At sand77, protecting your personal information is a core operational priority, not an afterthought. This Privacy Policy explains exactly what data we collect, how we use it, who we share it with, and the rights you hold over your own information.
This Privacy Policy applies to all personal data collected, processed, and stored by sand77 ("we," "us," "our") in connection with the operation of our online betting platform at https://sand77.world and all associated mobile applications, subdomains, and services (collectively, "the Platform").
This Policy applies to all users ("you," "your") who access or use the Platform, including registered account holders, individuals browsing without an account, and individuals who contact our customer support team. It covers data collected through our website, mobile applications, live chat systems, email communications, and any other interaction channel operated by sand77.
sand77 serves the Indonesian market, and this Policy is written in accordance with applicable Indonesian data-protection norms, including the Personal Data Protection Law (UU PDP) and relevant regulations. For users based in other jurisdictions, we apply equivalent or stronger protections where applicable.
By registering for an account on sand77, using our Services, or otherwise providing us with your personal data, you acknowledge that you have read, understood, and agreed to the terms of this Privacy Policy. If you do not agree with any part of this Policy, you must not use our Services.
The following definitions apply throughout this Privacy Policy:
sand77 collects the following categories of personal data, depending on how you interact with our Platform:
Minimum Data Principle: sand77 collects only the personal data necessary for the specific purposes identified in this Policy. We do not collect sensitive data categories (such as racial or ethnic origin, political opinions, or health data) unless required by law or directly relevant to responsible gaming obligations.
| Data Category | Examples | Source |
|---|---|---|
| Identity Data | Name, date of birth, KTP number | You (registration/KYC) |
| Contact Data | Email address, phone number, address | You (registration) |
| Financial Data | Bank account, e-wallet ID, transactions | You; payment providers |
| KYC Documents | KTP copy, selfie photo | You (verification upload) |
| Technical Data | IP address, device type, browser | Automatically collected |
| Behavioral Data | Bet history, game sessions, navigation | Automatically collected |
| Communication Data | Chat transcripts, support emails | You (direct communication) |
sand77 processes your personal data under one or more of the following legal bases, in accordance with applicable Indonesian data-protection law:
sand77 uses your personal data for the following specific purposes:
sand77 does not sell, rent, or trade your personal data to third parties for their own marketing or commercial purposes. We share your personal data only in the following circumstances:
All third parties who receive your personal data from sand77 are required to maintain appropriate technical and organizational security measures and may only use your data for the specified purpose for which it was shared.
sand77 uses cookies and similar tracking technologies to enhance your experience, maintain session continuity, and collect analytics data to improve our Platform.
| Cookie Type | Purpose | Duration |
|---|---|---|
| Essential Cookies | Required for login sessions, security tokens, and core platform functionality. Cannot be disabled without breaking the Platform. | Session / up to 30 days |
| Functional Cookies | Remember your preferences such as language settings, display preferences, and last-visited game categories. | Up to 12 months |
| Analytics Cookies | Collect anonymized data on how users navigate the Platform, which pages receive the most traffic, and how long sessions last — used to improve the Platform. | Up to 24 months |
| Security Cookies | Detect and prevent fraudulent activity, bot traffic, and unauthorized access attempts. | Session / up to 90 days |
You can manage cookie preferences through your browser settings. Most browsers allow you to block or delete cookies. However, please note that disabling essential cookies will prevent you from logging into your sand77 account and using core Platform features.
We do not use third-party advertising cookies or cross-site behavioral tracking cookies. Analytics data is collected in aggregated, anonymized form and cannot be used to identify you individually.
sand77 retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements.
The following retention periods apply as general guidelines:
Upon expiry of the applicable retention period, personal data is securely deleted or permanently anonymized so that it can no longer be associated with any individual.
sand77 implements a comprehensive suite of technical and organizational security measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction.
Your responsibility: While we maintain robust security controls, you are responsible for maintaining the confidentiality of your account password and for ensuring that your device is free from malware. sand77 will never ask for your full password via email or live chat. If you receive such a request, treat it as a phishing attempt and contact us immediately at [email protected].
sand77 primarily processes and stores your personal data on servers located within or serving the Asia-Pacific region. However, some of our third-party service providers — including game studios, KYC verification platforms, and cloud infrastructure providers — may process data in other jurisdictions.
