Privacy Policy

The following terms carry the meanings set out below throughout this Privacy Policy. Capitalised terms not defined here carry the meanings given to them in the mas77 Terms & Conditions.

This Privacy Policy applies to all Personal Data collected and processed by mas77 in connection with:

• Registration and use of any account on the mas77 platform at https://mas77.cam.
• All sports betting, casino gaming, live dealer, and other interactive Services available through the platform.
• Communications between players and mas77 customer support, including live chat, email, and any other channel.
• Visits to the mas77 website by unauthenticated (non-logged-in) users, where certain technical data is collected automatically.
• Participation in promotions, surveys, or any other marketing activities run by mas77.

This Policy does not govern data practices of third-party websites that may be linked to from mas77 content. mas77 is not responsible for the privacy practices of external sites.

mas77 collects Personal Data through several channels. The categories of data collected and their sources are set out in the table below.

mas77 does not knowingly collect Sensitive Data beyond what is strictly necessary for KYC compliance and payment processing. We do not collect biometric data for authentication purposes.

mas77 processes Personal Data on the following legal bases, each of which applies to specific processing activities:

• Contractual Necessity: Processing required to perform the contract between mas77 and a registered player — including account creation, managing deposits and withdrawals, settling bets, and providing customer support.
• Legal Obligation: Processing required to comply with applicable legal obligations, including KYC identity verification, anti-money-laundering (AML) controls, and fraud prevention duties.
• Legitimate Interests: Processing for purposes where mas77 has a legitimate business interest that is not overridden by a player's rights — including platform security monitoring, fraud detection, service improvement analytics, and responsible gaming intervention.
• Consent: Processing for marketing communications and non-essential cookies where mas77 seeks and records explicit consent. Consent is voluntary and may be withdrawn at any time without affecting the player's access to core Services.

Personal Data collected by mas77 is used for the following purposes, each linked to the legal basis described in Clause 4:

• Account Management: Creating, maintaining, and securing your mas77 account; processing password resets; delivering account notifications via your registered email or mobile number.
• Service Delivery: Processing deposits and withdrawals through BCA, BRI, BNI, Mandiri, and supported e-wallets; settling sports bets and casino game outcomes; managing bonus credits and wagering requirements.
• Identity Verification: Conducting KYC checks to confirm that all players meet the 21+ age requirement and to prevent account fraud and identity theft.
• Fraud and Security: Detecting and investigating suspicious transaction patterns, duplicate account activity, bonus abuse, and unauthorised login attempts. mas77 operates automated monitoring systems that flag unusual activity for human review.
• Responsible Gaming: Monitoring player activity to identify potential indicators of problem gambling behaviour; enforcing deposit limits, cooling-off periods, and self-exclusion requests; maintaining records of responsible gaming tool activations.
• Customer Support: Handling player queries, complaints, and disputes; maintaining communication records for quality assurance and dispute resolution.
• Platform Improvement: Analysing aggregated, anonymised usage data to improve platform performance, user experience, game catalogue, and feature development.
• Legal Compliance: Retaining transaction and identity records for the periods required by applicable anti-money-laundering regulations and other legal obligations.
• Marketing (with consent): Sending promotional offers, tournament announcements, and personalised bonus recommendations by email or SMS where a player has opted in. Players may unsubscribe at any time via the account settings or by contacting support.

mas77 does not sell Personal Data. We share data only in the following controlled circumstances:

• Payment Processors: Financial data (bank account details, e-wallet identifiers, transaction amounts) is shared with licensed payment gateway operators solely for the purpose of processing deposits and withdrawals in IDR. These processors are bound by contractual confidentiality obligations and applicable financial regulations.
• KYC / Identity Verification Providers: Identity documents submitted during the KYC process are transmitted to contracted identity verification service providers. These providers operate under strict data-processing agreements and do not retain documents beyond the verification period.
• Fraud Detection and AML Services: Certain transactional and behavioural data may be shared with specialist fraud-detection and anti-money-laundering screening providers to fulfil legal compliance obligations.
• Cloud Infrastructure: Personal Data is stored on secure, access-controlled cloud servers. Infrastructure providers act as data processors under binding contractual terms and do not process data for their own purposes.
• Legal Authorities: mas77 will disclose Personal Data to law enforcement agencies, regulatory bodies, or courts where required to do so by applicable law, court order, or where disclosure is necessary to prevent imminent harm.
• Business Transfers: In the event of a merger, acquisition, or asset sale involving mas77, Personal Data may be transferred to the acquiring entity. Players will be notified before their data becomes subject to a materially different privacy policy.

mas77 operates internationally and may process or store Personal Data on servers located outside Indonesia. When Personal Data is transferred to jurisdictions that may not provide a level of data protection equivalent to that available in Indonesia, mas77 implements appropriate safeguards including:

• Standard contractual clauses (SCCs) or equivalent data transfer agreements incorporated into contracts with Data Processors located in third countries.
• Technical and organisational security measures applied consistently regardless of where data is processed geographically.
• Restricting access to Personal Data to personnel and systems with a documented business need.

