Privacy Policy

1. Introduction and Scope

This Privacy Policy governs the collection, use, storage, disclosure, and protection of personal information by sor777 ("we," "us," "our") in connection with your use of our online gaming platform accessible at https://sor777.cam (the "Website") and related services (collectively, the "Services"). This Privacy Policy forms an integral part of our Terms & Conditions and should be read in conjunction with that document.

By creating an account on sor777, accessing our Website, or using any of our Services, you acknowledge that you have read, understood, and consent to the data processing practices described in this Privacy Policy. If you do not agree with any aspect of this Privacy Policy, you must not use our Services.

sor777 is committed to protecting your privacy and handling your personal data responsibly in accordance with international data protection standards and Indonesian regulations. We recognize that you trust us with sensitive information, and we take that responsibility seriously. This policy is designed to be transparent about our data practices and to inform you of your privacy rights.

2. Data Controller and Contact Information

sor777 acts as the data controller for personal information collected through our platform. The data controller is responsible for determining the purposes and means of processing your personal data. For all privacy-related inquiries, data subject requests, or concerns about how your information is handled, you may contact us through the following channels:

• Data Protection Officer Email: [email protected]
• Customer Support Live Chat: Available 24/7 on our Website
• General Support Email: [email protected]
• Response Time: We aim to respond to all privacy inquiries within 48 hours

When contacting us regarding privacy matters, please provide sufficient detail to allow us to identify you and locate your information in our systems. This may include your registered username, email address, and a description of your request or concern.

3. Information We Collect

sor777 collects various categories of personal information to provide, maintain, and improve our Services, ensure platform security, comply with legal obligations, and deliver customer support. The types of data we collect include:

3.1 Information You Provide Directly

• Account Registration Data: Full legal name, date of birth, gender, residential address, email address, mobile phone number, username, and password. This information is collected when you create an account and is necessary to establish your identity and comply with age verification requirements (21+ only).
• Identity Verification Documents: Government-issued photo identification (Indonesian KTP, passport, or driver's license), proof of address (utility bills, bank statements, or government correspondence), and selfie photographs for facial verification. These documents are collected as part of our Know Your Customer (KYC) procedures to prevent fraud, money laundering, and underage gambling.
• Financial Information: Bank account details (bank name, account number, account holder name), e-wallet account information (OVO, DANA, GoPay, ShopeePay, LinkAja account identifiers), transaction history, deposit and withdrawal records, and payment method preferences. We collect this information to process deposits and withdrawals securely and to comply with anti-money laundering regulations.
• Communication Content: Messages sent through Live Chat, emails to customer support, survey responses, feedback forms, and any other communications you initiate with sor777. This information helps us provide personalized support and improve our Services based on user feedback.
• Responsible Gaming Data: Self-imposed deposit limits, session time limits, self-exclusion requests, reality check preferences, and any communications related to responsible gaming concerns. We collect this information to support responsible gambling practices and comply with player protection obligations.

3.2 Information Collected Automatically

• Device Information: Device type (smartphone, tablet, desktop), operating system and version, browser type and version, screen resolution, device identifiers (IMEI, advertising ID), and device settings. This information helps us optimize the platform for different devices and detect unauthorized access attempts.
• Usage Data: Pages visited, features accessed, games played, bet history, time spent on platform, navigation patterns, click-through rates, search queries, and feature usage statistics. We analyze usage data to understand how users interact with our platform and to improve user experience.
• Technical Data: IP address, geographic location (derived from IP address), internet service provider, browser language preferences, referral URLs, access dates and times, and server logs. Technical data helps us maintain platform security, prevent fraud, and ensure regulatory compliance.
• Cookies and Tracking Technologies: Session cookies (temporary cookies deleted when browser closes), persistent cookies (remain until expiration date), functional cookies (remember preferences), analytics cookies (track usage patterns), and security cookies (detect suspicious activity). Detailed information about our cookie usage is provided in Section 11 below.

3.3 Information from Third Parties

In limited circumstances, sor777 may receive personal information from third-party sources to verify identity, prevent fraud, or comply with legal obligations:

• Payment Processors: Transaction confirmation, payment method verification, and fraud detection alerts from Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Permata, Bank Danamon, BSI) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja).
• Identity Verification Services: Document authenticity verification, facial recognition analysis, and identity fraud risk assessments from specialized KYC service providers.
• Game Providers: Gaming session data, game outcomes, RNG verification records, and technical performance metrics from software providers such as Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, and other partners.
• Regulatory Authorities: Compliance reporting data, license verification information, and regulatory notices as required by gaming authorities.

