ihk77 Privacy Policy

1. Introduction and Scope

This Privacy Policy governs the collection, processing, storage, and protection of personal information provided by users of the ihk77 gaming platform operating at https://ihk77.cam. ihk77 is committed to protecting your privacy and ensuring that your personal data is handled in accordance with international data protection standards and best practices.

This Privacy Policy applies to all users who access, register for, or use any ihk77 services, including casino games, live dealer tables, sports betting markets (including bandar bola football betting), and related entertainment offerings. By creating an ihk77 account or using our services, you acknowledge that you have read, understood, and consent to the data practices described in this Privacy Policy.

2. Information We Collect

ihk77 collects various categories of personal information to provide, maintain, and improve our services, ensure regulatory compliance, and protect against fraud and security threats. The types of information we collect include:

2.1 Account Registration Information

When you create an ihk77 account, we collect:

• Personal Identification: Full legal name, date of birth, gender, nationality, and government-issued identification number (KTP number or passport number).
• Contact Information: Email address, mobile phone number, residential address including street, city, province, and postal code.
• Account Credentials: Username, password (stored in encrypted form), and security questions/answers for account recovery.

2.2 Verification and Compliance Documents

To comply with Know Your Customer (KYC) and anti-money laundering (AML) regulations, we collect:

• Identity Verification: Digital copies of government-issued photo identification such as Indonesian KTP (Kartu Tanda Penduduk) or passport.
• Proof of Address: Recent utility bills, bank statements, or government correspondence dated within the last three months showing your registered residential address.
• Payment Verification: Bank account statements, e-wallet account verification, or cryptocurrency wallet addresses to confirm payment method ownership.
• Selfie Verification: Photographs of you holding your identification document next to your face for biometric identity confirmation.

2.3 Financial Transaction Data

We collect and store records of all financial transactions conducted through your ihk77 account:

• Deposit Information: Deposit amounts, dates, times, payment methods used (bank transfer via BCA/BRI/BNI/Mandiri, e-wallets OVO/DANA/GoPay, or cryptocurrency USDT/Bitcoin/Ethereum), transaction reference numbers, and processing status.
• Withdrawal Information: Withdrawal amounts, dates, times, destination payment accounts, transaction fees, processing times, and completion status.
• Bonus Activity: Bonuses claimed, wagering requirements progress, bonus forfeitures, and promotional credit usage history.
• Account Balance: Current balance, available funds, locked funds due to pending wagers or bonuses, and historical balance trends.

2.4 Gaming Activity and Behavior

• Betting History: All bets placed including game type (slots, live casino, sports betting, togel, etc.), stake amounts, odds, outcomes, winnings, and losses.
• Game Preferences: Favorite games, most-played titles, preferred betting markets, session durations, and play patterns.
• Session Information: Login times, logout times, session duration, pages visited, features accessed, and navigation paths through the platform.
• Responsible Gaming Data: Deposit limits set, self-exclusion status, session time warnings acknowledged, and responsible gaming tool usage.

2.5 Technical and Device Information

We automatically collect certain technical data when you access ihk77:

• Device Information: Device type (smartphone, tablet, desktop), operating system (iOS, Android, Windows, macOS), browser type and version, screen resolution, and device identifiers.
• Network Information: IP address, geographic location derived from IP (city and region level, not precise GPS coordinates), Internet Service Provider (ISP), and connection type.
• Cookies and Tracking: Session cookies, authentication tokens, preference cookies, and analytics cookies to improve user experience and platform functionality.
• Performance Data: Page load times, error messages encountered, feature usage statistics, and crash reports for technical troubleshooting.

2.6 Communications and Support Interactions

• Customer Support: Records of all interactions with our support team via live chat, email, WhatsApp, Telegram, or phone including inquiry content, resolutions provided, and satisfaction ratings.
• Marketing Preferences: Email subscription status, SMS marketing consent, push notification preferences, and promotional communication opt-ins.
• Correspondence: Any emails, messages, or other communications you send to ihk77 including feedback, complaints, suggestions, or general inquiries.

