics (if you accessed mag777 through an affiliate or marketing campaign).

2. How We Use Your Information

mag777 uses your personal information for the following purposes:

2.1 Service Provision & Account Management

• Create and manage your mag777 account.
• Process deposits, withdrawals, and other financial transactions.
• Verify your identity and age (21+ requirement for Indonesia) through KYC procedures.
• Provide customer support and respond to your inquiries via live chat, email, WhatsApp, or Telegram.
• Enable gameplay on casino games, live dealer tables, sports betting markets, and other gaming products.
• Maintain account security, detect and prevent unauthorized access.

2.2 Legal & Regulatory Compliance

• Comply with Know Your Customer (KYC) and Anti-Money Laundering (AML) regulations.
• Prevent underage gambling by verifying player age (21+ requirement).
• Detect and prevent fraud, money laundering, bonus abuse, and other prohibited activities.
• Respond to legal requests from law enforcement, regulatory authorities, or courts.
• Enforce our Terms & Conditions and resolve disputes.
• Maintain records as required by licensing authorities and applicable laws.

2.3 Marketing & Communications

• Send promotional offers, bonus notifications, and personalized marketing communications via email, SMS, push notifications, or in-app messages (only if you have opted in).
• Provide information about new games, features, tournaments, and special events.
• Conduct customer satisfaction surveys and gather feedback to improve our services.
• Display targeted advertisements on mag777 and third-party websites based on your interests and behavior.

2.4 Service Improvement & Analytics

• Analyze user behavior, gaming patterns, and platform usage to improve user experience.
• Conduct A/B testing to optimize website design, game offerings, and promotional campaigns.
• Monitor platform performance, identify technical issues, and troubleshoot errors.
• Develop new features, games, and services based on user preferences and feedback.
• Generate aggregated, anonymized statistics and reports for business intelligence (these reports do not identify individual users).

2.5 Responsible Gaming & Player Protection

• Monitor gambling behavior to identify signs of problem gambling.
• Implement deposit limits, loss limits, session time limits, and self-exclusion requests.
• Send reality-check reminders and responsible gaming notifications.
• Provide access to responsible gaming tools and support resources.
• Comply with responsible gaming regulations and best practices.

3. Data Sharing & Third Parties

mag777 does not sell your personal information to third parties. However, we may share your information with the following categories of recipients for legitimate business purposes:

3.1 Service Providers & Business Partners

• Payment Processors: Banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, etc.) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) to process deposits and withdrawals.
• Game Providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, and other software providers to deliver casino games, live dealer tables, and sports betting services.
• KYC Verification Services: Third-party identity verification and fraud prevention vendors to authenticate your documents and screen against watchlists.
• Cloud Hosting Providers: Infrastructure and cloud storage providers (e.g., AWS, Google Cloud) to host our platform and store data securely.
• Customer Support Tools: Live chat software, ticketing systems, and communication platforms (WhatsApp Business API, Telegram Bot API) to provide customer support.
• Marketing & Analytics Platforms: Email service providers, SMS gateways, analytics tools (Google Analytics, Mixpanel), and advertising networks for marketing campaigns and performance tracking.

3.2 Legal & Regulatory Authorities

We may disclose your information to law enforcement agencies, regulatory bodies, courts, or government authorities when required by law or when we believe disclosure is necessary to:

• Comply with legal obligations, subpoenas, court orders, or regulatory requests.
• Investigate or prevent fraud, money laundering, or other illegal activities.
• Protect the rights, property, or safety of mag777, our users, or the public.
• Enforce our Terms & Conditions or investigate violations.

3.3 Business Transfers

In the event of a merger, acquisition, asset sale, bankruptcy, or other business transaction involving mag777, your personal information may be transferred to the acquiring entity. We will notify you via email and/or prominent notice on our website before your information is transferred and becomes subject to a different privacy policy.

4. Data Security Measures

mag777 takes data security seriously and employs industry-standard technical and organizational measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction:

4.1 Technical Security Controls

• Encryption: All data transmitted between your device and mag777 servers is protected by 256-bit SSL/TLS encryption (the same technology used by banks). Sensitive data like passwords and payment information are encrypted at rest using AES-256 encryption.
• Firewalls & Network Security: Our servers are protected by enterprise-grade firewalls, intrusion detection systems (IDS), and intrusion prevention systems (IPS) to block unauthorized access attempts.
• Access Controls: Personal information is accessible only to authorized employees and contractors who require access to perform their job functions. Access is granted on a need-to-know basis and is subject to strict confidentiality obligations.
• Two-Factor Authentication (2FA): We offer optional two-factor authentication for player accounts to add an extra layer of security beyond passwords.
• Regular Security Audits: We conduct regular security assessments, penetration testing, and vulnerability scans to identify and address potential security weaknesses.

4.2 Organizational Security Measures

• Employee training on data protection and security best practices.
• Background checks for employees with access to sensitive systems and data.
• Incident response procedures to detect, investigate, and respond to data breaches.
• Regular backups of critical data to prevent data loss in case of system failures.

While we strive to protect your personal information, no method of transmission over the internet or electronic storage is 100% secure. You are responsible for maintaining the confidentiality of your account credentials and for any activity that occurs under your account.

