Privacy Policy

SECTION 1 Definitions

The following terms carry the meanings set out below wherever they appear in this Policy:

• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to name, email address, phone number, date of birth, national identity number, financial account details, IP address, and device identifiers.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, alteration, retrieval, use, disclosure, transmission, and deletion.
• "Data Controller" means rok777, the entity that determines the purposes and means of processing your Personal Data.
• "Data Processor" means a third party that processes Personal Data on behalf of rok777, subject to binding contractual data-processing obligations.
• "User" / "You" means any individual who accesses or registers on the rok777 Platform.
• "Platform" means the rok777 website at rok777.cam, its mobile interface, and all associated digital services.
• "KYC" means Know Your Customer — the identity verification process rok777 uses to confirm user identity and comply with anti-money-laundering obligations.
• "Cookie" means a small text file placed on your device by the Platform to enable certain functionality and analytical capabilities.

SECTION 2 Scope & Data Controller

This Policy applies to all Personal Data processed by rok777 in connection with your use of the Platform, regardless of your location or the device you use to access our services. It covers data collected directly from you, data collected automatically through your use of the Platform, and data received from third-party sources such as payment processors and identity-verification providers.

rok777 acts as the Data Controller for Personal Data processed under this Policy. As Data Controller, rok777 is responsible for ensuring that all processing activities comply with applicable data protection laws and the principles set out in this Policy.

For Indonesian users, rok777 processes your data in a manner consistent with internationally recognized data protection standards. While Indonesia's primary data protection framework is governed by Law No. 27 of 2022 on Personal Data Protection (UU PDP), rok777 also applies GDPR-aligned principles as a baseline for all users, given the international nature of our operations.

SECTION 3 Data We Collect

rok777 collects Personal Data through several channels. The categories of data we collect, and the circumstances in which we collect them, are detailed in the table below:

We do not collect sensitive categories of Personal Data such as racial or ethnic origin, religious beliefs, political opinions, health data, or biometric data for automated decision-making purposes. Photographs on government IDs collected during KYC are treated as identity verification documents and are not subject to facial recognition or biometric analysis beyond manual human review for document authenticity.

SECTION 4 Legal Basis for Processing

rok777 processes your Personal Data on the following legal grounds:

• Contractual Necessity: Processing is necessary to perform the contract between you and rok777 (i.e., the Terms & Conditions). This includes account creation, payment processing, game delivery, and customer support.
• Legal Obligation: Processing is required to comply with applicable laws and regulations, including anti-money-laundering (AML) requirements, age verification mandates, tax reporting obligations, and regulatory requests from licensing authorities.
• Legitimate Interests: Processing is necessary for rok777's legitimate business interests, provided those interests are not overridden by your fundamental rights. Legitimate interests include fraud prevention, platform security, service improvement, business analytics, and direct marketing to existing customers (subject to your right to opt out).
• Consent: Where processing is based on your explicit consent, such as subscription to optional marketing communications or participation in user research programs, you have the right to withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

SECTION 5 How We Use Your Data

rok777 uses your Personal Data for the following purposes:

1. Account Management: To create and maintain your account, authenticate your identity, manage login sessions, and provide account recovery services.
2. Service Delivery: To process deposits and withdrawals, enable gameplay, calculate and credit winnings, apply bonuses, and deliver the core services of the Platform.
3. KYC & Compliance: To verify your identity, confirm your age (21+), comply with anti-money-laundering regulations, detect and prevent financial crime, and respond to legal and regulatory requests.
4. Payment Processing: To route funds to and from your registered bank accounts or e-wallets via our licensed payment processors, reconcile transactions, and resolve payment disputes.
5. Responsible Gaming: To monitor betting patterns for signs of problem gambling, enforce deposit limits and time-out requests, facilitate self-exclusion, and provide access to player protection tools.
6. Customer Support: To respond to inquiries, investigate complaints, resolve technical issues, and provide Indonesian-speaking support via live chat, email, and WhatsApp.
7. Fraud Prevention & Security: To detect suspicious account behavior, prevent bonus abuse, identify multi-accounting, block unauthorized access attempts, and protect the Platform from cyber threats.
8. Platform Improvement: To analyze user behavior (in aggregate and anonymized form where possible), optimize platform performance, develop new features, and enhance user experience.
9. Marketing & Promotions: To send you promotional offers, bonus notifications, and product updates where you have opted in or where permitted under applicable direct-marketing exemptions for existing customers. You may opt out at any time.
10. Legal Compliance: To comply with court orders, regulatory audits, tax reporting obligations, and other legal requirements imposed on rok777 as a licensed gaming operator.