3. How We Use Your Information

ihk77 uses the personal information we collect for legitimate business purposes that enable us to provide, maintain, protect, and improve our services. Specific uses include:

3.1 Account Management and Service Delivery

• Creating and maintaining your ihk77 user account with secure authentication.
• Processing deposits, withdrawals, and bonus credits accurately and efficiently.
• Providing access to casino games, live dealer tables, sports betting markets, and other gaming services.
• Maintaining your gaming history, transaction records, and account balance information.
• Sending transactional communications such as deposit confirmations, withdrawal processing notifications, and account status updates.

3.2 Regulatory Compliance and Legal Obligations

• Verifying your identity and age to ensure you meet the minimum age requirement of 21 years.
• Conducting Know Your Customer (KYC) and anti-money laundering (AML) checks as required by gaming regulations.
• Detecting and preventing fraud, money laundering, terrorist financing, and other illegal activities.
• Maintaining audit trails and transaction records to comply with regulatory reporting requirements.
• Responding to lawful requests from government authorities, law enforcement agencies, or regulatory bodies.
• Enforcing our Terms and Conditions and investigating suspected violations.

3.3 Platform Security and Fraud Prevention

• Monitoring account activity for suspicious patterns indicative of fraud, account takeover, bonus abuse, or collusion.
• Implementing risk assessment models to identify and prevent fraudulent transactions.
• Protecting against cyber attacks, DDoS attempts, SQL injection, and other security threats.
• Verifying payment method ownership to prevent unauthorized use of payment instruments.
• Blocking access from high-risk jurisdictions or known VPN/proxy services used to circumvent geo-restrictions.

3.4 Customer Support and Communication

• Responding to your inquiries, technical issues, payment questions, and support requests through our 24/7 Indonesian-speaking customer service team.
• Resolving disputes, complaints, or account-related issues in a timely and professional manner.
• Providing updates on account status changes, policy updates, or service disruptions.
• Sending important security alerts such as password change confirmations, new device login notifications, or suspicious activity warnings.

3.5 Marketing and Promotional Activities (With Consent)

• Sending promotional emails about new games, bonus offers, special promotions, or VIP program benefits to users who have opted in to marketing communications.
• Personalizing promotional offers based on your gaming preferences, deposit history, and account activity level.
• Conducting market research surveys to understand user satisfaction and gather feedback for service improvements.
• Analyzing marketing campaign effectiveness to optimize promotional strategies.

Note: You can opt out of marketing communications at any time by adjusting your account preferences or clicking the unsubscribe link in promotional emails. Opting out does not affect transactional or account-related communications.

3.6 Platform Improvement and Analytics

• Analyzing user behavior patterns to identify popular games, frequently used features, and navigation paths to enhance user experience.
• Conducting A/B testing on new features, interface designs, or promotional strategies to determine optimal implementations.
• Monitoring platform performance metrics including page load times, error rates, and system uptime to maintain service quality.
• Developing new features, games, or payment methods based on user demand and market trends in Indonesia.

3.7 Responsible Gaming Support

• Monitoring gaming behavior for signs of problem gambling such as rapidly increasing deposits, extended session times, or chasing losses.
• Enforcing deposit limits, loss limits, and session time restrictions set by users through responsible gaming tools.
• Processing self-exclusion requests and maintaining exclusion lists to prevent access during cooling-off periods.
• Providing educational resources and support contacts for users concerned about their gambling habits.

