Privacy Policy

Definitions

Throughout this Privacy Policy, the following terms carry the meanings set out below:

• "mos77", "we", "us", or "our" refers to the operator of the mos77 online betting platform accessible at mos77.bio, including all sub-pages and services offered thereon.
• "Platform" means the mos77 website, mobile interface, and any associated application programming interfaces through which betting and gaming services are delivered.
• "Player", "you", or "your" means any natural person who accesses the Platform, whether as a registered Account Holder or an unregistered visitor.
• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to name, date of birth, residential address, email address, phone number, financial account details, IP address, and device identifiers.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, erasure, and destruction.
• "KYC" means Know Your Customer — the identity, age, and source-of-funds verification process required by the Platform before Withdrawals are processed or as otherwise triggered by compliance obligations.
• "Data Controller" means mos77 in its capacity as the entity that determines the purposes and means of processing Personal Data.
• "Third-Party Processor" means any external service provider engaged by mos77 to process Personal Data on its behalf under a binding data processing agreement.
• "Cookie" means a small text file placed on your device by the Platform for functional, analytical, or session-management purposes.

Scope & Application

This Privacy Policy applies to all Personal Data collected by mos77 in connection with the operation of the Platform. It covers data collected through:

• The mos77 website at mos77.bio and all pages and sub-directories thereof.
• Account registration, login, and profile management activities.
• Deposit and withdrawal transactions processed via Indonesian banking channels (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata) and e-wallets (OVO, DANA, GoPay, ShopeePay, LinkAja).
• Customer support interactions via Live Chat, email, and WhatsApp.
• Automatic data collection through cookies, server logs, and analytics tools.

This policy does not apply to third-party websites or services that may be referenced on the Platform. mos77 is not responsible for the privacy practices of any third party, and we encourage you to review the privacy policies of any external service you access independently of mos77.

Data We Collect

3.1 Data You Provide Directly

When you register an Account, complete KYC verification, make a deposit or withdrawal, or contact our support team, you provide us with Personal Data including:

• Identity data: Full legal name, date of birth, nationality, and government-issued identification number (e.g., Indonesian National Identity Card / KTP number, passport number).
• Contact data: Email address, Indonesian mobile phone number (typically a Telkomsel, Indosat, or XL Axiata number), and residential address including city (e.g., Jakarta, Surabaya, Bandung, Medan, Bali, Yogyakarta).
• Financial data: Bank account details for your nominated Indonesian bank (BCA, BRI, BNI, Mandiri, or other supported institution) and/or e-wallet account identifiers for OVO, DANA, GoPay, ShopeePay, or LinkAja. Full account numbers are tokenised immediately upon receipt.
• KYC documents: Scanned or photographed copies of your KTP or passport, proof-of-address documents, and any source-of-funds documentation requested under our anti-money laundering procedures.
• Support communications: The content of any messages, emails, or Live Chat transcripts you send to mos77 support, including any attachments.

3.2 Data Collected Automatically

When you access the Platform, certain technical data is collected automatically by our servers and analytics systems:

• Device and connection data: IP address, browser type and version, operating system, device type (desktop, mobile, tablet), screen resolution, and language settings.
• Usage data: Pages visited, time spent on each page, game sessions initiated, betting activity (game type, stake amounts, outcomes), login timestamps, and logout timestamps.
• Cookie data: Session identifiers, preference tokens, and aggregate analytics data as described in Section 7.
• Geolocation data: Approximate geographic location derived from your IP address (city-level, not GPS precision). mos77 does not access your device's GPS or precise location data.

3.3 Data from Third Parties

In limited circumstances, mos77 may receive Personal Data about you from third-party sources, including:

• Payment service providers confirming the successful completion or failure of a deposit or withdrawal transaction.
• Identity verification services used to assist with KYC document validation.
• Fraud prevention and anti-money laundering screening databases consulted as part of our compliance procedures.

Data received from third parties is used only for the specific purpose for which it was shared and is subject to the same security and retention standards as data you provide directly.

How We Use Your Data

mos77 uses your Personal Data for the following purposes, each of which is tied to a specific legal basis described in Section 5:

4.1 Account Management

To create, maintain, and secure your mos77 Account — including verifying your identity at registration, authenticating your login sessions, and enabling you to update your account settings and preferences.

4.2 Transaction Processing

To process deposits and withdrawals via your chosen Indonesian bank or e-wallet, to record transaction histories, and to investigate and resolve any disputed or failed transactions. This includes communicating with BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, and LinkAja as payment processing intermediaries.

4.3 KYC and Compliance

To verify your age (21+ requirement), identity, and residential address in accordance with our international gaming licence obligations, and to fulfil our anti-money laundering (AML) and counter-terrorism financing (CTF) duties. KYC data is retained for the period required by the applicable regulatory framework.

4.4 Platform Operation and Improvement

To operate the Platform technically, diagnose and resolve errors, prevent and detect fraud and cheating, enforce our Terms & Conditions, and analyse aggregate usage patterns to improve the player experience. For example, mos77 may analyse aggregate betting activity to understand which sports (such as BRI Liga 1, EPL, or Timnas Indonesia internationals) and game categories (slots, live casino, esports) are most popular among our player base, and to improve the depth of coverage in those areas.

