Privacy Policy — cuk77

The following terms are used throughout this Privacy Policy with the meanings set out below:

cuk77 collects Personal Data in several distinct categories. The table below details each category, the specific data points within it, and whether collection is mandatory or optional for platform use.

cuk77 does not collect sensitive personal data such as health records, biometric data (beyond the liveness check used solely for KYC), religious affiliation, political opinions, or racial or ethnic origin beyond what is apparent from government-issued identity documents submitted for KYC.

cuk77 collects Personal Data through the following channels and mechanisms:

• Direct submission: When you complete the cuk77 registration form, submit KYC documents, contact customer support, or update your account profile, you provide Personal Data directly to us.
• Automated platform interactions: When you access, browse, or use any feature of cuk77 — including placing bets on sportsbook markets such as BRI Liga 1, EPL, or Champions League, spinning slots powered by Pragmatic Play or NetEnt, or accessing live casino tables powered by Evolution Gaming — our systems automatically log Technical Data and Betting & Gaming Data associated with your session.
• Payment processors: When you initiate a deposit or withdrawal via a supported Indonesian bank or e-wallet, the relevant payment processor (e.g., BCA, BRI, OVO, DANA) confirms transaction status and shares limited Financial Data with cuk77 for reconciliation purposes. cuk77 does not receive or store your full bank account password or card PIN.
• KYC verification partners: Third-party identity verification providers may return structured identity-match results (e.g., name match confidence score, document authenticity score) to cuk77 as part of the KYC process. cuk77 stores the outcome of the verification along with the documents submitted; raw biometric scores are not retained beyond the verification session.
• Cookies and tracking technologies: As described in the Cookies section of this policy, cuk77 collects Technical Data through first-party cookies and similar technologies placed on your device during platform use.

cuk77 uses the Personal Data it collects for the following specific purposes. Each purpose is linked to one or more legal bases for processing, described in the following section.

• Account creation and management: Creating, maintaining, and securing your cuk77 account; processing login authentication; managing account status and tier upgrades.
• Service delivery: Enabling you to place bets on sportsbook markets, play casino and slot games, participate in togel draws, and access all other cuk77 products.
• Financial transaction processing: Processing deposits and withdrawals through Indonesian banks (BCA, BRI, BNI, Mandiri, and others) and e-wallets (OVO, DANA, GoPay, ShopeePay, LinkAja); maintaining transaction records in IDR; reconciling balances.
• Identity and age verification (KYC): Confirming that you are a resident of Indonesia aged 21 or older; complying with anti-money laundering (AML) obligations; verifying payment method ownership prior to processing withdrawals.
• Fraud prevention and security: Detecting and preventing duplicate accounts, bonus abuse, payment fraud, account takeover attempts, and use of VPN or proxy services to circumvent geographic controls.
• Customer support: Responding to your support requests submitted via Live Chat, email at [email protected], or WhatsApp; resolving disputes; following up on KYC queries.
• Responsible gaming: Monitoring betting patterns that may indicate problem gambling behaviours; applying self-imposed deposit limits or time-out periods requested by Members; administering self-exclusion requests.
• Platform improvement: Analysing aggregated and anonymised usage data to improve platform performance, identify popular game categories, and optimise the user interface for Indonesian players across Jakarta, Surabaya, Bandung, Bali, and other regions.
• Promotional communications: Sending you bonus offers, seasonal promotions (e.g., Ramadhan, Idul Fitri, Imlek campaigns), and platform update notifications by email or in-app message, where you have consented to receive such communications. You may opt out at any time.
• Legal compliance: Fulfilling record-keeping obligations; responding to lawful requests from competent authorities; enforcing the cuk77 Terms & Conditions.

cuk77 processes your Personal Data on the following legal bases:

• Contractual necessity: Processing required to enter into and perform the agreement between you and cuk77 — including account creation, bet placement, payment processing, and KYC verification — is carried out on the basis that it is necessary to deliver the services you have contracted for.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and aggregate analytics is carried out on the basis of cuk77's legitimate interests in operating a safe, fair, and financially viable platform. cuk77 has assessed that these legitimate interests are not overridden by your rights and freedoms.
• Legal obligation: Processing required to comply with applicable financial record-keeping, anti-money laundering, and know-your-customer obligations is carried out on the basis of legal obligation.
• Consent: Processing for direct marketing communications — including promotional emails and in-app bonus notifications — is carried out on the basis of your explicit consent, which you may withdraw at any time by contacting support or clicking the unsubscribe link in any marketing email.