4. Data Sharing and Third-Party Disclosure

ihk77 respects your privacy and does not sell, rent, or trade your personal information to third parties for marketing purposes. However, we may share your information with carefully selected partners and service providers in the following limited circumstances:

4.1 Essential Service Providers

Service Provider Type	Purpose of Data Sharing	Data Shared
Payment Processors	Processing deposits and withdrawals via bank transfer, e-wallets, and cryptocurrency	Name, bank account details, transaction amounts, payment method information
Identity Verification Services	Conducting KYC/AML checks and document verification	Name, date of birth, ID documents, address proof, selfie verification photos
Game Providers	Delivering casino games, live dealer experiences, and sports betting content	Username, gaming activity, bet history (no financial details)
Customer Support Platform	Managing support tickets, live chat, and communication channels	Name, email, phone, support inquiry content, account information
Cloud Hosting Services	Storing data securely on encrypted cloud servers	All account data (encrypted at rest and in transit)
Analytics Providers	Analyzing platform usage and performance	Anonymized usage data, device information, browsing patterns

All third-party service providers are contractually obligated to:

• Process personal data only for the specific purposes outlined in our agreements.
• Implement appropriate technical and organizational security measures to protect your data.
• Not use your information for their own marketing or business purposes.
• Delete or return your data when the service relationship ends, unless retention is legally required.

4.2 Legal and Regulatory Disclosure

ihk77 may disclose your personal information when required or permitted by law:

• To comply with valid legal process such as court orders, subpoenas, or regulatory investigations.
• To respond to lawful requests from government authorities, law enforcement, or tax agencies in Indonesia or internationally.
• To investigate and prevent fraud, money laundering, or other illegal activities.
• To protect the rights, property, or safety of ihk77, our users, or the public.
• To enforce our Terms and Conditions or other agreements.

4.3 Business Transfers

In the event of a merger, acquisition, reorganization, sale of assets, or bankruptcy involving ihk77, your personal information may be transferred to the acquiring entity or successor organization. We will provide notice before your information is transferred and becomes subject to a different privacy policy.

5. Data Security Measures

ihk77 implements comprehensive technical, physical, and organizational security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction. Our multi-layered security approach includes:

5.1 Encryption and Secure Transmission

• SSL/TLS Encryption: All data transmitted between your device and ihk77 servers is protected by 256-bit SSL (Secure Sockets Layer) encryption, the same standard used by banks and financial institutions.
• Encrypted Data Storage: Sensitive personal information including identification documents, financial records, and passwords are encrypted at rest using AES-256 encryption algorithms.
• Secure Payment Processing: Payment transactions are processed through PCI-DSS compliant payment gateways that tokenize sensitive financial information.
• Password Hashing: User passwords are hashed using bcrypt or Argon2 algorithms with unique salts, making them computationally infeasible to reverse-engineer even in the event of a database breach.

5.2 Access Controls and Authentication

• Role-Based Access: Internal access to personal data is strictly limited to authorized personnel who require it to perform their job functions (customer support, compliance, technical operations).
• Two-Factor Authentication (2FA): Optional 2FA via SMS or authenticator apps provides an additional security layer for user accounts, strongly recommended for all users.
• IP Whitelisting: Administrative access to sensitive systems is restricted to pre-approved IP addresses within secure networks.
• Session Management: User sessions automatically expire after periods of inactivity, and concurrent login attempts from different locations trigger security alerts.

5.3 Infrastructure and Network Security

• Firewalls and Intrusion Detection: Enterprise-grade firewalls and intrusion detection/prevention systems (IDS/IPS) monitor network traffic for suspicious activity and block malicious attempts.
• DDoS Protection: Distributed Denial of Service mitigation systems ensure platform availability even during large-scale cyber attacks.
• Secure Data Centers: Physical servers are housed in Tier III or higher data centers with 24/7 security monitoring, biometric access controls, and environmental safeguards.
• Regular Security Audits: Independent third-party security firms conduct penetration testing and vulnerability assessments at least annually.

5.4 Employee Training and Policies

• All ihk77 employees undergo comprehensive data protection training during onboarding and receive annual refresher courses.
• Employees sign confidentiality agreements and are subject to strict disciplinary measures for data protection violations.
• Personal data access is logged and audited regularly to detect any unauthorized or suspicious access patterns.
• Employee devices with access to sensitive systems are secured with endpoint protection, full-disk encryption, and remote wipe capabilities.

