Privacy Policy

In this Privacy Policy, the following terms carry the meanings set out below:

• "osis77" / "we" / "us" / "our" — the osis77 online gaming platform, accessible at https://osis77.app, and all associated services and sub-domains.
• "Member" / "you" / "your" — any individual who has registered, or is seeking to register, an account on the osis77 platform.
• "Personal Data" — any information that identifies or could reasonably be used to identify a specific individual, including name, date of birth, contact details, payment information, government identification numbers, IP address, and device identifiers.
• "Processing" — any operation performed on Personal Data, including collection, recording, storage, organisation, use, disclosure, or deletion.
• "Data Controller" — osis77, which determines the purposes and means of processing your Personal Data.
• "Data Processor" — a third-party service provider that processes Personal Data on osis77's behalf, pursuant to a written data-processing agreement.
• "KYC" — Know Your Customer; the identity and age verification process required to unlock full account functionality.
• "Services" — all gaming, betting, promotional, and ancillary products made available through the osis77 platform.

This Privacy Policy applies to all Personal Data collected by osis77 in connection with the registration, maintenance, and use of a member account on the osis77 platform. It applies to data collected via the osis77 website at https://osis77.app, including all pages, sub-domains, and any mobile-optimised versions of the site.

This policy is directed at individuals located in Indonesia. osis77 is designed and operated specifically for the Indonesian market. Indonesian residents who interact with the osis77 platform — whether as registered members or as visitors — are subject to this policy.

This policy does not govern the privacy practices of third-party websites, payment processors, or game studios whose services are integrated into the osis77 platform. We encourage you to review the privacy policies of any third-party service you use independently of osis77.

osis77 collects the following categories of Personal Data from members and platform visitors:

osis77 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic or biometric data, or health data, except where a member voluntarily discloses health-related information in connection with a responsible gaming self-exclusion or support request.

osis77 collects Personal Data through the following means:

• Directly from you: when you complete the registration form, submit KYC documents, make deposits or withdrawals, configure responsible gaming settings, or contact our support team.
• Automatically: through cookies, session logs, server-side analytics, and platform monitoring tools that record your technical and usage data each time you access the osis77 website.
• From third-party service providers: payment processors and e-wallet operators may share transaction confirmation data with osis77 for the purpose of crediting your account and verifying payment authenticity.
• From identity verification partners: where osis77 engages a third-party KYC verification service, that provider may return a verified identity status and flagging data to osis77 based on the documents you submitted.

osis77 processes your Personal Data for the following purposes:

1. Account Management: to create, maintain, and administer your osis77 member account, including login authentication, password reset, and account settings management.
2. Identity Verification (KYC): to verify your age (21+), identity, and Indonesian residency in accordance with our eligibility requirements and anti-money-laundering obligations.
3. Transaction Processing: to process deposits, withdrawals, and bonus credits accurately and in compliance with our financial controls.
4. Service Delivery: to provide access to casino games, sportsbook markets, live dealer tables, and promotional features, and to personalise your platform experience based on your stated preferences and gameplay history.
5. Fraud Prevention and Security: to detect and prevent fraudulent activity, unauthorised account access, duplicate registrations, bonus abuse, money laundering, and other prohibited conduct described in our Terms & Conditions.
6. Responsible Gaming: to monitor gameplay patterns for signs of problem gambling, enforce member-configured limits, and respond to self-exclusion requests in a timely and effective manner.
7. Customer Support: to respond to enquiries, resolve disputes, and maintain records of member interactions for quality assurance and audit purposes.
8. Legal and Regulatory Compliance: to fulfil obligations under applicable international gaming regulations, anti-money-laundering requirements, and financial record-keeping standards.
9. Platform Improvement: to analyse aggregated, anonymised usage data to identify performance issues, improve the user interface, and develop new features. No individual member is identifiable from this analysis.
10. Marketing Communications (opt-in only): to send promotional offers, bonus notifications, and seasonal campaigns to members who have explicitly opted in to marketing communications. You may withdraw consent at any time by updating your communication preferences in the account dashboard.

osis77 processes your Personal Data on the following legal bases:

• Contractual Necessity: processing required to fulfil our obligations under the member agreement with you — including account setup, KYC, transaction processing, and service delivery.
• Legitimate Interests: processing necessary for osis77's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and service improvement, where those interests are not overridden by your fundamental rights and freedoms.
• Legal Obligation: processing required to comply with applicable legal and regulatory requirements, including financial record-keeping and identity verification mandates.
• Consent: processing of your data for optional purposes, such as marketing communications, where you have given explicit, freely given, and revocable consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

osis77 does not sell, rent, or commercially disclose your Personal Data to third parties. We may share your data in the following limited and controlled circumstances:

1. Payment Processors and E-Wallet Operators: your name and payment account details are shared with your nominated Indonesian bank (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata) or e-wallet provider (OVO, DANA, GoPay, ShopeePay, LinkAja) solely for the purpose of processing your deposit or withdrawal transaction.
2. KYC and Identity Verification Providers: your identity documents and personal details may be transmitted to a contracted third-party KYC verification service for the purpose of confirming your age and identity. These providers process data solely on osis77's behalf and are prohibited from using your data for any other purpose.
3. Game Studio Providers: where you play a game hosted by a third-party studio (such as Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, or Pocket Games Soft), your session token and wagering data may be transmitted to that studio's game servers to enable real-time gameplay. Game studios do not receive your full identity or financial data.
4. Legal and Regulatory Authorities: osis77 may disclose Personal Data to law enforcement agencies, regulatory bodies, or courts of competent jurisdiction where required by law, court order, or where disclosure is necessary to protect the rights, property, or safety of osis77, its members, or the public.
5. Business Transfers: in the event of a merger, acquisition, or sale of all or substantially all of osis77's assets, member Personal Data may be transferred to the successor entity. Members will be notified of any such transfer and the applicable privacy terms prior to the transaction completing.

osis77 retains Personal Data for the following periods:

Upon expiry of the applicable retention period, Personal Data is securely deleted using industry-standard data destruction methods or anonymised such that it can no longer be linked to any identifiable individual. Anonymised, aggregated data may be retained indefinitely for statistical and platform improvement purposes.

osis77 implements a layered security architecture to protect member Personal Data against unauthorised access, disclosure, alteration, or destruction. Our technical and organisational security measures include:

• Encryption in transit: all data transmitted between your browser and the osis77 platform is encrypted using TLS 1.3 with 256-bit AES cipher suites. The padlock icon in your browser address bar confirms this protection is active.
• Encryption at rest: Personal Data stored on osis77 servers is encrypted using AES-256 encryption. Encryption keys are managed via a dedicated key management system with role-based access controls.
• Access controls: access to member Personal Data within osis77's systems is restricted to authorised personnel whose job function requires it. Access rights are reviewed quarterly and revoked immediately upon role change or departure.
• Multi-factor authentication: internal osis77 systems that hold member data require multi-factor authentication for all staff access. Members are also encouraged to enable two-factor authentication on their own osis77 accounts.
• Penetration testing and vulnerability management: osis77's infrastructure undergoes regular third-party penetration testing. Identified vulnerabilities are triaged and remediated according to a risk-based patching schedule.
• Incident response: osis77 maintains a documented data breach response plan. In the event of a confirmed breach that poses a risk to your rights, affected members will be notified without undue delay, and relevant authorities will be informed as required.

While osis77 employs robust security measures, no internet-based system can guarantee absolute security. You are responsible for maintaining the confidentiality of your own account credentials and for ensuring your device is free of malware before accessing the platform.

osis77 uses cookies and similar tracking technologies to operate and improve the platform. A cookie is a small text file placed on your device when you visit the osis77 website. The following categories of cookies are used:

• Strictly Necessary Cookies: essential for the platform to function. These include session authentication tokens, security cookies, and load-balancing cookies. These cannot be disabled without rendering the platform inoperable.
• Functional Cookies: used to remember your preferences, such as language settings, preferred game categories, and responsible gaming configuration. Disabling these will not prevent access but will reset your preferences on each visit.
• Analytics Cookies: used to collect aggregated, anonymised data about how members use the platform, which pages are visited most frequently, and where technical errors occur. This data is used solely for internal platform improvement.
• Security Cookies: used to detect and prevent fraudulent activity, including duplicate session detection, bot identification, and suspicious login pattern monitoring.

osis77 does not use third-party advertising or behavioural tracking cookies. Your browsing activity on osis77 is not shared with advertising networks or used to serve targeted advertisements on other websites.