cuk77 shares Personal Data with third parties only where strictly necessary and under appropriate data protection safeguards. The categories of third parties with whom data may be shared are as follows:

• Payment processors: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata, OCBC NISP) and e-wallet platforms (OVO, DANA, GoPay, ShopeePay, LinkAja) receive the minimum Financial Data required to process your deposit or withdrawal transaction. International card processors (Visa, Mastercard) may receive card transaction data for cross-border card payments.
• KYC and AML verification providers: Third-party identity verification specialists receive your identity document scans and liveness check data solely for the purpose of verifying your identity and age for KYC compliance. These providers are contractually prohibited from retaining or using your data for any other purpose.
• Game content providers: Studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft may receive your account session token and game history data as required to deliver game content and resolve game-round disputes. No additional personal identifiers beyond a pseudonymous session token are shared with game studios.
• Cloud infrastructure and hosting providers: cuk77 uses reputable cloud infrastructure providers to host its platform and database systems. These providers act as data processors and are bound by data processing agreements that restrict their use of data to infrastructure operation only.
• Customer support tooling: Live Chat and customer communication platforms used by cuk77's Indonesian-speaking support team may process support interaction data. These tools are configured to store data within cuk77-controlled environments or within jurisdictions with adequate data protection standards.
• Legal and regulatory authorities: cuk77 may disclose Personal Data to law enforcement agencies, financial intelligence units, or courts when required to do so by a lawful legal process, court order, or applicable regulatory requirement. cuk77 will notify you of any such disclosure where legally permitted to do so.

cuk77 does not share Personal Data with advertising networks, social media platforms, data brokers, or any other third party for commercial profiling or marketing purposes.

cuk77 uses first-party cookies and similar client-side storage technologies to deliver a functional, secure, and personalised platform experience. The following cookie categories are used:

cuk77 does not use third-party advertising cookies, retargeting pixels, or social media tracking scripts. You can manage cookie preferences through your browser settings; however, disabling strictly necessary cookies will prevent you from logging in to your account.

cuk77 retains Personal Data for as long as necessary to fulfil the purposes for which it was collected, subject to the minimum retention periods required by applicable law. The following retention schedule applies:

• Account and identity data: Retained for the duration of your active account relationship with cuk77, plus a minimum of five (5) years following account closure, to satisfy financial record-keeping and anti-money laundering compliance obligations.
• Financial transaction records: Retained for a minimum of five (5) years from the date of the transaction, in accordance with standard financial record-keeping requirements.
• KYC documents: Retained for a minimum of five (5) years following the completion of the KYC verification process or account closure, whichever is later.
• Betting and gaming history: Retained for a minimum of three (3) years from the date of the relevant bet or game session, for dispute resolution and responsible gaming monitoring purposes.
• Customer support records: Retained for three (3) years from the date the support ticket was closed, to provide continuity of support and to reference historical interactions in the event of a dispute.
• Marketing consent records: Retained for as long as you remain on our marketing list, plus six (6) months following withdrawal of consent, to demonstrate compliance with consent obligations.
• Technical and log data: Retained for ninety (90) days in rolling log archives used for security monitoring and fraud detection, after which they are automatically purged.

When data reaches the end of its applicable retention period, it is securely deleted or anonymised in a manner that prevents re-identification.

cuk77 implements a layered security architecture designed to protect your Personal Data against unauthorised access, disclosure, alteration, and destruction. Our security measures include:

• Encryption: All data transmitted between your device and cuk77's servers is encrypted using TLS 1.3. All Personal Data and financial records stored in cuk77's databases are encrypted at rest using AES-256.
• Access controls: Access to Personal Data within cuk77's internal systems is restricted to personnel who require it to perform their job functions, governed by a role-based access control policy. All internal access events are logged and subject to periodic audit.
• Penetration testing: cuk77 commissions regular penetration tests and vulnerability assessments of its platform infrastructure conducted by independent third-party security specialists.
• Incident response: cuk77 maintains a documented data breach response plan. In the event of a security incident that poses a material risk to your Personal Data, cuk77 will notify affected Members and relevant authorities within the timeframes required by applicable regulations.
• Password security: Member passwords are stored in hashed form using bcrypt with an appropriate work factor. cuk77 does not store plaintext passwords and cannot retrieve your password — only reset it at your request.
• Two-factor authentication: cuk77 offers optional two-factor authentication (2FA) for account login. Members are strongly encouraged to enable 2FA to protect their accounts against unauthorised access, particularly given the financial nature of platform activity.

