Table of Contents
- 1. Definitions
- 2. Data Controller
- 3. Data We Collect
- 4. How We Collect Data
- 5. Purpose & Legal Basis
- 6. Data Sharing
- 7. Cookies & Tracking
- 8. Data Retention
- 9. Data Security
- 10. Your Privacy Rights
- 11. Minors & Age Restrictions
- 12. Third-Party Services
- 13. International Data Transfers
- 14. Policy Amendments
- 15. Contact & Complaints
Definitions
The following definitions apply throughout this Privacy Policy. Terms defined in the mlb777 Terms and Conditions and not separately defined here carry the same meaning as given in that document.
- "Personal Data" — Any information relating to an identified or identifiable natural person, including but not limited to name, date of birth, email address, phone number, payment account details, IP address, and device identifiers.
- "Processing" — Any operation performed on Personal Data, whether automated or manual, including collection, recording, storage, adaptation, retrieval, use, disclosure, erasure, or destruction.
- "Data Controller" — The entity that determines the purposes and means of processing Personal Data. For all players on the mlb777 Platform, the Data Controller is mlb777.
- "Data Processor" — A third party that processes Personal Data on behalf of the Data Controller under a contractual data processing agreement.
- "Consent" — A freely given, specific, informed, and unambiguous indication of the data subject's wishes by which they agree to the processing of their Personal Data for one or more specific purposes.
- "Cookies" — Small text files placed on your device by the Platform to store session information, preferences, and anonymized behavioral data for analytics and personalization purposes.
- "Platform" — The mlb777 website at https://mlb777.cam and any associated mobile-optimized interfaces or subdomains.
Data Controller
mlb777 acts as the Data Controller for all Personal Data collected through the Platform. As Data Controller, mlb777 is responsible for ensuring that Personal Data is processed lawfully, fairly, and transparently in accordance with this Privacy Policy and applicable international data protection standards.
Data Controller Contact
- Brand: mlb777
- Website: https://mlb777.cam
- Data Privacy Email: [email protected] (Subject: "Privacy / Data Request")
- Response Time: All data-related requests acknowledged within 72 hours; substantive response within 30 calendar days
- Support Hours: 24/7 via live chat; email responses during WIB business hours (08:00–22:00 WIB)
Players in Indonesia — whether based in Jakarta, Surabaya, Bandung, Medan, Bali, Yogyakarta, or elsewhere — may submit data access, correction, deletion, or portability requests to the email address above. Indonesian-speaking support agents are available to assist with privacy inquiries at all hours.
Data We Collect
mlb777 collects only the Personal Data necessary to operate the Platform, verify player identity, process financial transactions, prevent fraud, and comply with applicable legal obligations. We do not collect Personal Data beyond what is required for these defined purposes.
| Data Category | Specific Data Points | Collection Stage |
|---|---|---|
| Identity Data | Full legal name, date of birth, nationality, government-issued ID number (KTP / passport) | Registration & KYC |
| Contact Data | Email address, mobile phone number, city/region (e.g., Jakarta, Bali) | Registration |
| Financial Data | Bank account name and number (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata, etc.), e-wallet identifier (OVO, DANA, GoPay, ShopeePay, LinkAja), transaction history | Deposit / Withdrawal |
| KYC Documents | Scanned or photographed copies of identity documents, selfie verification images, proof of address documents | KYC Verification |
| Technical Data | IP address, device type, browser type and version, operating system, screen resolution, timezone (WIB/WITA/WIT) | Platform access (automated) |
| Usage Data | Pages visited, session duration, game history, bet history, search terms, click patterns, login timestamps | Platform use (automated) |
| Communications Data | Live chat transcripts, email correspondence, support ticket content, survey responses | Customer support interactions |
| Marketing Preferences | Promotional opt-in/opt-out status, preferred bonus categories, communication channel preferences | Account settings / opt-in forms |
Sensitive Personal Data
mlb777 does not intentionally collect sensitive personal data categories such as racial or ethnic origin, political opinions, religious beliefs, biometric data beyond basic selfie verification for KYC, or health/medical information. If you voluntarily share such data in support communications, it will be used solely to address your inquiry and will not be retained beyond the resolution of that inquiry.