By registering an account on mas77, you acknowledge that your Personal Data may be transferred to and processed in countries outside Indonesia for the purposes described in this Policy.

mas77 retains Personal Data only for as long as necessary to fulfil the purposes described in this Policy, or to comply with applicable legal, accounting, and reporting obligations. The general retention periods applied are:

When retention periods expire, Personal Data is securely deleted or anonymised such that it can no longer be associated with an identified individual.

mas77 maintains a comprehensive information security programme designed to protect Personal Data against unauthorised access, alteration, disclosure, or destruction. Key measures include:

• Transport Encryption: All data in transit between players and the mas77 platform is protected using TLS 1.2 or higher, enforced across the entire platform domain.
• Data at Rest: Sensitive data stored in mas77's systems is encrypted at rest using AES-256 encryption.
• Access Controls: Access to Personal Data within mas77's systems is granted on a strict need-to-know basis. Administrative access requires multi-factor authentication (MFA) and is logged for audit purposes.
• Network Security: mas77's infrastructure is protected by firewalls, intrusion detection systems (IDS), and continuous monitoring for anomalous activity.
• Vendor Security: All third-party Data Processors are subject to security assessment prior to engagement and are contractually required to maintain security standards equivalent to those applied by mas77.
• Incident Response: mas77 maintains a documented data breach response procedure. In the event of a breach likely to cause risk to players, affected individuals and relevant authorities will be notified in accordance with applicable obligations.

mas77 uses cookies and similar tracking technologies to operate the platform, maintain session state, and understand how players interact with the site. The categories of cookies used are:

• Strictly Necessary Cookies: Required for the platform to function. These include session authentication cookies, security tokens, and load-balancing identifiers. They cannot be disabled without impairing core platform functionality and do not require consent.
• Functional Cookies: Store player preferences such as language settings, game layout preferences, and notification settings. Disabling these cookies may result in a degraded user experience but does not prevent access to the platform.
• Analytics Cookies: Collect anonymised data about how players navigate the platform — pages visited, time on page, error occurrences. This data is used to improve platform performance and user experience. Analytics cookies require consent.
• Session Identification Cookies: Link your current browsing session to your authenticated account for security purposes. These are deleted when you close your browser session.

Players may manage cookie preferences through their browser settings. Please note that disabling strictly necessary cookies will prevent login and full platform access.

The mas77 platform is strictly for adults aged 21 and above. We do not knowingly collect Personal Data from individuals under the age of 21 and take active steps to prevent underage access.

• Age is verified by mandatory KYC document submission during the account verification process. Registration without completing KYC does not grant full platform access.
• Where mas77 becomes aware or has reasonable grounds to believe that a registered account is operated by a person under 21 years of age, the account will be immediately suspended, all Personal Data reviewed, and the deposit returned to the originating payment method.
• Parents and guardians who believe a minor has registered on the mas77 platform should contact support immediately at support@mas77.cam. We will act on such reports within 24 hours.

As a player whose Personal Data is processed by mas77, you hold the following rights in respect of that data. Requests to exercise these rights should be submitted to support@mas77.cam with the subject line "Data Rights Request". mas77 will respond within 30 calendar days.

mas77 will not charge a fee for processing a data rights request unless the request is manifestly unfounded, repetitive, or excessive. In such cases, a reasonable administrative fee may apply, or the request may be declined with written explanation.

mas77 reviews and updates this Privacy Policy periodically to reflect changes in our data practices, legal obligations, and the Services we offer. When material changes are made, we will:

• Update the "Effective Date" displayed at the top of this page.
• Notify registered players by email to their registered address at least 7 days before the revised policy takes effect.
• Display a prominent notice on the platform homepage for 14 days following the change.

Your continued use of the mas77 platform after the effective date of any amendment constitutes your acknowledgment of the updated Privacy Policy. If you disagree with any revision, you should cease using the platform and request account closure.

If you have questions about this Privacy Policy, wish to exercise a data right, or wish to report a potential data-protection concern, please contact the mas77 privacy team through the following channel:

For responsible gaming support, visit our Responsible Gaming page. For full platform rules, review our Terms & Conditions.