ya777 is committed to protecting the privacy and personal data of every player on the platform. This Privacy Policy explains precisely what data we collect, why we collect it, how we store and protect it, who we may share it with, and what rights you have over your own information. Please read this document in full before registering for a ya777 account.
These six principles underpin every data-handling decision ya777 makes. They are not aspirational values — they are operational standards that inform how our systems, processes, and staff handle your personal information every day.
ya777 collects personal data only for specific, explicit, and legitimate purposes. We do not repurpose your data for uses that are incompatible with the reason it was originally collected. Each data category has a documented purpose and a defined retention period.
We collect only the data that is strictly necessary to operate your account, process your transactions, comply with our licensing obligations, and deliver support. We do not collect personal data speculatively or for undefined future purposes.
All personal data held by ya777 is protected using 256-bit SSL/TLS encryption in transit and AES-256 encryption at rest. Access to personal data is restricted to authorised personnel on a strict need-to-know basis, with full audit logging of all data access events.
We honour data subject rights — including access, correction, deletion, and portability — as binding operational obligations, not optional courtesies. Requests submitted to our support team are acknowledged within 72 hours and resolved within 30 days.
ya777 does not sell, rent, or trade your personal data to third-party marketing organisations. Your information is never used to generate revenue beyond the direct operation of the ya777 platform and the support services connected to it.
This policy is written in clear, plain English — not dense legal jargon designed to obscure rather than inform. Where legal or technical terms are necessary, they are explained immediately. ya777's Indonesian-speaking support team can clarify any section on request.
Throughout this Privacy Policy, the following terms have the meanings assigned below:
ya777 (operating at ya777.bio) is the Data Controller responsible for the Personal Data collected and processed through the Platform. ya777 operates under an international gaming licence and is subject to the data protection requirements of that licence's jurisdiction.
For all privacy-related queries, data subject access requests, or complaints regarding the handling of your Personal Data, please contact ya777's designated Data Protection contact using the details set out in Section 16 of this Policy.
ya 777 collects the following categories of Personal Data, grouped by the context in which they arise:
ya777 collects Personal Data through the following channels:
The majority of Personal Data we hold is provided directly by you when you register for an account, complete KYC verification, make deposits or withdrawal requests, contact support, or participate in promotions and surveys.
When you access and use the Platform, certain technical and behavioural data is collected automatically through our servers, cookies, and analytics tools. This includes IP address, device identifiers, page views, click paths, and session duration. See Section 10 for full details on our cookie practices.
ya777 may receive Personal Data from third-party providers in limited, specific circumstances, including:
The table below sets out each purpose for which ya777 processes Personal Data and the legal basis on which that processing rests:
| Purpose | Data Categories Used | Legal Basis |
|---|---|---|
| Account registration and management | Registration Data, Technical Data | Contract performance |
| Age and identity verification (KYC) | KYC Data, Registration Data | Legal obligation (licence conditions) |
| Processing deposits and withdrawals | Financial Transaction Data, KYC Data | Contract performance |
| Fraud prevention and anti-money laundering | All categories | Legal obligation; legitimate interests |
| Responsible gaming compliance | Gaming Activity Data, Registration Data | Legal obligation; legitimate interests |
| Customer support and dispute resolution | Communications Data, Financial Data | Contract performance; legitimate interests |
| Platform security and technical maintenance | Technical and Device Data | Legitimate interests |
| Marketing communications (opted-in players only) | Registration Data, Gaming Activity Data | Consent |
| Regulatory reporting and audit compliance | All categories (aggregated or as required) | Legal obligation |
ya777 does not sell your Personal Data. We share Personal Data with third parties only in the circumstances described below, and only to the minimum extent necessary for the stated purpose.
To process deposits and withdrawals in IDR, ya777 shares transaction-relevant data with Indonesian payment partners including BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata, OVO, DANA, GoPay, ShopeePay, and LinkAja. Each payment partner processes data under its own privacy policy and applicable Indonesian financial regulations.
ya777 engages certified third-party KYC and fraud prevention vendors to assist with identity verification and risk management. These providers act as data processors under contractual agreements that require them to process data solely on ya777's instructions and to maintain appropriate security standards.