SECTION 6 Data Sharing & Third-Party Disclosure

rok777 does not sell your Personal Data. However, we may share your data with the following categories of third parties under strict contractual data-protection obligations:

• Payment Processors: To facilitate IDR deposits and withdrawals via BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata, OVO, DANA, GoPay, ShopeePay, and LinkAja. Payment processors receive only the data necessary to execute transactions (account holder name, account number, transaction amount).
• KYC & Identity Verification Providers: To verify the authenticity of government-issued IDs and confirm your identity against fraud databases. These providers act as Data Processors under rok777's instruction.
• Game Studios: Limited technical data (user session tokens, bet amounts, game outcomes) is shared with game providers such as Evolution Gaming, Pragmatic Play, PG Soft, NetEnt, Microgaming, Habanero, and Spribe to deliver live dealer games, slots, and RNG-based casino content. Game studios do not receive identity or contact data.
• Cloud Infrastructure Providers: rok777 uses third-party cloud hosting and data storage services that provide the physical and virtual infrastructure for the Platform. All data stored on cloud servers is encrypted at rest and in transit.
• Customer Support Tools: Live chat, email support, and ticketing systems may be provided by third-party SaaS vendors. Support staff access Personal Data only to the extent necessary to resolve user inquiries.
• Analytics Providers: Aggregated and anonymized usage data may be shared with analytics platforms to measure platform performance, user engagement, and conversion metrics. These providers do not receive personally identifiable data.
• Legal & Regulatory Authorities: rok777 may disclose Personal Data to law enforcement, courts, tax authorities, gaming regulators, and other government bodies where legally required or where necessary to protect rok777's rights, comply with legal process, or enforce our Terms.
• Business Transfers: In the event of a merger, acquisition, sale of assets, or corporate restructuring, your Personal Data may be transferred to the acquiring entity, subject to the same privacy protections set out in this Policy.

All third-party Data Processors are bound by data processing agreements requiring them to implement appropriate technical and organizational security measures, process data only on rok777's documented instructions, and refrain from using your data for their own purposes.

SECTION 7 Cookies & Tracking Technologies

rok777 uses cookies and similar tracking technologies to enhance platform functionality, personalize your experience, and analyze usage patterns. A cookie is a small text file stored on your device that enables certain features and allows rok777 to recognize your device on subsequent visits.

The types of cookies we use include:

• Essential Cookies: Strictly necessary for platform operation. These cookies enable account login, session management, secure payment processing, and core navigation features. They cannot be disabled without impairing platform functionality.
• Performance & Analytics Cookies: Collect aggregated data on how users interact with the Platform, which pages are visited most frequently, load times, and error messages. This data helps us optimize performance and identify technical issues.
• Functional Cookies: Remember your preferences (language, currency display format, game history, favorite games) to provide a personalized experience on return visits.
• Advertising & Marketing Cookies: Track your engagement with promotional campaigns and tailor marketing messages based on your activity. These cookies are used only where you have provided consent or where permitted under applicable marketing laws.

You can manage cookie preferences through your browser settings. Most browsers allow you to block or delete cookies, though doing so may impair certain platform features. Disabling essential cookies will prevent you from logging in or placing bets.

SECTION 8 Data Retention

rok777 retains your Personal Data for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements. Specific retention periods for each data category are as follows:

• Account Data: Retained for the lifetime of your active account, plus 7 years following account closure to comply with financial record-keeping and AML obligations.
• KYC Documents: Retained for 7 years from the date of last transaction or account closure, in accordance with international AML standards.
• Transaction Records: Retained for 7 years to support tax reporting, financial audits, and dispute resolution.
• Gameplay Logs: Retained for 5 years to enable bet verification, dispute investigation, and regulatory audit compliance.
• Customer Support Records: Retained for 3 years to maintain service quality standards and resolve recurring issues.
• Marketing Data: Retained until you withdraw consent or request deletion, whichever comes first. If you opt out of marketing, your contact details are added to a suppression list to prevent future messaging.
• Technical Logs & IP Addresses: Retained for 12 months for security monitoring and fraud detection purposes.

After the applicable retention period expires, Personal Data is securely deleted or anonymized such that it can no longer be associated with you as an individual.

SECTION 9 Security Measures

rok777 implements a multi-layered security framework to protect your Personal Data from unauthorized access, disclosure, alteration, and destruction. Our security measures include:

• Encryption: All data transmitted between your device and rok777 servers is encrypted using 256-bit SSL/TLS protocols. Passwords are hashed using industry-standard cryptographic algorithms and are never stored in plain text.
• Access Controls: Personal Data is accessible only to authorized rok777 personnel and Data Processors on a need-to-know basis. Access is governed by role-based permissions, and all access events are logged.
• Data Segregation: Sensitive KYC documents and financial records are stored in separate encrypted vaults with additional access restrictions.
• Regular Audits: rok777 conducts annual third-party security audits and penetration tests to identify vulnerabilities and ensure compliance with industry best practices.
• Intrusion Detection: Automated systems monitor network activity for signs of unauthorized access attempts, malware, and DDoS attacks.
• Employee Training: All rok777 staff with access to Personal Data receive mandatory data protection and security awareness training.
• Incident Response Plan: rok777 maintains a documented data breach response protocol, including user notification procedures, regulatory reporting obligations, and remediation steps.