Where personal data is transferred outside Indonesia, sand77 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to or exceeding Indonesian data-protection requirements. Such safeguards may include:
By using sand77, you acknowledge and consent to the transfer of your personal data to third-party service providers in other jurisdictions, subject to the safeguards described above.
Under applicable Indonesian data-protection law, you hold the following rights with respect to your personal data held by sand77. To exercise any of these rights, submit a written request to [email protected] with the subject line "Data Rights Request" and include your registered account email address and a description of your request.
We aim to respond to all data rights requests within 14 calendar days. Complex requests may take up to 30 days; we will notify you if additional time is required.
sand77 operates an adult-only platform. Our Services are strictly intended for individuals aged 21 and above. We do not knowingly collect, process, or retain personal data from any person under the age of 21.
Age verification is a mandatory step in our registration and KYC process. Any account found to belong to an individual under 21 years of age will be immediately closed. All funds associated with the account will be returned to the original payment source (minus any bonuses received), and all personal data collected will be securely deleted in accordance with our data retention policies.
Parents and guardians who believe that a minor has accessed sand77 and provided personal data should contact us immediately at [email protected]. We will investigate and take appropriate action, including data deletion and account closure, within 48 hours of a verified report.
sand77 reviews and updates this Privacy Policy periodically to reflect changes in our data practices, applicable law, or the services we offer. The "Last Updated" date at the top of this page indicates when the most recent revision was made.
For material changes — those that significantly affect how we collect, use, or share your personal data — we will notify you via email to your registered address and display a prominent notice on the Platform at least 14 days before the changes take effect. Your continued use of sand77 after the effective date of any revision constitutes acceptance of the updated Policy.
If you disagree with any material changes to this Policy, you have the right to close your account and request deletion of your personal data by contacting our support team before the revised Policy takes effect.
For any questions, concerns, or requests relating to this Privacy Policy or your personal data, please contact the sand77 Data Team using the details below. We are committed to resolving all privacy-related inquiries fairly, transparently, and promptly.
We take every privacy inquiry seriously. If you are not satisfied with our response to a privacy complaint, you may have the right to escalate the matter to the relevant Indonesian data protection authority.
sand77 respects your rights as a data subject. Here is a plain-English summary of the rights you can exercise at any time.
You may request a copy of all personal data we hold about you, along with information about how it is used, who it is shared with, and how long it is retained.
If any personal data we hold is inaccurate or incomplete, you have the right to request correction. Minor updates (such as phone number changes) can be made directly in your account settings.
You may request deletion of your personal data where it is no longer necessary for the purpose it was collected, or where you withdraw consent. Note that we are required to retain certain data for legal and regulatory compliance for the periods described in Section 8.
In specific circumstances — such as while we verify the accuracy of data you have disputed — you may request that we restrict processing of your personal data to storage only.
Where processing is based on your consent or a contract, you may request a copy of your personal data in a structured, machine-readable format (such as CSV or JSON) for transfer to another service provider.
You may object to processing carried out on the basis of legitimate interests, including direct marketing communications. You may withdraw consent for marketing emails at any time by following the unsubscribe link in any marketing message or contacting our support team.
Privacy at sand77 is not a compliance checkbox — it is a fundamental commitment we make to every player on our platform.
All data in transit and at rest is protected by bank-grade AES-256 and SSL/TLS encryption. Your information is never transmitted in plain text.
We never sell, rent, or trade your personal data to third parties for marketing or commercial purposes — full stop, no exceptions.
We collect only the data we genuinely need to deliver our Services and meet legal obligations. No data is collected speculatively or "just in case."
Access, correction, deletion, and portability requests are handled within 14 days — not buried behind multi-step processes or arbitrary delays.
Promotional emails and push notifications are sent only with your explicit opt-in. Opting out is instant and honored without re-solicitation.
If a confirmed data breach affects your information, we will notify you within 72 hours with full transparency on what occurred and what steps to take.
Our team is available 24/7 to address any data-related questions or to help you exercise your rights. Reach out via live chat or email — we respond fast.