Game studios such as Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, and Pocket Games Soft receive limited gameplay data (session identifiers and wager records) necessary for game settlement, RNG certification audits, and dispute resolution. These studios do not receive your full identity or financial profile.
ya777 uses third-party cloud infrastructure and software-as-a-service providers for hosting, database management, email delivery, and analytics. These providers are contractually bound as data processors and may not use your data for their own purposes.
ya777 will disclose Personal Data to licensing authorities, financial intelligence units, or law enforcement agencies where required to do so by law, court order, or regulatory direction. Where permitted by law, ya777 will notify affected players of such disclosures.
In the event of a merger, acquisition, or sale of substantially all of ya777's assets, Personal Data may be transferred to the successor entity as part of that transaction. Players will be notified of any such transfer and of any material change to how their data will be processed, with a reasonable opportunity to close their account before the transfer takes effect.
ya777 operates internationally and some of the third-party processors described in Section 6 may process Personal Data in jurisdictions outside Indonesia. Where Personal Data is transferred internationally, ya777 ensures that appropriate safeguards are in place, including:
In all cases, international transfers occur only to the extent strictly necessary to operate the Platform and deliver ya777's services to Indonesian players.
ya777 retains Personal Data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law or our licensing conditions. The following retention periods apply as a general guide:
| Data Category | Retention Period | Rationale |
|---|---|---|
| Account registration data | Duration of account + 5 years post-closure | Licensing obligation; fraud prevention |
| KYC documentation | Duration of account + 5 years post-closure | Anti-money laundering legal requirement |
| Financial transaction records | 5 years from transaction date | Financial regulatory compliance |
| Gaming activity logs | 3 years from session date | Dispute resolution; responsible gaming audit |
| Support communications | 3 years from last interaction | Dispute resolution; service improvement |
| Self-exclusion records | Indefinite (until formal removal request) | Responsible gaming obligation |
| Marketing consent records | Until consent is withdrawn + 1 year | Evidence of lawful marketing basis |
| Technical / device logs | 13 months from collection | Security monitoring; fraud detection |
At the end of the applicable retention period, Personal Data is securely deleted or anonymised in accordance with ya777's data disposal procedures. Anonymised, aggregated data may be retained indefinitely for statistical and analytical purposes.
ya777 implements a layered, defence-in-depth security architecture to protect Personal Data against unauthorised access, disclosure, alteration, and destruction. Key measures include:
ya777 uses cookies and similar tracking technologies to operate the Platform efficiently, maintain your session, prevent fraud, and — with your consent — understand how players use the Platform so we can improve it.
| Cookie Type | Purpose | Consent Required? |
|---|---|---|
| Strictly necessary | Session management, login state, security tokens, fraud prevention | No — essential to Platform operation |
| Functional | Remembering your language preference, display settings, and game lobby filters | No — enhances core functionality |
| Analytical | Aggregated usage statistics to improve Platform performance and user experience | Yes — consent managed via cookie settings |
| Marketing / retargeting | Personalised promotional offers based on browsing and gaming activity | Yes — only for opted-in players |
You can manage your cookie preferences at any time through your account settings panel. You can also control cookies through your browser settings; however, disabling strictly necessary cookies will impair your ability to use the Platform. Note that opting out of analytical or marketing cookies does not affect your ability to play games, make deposits, or withdraw winnings.
ya777 may use third-party analytics tools to collect aggregated, anonymised data about how players interact with the Platform. These tools do not receive your name, payment details, or full account information. Any third-party analytics provider used by ya777 is contractually bound to process data only on ya777's instructions and to apply appropriate security standards.