4.5 Customer Support

To respond to your support enquiries submitted via Live Chat, email at [email protected], or WhatsApp, and to maintain records of support interactions for quality assurance, training, and dispute resolution purposes.

4.6 Responsible Gaming

To monitor account activity for indicators of problem gambling behaviour, to enforce deposit limits, cool-off periods, and self-exclusion restrictions you have activated, and to proactively reach out where our responsible gaming systems flag a concern about your play patterns.

4.7 Service Communications

To send you transactional communications directly related to your Account — including deposit confirmations, withdrawal status updates, KYC verification outcomes, and security alerts. mos77 does not send unsolicited promotional emails; any promotional communication is opt-in only and subject to a clear unsubscribe mechanism.

Legal Basis for Processing

mos77 processes your Personal Data on one or more of the following legal bases:

• Contractual necessity: Processing is necessary to enter into and perform the contract between you and mos77 (the Terms & Conditions). This covers account creation, transaction processing, KYC, and customer support.
• Legal obligation: Processing is required to comply with our obligations under applicable AML, CTF, and gaming licence regulations, including the retention of KYC documents and transaction records.
• Legitimate interests: Processing is necessary for mos77's legitimate interests in operating a safe, secure, and commercially viable platform — including fraud prevention, platform security, and aggregate analytics — provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: Where processing is not otherwise justified by the above bases, mos77 will request your explicit consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

Data Sharing & Disclosure

6.1 Third-Party Processors

mos77 engages a limited number of carefully vetted Third-Party Processors to assist in delivering the Platform. These processors act only on mos77's documented instructions and are bound by data processing agreements that require them to maintain standards equivalent to those in this Privacy Policy. Categories of Third-Party Processors include:

• Payment gateway and bank integration partners facilitating IDR deposits and withdrawals.
• Identity verification and KYC technology providers.
• Cloud infrastructure and hosting providers.
• Fraud detection and AML screening services.
• Customer support platform providers (Live Chat infrastructure).
• Web analytics services operating under data processing agreements with strict data minimisation requirements.

6.2 Regulatory and Law Enforcement Disclosure

mos77 may disclose Personal Data to regulatory authorities, law enforcement agencies, or courts of competent jurisdiction where required or permitted to do so by applicable law — for example, in response to a lawful court order, a regulatory investigation, or our mandatory suspicious transaction reporting obligations under AML regulations. mos77 will, where legally permissible, notify you of such a disclosure request prior to complying.

6.3 Corporate Transactions

In the event of a merger, acquisition, restructuring, or sale of all or substantially all of mos77's assets, Personal Data held by mos77 may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and of any material change to this Privacy Policy that results from it, at least 30 days before the transfer takes effect.

6.4 No Sale of Personal Data

mos77 does not sell, rent, licence, or otherwise commercially exploit your Personal Data to third-party advertisers, data brokers, or marketing networks. This prohibition is absolute and not subject to any opt-out mechanism because there is no opt-in in the first place.

Cookies & Tracking Technologies

7.1 What Cookies We Use

mos77 uses the following categories of cookies and similar tracking technologies:

• Strictly necessary cookies: Required for the Platform to function. They enable session authentication, remember your login state, maintain your language and currency preferences, and store your active game session. These cannot be disabled without breaking core functionality.
• Performance and analytics cookies: Used to collect aggregate, anonymised information about how players navigate the Platform — which pages are visited most frequently, where players enter and exit the site, and how long sessions last. This data is used solely to improve Platform performance and does not identify individual players.
• Functional cookies: Remember your Platform preferences (such as your preferred deposit method or saved bank account alias) to reduce friction in repeat interactions.

7.2 What We Do Not Use

mos77 does not deploy third-party advertising cookies, cross-site tracking pixels, social media tracking tags, or any cookie that builds a profile of your browsing behaviour across websites other than mos77.bio.

7.3 Managing Cookies

You may manage or disable non-essential cookies through your browser settings. Note that disabling strictly necessary cookies will prevent you from logging in to your mos77 Account. Most modern browsers allow you to view, delete, and block cookies on a per-site basis through the browser's privacy or security settings panel.

Data Retention

mos77 retains Personal Data for the minimum period necessary to fulfil the purpose for which it was collected, subject to any longer retention period required by law. The following retention schedules apply:

• Account and identity data: Retained for the duration of the active Account relationship, plus five years following Account closure, to satisfy AML record-keeping obligations and to handle any post-closure disputes.
• KYC documents: Retained for five years from the date of verification or from the date of Account closure, whichever is later.
• Transaction records: Retained for five years from the date of the transaction.
• Customer support records: Retained for three years from the date of the last interaction.
• Analytics data: Aggregated and anonymised within 13 months of collection. Once anonymised, this data is no longer Personal Data and may be retained indefinitely for platform improvement purposes.
• Cookie data: Session cookies expire at the end of each browser session. Persistent cookies expire at the intervals specified in our cookie implementation, which does not exceed 13 months from the date of last interaction.

