ym777 Privacy Policy

Definitions

• "Personal Data" means any information that identifies or can reasonably be used to identify a living natural person, directly or in combination with other data held by ym777.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, adaptation, retrieval, consultation, use, disclosure, erasure, or destruction.
• "Data Controller" means ym777, which determines the purposes and means of Processing Personal Data collected through the Platform.
• "Data Processor" means any third party that Processes Personal Data on behalf of ym777 pursuant to a written data processing agreement.
• "Cookie" means a small text file placed on your device by the Platform when you visit, used to store session state, preferences, and analytics data.
• "KYC Data" means identity verification documents and supporting materials collected during the Know Your Customer process, including government-issued identity documents, selfie photographs, and proof of payment method.
• "Sensitive Data" means a subset of Personal Data that warrants heightened protection, including financial account details, identity document numbers, and biometric-adjacent KYC photographs.

Scope & Application

This Policy applies to all Personal Data collected by ym777 in connection with your use of the Platform, whether you are a registered Member, a prospective Member browsing the Platform prior to registration, or a visitor accessing publicly available pages. This Policy applies regardless of the device or connection method used to access the Platform, including desktop browsers, mobile browsers, and any future ym777 application.

ym777 operates primarily for the Indonesia market, serving Indonesian-resident players. Where you are accessing the Platform from Indonesia, your Personal Data will be handled in a manner consistent with internationally recognised data protection principles, including purpose limitation, data minimisation, storage limitation, accuracy, integrity, and confidentiality.

Data We Collect

ym777 collects the following categories of Personal Data:

ym777 does not intentionally collect special categories of sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, or health data. If you voluntarily disclose such information in a support communication, it will be handled with the highest level of confidentiality and deleted once the support matter is resolved.

How We Collect Data

ym777 collects Personal Data through the following means:

• Direct Submission: When you register an Account, complete KYC verification, make a deposit or withdrawal request, contact customer support, or participate in a promotion, you provide Personal Data directly to ym777.
• Automated Collection: When you access the Platform, technical systems automatically collect Technical Data and Usage Data via server logs, session tracking, and Cookies (see Section 8).
• Payment Processing: When you initiate a financial transaction, our payment processing partners relay transaction confirmation data, including partial payment account identifiers, to ym777's systems for reconciliation purposes.
• Third-Party Verification Services: Where ym777 employs external identity verification or anti-fraud services to assist with KYC, these services may supply ym777 with a verification decision and associated risk signals derived from the documents you submitted.
• Game Studios: Certified third-party game providers (including Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, and Pocket Games Soft) may transmit game-round outcome data and player session metadata to ym777 for settlement, dispute resolution, and RTP audit purposes.

Legal Basis for Processing

ym777 relies on the following legal bases when Processing your Personal Data:

• Contractual Necessity: Processing is necessary to perform the Agreement between you and ym777 — for example, to create and manage your Account, process deposits and withdrawals, settle bets, and deliver customer support.
• Legal Obligation: Processing is required to comply with applicable legal obligations, including anti-money-laundering obligations, age verification requirements (21+), and record-keeping obligations imposed by the international gaming licence under which ym777 operates.
• Legitimate Interests: Processing is necessary for ym777's legitimate business interests, including fraud detection and prevention, platform security, abuse prevention, and improvement of the Platform, provided that those interests do not override your fundamental privacy rights.
• Consent: Where ym777 relies on consent as the legal basis — for example, for sending optional promotional communications — you may withdraw that consent at any time by contacting support or updating your Account notification preferences. Withdrawal of consent does not affect the lawfulness of Processing carried out before withdrawal.

How We Use Your Data

ym777 uses your Personal Data for the following purposes:

• Account Management: Creating, maintaining, and securing your ym777 Account; verifying your identity and age (21+); managing your Account balance, transaction history, and betting records.
• Payment Processing: Facilitating deposits and withdrawals to and from Indonesian bank accounts (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Permata, BSI) and e-wallets (OVO, DANA, GoPay, ShopeePay, LinkAja); detecting and preventing payment fraud.
• Regulatory Compliance: Fulfilling KYC and anti-money-laundering obligations; maintaining transaction records; responding to legitimate requests from competent authorities.
• Platform Security: Detecting and investigating suspicious login activity, multi-accounting, bonus abuse, match-fixing, and other forms of fraud or misconduct outlined in the Terms & Conditions.
• Customer Support: Responding to support requests, managing disputes, resolving technical issues, and facilitating the internal complaint resolution process.
• Responsible Gaming: Monitoring betting patterns for signs of problem gambling behaviour; enforcing self-exclusion and cooling-off periods; delivering session time reminders; complying with the 21+ age policy.
• Personalisation: Tailoring the game lobby, promotional offers, and Platform experience based on your Usage Data and preferences, subject to your notification settings.
• Marketing Communications: Sending promotional emails, SMS notifications, or on-platform messages regarding bonuses, new game releases, and special events — only where you have provided consent or where permitted under the applicable marketing rules. You may opt out at any time.
• Analytics & Improvement: Analysing aggregated and anonymised Usage Data to understand platform performance, identify technical issues, and improve the ym777 user experience.