How We Collect Data
mlb777 collects Personal Data through the following channels and mechanisms:
- Direct submission: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, or contact ing customer support.
- Automated technologies: Cookies, web beacons, server logs, and analytics scripts collect technical and usage data as you navigate the Platform. See Clause 7 for cookie-specific details.
- Third-party sources: Payment processors (bank and e-wallet gateways) share transaction confirmation data. KYC verification providers return identity validation results. Fraud detection services provide risk scores and device fingerprinting data.
- Public sources: For enhanced due diligence on high-value accounts, mlb777 may verify publicly available information such as social media profiles (if linked by the user), public business registrations, or adverse media screening databases to fulfill anti-money laundering obligations.
mlb777 does not purchase or acquire Personal Data lists from data brokers or third-party marketing companies. All data originates either from the player directly, from automated technical collection during Platform use, or from necessary third-party service providers acting under data processing agreements.
Purpose & Legal Basis for Processing
mlb777 processes Personal Data exclusively for legitimate, clearly defined purposes that fall within one or more of the following legal bases under internationally recognized data protection principles:
| Processing Purpose | Legal Basis | Data Categories Used |
|---|---|---|
| Account registration and management | Contractual necessity (performance of the mlb777 Terms and Conditions) | Identity, Contact |
| KYC identity verification, age verification (21+), AML compliance | Legal obligation (international anti-money laundering and counter-terrorist financing regulations) | Identity, KYC Documents |
| Processing deposits and withdrawals | Contractual necessity | Identity, Financial, Technical |
| Fraud detection and prevention | Legitimate interests (protecting mlb777's systems and other players from fraud, abuse, and financial crime) | Identity, Financial, Technical, Usage |
| Customer support and dispute resolution | Contractual necessity | Identity, Contact, Communications, Usage |
| Marketing communications (promotional offers, bonus announcements) | Consent (opt-in) — you may withdraw consent at any time | Contact, Marketing Preferences |
| Platform analytics and improvement | Legitimate interests (improving user experience, optimizing game selection, enhancing security) | Technical, Usage (anonymized where possible) |
| Responsible gaming monitoring and intervention | Legitimate interests (player protection, harm prevention, regulatory best practice) | Identity, Usage, Financial |
| Legal proceedings, regulatory reporting, audit compliance | Legal obligation and legitimate interests | All categories as necessary |
Where processing is based on consent, you have the right to withdraw that consent at any time through your account settings or by contacting support. Withdrawal of consent does not affect the lawfulness of processing conducted before withdrawal, nor does it affect processing conducted on alternative legal bases such as contractual necessity or legal obligation.
Data Sharing & Third Parties
mlb777 does not sell, rent, or commercially trade your Personal Data to third parties. Personal Data is shared only with trusted service providers and regulatory authorities under strict data processing agreements and only to the extent necessary for the purposes outlined in Clause 5.
Categories of Third-Party Recipients
- Payment Processors: Indonesian bank transfer gateways (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, BSI, Bank Permata) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) receive only the transaction data necessary to process deposits and withdrawals — your name, account number, transaction amount, and transaction ID.
- KYC & Identity Verification Providers: Third-party identity verification services receive copies of your KYC documents (ID card, passport, selfie) to conduct automated and manual identity checks. These providers are contractually prohibited from retaining your documents beyond the verification process and may not use the data for any purpose other than identity verification on behalf of mlb777.
- Fraud Detection & Risk Management: Specialized fraud prevention platforms receive anonymized technical data (IP address, device fingerprint, behavioral patterns) to generate risk scores. These services do not have access to your full identity or financial data unless a fraud investigation requires escalation.
- Customer Support Tools: Our live chat and email support systems are hosted by third-party customer service platforms. Support agents access only the data necessary to resolve your inquiry — typically your account ID, contact information, and the content of your support request.
- Analytics & Performance Monitoring: We use anonymized and aggregated usage data with web analytics platforms to understand player behavior, optimize game selection, and improve Platform performance. These services do not receive personally identifiable data.
