lt777 Privacy Policy

lt777 operates the online casino and sportsbook platform accessible at lt777.pro, serving registered players primarily located in Indonesia. As the operator of this platform, lt777 acts as the data controller in respect of all personal data collected from players, prospective players, and website visitors.

This Privacy Policy sets out in full and transparent terms: what categories of personal data we collect, the specific purposes for which we process that data, the legal basis for each processing activity, how long we retain data, with whom we share it, and what rights you hold with respect to your personal information.

lt777 is committed to handling personal data responsibly, in accordance with internationally recognized data protection principles including lawfulness, fairness, transparency, purpose limitation, data minimization, accuracy, storage limitation, integrity, and confidentiality. Where Indonesian data protection law imposes additional or stricter requirements, those requirements govern.

This Policy should be read alongside our Terms & Conditions and Responsible Gaming page, both of which contain provisions that interact with the data practices described here.

lt777 collects and processes the following categories of personal data, depending on your level of interaction with the platform:

lt777 practices data minimization — we collect only the data necessary to fulfil the identified purpose. We do not collect sensitive categories of personal data (such as health records, religious beliefs, or political opinions) unless strictly required for responsible gaming assessments, in which case such data is processed with your explicit consent and under heightened security controls.

lt777 collects personal data through the following channels:

• Direct collection: Information you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting support, or updating your account profile.
• Automated collection: Technical and behavioral data gathered automatically via server logs, session tracking, and first-party cookies when you visit or interact with lt777.pro. This includes IP address, browser fingerprint, navigation path, and session duration.
• Third-party payment providers: Confirmation data from local banks (BCA, BRI, BNI, Mandiri, and others) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) when you complete a deposit or withdrawal transaction. lt777 receives only transaction confirmation metadata — full card or bank account credentials are never stored on lt777 servers.
• Game studio providers: Aggregate session data from certified studio partners such as Evolution Gaming, Pragmatic Play, Pocket Games Soft, and Spribe, used for game integrity verification and session reconciliation.
• KYC verification service providers: Identity document verification results and risk scoring from our accredited KYC technology partner, used to confirm eligibility and satisfy AML obligations.

lt777 processes your personal data for the following defined purposes. Each purpose is supported by an identified legal basis detailed in Section 5.

1. Account Registration and Management: To create, verify, maintain, and administer your lt777 player account, including processing logins, updating profile information, and managing account security settings.
2. Identity Verification (KYC): To verify your identity, confirm you are at least 21 years of age, confirm Indonesian residency, and satisfy anti-money laundering (AML) and counter-terrorist financing (CTF) obligations before processing withdrawal requests or when deposit activity reaches review thresholds.
3. Payment Processing: To process deposits from and withdrawals to your verified Indonesian bank account or e-wallet, reconcile transaction records, and maintain accurate financial ledgers.
4. Game Delivery and Integrity: To deliver, operate, and maintain all casino and sportsbook products; to record game outcomes for dispute resolution; and to verify the accuracy of all bet settlements.
5. Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, multi-accounting, bonus abuse, money laundering, match-fixing, and unauthorized account access.
6. Responsible Gaming: To monitor gaming patterns for indicators of problem gambling; to enforce self-exclusion orders, deposit limits, and cooling-off periods; and to contact players where responsible gaming concerns are identified.
7. Customer Support: To respond to your enquiries, resolve complaints, process responsible gaming requests, and maintain records of support interactions.
8. Legal and Regulatory Compliance: To comply with applicable laws, regulatory requirements, court orders, and instructions from competent authorities, including data retention obligations under AML legislation.
9. Service Improvement and Analytics: To analyze aggregate and anonymized usage patterns to improve platform performance, game selection, user experience, and promotional offers. Individual player data is not used for this purpose without anonymization.
10. Direct Marketing (with consent): To send you promotional offers, bonus notifications, and platform updates via email or SMS, where you have expressly opted in to receive such communications. You may withdraw consent at any time from Account Settings.

