Legal
gf777 is committed to protecting the privacy and personal data of every player on our platform. This Privacy Policy explains exactly what information we collect, why we collect it, how we use and protect it, and what rights you hold as a data subject.
The following defined terms are used throughout this Privacy Policy:
gf777 collects Personal Data across several categories, each serving a specific operational or compliance purpose. The table below summarises what we collect and why:
| Category | Examples | Primary Purpose |
|---|---|---|
| Identity Data | Full legal name, date of birth, KTP / passport number, nationality | Account registration, KYC verification, age confirmation (21+) |
| Contact Data | Email address, residential address in Indonesia, phone number | Account management, transaction notifications, support communications |
| Financial Data | Bank account name and number (BCA, BRI, BNI, Mandiri, etc.), e-wallet ID (OVO, DANA, GoPay, ShopeePay, LinkAja), transaction history in IDR | Processing deposits and withdrawals, fraud prevention, AML compliance |
| Technical Data | IP address, device type and OS, browser type and version, session timestamps, connection logs | Platform security, fraud detection, service optimisation |
| Gaming Data | Betting history, game preferences, wager amounts, win/loss records, bonus usage | Account management, responsible gaming monitoring, personalised offers |
| Communications Data | Live chat transcripts, support ticket content, email correspondence | Customer support, quality assurance, dispute resolution |
| KYC Documents | Scanned copies of KTP, passport, utility bills, selfie photographs | Identity verification, regulatory compliance, fraud prevention |
We do not collect sensitive special-category data such as racial or ethnic origin, political opinions, religious beliefs, health records, or biometric data for identification purposes, beyond what is strictly necessary to fulfil our KYC obligations.
The majority of your Personal Data is collected when you actively interact with the Platform — for example, when you complete the registration form, submit KYC documents, make a deposit or withdrawal, contact our support team, or opt in to a promotional offer.
When you visit or use the Platform, our servers and analytics tools automatically record Technical Data including your IP address, device identifiers, browser information, session duration, pages viewed, and in-game activity. This data is collected using server logs, first-party cookies, and similar technologies as described in Section 10.
In limited circumstances, gf777 may receive Personal Data about you from third parties, including:
gf777 processes your Personal Data for the following purposes:
gf777 processes your Personal Data on one or more of the following legal bases:
gf777 does not sell, rent, or trade your Personal Data. We share it only with the categories of third parties listed below, and only to the extent strictly necessary:
In the event of a merger, acquisition, restructuring, or sale of all or part of gf777's business, your Personal Data may be transferred to the acquiring entity as part of that transaction. We will notify you of any such transfer and the applicable privacy arrangements before your data is transferred to a new controller.
As an internationally operated platform, gf777 may transfer your Personal Data to servers and service providers located outside Indonesia. Where such transfers occur, we ensure that appropriate safeguards are in place to protect your data at an equivalent standard to that described in this Policy. Safeguards may include standard contractual clauses, binding corporate rules, or transfers to jurisdictions recognised as providing an adequate level of data protection.
By using the Platform, you acknowledge that your Personal Data may be processed outside Indonesia. If you have concerns about a specific transfer, please contact our Data Protection Officer (DPO) at the address in Section 15.
gf777 retains your Personal Data only for as long as necessary to fulfil the purpose for which it was collected, to comply with legal and regulatory obligations, or to resolve disputes. The following indicative retention periods apply:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account and identity data | Duration of Account + 5 years after closure | Legal obligation (AML / KYC regulations) |
| Financial transaction records | 7 years from transaction date | Legal obligation (financial record-keeping) |
| KYC documents | 5 years from Account closure or last transaction | Legal obligation (compliance) |
| Gaming / betting history | 5 years from Account closure | Legitimate interest (dispute resolution) |
| Support communications | 3 years from last interaction | Legitimate interest (quality assurance) |
| Marketing consent records | 3 years from last opt-in or until withdrawn | Consent (audit trail) |
| Technical / log data | Up to 12 months from collection | Legitimate interest (security) |
When data is no longer required, gf777 securely deletes or anonymises it in accordance with our internal data lifecycle procedures.
gf777 applies a layered security framework to protect your Personal Data against unauthorised access, loss, alteration, or disclosure. Key technical and organisational measures include:
gf777 uses cookies and similar tracking technologies to operate and improve the Platform. The categories of cookies we use are as follows:
These cookies are essential for the Platform to function. They maintain your login session, secure your Account, enable navigation between pages, and support the cashier and game-loading functionality. These cookies cannot be disabled without impairing your ability to use the Platform, and we do not require your consent to place them.