5.5 Incident Response and Data Breach Procedures

Despite our robust security measures, no system is completely immune to breaches. In the unlikely event of a data security incident:

• Our incident response team immediately investigates the scope, cause, and impact of the breach.
• Affected systems are isolated to prevent further unauthorized access.
• We notify affected users within 72 hours of discovering the breach, providing details about what data was compromised and what steps are being taken.
• We report significant breaches to relevant regulatory authorities as required by law.
• We offer affected users guidance on protective measures such as password changes, credit monitoring, or account recovery assistance.

6. Data Retention and Deletion

6.1 Retention Periods

ihk77 retains your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy and to comply with legal, regulatory, accounting, and reporting obligations. Specific retention periods include:

• Account Information: Retained for the duration of your active account plus 7 years after account closure to comply with anti-money laundering regulations and financial record-keeping requirements.
• Transaction Records: Financial transactions including deposits, withdrawals, bets, and winnings are retained for 7 years from the transaction date for tax compliance and audit purposes.
• Identification Documents: KYC documents are retained for 7 years after account closure or the end of the business relationship as required by AML/CFT regulations.
• Communication Records: Customer support interactions are retained for 3 years to resolve disputes and improve service quality.
• Marketing Data: Marketing preferences and consent records are retained until you withdraw consent or close your account, whichever comes first.
• Technical Logs: Server logs, IP addresses, and session data are typically retained for 90 days to 1 year for security monitoring and troubleshooting purposes.

6.2 Data Deletion Requests

You have the right to request deletion of your personal data, subject to certain legal and contractual limitations. To request deletion:

1. Contact our support team at [email protected] with your account details and deletion request.
2. Verify your identity through our standard KYC procedures to prevent unauthorized deletion requests.
3. Withdraw or transfer any remaining account balance before deletion, as this cannot be recovered afterward.
4. Understand that we may be legally required to retain certain records even after deletion (e.g., transaction records for tax audits).

Upon successful verification, we will delete all personal data not subject to mandatory retention within 30 days. Data subject to legal retention requirements will be securely archived with restricted access until the retention period expires, after which it will be permanently deleted.

7. Your Privacy Rights

As an ihk77 user, you have the following rights regarding your personal data:

7.1 Right to Access

You can request a copy of all personal data we hold about you. We will provide this information in a structured, commonly used, and machine-readable format within 30 days of your request. This includes:

• Account registration details and profile information.
• Complete transaction history including deposits, withdrawals, and gaming activity.
• Communications with customer support.
• Marketing preferences and consent records.
• Information about how your data has been used and with whom it has been shared.

7.2 Right to Rectification

You can update or correct inaccurate personal information at any time through your account settings. For information that cannot be self-updated (such as name or date of birth), contact our support team with supporting documentation (e.g., legal name change certificate, corrected government ID).

7.3 Right to Erasure (Right to be Forgotten)

You can request deletion of your personal data when:

• The data is no longer necessary for the purposes for which it was collected.
• You withdraw consent for data processing that was based solely on consent.
• You object to data processing and there are no overriding legitimate grounds for continued processing.
• Your data has been unlawfully processed.

This right is not absolute and may be limited by legal retention obligations (financial records, AML/CFT compliance) or legitimate business interests (defending legal claims).

7.4 Right to Data Portability

You can request that we transfer your personal data to another service provider in a structured, commonly used, and machine-readable format (such as CSV or JSON). This applies to data you provided to us and data processed with your consent or for contract performance.

7.5 Right to Object

You can object to:

• Marketing Communications: Opt out of promotional emails, SMS, or push notifications at any time through account settings or unsubscribe links.
• Profiling for Marketing: Object to automated decision-making that creates marketing profiles based on your gaming behavior.
• Legitimate Interest Processing: Object to data processing based on our legitimate interests unless we demonstrate compelling legitimate grounds that override your rights.