- Game Providers: Sports betting odds providers (for football leagues such as BRI Liga 1, EPL, La Liga, Champions League), live casino software providers (Evolution Gaming, Pragmatic Play Live), and slot game studios (Pragmatic Play, NetEnt, Microgaming, Pocket Games Soft, Spribe) receive only the minimum data required to deliver game content — typically a session token, bet amount, and game outcome. They do not receive your name, contact details, or payment information.
- Regulatory Authorities: Where required by law or regulation, mlb777 will disclose Personal Data to licensing bodies, financial crime investigation units, tax authorities, or law enforcement agencies. Such disclosures are made only in response to lawful requests and only to the extent legally required.
- Legal & Professional Advisors: Lawyers, auditors, accountants, and compliance consultants may access Personal Data on a need-to-know basis to provide professional services to mlb777. These advisors are bound by professional confidentiality obligations.
All third-party service providers are selected based on their demonstrated commitment to data protection, security best practices, and contractual compliance. mlb777 conducts regular audits of key data processors to ensure ongoing adherence to this Privacy Policy and applicable data protection standards.
Cookies & Tracking Technologies
mlb777 uses cookies and similar tracking technologies to provide core Platform functionality, enhance your user experience, and collect anonymized analytics data. A cookie is a small text file stored on your device that allows the Platform to recognize your browser across sessions and remember your preferences.
| Cookie Type | Purpose | Retention Period |
|---|---|---|
| Essential / Session Cookies | Maintain your logged-in session, remember items in your bet slip, preserve language and timezone preferences (WIB/WITA/WIT) | Session (deleted when you close your browser) |
| Functional Cookies | Remember your favorite games, preferred deposit method, and display settings | 30–90 days |
| Analytics Cookies | Collect anonymized data on page views, session duration, navigation patterns, and game popularity to improve Platform design and content | 12–24 months |
| Marketing / Advertising Cookies | Track which promotional campaigns you arrived from to measure marketing effectiveness (only if you opt in) | 6–12 months |
Essential cookies are necessary for the Platform to function and cannot be disabled. You may refuse non-essential cookies through your browser settings or through our cookie consent banner displayed on your first visit. Note that disabling functional or analytics cookies may degrade your user experience (e.g., you may need to re-enter preferences on each session, or certain features may not work as expected).
How to Manage Cookies
Most web browsers automatically accept cookies by default. You can modify your browser settings to block all cookies or to alert you when a cookie is being sent. Instructions for managing cookies in popular browsers:
- Google Chrome: Settings > Privacy and security > Cookies and other site data
- Mozilla Firefox: Options > Privacy & Security > Cookies and Site Data
- Safari (iOS/macOS): Settings > Safari > Block All Cookies
- Microsoft Edge: Settings > Cookies and site permissions > Cookies and site data
Blocking all cookies will prevent you from logging into the Platform and accessing your mlb777 account.
Data Retention
mlb777 retains Personal Data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable legal obligations. Retention periods vary by data category and are determined based on regulatory requirements, audit obligations, and legitimate business needs.
| Data Category | Retention Period | Rationale |
|---|---|---|
| Identity & Contact Data | 7 years after account closure | AML regulations, tax compliance, audit requirements |
| KYC Documents | 7 years after account closure | AML regulations, licensing requirements |
| Financial Transaction Records | 7 years after transaction date | Tax law, financial record-keeping obligations |
| Betting & Game History | 7 years after transaction date | Licensing audit requirements, dispute resolution |
| Technical & Usage Logs | 12 months (anonymized after 6 months) | Security monitoring, fraud detection, analytics |
| Customer Support Communications | 3 years after case closure | Dispute resolution, quality assurance, training |
| Marketing Consent Records | Until consent is withdrawn, then 30 days | Regulatory proof of consent |
After the applicable retention period expires, Personal Data is securely deleted or anonymized such that it can no longer be attributed to an identifiable individual. Deletion is conducted using industry-standard secure data erasure methods. Anonymized aggregated data (e.g., "players from Jakarta deposited an average of Rp X in Q1 2026") may be retained indefinitely for statistical and business intelligence purposes, as it poses no privacy risk.