Data Sharing & Disclosure

ym777 does not sell, rent, or otherwise transfer your Personal Data to unaffiliated third parties for their independent commercial or marketing purposes. ym777 may share your Personal Data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate contractual protections:

• Payment Service Providers: Indonesian banking partners and e-wallet platforms (BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, LinkAja) receive the minimum Personal Data necessary to process your financial transactions.
• Identity Verification Providers: Third-party KYC and anti-fraud service providers receive identity documents and associated data solely for the purpose of completing the verification process.
• Game Studio Providers: Certified game studios (Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, Pocket Games Soft) receive a pseudonymous player identifier and session data necessary to deliver the game and settle outcomes.
• Customer Support Infrastructure: Third-party customer support platforms may host live chat and ticketing functionality; any Personal Data processed on these platforms is subject to data processing agreements with ym777.
• Analytics Providers: Aggregated and, where feasible, anonymised Usage Data may be shared with analytics service providers to support Platform improvement.
• Legal and Regulatory Authorities: ym777 will disclose Personal Data to competent authorities, regulators, or law enforcement agencies where required to do so by law, court order, or legitimate official request, or where disclosure is necessary to protect the legal rights of ym777 or to prevent fraud, money laundering, or other illegal activity.
• Corporate Transactions: In the event of a merger, acquisition, restructuring, or sale of all or part of ym777's business, Personal Data held by ym777 may be transferred to the relevant successor entity, subject to equivalent data protection commitments.

Cookies & Tracking Technologies

ym777 uses Cookies and similar tracking technologies (collectively, "Tracking Technologies") to operate and improve the Platform. The following categories of Cookies are in use:

You can manage Cookie preferences through your browser settings. Most modern browsers allow you to block, delete, or receive alerts about Cookies. Please note that disabling non-essential Cookies may affect certain Platform features. ym777 does not use third-party advertising Cookies or cross-site behavioural tracking for advertising purposes.

Data Retention

ym777 retains Personal Data only for as long as necessary to fulfil the purposes for which it was collected, or as required to meet legal, regulatory, and operational obligations. The following retention guidelines apply:

• Active Account Data: Retained for the duration of your Account's active status and for a minimum of 5 years following Account closure, to comply with anti-money-laundering record-keeping obligations and to resolve any post-closure disputes.
• KYC Documents: Retained for a minimum of 5 years from the date of verification completion, or longer where required by applicable law.
• Transaction Records: Deposit, withdrawal, and betting records are retained for a minimum of 5 years following the date of the transaction.
• Customer Support Communications: Retained for up to 3 years from the date of the interaction, unless the communication relates to an unresolved dispute or legal proceeding, in which case it is retained until the matter is fully resolved.
• Technical Logs: Server access logs and security event logs are retained for up to 12 months, after which they are securely deleted or anonymised.
• Marketing Consent Records: Records of your marketing consent or opt-out status are retained for the duration of your Account plus 1 year, to demonstrate compliance with applicable marketing rules.

Upon expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymised in accordance with ym777's internal data lifecycle procedures.

Data Security

ym777 implements a layered security architecture to protect your Personal Data against unauthorised access, disclosure, alteration, and destruction. Key security measures include:

• 256-Bit SSL/TLS Encryption: All data transmitted between your device and ym777's servers is encrypted using industry-standard TLS 1.2 or TLS 1.3 protocols. The padlock indicator in your browser confirms an active encrypted session.
• Encrypted Data Storage: Sensitive Data — including identity document copies, financial account details, and authentication credentials — is stored encrypted at rest using AES-256 encryption.
• Access Controls: Access to systems containing Personal Data is restricted on a strict need-to-know basis. All staff access is subject to multi-factor authentication, audit logging, and periodic access reviews.
• Segregated Player Funds: Your Account Balance is held in financial accounts that are segregated from ym777's operational funds, ensuring your balance is protected independently of ym777's business operations.
• Penetration Testing: ym777's Platform undergoes regular security assessments and penetration testing by qualified third-party security professionals.
• Incident Response: In the event of a personal data breach that creates a risk to your rights, ym777 will notify affected Members without undue delay and will implement containment, investigation, and remediation measures as a matter of priority.