While rok777 employs industry-leading security measures, no online system can guarantee absolute security. You share responsibility for account security by maintaining the confidentiality of your password, using strong authentication practices, and promptly reporting suspicious activity to our support team.

SECTION 10 Your Rights

You have the following rights with respect to your Personal Data. To exercise any of these rights, contact our support team at the email address provided in Section 15.

• Right to Access: You may request a copy of the Personal Data rok777 holds about you. We will provide this data in a structured, commonly used, machine-readable format within 30 days of your request.
• Right to Rectification: You may request correction of inaccurate or incomplete Personal Data. You can update most account information directly through your account dashboard.
• Right to Erasure ("Right to Be Forgotten"): You may request deletion of your Personal Data where: (a) it is no longer necessary for the purposes for which it was collected; (b) you withdraw consent; (c) you object to processing based on legitimate interests; or (d) the data has been unlawfully processed. This right is subject to rok777's legal obligation to retain certain records for compliance purposes.
• Right to Restriction of Processing: You may request that rok777 limit processing of your Personal Data where: (a) you contest its accuracy; (b) processing is unlawful but you oppose deletion; (c) rok777 no longer needs the data but you require it for legal claims; or (d) you have objected to processing pending verification of rok777's legitimate grounds.
• Right to Data Portability: You may request that rok777 transfer your Personal Data to another service provider in a structured, machine-readable format, where technically feasible and where processing is based on consent or contract.
• Right to Object: You may object to processing based on rok777's legitimate interests. rok777 will cease processing unless we can demonstrate compelling legitimate grounds that override your interests or where processing is necessary for legal claims. You have an absolute right to object to direct marketing at any time.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.
• Right to Lodge a Complaint: If you believe rok777 has processed your Personal Data unlawfully, you have the right to lodge a complaint with your local data protection authority.

rok777 aims to respond to all data rights requests within 30 calendar days. Where requests are complex or numerous, we may extend this period by a further 60 days, with notification to you of the extension and the reasons for it.

SECTION 11 Minors & Age Policy

rok777 services are strictly restricted to individuals aged 21 and over. We do not knowingly collect Personal Data from individuals under 21 years of age. If we become aware that we have inadvertently collected data from a person under 21, we will delete that data immediately and permanently close the associated account without refund of deposited funds.

Parents and guardians should monitor their children's internet usage and ensure minors do not access gambling platforms. rok777 recommends that parents use parental control software to block access to gambling sites on devices used by minors.

If you become aware that a minor has accessed the Platform or created an account, please contact our support team immediately at the email address provided in Section 15.

SECTION 12 International Data Transfers

rok777 operates as an international gaming platform. Your Personal Data may be transferred to, stored in, and processed in countries outside Indonesia, including jurisdictions that may have different data protection standards than those applicable in Indonesia.

Where we transfer Personal Data to countries not recognized as providing adequate data protection by Indonesian or international standards, we implement appropriate safeguards, including:

• Standard Contractual Clauses approved by relevant data protection authorities
• Binding Corporate Rules for transfers within the rok777 corporate group
• Adherence to international data protection frameworks such as APEC Cross-Border Privacy Rules (CBPR)
• Data encryption and pseudonymization to minimize transfer risks

You may request further information about the safeguards we use for international transfers by contacting our support team.

SECTION 13 Third-Party Services & External Links

The Platform may contain links to third-party websites, services, or content providers (such as game studios or payment gateways) that are not operated by rok777. This Privacy Policy applies only to Personal Data collected by rok777. We are not responsible for the privacy practices of third parties.

Before providing Personal Data to any third-party service, we recommend reviewing that service's privacy policy. rok777 does not control and cannot be held responsible for third-party data-handling practices.

Where rok777 integrates third-party services into the Platform (such as live chat widgets or payment iframes), those integrations are governed by data processing agreements requiring the third party to comply with this Policy and applicable data protection laws.

SECTION 14 Policy Amendments

rok777 may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or operational requirements. Material changes will be communicated to registered users via email notification and by displaying a prominent notice on the Platform for at least 14 days prior to the changes taking effect.

The "Last Updated" date at the top of this page reflects the effective date of the most recent version. Your continued use of the Platform after the effective date of an updated Policy constitutes acceptance of the revised terms.

We encourage you to review this Policy periodically to stay informed about how we protect your Personal Data.

SECTION 15 Contact Us

If you have questions about this Privacy Policy, wish to exercise your data rights, or need to report a data security concern, please contact the rok777 Data Protection Team:

For urgent data security incidents (such as suspected account breach or unauthorized access), please use the subject line "URGENT: Security Incident" to prioritize your request.

Our Indonesian-speaking support team is available 24/7 via live chat on the Platform and via WhatsApp (contact details provided in your account dashboard upon login).