7.6 Right to Restrict Processing

You can request that we temporarily restrict processing of your personal data in the following situations:

• You contest the accuracy of your personal data (restriction applies while we verify accuracy).
• Processing is unlawful but you prefer restriction over deletion.
• We no longer need the data but you need it to establish, exercise, or defend legal claims.
• You have objected to processing pending verification of whether our legitimate grounds override yours.

7.7 Exercising Your Rights

To exercise any of these rights, contact us at [email protected] with:

• Your full name and registered email address.
• A clear description of the right you wish to exercise.
• Any supporting documentation required to verify your identity.

We will respond to your request within 30 days. If your request is complex or requires additional verification, we may extend the response period by an additional 60 days with notification. There is no charge for making a request unless it is manifestly unfounded, excessive, or repetitive, in which case we may charge a reasonable administrative fee.

8. Cookies and Tracking Technologies

ihk77 uses cookies and similar tracking technologies to enhance your browsing experience, analyze platform usage, and deliver personalized content. A cookie is a small text file stored on your device that helps us recognize you on subsequent visits.

8.1 Types of Cookies We Use

• Essential Cookies: Necessary for the platform to function properly, including session management, authentication, and security features. These cannot be disabled without severely impacting functionality.
• Performance Cookies: Collect anonymous information about how you use ihk77, such as pages visited, features accessed, and error messages encountered. This helps us improve platform performance.
• Functional Cookies: Remember your preferences such as language selection, display settings, and game favorites to provide a more personalized experience.
• Analytics Cookies: Help us understand user behavior patterns, popular content, and traffic sources through services like Google Analytics (with IP anonymization enabled).

8.2 Managing Cookie Preferences

Most web browsers automatically accept cookies, but you can modify your browser settings to decline cookies or alert you when cookies are being sent. Note that disabling cookies may prevent you from accessing certain features or may require repeated login. To manage cookies:

• Browser Settings: Adjust cookie preferences in your browser's privacy or security settings (Chrome, Firefox, Safari, Edge all provide cookie management options).
• Third-Party Tools: Use browser extensions or privacy tools that block tracking cookies and scripts.
• Mobile Devices: iOS and Android devices offer advertising identifier settings that limit tracking across apps.

9. International Data Transfers

ihk77 operates internationally and may transfer your personal data to countries outside of Indonesia, including to jurisdictions that may not have data protection laws equivalent to those in Indonesia. When transferring data internationally, we ensure appropriate safeguards are in place:

• Encryption in Transit: All cross-border data transfers are encrypted using TLS 1.3 or higher protocols.
• Contractual Protections: We enter into Standard Contractual Clauses (SCCs) with international service providers to ensure they maintain adequate data protection standards.
• Server Locations: Primary data storage occurs on secure servers in jurisdictions with strong data protection frameworks.
• Limited Transfers: We minimize international transfers and only transfer data necessary for specific business purposes such as payment processing or game provision.

10. Children's Privacy

ihk77 services are strictly for adults aged 21 years and older. We do not knowingly collect personal information from individuals under 21. If we discover that we have inadvertently collected data from someone under the legal age:

• The account will be immediately suspended and permanently closed.
• All personal data associated with the underage account will be deleted from our systems.
• Any deposits will be refunded to the payment source (minus any winnings, which are forfeited).
• The user will be permanently banned from creating future accounts.

If you believe an underage individual has registered an ihk77 account, please report it immediately to [email protected]. We take age verification seriously and continuously improve our processes to prevent underage access.

11. Changes to This Privacy Policy

ihk77 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. Material changes will be communicated through:

• Email notification to the address registered on your account.
• Prominent notice on the ihk77 homepage and login screen.
• In-platform notification upon your next login after the changes take effect.

The "Last Updated" date at the top of this Privacy Policy indicates when the most recent revisions were made. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Continued use of ihk77 services after Privacy Policy changes take effect constitutes acceptance of the updated terms.

12. Contact Information and Data Protection Officer

If you have questions, concerns, or complaints regarding this Privacy Policy or our data handling practices, please contact us:

Our data protection team is committed to addressing your privacy concerns promptly and professionally. If you are not satisfied with our response, you may have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.