You may manage cookie preferences through your browser settings. Note that blocking strictly necessary cookies will prevent you from logging in to and using the osis77 platform.

As a member of osis77, you hold the following rights in relation to your Personal Data:

1. Right of Access: you may request a copy of the Personal Data osis77 holds about you. Requests will be fulfilled within 30 days of receipt.
2. Right to Rectification: you may request correction of any inaccurate or incomplete Personal Data. Simple corrections (e.g., email address or phone number) can be made directly in your account settings. Corrections to identity data require a support request and may require re-verification.
3. Right to Erasure: you may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent and no other legal basis applies. Note that certain data must be retained for the periods set out in Clause 8 regardless of a deletion request — in such cases, osis77 will explain which data cannot be deleted and why.
4. Right to Restriction: you may request that osis77 restrict processing of your Personal Data in certain circumstances, for example while the accuracy of data is being contested.
5. Right to Data Portability: where processing is based on your consent or on contractual necessity, you may request a copy of the Personal Data you provided to osis77 in a structured, machine-readable format.
6. Right to Object: you may object to processing based on osis77's legitimate interests. osis77 will cease processing unless it can demonstrate compelling legitimate grounds that override your interests.
7. Right to Withdraw Consent: where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that took place before withdrawal.

To exercise any of the above rights, please contact osis77 via live chat or by sending a written request to [email protected]. We may need to verify your identity before processing a data rights request. All requests are handled free of charge.

osis77 operates a strict 21+ policy. The platform is not directed at, and does not knowingly collect Personal Data from, individuals under the age of 21. If osis77 becomes aware that Personal Data has been collected from an individual under 21 — whether through a false declaration at registration or any other means — the account will be immediately suspended, all data associated with the account will be deleted, and any deposits or winnings will be forfeited.

If you are a parent or guardian and believe that a minor in your care has registered an account with osis77, please contact our support team immediately at [email protected]. We will investigate and take appropriate action without delay.

osis77 primarily stores and processes member Personal Data on infrastructure located within or near the Southeast Asian region. However, certain third-party service providers engaged by osis77 — including game studio technology partners and KYC verification providers — may process data on servers located outside Indonesia.

Where Personal Data is transferred to a jurisdiction outside Indonesia, osis77 ensures that appropriate safeguards are in place. These include standard contractual clauses that impose data protection obligations on the receiving party equivalent to those applied by osis77, and, where applicable, adequacy assessments of the destination jurisdiction's data protection framework.

By registering an account with osis77, you acknowledge and consent to the transfer of your Personal Data to third-party processors in other jurisdictions where such transfer is necessary to provide the Services, subject to the safeguards described above.

osis77 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable legal requirements, or platform functionality. Where a material change is made to this policy — such as a change to the categories of data collected, the purposes of processing, or the third parties with whom data is shared — osis77 will notify registered members via email to the address on file and/or via an in-platform notification displayed upon next login.

The revised policy will specify its effective date at the top of the document. Your continued use of the osis77 platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree to the revised policy, you may request account closure in accordance with Clause 14 of the Terms & Conditions.

We encourage you to review this Privacy Policy periodically. The version number and last-updated date at the top of this page indicate the current revision.

If you have any questions about this Privacy Policy, wish to exercise a data right, or have a concern about how your Personal Data has been handled by osis77, please contact our Data Privacy team through any of the following channels:

• Live Chat: available 24/7 via the chat widget on the osis77 platform. Ask to be connected to the Data Privacy team for data-related enquiries.
• Email: [email protected] — please include "Privacy Request" or "Data Rights" in your subject line so your message is routed to the correct team. Responses are provided within five (5) business days for privacy-related enquiries.

osis77 is committed to resolving all privacy concerns promptly and transparently. If you are not satisfied with our response to a complaint, you retain the right to escalate the matter to the relevant data protection authority in your jurisdiction or to seek independent legal advice.