5. Cookies & Tracking Technologies

5.1 What Are Cookies?

Cookies are small text files stored on your device (computer, smartphone, tablet) by websites you visit. Cookies allow websites to remember your preferences, authenticate your login session, and track your activity across pages.

5.2 Types of Cookies We Use

Cookie Type	Purpose	Duration
Essential Cookies	Required for basic website functionality (login, session management, security). Cannot be disabled.	Session
Functional Cookies	Remember your preferences (language, currency, display settings).	Persistent (up to 1 year)
Analytics Cookies	Track website usage, page views, user behavior to improve our services (Google Analytics, Mixpanel).	Persistent (up to 2 years)
Marketing Cookies	Deliver targeted advertisements and track campaign effectiveness (Facebook Pixel, Google Ads).	Persistent (up to 1 year)

5.3 Managing Cookies

You can control and delete cookies through your browser settings. Most browsers allow you to refuse all cookies or accept only certain types of cookies. However, disabling essential cookies may affect website functionality and prevent you from using certain features of mag777. For more information on managing cookies, consult your browser's help documentation.

6. Data Retention & Deletion

6.1 How Long We Keep Your Data

mag777 retains your personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law. Specific retention periods include:

• Account Information: Retained for the duration of your account's active status plus 5 years after account closure (to comply with AML regulations and licensing requirements).
• Transaction Records: Retained for 7 years after the transaction date (regulatory requirement for financial records).
• KYC Documents: Retained for 5 years after account closure or verification date (regulatory requirement).
• Marketing Communications: Retained until you opt out or for 2 years from the last interaction.
• Usage Logs & Analytics Data: Anonymized after 2 years and retained indefinitely for statistical purposes.

6.2 Account Closure & Data Deletion

You may request account closure at any time by contacting customer support. Upon account closure:

• Your login access will be revoked immediately.
• Any remaining balance will be returned to you (minus applicable fees and bonus forfeitures).
• Your personal information will be retained for the minimum period required by law (typically 5 years) and then securely deleted or anonymized.
• You will stop receiving marketing communications (if opted in) within 7 business days.

7. Your Privacy Rights

Under applicable data protection laws, you have the following rights regarding your personal information:

7.1 Right to Access

You have the right to request a copy of the personal information we hold about you. You can access most of your account information directly through your mag777 account dashboard. For additional information, contact customer support.

7.2 Right to Rectification

If your personal information is inaccurate or incomplete, you have the right to request corrections. You can update most information (email, phone, address) through your account settings. For KYC document updates, contact customer support.

7.3 Right to Erasure (Right to Be Forgotten)

You may request deletion of your personal information in certain circumstances (e.g., when it is no longer necessary for the purposes collected, or you withdraw consent). However, we may retain certain information when required by law or for legitimate business purposes (e.g., fraud prevention, dispute resolution).

7.4 Right to Restrict Processing

You may request that we limit the processing of your personal information in certain situations (e.g., while we verify the accuracy of disputed data).

7.5 Right to Data Portability

You have the right to receive your personal information in a structured, commonly used, machine-readable format and to transmit that data to another service provider.

7.6 Right to Object

You may object to the processing of your personal information for direct marketing purposes at any time. You can opt out of marketing emails by clicking the "unsubscribe" link in any marketing email or by adjusting your communication preferences in your account settings.

7.7 Right to Withdraw Consent

Where processing is based on your consent (e.g., marketing communications), you have the right to withdraw consent at any time. Withdrawal does not affect the lawfulness of processing based on consent before withdrawal.

To exercise any of these rights, contact our customer support team via live chat or email at [email protected] (plain text only). We will respond to your request within 30 days.

8. International Data Transfers

mag777 is an international gaming platform that may store and process your personal information on servers located in various countries. By using mag777 services, you consent to the transfer of your information to countries outside Indonesia, including countries that may not have the same level of data protection as Indonesia. We ensure that all international data transfers comply with applicable data protection laws and that appropriate safeguards (such as Standard Contractual Clauses or Privacy Shield certification) are in place to protect your information.

9. Changes to This Privacy Policy

mag777 reserves the right to modify, update, or amend this Privacy Policy at any time to reflect changes in our practices, technology, legal requirements, or business operations. When we make material changes, we will notify you by:

• Posting the updated Privacy Policy on our website with a new "Last Updated" date.
• Sending an email notification to your registered email address (for significant changes affecting your rights).
• Displaying a prominent notice on our website or app (for significant changes).

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Continued use of mag777 services after changes are posted constitutes acceptance of the updated Privacy Policy.

10. Contact Us

If you have questions, concerns, or complaints about this Privacy Policy or our data practices, please contact us:

• Email: [email protected] (Plain text only – not a clickable link)
• Live Chat: Available 24/7 on the mag777 website
• Address: Contact via support channels for our business address

Your Privacy Matters: At mag777, we are committed to transparency and accountability in how we handle your personal information. This Privacy Policy is designed to help you understand what data we collect, why we collect it, how we use it, and what choices you have. We treat your privacy with the same care and security we apply to all aspects of our platform. If you have any questions or need assistance, our support team is always available to help.