As a cuk77 Member, you hold the following rights in respect of your Personal Data. To exercise any of these rights, contact our Data Protection Officer at [email protected] or via in-app Live Chat. We will respond to all valid requests within thirty (30) calendar days.

cuk77 is strictly an adults-only platform. Access to any product — Sportsbook, Live Casino, Slots, Capsa Susun, Bola Tangkas, or togel — is limited to individuals aged 21 years or older who are residents of Indonesia. cuk77 does not knowingly collect Personal Data from individuals under the age of 21.

Age verification is enforced at the point of registration through a date-of-birth check and reinforced through mandatory KYC document submission (KTP, passport, or driver's licence) prior to withdrawal processing. Where cuk77 identifies or reasonably suspects that an account has been registered by a person under the age of 21:

• The account will be immediately suspended pending investigation.
• All Personal Data associated with the underage account will be reviewed and, following confirmation, permanently deleted from our systems beyond what is required for legal compliance.
• Any deposited funds will be returned to the payment method used, less any applicable processing fees, and any winnings generated will be forfeited.

Parents or guardians who believe a minor has registered a cuk77 account should contact our support team immediately at [email protected]. We will prioritise the investigation and closure of any such account.

cuk77 operates as an internationally hosted platform. As a result, certain Personal Data — including account data and Technical Data — may be processed on servers located outside of Indonesia. Where Personal Data is transferred internationally, cuk77 ensures appropriate safeguards are in place, including:

• Data processing agreements: All third-party processors who handle Personal Data outside Indonesia are bound by written data processing agreements that impose data protection standards equivalent to those described in this Privacy Policy.
• Adequacy and equivalence: Where Personal Data is transferred to jurisdictions without a formal adequacy determination, cuk77 implements standard contractual clauses or equivalent transfer mechanisms to ensure your data receives a consistent level of protection regardless of where it is processed.
• Infrastructure selection: cuk77 prioritises cloud infrastructure providers with data centres in the Asia-Pacific region (including Singapore and Hong Kong) to minimise the geographic distance over which Indonesian Members' data travels and to maintain low-latency platform performance across Jakarta, Surabaya, Medan, Bandung, Bali, and other cities.
• Vendor assessment: Before engaging any new Data Processor that will handle Personal Data internationally, cuk77 conducts a data protection impact assessment to evaluate the risks of the transfer and the adequacy of the proposed safeguards.

By registering a cuk77 account and using the platform, you acknowledge that your Personal Data may be transferred to and processed in jurisdictions outside Indonesia as described in this section, subject always to the safeguards described above.

cuk77 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable legal requirements, or platform features. When material changes are made, cuk77 will:

• Update the "Effective Date" displayed at the top of this page.
• Display a prominent notice on the cuk77 platform for a minimum of fourteen (14) days following the change, directing Members to review the updated policy.
• Send an email notification to all registered Members whose email addresses are on file, summarising the key changes and linking to the updated policy.

Your continued use of the cuk77 platform after the updated Privacy Policy has been published and notified constitutes your acceptance of the revised terms. If you do not agree with any material amendment, you must cease using the platform and may request account closure by contacting our support team.

Minor amendments — such as typographical corrections, formatting updates, or clarifications that do not affect the substance of how your data is processed — may be made without advance notice, though the Effective Date will be updated accordingly.

cuk77 has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with this Privacy Policy and for handling all Member data rights requests. If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data, please contact us through any of the following channels:

All data rights requests will be acknowledged within five (5) business days of receipt and resolved within thirty (30) calendar days, unless the complexity of the request requires an extension (in which case you will be notified before the 30-day deadline).

cuk77's Indonesian-speaking support team operates around the clock across all time zones in Indonesia — WIB (UTC+7, covering Jakarta and Sumatra), WITA (UTC+8, covering Bali and Sulawesi), and WIT (UTC+9, covering Maluku and Papua). You may write to us in English or in Indonesian, and our agents will respond accordingly.