lt777 relies on the following legal bases for processing personal data, consistent with internationally recognized data protection principles:

Where lt777 relies on legitimate interests as the legal basis, we have conducted a balancing assessment and determined that our legitimate interests are not overridden by your privacy rights, given the context and the limited nature of the data involved.

lt777 does not sell your personal data. We share personal data with third parties only in the following defined circumstances, and only to the minimum extent necessary:

• Payment service providers: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata, OCBC NISP) and e-wallet platforms (OVO, DANA, GoPay, ShopeePay, LinkAja) receive only the transaction data necessary to process your deposit or withdrawal. These providers are bound by their own regulatory obligations and data security standards.
• KYC verification providers: Our accredited identity verification partner receives your submitted identity documents and personal details solely for the purpose of completing the KYC check. They are contractually prohibited from using this data for any other purpose.
• Game studio providers: Certified studios (Evolution Gaming, Pragmatic Play, Pocket Games Soft, Spribe, NetEnt, Microgaming, and others) receive only the session token and anonymized player identifier necessary to deliver game content. No personally identifiable financial data is shared with game studios.
• Fraud and security technology providers: Our fraud detection platform receives behavioral and technical data (IP address, device fingerprint, session patterns) to generate risk scores used in fraud prevention workflows. This data is processed under a data processing agreement with strict usage limitations.
• Legal and regulatory authorities: lt777 will disclose personal data to competent courts, regulatory bodies, law enforcement agencies, or financial intelligence units where required to do so by applicable law, court order, or regulatory instruction. We will notify you of such disclosure where legally permitted to do so.
• Corporate group entities: Where lt777 operates through affiliated entities, personal data may be shared within the group solely for the purposes of back-office operations, compliance, and group-level risk management, subject to binding intra-group data transfer agreements.

lt777 retains personal data for the periods specified below, after which data is securely deleted or irreversibly anonymized:

Where data must be retained beyond the standard period due to an ongoing legal dispute, regulatory investigation, or court order, retention will be extended accordingly and reviewed at six-month intervals.

lt777 implements a layered security framework to protect personal data against unauthorized access, accidental loss, destruction, or disclosure. Our technical and organizational security measures include:

• Encryption at rest: All personal and financial data is stored using AES-256 encryption. Password credentials are stored as salted cryptographic hashes and are never stored or transmitted in plain text.
• Encryption in transit: All communications between your browser and lt777's servers are protected by TLS 1.3. Connections using older, insecure protocol versions (TLS 1.0, TLS 1.1, SSL) are rejected by our servers.
• Access controls: Internal access to personal data is governed by role-based access control (RBAC). Only authorized personnel whose role requires access to specific data categories are granted that access, with all access events logged and periodically audited.
• Network security: lt777's infrastructure is protected by enterprise-grade firewalls, intrusion detection systems (IDS), intrusion prevention systems (IPS), and DDoS mitigation services.
• Penetration testing: lt777 engages independent security professionals to conduct penetration testing of our platform on a regular basis. Critical vulnerabilities identified during testing are remediated within defined response timelines.
• Data breach response: lt777 maintains a documented data breach response plan. In the event of a breach that creates a risk to affected players, we will notify impacted individuals without undue delay and take immediate steps to contain and remediate the incident.

Notwithstanding these measures, no internet-based system can guarantee absolute security. You play an important role in securing your own account by using a strong, unique password, enabling any available two-factor authentication, and never sharing your credentials with anyone — including persons claiming to represent lt777.

lt777 uses first-party cookies and similar tracking technologies on the lt777.pro website to deliver core platform functionality, maintain session state, and gather aggregate analytics. We do not use third-party advertising cookies or cross-site tracking technologies.