Data Security
mlb777 employs a comprehensive set of technical and organizational security measures to protect Personal Data against unauthorized access, accidental loss, destruction, alteration, or disclosure. Our security program is continuously reviewed and updated to address emerging threats and maintain alignment with industry best practices.
Technical Security Measures
- Encryption: All data transmitted between your browser and the mlb777 Platform is encrypted using TLS 1.3 (Transport Layer Security) protocol. Sensitive Personal Data stored in our databases is encrypted at rest using AES-256 encryption.
- Firewall & Intrusion Detection: Network perimeter firewalls, intrusion detection systems (IDS), and intrusion prevention systems (IPS) monitor and block unauthorized access attempts 24/7.
- Access Controls: Personal Data is accessible only to mlb777 employees and contractors who require access to perform their job functions. Access is granted on a least-privilege basis and is protected by multi-factor authentication (MFA).
- Secure Development: The Platform is developed using secure coding practices, undergoes regular penetration testing, and is subject to vulnerability scanning to identify and remediate security weaknesses.
- Data Backups: Regular encrypted backups are performed to ensure business continuity. Backup data is stored in geographically separate secure data centers and is subject to the same security controls as production data.
- DDoS Protection: Distributed Denial of Service (DDoS) mitigation systems protect the Platform against disruption attacks.
Organizational Security Measures
- All mlb777 staff and third-party contractors with access to Personal Data are bound by contractual confidentiality obligations.
- Regular data protection and security awareness training is mandatory for all employees.
- A formal data breach response plan is in place to ensure rapid detection, containment, and notification in the event of a security incident.
- Vendor security assessments are conducted before engaging any third-party data processor.
Despite these measures, no internet-based system can be guaranteed to be 100% secure. mlb777 commits to promptly notifying affected players and relevant authorities in the event of a data breach that poses a risk to your rights and freedoms, in accordance with applicable breach notification timelines.
Your Privacy Rights
As a registered player on the mlb777 Platform, you hold a comprehensive set of rights over your Personal Data. These rights are designed to give you control and transparency over how your data is collected, used, and stored.
Right of Access
You have the right to request confirmation of whether mlb777 holds your Personal Data and to receive a copy of that data in a structured, commonly used format.
Right to Rectification
If any Personal Data we hold about you is inaccurate or incomplete, you have the right to request correction or completion of that data.
Right to Erasure
You may request deletion of your Personal Data where there is no legitimate or legal reason for mlb777 to continue processing it, subject to legal retention obligations.
Right to Restrict Processing
You may request that mlb777 limit the processing of your Personal Data in certain circumstances, such as when you contest the accuracy of the data or object to processing.
Right to Data Portability
You have the right to receive your Personal Data in a machine-readable format and to transmit that data to another service provider where technically feasible.
Right to Object
You have the right to object to processing of your Personal Data where mlb777's legal basis for processing is legitimate interests (e.g., direct marketing, analytics).
Right to Withdraw Consent
Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting prior lawful processing.
Right to Lodge a Complaint
If you believe mlb777 has processed your Personal Data unlawfully, you have the right to lodge a complaint with a relevant data protection authority.
To exercise any of these rights, please contact mlb777 at [email protected] with the subject line "Privacy Rights Request" and include your account username and a clear description of your request. mlb777 will respond within 72 hours to acknowledge your request and within 30 calendar days to provide a substantive response.
Limitations on Data Rights
Certain rights may be limited where mlb777 has a legal obligation to retain your data (e.g., AML regulations require retention of KYC documents for 7 years after account closure), where data is necessary for the establishment, exercise, or defense of legal claims, or where erasure would compromise the rights of other individuals. mlb777 will explain any limitations when responding to your request.
Minors & Age Restrictions
The mlb777 Platform is strictly restricted to individuals who are 21 years of age or older. mlb777 does not knowingly collect or process Personal Data from any person under the age of 21. Registration on the Platform requires explicit confirmation that you meet the minimum age requirement, and all accounts are subject to age verification during the mandatory KYC process.