International Data Transfers

ym777 operates as an international online gaming platform. Your Personal Data may be stored on or transferred to servers located outside Indonesia. Where such transfers occur, ym777 ensures that appropriate safeguards are in place to protect your Personal Data to a standard equivalent to that described in this Policy, including:

• Contractual data protection clauses with all Data Processors and third-party service providers who receive Personal Data outside Indonesia.
• Selection of cloud infrastructure and data hosting providers that maintain recognised international security certifications (such as ISO 27001).
• Ensuring that game studio providers operating game servers in multiple global jurisdictions are bound by data processing agreements requiring equivalent data protection standards.

By registering an Account with ym777, you acknowledge that your Personal Data may be transferred to and processed in jurisdictions outside Indonesia for the purposes described in this Policy, subject to the safeguards described above.

Your Rights

As a ym777 Member, you hold the following rights in relation to your Personal Data. To exercise any of these rights, contact ym777 at [email protected] with the subject line "Privacy Request — [Right Type]":

• Right of Access: You may request a copy of the Personal Data ym777 holds about you, along with information about how it is being used. ym777 will respond within 30 days of receiving a valid request.
• Right to Rectification: If any Personal Data ym777 holds about you is inaccurate or incomplete, you may request that it be corrected or updated. Minor Account details (such as contact number) can be updated directly from your Account dashboard.
• Right to Erasure: You may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, subject to ym777's obligation to retain certain data for legal compliance and dispute resolution purposes (see Section 9).
• Right to Restriction: You may request that ym777 restrict the Processing of your Personal Data in certain circumstances — for example, while a dispute about the accuracy of your data is being resolved.
• Right to Data Portability: You may request that ym777 provide your Personal Data in a structured, commonly used, machine-readable format so that it can be transferred to another service provider.
• Right to Object: You may object to Processing of your Personal Data where ym777 relies on legitimate interests as the legal basis, including objecting to direct marketing at any time.
• Right to Withdraw Consent: Where Processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of Processing carried out before withdrawal.

Children's Privacy

The ym777 Platform is strictly intended for adults aged 21 years and above. ym777 does not knowingly collect, process, or store Personal Data relating to individuals under the age of 21. Age verification is conducted as part of the KYC process for all Members.

If ym777 discovers or is notified that Personal Data has been collected from a person under 21 years of age, it will immediately suspend the relevant Account, delete the associated Personal Data, and return any deposited funds to the payment source. If you are a parent or guardian who believes that a minor has registered an Account with ym777, please contact [email protected] immediately with the subject line "Minor Account Report".

Third-Party Links

The ym777 Platform may contain references to third-party game studios and payment providers whose services are integrated into the Platform. These third parties operate under their own independent privacy policies, and ym777 is not responsible for the data practices of those third parties beyond the contractual data processing obligations ym777 imposes on them as described in Section 7.

The ym777 Platform does not contain outbound hyperlinks to unaffiliated external websites. If you navigate away from the Platform to a third-party site via any other means, ym777 accepts no responsibility for the privacy practices of that third-party site.

Policy Amendments

ym777 reserves the right to update or revise this Privacy Policy at any time to reflect changes in the Platform, applicable legal requirements, or our data handling practices. The most current version of this Policy will always be available at https://ym777.app/privacy-policy. The "Last Updated" date at the top of this document will be revised whenever a substantive change is made.

For material changes — those that significantly affect how your Personal Data is used or your rights under this Policy — ym777 will provide at least 14 days' advance notice via a prominent on-site notification and, where practicable, by email to your registered address. Your continued use of the Platform after the effective date of any revised Policy constitutes your acceptance of the updated terms.

If you do not accept a revised Policy, you must cease using the Platform and contact support to initiate voluntary Account closure before the revised Policy's effective date.

Contact & Complaints

For any privacy-related queries, access requests, complaints, or concerns regarding how ym777 handles your Personal Data, please contact the ym777 Data Protection team through the following channel:

• Email: [email protected] (plain text — not a clickable link) — use the subject line "Privacy Request" or "Privacy Complaint"
• Live Chat: Available 24/7 via the on-site live chat widget, staffed by Indonesian-speaking agents who can escalate privacy matters to the Data Protection team.

ym777 will acknowledge all privacy-related contacts within 5 business days (WIB, UTC+7) and provide a substantive written response within 30 calendar days. If you are not satisfied with ym777's response to a privacy complaint, you retain the right to escalate the matter through any applicable dispute resolution or regulatory channel available to you.