Upon expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymised in accordance with mos77's data destruction procedures.

Data Security

mos77 implements a layered set of technical and organisational security measures designed to protect your Personal Data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• Encryption in transit: All data exchanged between your browser and mos77 servers is encrypted using TLS 1.2 or higher (256-bit AES). HTTPS is enforced across all pages and API endpoints.
• Encryption at rest: Sensitive fields in the mos77 database — including identity data and tokenised payment credentials — are encrypted at the field level using AES-256.
• Access controls: Access to Personal Data within mos77's systems is restricted on a strict need-to-know basis. Employees and contractors are granted only the minimum access permissions required to perform their specific roles. All access is logged and audited.
• Infrastructure security: mos77 operates on hardened cloud infrastructure with automated intrusion detection, DDoS mitigation, and regular vulnerability scanning and penetration testing.
• Payment tokenisation: Bank account numbers and e-wallet identifiers are tokenised immediately upon receipt. The raw account number is never stored in mos77's operational systems after the initial tokenisation step.
• Staff training: All mos77 personnel who handle Personal Data receive regular data protection and security awareness training.

Your Data Rights

As a player on mos77, you hold the following rights in respect of your Personal Data. To exercise any of these rights, contact us via Live Chat or at [email protected] with the subject line "Data Rights Request". We will respond within 30 calendar days.

Minors & Age Restriction

mos77 is strictly an adults-only platform. You must be at least 21 years of age to register an Account, access any betting or gaming service, or make any financial transaction on the Platform. This age restriction is applied consistently across all player segments in Indonesia.

mos77 does not knowingly collect Personal Data from individuals under the age of 21. Where KYC verification reveals that a registered Account Holder is under 21, the Account will be immediately suspended, all pending transactions will be cancelled, and any deposited funds will be returned to the originating payment source. Any winnings generated prior to the discovery of underage play will be forfeited.

International Data Transfers

mos77 operates infrastructure hosted in data centres that may be located outside Indonesia. Where Personal Data is transferred to or processed in a jurisdiction outside Indonesia, mos77 ensures that appropriate safeguards are in place to protect that data to a standard equivalent to the protections described in this Privacy Policy. Safeguards employed include:

• Data processing agreements incorporating standard contractual clauses with all Third-Party Processors operating outside Indonesia.
• Selection of cloud infrastructure providers that are certified under internationally recognised security standards (ISO 27001 or equivalent).
• Restriction of international data transfers to the minimum data set necessary for the specific processing purpose.

You may request details of the specific safeguards applied to any international transfer of your Personal Data by contacting the mos77 data team at [email protected].

Third-Party Services

The mos77 Platform integrates with certain third-party services to deliver its full range of features. These include:

• Game studios: Pragmatic Play, Evolution Gaming, PG Soft (Pocket Games Soft), NetEnt, Microgaming, and Spribe provide game content via secure API integrations. Game studios receive only the session token and anonymised player identifier required to run the game session; they do not receive your full name, contact details, or payment information.
• Payment providers: Indonesian banks and e-wallet operators receive the account details necessary to process your specific transaction. mos77 shares no other Personal Data with payment providers beyond what is required for the transaction.
• Analytics: mos77 uses a self-hosted or privacy-focused analytics solution that does not share raw player data with third-party advertising networks.

mos77 is not responsible for the privacy practices of game studios, payment providers, or any other third-party service. Each third party's handling of data received from mos77 is governed by that party's own privacy policy and by the data processing agreement in place between mos77 and that party.

Policy Amendments

mos77 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the services we offer. Where a material change is made — meaning a change that could reasonably affect your rights or the way your Personal Data is processed — mos77 will provide at least 14 days' advance notice by displaying a prominent notice on the Platform and, where your contact details are available, by notifying you via email or Live Chat message.

The "Last updated" date at the top of this page reflects the date of the most recent revision. We encourage you to review this Privacy Policy periodically. Continued use of the Platform after the effective date of any revised Privacy Policy constitutes your acknowledgement of the changes.

Contact & Data Protection Officer

For any questions, concerns, or requests relating to this Privacy Policy or to the processing of your Personal Data, please contact the mos77 data protection team through any of the following channels:

• Live Chat: Available 24/7 from within your mos77 account dashboard. Select the topic "Privacy / Data Request" when opening a chat session.
• Email: [email protected] — use the subject line "Privacy Policy Enquiry" or "Data Rights Request". Responses are provided within 30 calendar days.
• WhatsApp: +62 811 0077 7700 — available 24/7 including Indonesian public holidays such as Idul Fitri, Idul Adha, and Indonesian Independence Day (17 August).

mos77 support agents are native Indonesian speakers and can assist with privacy enquiries in both English and Indonesian. All formal data rights requests are handled in English to ensure precision and auditability of the response.

Where mos77 is required under applicable law to appoint a Data Protection Officer (DPO), the DPO may be contacted through the same email address above with "Attention: DPO" in the subject line.