If mlb777 becomes aware that Personal Data has been collected from a person under 21 years of age, that data will be deleted immediately, the account will be permanently closed, and any funds in the account will be returned to the source payment method after deduction of any deposits received (to prevent the minor from profiting from underage gambling). Parents and guardians are encouraged to monitor their children's internet activity and to use parental control software to block access to gambling websites.
Reporting Underage Gambling
If you have reason to believe that a minor has accessed the mlb777 Platform or created an account, please report this immediately to [email protected] with the subject line "Underage Account Report" and provide any relevant details. All such reports will be investigated as a priority matter.
Third-Party Services & Links
The mlb777 Platform integrates third-party game providers, payment gateways, and analytics services to deliver a comprehensive betting and gaming experience. While mlb777 conducts due diligence on all third-party partners and requires them to adhere to data protection standards through contractual agreements, each third party operates under its own privacy policy for data they process independently.
The Platform may occasionally contain links to external websites (e.g., payment processor login pages, responsible gaming resources, regulatory body websites). mlb777 is not responsible for the privacy practices or content of any third-party websites. We encourage you to review the privacy policy of any external site before providing Personal Data to that site.
If you access third-party game content embedded within the mlb777 Platform (e.g., a live casino game streamed by Evolution Gaming, a slot from Pragmatic Play), that game provider may collect technical data about your game session (session ID, bet amounts, game outcomes) under their own privacy policy. mlb777 does not share your identity or financial data with game providers unless explicitly required for game integrity or regulatory compliance.
International Data Transfers
mlb777 operates internationally and may transfer Personal Data to, or process Personal Data in, jurisdictions outside Indonesia. Such transfers occur when necessary to provide Platform services, process payments, conduct KYC verification, prevent fraud, or fulfill regulatory obligations.
Where Personal Data is transferred to countries that do not provide an equivalent level of data protection to international standards, mlb777 implements appropriate safeguards to protect your data, including:
- Data processing agreements incorporating internationally recognized standard contractual clauses
- Vendor certifications demonstrating adherence to recognized data protection frameworks
- Technical measures such as encryption in transit and at rest
- Regular audits of third-party data processors to ensure ongoing compliance
Players based in Indonesia — whether in Jakarta, Surabaya, Bandung, Medan, Bali, Yogyakarta, or elsewhere — consent to such international data transfers as necessary for the operation of the Platform and the performance of the mlb777 Terms and Conditions. You may contact [email protected] for further details on the specific safeguards applied to data transfers to a particular jurisdiction.
Policy Amendments
mlb777 reserves the right to amend, update, or replace this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or business operations. Material changes will be communicated to registered players via email notification or a prominent notice displayed within the Platform upon login.
Updated Privacy Policy versions will take effect 30 days after notification for existing players, or immediately for new registrations made after the publication date. The "Effective Date" shown at the top of this document indicates the version currently in force. Continued use of the Platform following the effective date of any amendment constitutes acceptance of the revised Privacy Policy.
If you do not agree with any amended Privacy Policy, you must cease using the Platform and may request account closure and data deletion in accordance with Clause 10 (Right to Erasure), subject to legal retention obligations outlined in Clause 8.
Contact & Complaints
If you have any questions, concerns, or complaints relating to this Privacy Policy or mlb777's data processing practices, please contact the mlb777 Data Privacy Team through the following channels:
mlb777 Data Privacy Contact
- Privacy Email: [email protected] (Subject: "Privacy / Data Request" or "Privacy Complaint")
- Live Chat: Available 24/7 via the Platform interface — select "Privacy & Data" as your inquiry category
- Response Time: Privacy requests acknowledged within 72 hours; substantive response within 30 calendar days
- Languages: Indonesian-speaking privacy support agents available at all hours
mlb777 is committed to resolving any privacy concerns promptly and transparently. If you are not satisfied with our response to a privacy complaint, or if you believe mlb777 has processed your Personal Data in violation of applicable data protection laws, you have the right to lodge a complaint with a relevant data protection supervisory authority in your jurisdiction.
For players based in Indonesia, privacy complaints may also be directed to the Ministry of Communication and Informatics (Kominfo) or other relevant government bodies with jurisdiction over data protection matters. mlb777 will cooperate fully with any formal investigation or audit conducted by a regulatory authority.