As a player registered with ya777 and residing in Indonesia, you have the following rights in relation to your Personal Data. All rights can be exercised by contacting ya777 support as described in Section 16.
ya777 treats these rights as binding obligations. Submit a request via live chat or email and we will respond within 72 hours and resolve within 30 days.
You may request a copy of all Personal Data ya777 holds about you, along with information about how it is being used, where it came from, and who it has been shared with.
If any Personal Data ya777 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or updated without undue delay.
You may request deletion of your Personal Data where it is no longer necessary for the purpose it was collected, or where you withdraw consent. Note that legal retention obligations may prevent full immediate erasure.
You may request that ya777 pause processing of your Personal Data in certain circumstances — for example, while you contest the accuracy of data we hold, or while a complaint is under review.
Where processing is based on your consent or on contract performance, you may request a copy of your Personal Data in a structured, machine-readable format suitable for transfer to another service provider.
You may object to processing based on legitimate interests at any time. You also have an unconditional right to object to processing of your data for direct marketing purposes, which ya777 will honour immediately upon receipt of the request.
The ya777 Platform is strictly intended for adults aged 21 years and over. ya777 does not knowingly collect Personal Data from individuals under the age of 21. If ya777 discovers that an account has been registered by a minor, the account will be closed immediately, all associated Personal Data will be securely deleted (subject to any legal retention obligations), and any funds in the account will be handled in accordance with our licensing authority's guidance.
If you are a parent or guardian and believe that a minor under your care has registered for a ya777 account or provided Personal Data to ya777, please contact us immediately at [email protected]. We will investigate and take appropriate action promptly.
ya777 sends promotional emails, SMS messages, and in-account notifications only to players who have explicitly consented to receive them. Consent is collected during the registration process and can be updated at any time through your account notification settings or by contacting support.
Marketing communications from ya777 may include information about new game releases, seasonal promotions (including Idul Fitri bonus offers, Ramadhan specials, and major football tournament promotions), deposit match bonuses, free spin offers, and sportsbook enhanced odds. All promotions referenced in marketing communications are subject to specific bonus terms published on the relevant promotion page.
You may withdraw your marketing consent at any time by clicking the unsubscribe link in any marketing email, updating your notification preferences in the account dashboard, or contacting ya777 support. Withdrawal of marketing consent will be processed within 10 business days and does not affect the lawfulness of any marketing communications sent prior to the withdrawal. Withdrawing marketing consent does not affect your ability to receive transactional communications (such as deposit confirmations, withdrawal notifications, and account security alerts), which ya777 sends on the basis of contract performance rather than consent.
The ya777 Platform may contain references or links to third-party websites or services, including payment provider portals, game studio promotional pages, and sports data providers. This Privacy Policy applies solely to data processed by ya777 through the Platform. ya777 is not responsible for the privacy practices of third-party websites and recommends that you review the privacy policy of any third-party site you visit independently of ya777.
ya777 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, licensing requirements, or applicable law. When material changes are made — particularly changes that affect the legal basis for processing, the categories of data collected, or your rights — ya777 will notify registered players by email and by displaying a prominent notice on the Platform at least 14 days before the changes take effect.
Your continued use of the Platform after the effective date of any revised Privacy Policy constitutes your acknowledgement of the updated terms. The effective date at the top of this document will always reflect the date of the most recent revision. If you do not accept the revised Policy, you may close your account in accordance with the Account Closure provisions in the Terms & Conditions.
Previous versions of this Privacy Policy are available on request by contacting ya777 support.
For any privacy-related queries, data subject access requests, objections, or complaints regarding ya777's handling of your Personal Data, please use the contact details below. All privacy communications must be submitted in English or Indonesian.
By registering for a ya777 account, you confirm that you have read and understood this Privacy Policy and consent to the collection and processing of your Personal Data as described herein. ya777 is committed to handling your data with the care, transparency, and respect it deserves — because trust is the foundation of every player relationship we build.
Now that you understand how ya777 protects your data, explore our full range of games and sportsbook markets — all secured with industry-leading encryption and backed by 24/7 Indonesian-speaking support.