With your consent, we place first-party analytics cookies that help us understand how users navigate the Platform, which features are most used, and where technical issues occur. This data is aggregated and anonymised before analysis — it does not identify you individually.
Functional cookies remember your preferences — such as your preferred game category, display settings, and language — so that you do not need to re-enter them each time you visit. These cookies improve your experience but are not strictly necessary; they are placed only with your consent.
If you consent, marketing cookies allow us to present you with personalised promotional content relevant to your gaming preferences and activity on the Platform. We do not use third-party advertising networks or share cookie data with external marketing platforms.
You may review and adjust your cookie preferences at any time through your Account settings. Note that disabling non-essential cookies will not affect your ability to play games, deposit, or withdraw funds.
As a data subject, you hold the following rights in relation to your Personal Data held by gf777. To exercise any of these rights, please contact our Data Protection Officer using the details in Section 15:
We will respond to all verified privacy rights requests within 30 days of receipt. In complex cases we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it.
The gf777 Platform is strictly intended for adults aged 21 years or older. We do not knowingly collect Personal Data from individuals under the age of 21. All registration attempts trigger an age verification step, and Accounts flagged as potentially belonging to a minor are immediately suspended pending KYC review.
If you are a parent or guardian and believe that a minor in your household has registered an Account using your or their own details, please contact our support team immediately. We will investigate the matter, close the Account, and securely delete any Personal Data associated with the underage user.
Account holders are responsible for ensuring that minors in their household cannot access the Platform using shared devices or the Account holder's login credentials.
The Platform may reference or display content from third-party game studios (Pragmatic Play, Evolution Gaming, Spribe, etc.) delivered within embedded game frames. These studios operate under their own privacy policies and regulatory licences. gf777 is not responsible for the privacy practices of third-party game providers in respect of any data they independently collect within their game environments.
The Platform does not contain links to external websites. Where any third-party integration is present, it operates within the gf777 Platform environment and is subject to the data processing agreements described in Section 6.
14.1 Right to Update. gf777 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or business operations. The most current version of this Policy will always be available at gf777.vu/privacy-policy, and the "Last Updated" date at the top of the page will be revised accordingly.
14.2 Notification of Material Changes. Where an amendment materially affects how we process your Personal Data or reduces your privacy rights, we will notify you by email to the address registered on your Account at least 14 days before the change takes effect. For non-material updates (such as typographical corrections or clarifications that do not alter the substance of the Policy), we will update the page without advance notice.
14.3 Continued Use. Your continued use of the Platform following the effective date of any amendment constitutes your acknowledgement of the updated Policy. If you do not accept the amended terms, you should cease using the Platform and contact our support team to close your Account.
If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data, please contact the gf777 Data Protection Officer (DPO) through any of the following channels:
When submitting a privacy rights request, please include your registered Account username and a brief description of your request so that we can locate your records and respond efficiently. We may request proof of identity before processing certain requests to protect against unauthorised access.
Data Protection
These are the six pillars of gf777's approach to data protection — practical commitments that back up the legal language above.
Your Personal Data is never sold, rented, or traded to advertisers, data brokers, or any third party for commercial gain. The only entities that receive your data are those directly necessary to operate your Account and process your transactions.
Every byte of data you transmit to gf777 — from login credentials to KYC documents to payment details — is protected by 256-bit TLS encryption in transit and AES-256 encryption at rest, the same standard used by international financial institutions.
Internal access to your Personal Data is governed by role-based access controls. Only team members with a documented operational need can view specific data categories, and all internal access is logged and auditable.
From your Account settings panel you can manage cookie preferences, update your contact details, adjust marketing opt-ins, and submit data access or deletion requests — all without needing to contact support first.
gf777 does not hold your data indefinitely. Each data category is subject to a defined retention period aligned with legal obligations and operational necessity. When the retention period expires, data is securely deleted or irreversibly anonymised.
In the event of a data breach that poses a risk to your personal rights, gf777 will notify affected users without undue delay — clearly explaining what happened, what data was involved, and what steps we have taken to contain and remediate the incident.
Play with Confidence
With a clear understanding of how gf777 handles your data, you can focus on what matters — exploring our sportsbook, live casino, slots, and more, with full confidence that your information is in safe hands.
Adults only (21+). Please review our Responsible Gaming guidelines before playing.