The cookies deployed on lt777.pro fall into the following categories:

• Strictly necessary cookies: Essential for the platform to function. These include session authentication cookies, CSRF protection tokens, and load-balancing cookies. These cannot be disabled without rendering the platform inoperable.
• Functional cookies: Store your preferences such as language setting, preferred time zone (WIB / WITA / WIT), and last-visited game category. These persist across sessions to improve your experience. They may be disabled, but doing so will reset your preferences on each visit.
• Analytics cookies: First-party, anonymized cookies used to measure aggregate page traffic, session durations, navigation patterns, and feature usage. Data collected via analytics cookies does not identify individual players and is used solely to improve platform performance.

You can manage cookie preferences through your browser settings. Instructions for the most common browsers are available from the respective browser providers' help centers. Note that blocking strictly necessary cookies will prevent you from logging into your lt777 account.

As a player on the lt777 platform, you hold the following rights with respect to your personal data. To exercise any of these rights, please contact our support team at support@lt777.pro with the subject line "Data Rights Request". We will acknowledge your request within 48 hours and provide a substantive response within five business days.

• Right of Access: You have the right to request a copy of the personal data lt777 holds about you, along with information about how it is being processed.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data held about you. Certain data fields (e.g., your registered full name and date of birth) may require identity re-verification before they can be amended.
• Right to Erasure: You have the right to request deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose for which it was collected, or where you withdraw consent and there is no overriding legal basis for continued processing. This right does not apply where retention is required by our AML / KYC legal obligations.
• Right to Restriction: You have the right to request that processing of your data be restricted in certain circumstances, such as where you contest the accuracy of the data or have objected to processing pending a determination of our legitimate interests.
• Right to Data Portability: Where processing is based on your consent or the performance of a contract and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing based on legitimate interests at any time. You also have an absolute right to object to direct marketing, in which case we will cease processing your data for that purpose immediately upon receipt of your objection.
• Right to Withdraw Consent: Where processing is based solely on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to the withdrawal.

lt777 is strictly an adults-only platform. We do not knowingly collect, process, or retain personal data from any person under the age of 21. Access to the platform by persons under 21 is prohibited under our Terms & Conditions and is inconsistent with Indonesian responsible gaming standards.

Our registration process includes an explicit date-of-birth declaration requirement, and our KYC verification procedures are designed to identify and block underage registration attempts. Where lt777 discovers, at any stage, that personal data belonging to a person under 21 has been collected, we will immediately suspend the relevant account, void all associated transactions, and securely delete the data as soon as our legal obligations permit.

If you are a parent or guardian and believe that a minor under your care has registered on the lt777 platform using false age information, please contact our support team at support@lt777.pro immediately. We treat all such reports as high priority and will act on them within 24 hours of receipt.

lt777 reviews this Privacy Policy periodically and may update it to reflect changes in our data practices, applicable laws, or regulatory requirements. When material changes are made, we will notify registered players by email to the address on file and by displaying a prominent notice on the platform at the time of login.

Each version of this Policy will clearly state its effective date at the top of the document. The version in effect at the time any personal data was collected governs the processing of that data, unless the player has been notified of and has accepted a subsequent version.

Your continued use of the lt777 platform following the effective date of any revision constitutes your acceptance of the updated Policy. If you do not agree with the changes, you must cease using the platform and request account closure before the effective date of the revised Policy.

lt777 maintains a record of prior versions of this Policy, which is available upon written request submitted to support@lt777.pro.

If you have any questions about this Privacy Policy, wish to exercise a data right, or wish to make a complaint about lt777's data practices, please contact our support team through the following channels:

• Email: support@lt777.pro — subject line: "Privacy Enquiry" or "Data Rights Request"
• Live Chat: Available 24/7 via the support widget on the lt777.pro platform. Our Indonesian-speaking agents can assist with privacy queries and will escalate data rights requests to the appropriate team.
• Response Time: We acknowledge all privacy-related enquiries within 48 hours and aim to provide a full written response within five business days of receiving your request.

We encourage you to contact us directly in the first instance to resolve any privacy concern. All complaints are logged, tracked, and reviewed by our data protection team to ensure satisfactory resolution and to identify opportunities to improve our data practices.