4. How We Use Your Information

sor777 processes your personal information for specific, explicit, and legitimate purposes. We use your data in the following ways:

4.1 Service Provision and Account Management

• Creating and maintaining your user account
• Authenticating your identity when you log in
• Processing deposits and withdrawals
• Recording betting transactions and game history
• Calculating winnings and updating account balances
• Providing access to sports betting, casino games, and other gaming products
• Delivering customer support via Live Chat, email, and other channels
• Sending transactional notifications (deposit confirmations, withdrawal updates, account alerts)

4.2 Regulatory Compliance and Legal Obligations

• Verifying that users meet minimum age requirements (21+ only)
• Conducting Know Your Customer (KYC) and Anti-Money Laundering (AML) checks
• Preventing fraud, identity theft, and unauthorized account access
• Detecting and investigating suspicious betting patterns or advantage play
• Complying with gaming license conditions and regulatory reporting requirements
• Responding to legal requests from law enforcement or government authorities
• Enforcing our Terms & Conditions and other policies
• Resolving disputes and investigating complaints

4.3 Platform Security and Fraud Prevention

• Monitoring for unauthorized access attempts and security breaches
• Detecting bot activity, automated betting software, and collusion
• Analyzing IP addresses and device fingerprints to prevent multi-accounting
• Implementing transaction velocity checks and withdrawal verification procedures
• Protecting against DDoS attacks and other cyber threats
• Maintaining audit trails for security incident investigation

4.4 Service Improvement and Analytics

• Analyzing user behavior to understand preferences and usage patterns
• Conducting A/B testing to optimize user interface and features
• Developing new gaming products and features based on user demand
• Improving Website performance, loading speeds, and mobile responsiveness
• Training customer support staff using anonymized chat transcripts
• Generating statistical reports and business intelligence dashboards

4.5 Marketing and Communications (with Consent)

sor777 may send you promotional communications about bonuses, special offers, new games, and platform updates if you have opted in to receive marketing messages. You can withdraw your consent at any time by:

• Clicking the "unsubscribe" link in any marketing email
• Adjusting your communication preferences in your account settings
• Contacting customer support to opt out of marketing communications

Please note that even if you opt out of marketing communications, you will still receive essential transactional messages related to your account, such as deposit confirmations, withdrawal notifications, security alerts, and policy updates.

5. Legal Basis for Processing (GDPR and International Standards)

Under international data protection laws, including the General Data Protection Regulation (GDPR) framework, sor777 must have a valid legal basis for processing personal information. We rely on the following legal grounds:

• Contractual Necessity: Processing is necessary to fulfill our contract with you (our Terms & Conditions), including account creation, transaction processing, and service delivery.
• Legal Obligation: Processing is required to comply with Indonesian law, gaming regulations, anti-money laundering requirements, and tax obligations.
• Legitimate Interests: Processing is necessary for our legitimate business interests, such as fraud prevention, platform security, service improvement, and direct marketing (balanced against your rights and freedoms).
• Consent: For certain non-essential processing activities (such as marketing communications and optional cookies), we obtain your explicit consent, which you may withdraw at any time.

6. Data Sharing and Disclosure

sor777 does not sell, rent, or trade your personal information to third parties for their marketing purposes. However, we may share your data with the following categories of recipients when necessary to provide our Services or comply with legal obligations:

6.1 Service Providers and Business Partners

• Payment Processors: Indonesian banks and e-wallet providers to process deposits and withdrawals
• Identity Verification Services: Specialized KYC providers to verify document authenticity and prevent identity fraud
• Game Software Providers: Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Playtech, and other partners to deliver gaming content
• Cloud Hosting Providers: Secure server infrastructure providers for data storage and platform hosting
• Customer Support Tools: Live Chat platforms and ticketing systems to manage customer inquiries
• Analytics Providers: Web analytics services to understand user behavior and improve platform performance

All third-party service providers are contractually obligated to protect your data, use it only for specified purposes, and maintain security standards equivalent to those described in this Privacy Policy.

6.2 Legal and Regulatory Authorities

sor777 may disclose personal information to regulatory bodies, law enforcement agencies, courts, or government authorities when:

• Required by Indonesian law, court order, subpoena, or legal process
• Necessary to comply with gaming license conditions or regulatory reporting obligations
• Requested by law enforcement in connection with criminal investigations
• Required to protect sor777's legal rights, property, or safety
• Necessary to prevent fraud, money laundering, or other illegal activities

6.3 Business Transfers

In the event of a merger, acquisition, reorganization, bankruptcy, or sale of assets, your personal information may be transferred to the successor entity. You will be notified of any such change in ownership or control of your personal data via email and prominent notice on the Website.

7. Data Security Measures

sor777 implements comprehensive technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. Our security framework includes:

7.1 Technical Security Controls

• SSL/TLS Encryption: All data transmitted between your device and our servers is encrypted using 256-bit SSL/TLS encryption, the same standard used by major financial institutions.
• Secure Data Storage: Personal information is stored on secure servers with restricted physical and logical access controls. Databases are encrypted at rest using AES-256 encryption.
• Firewall Protection: Multi-layered firewall architecture prevents unauthorized network access and protects against DDoS attacks.
• Intrusion Detection Systems: Real-time monitoring detects and alerts us to suspicious activity or security breaches.
• Regular Security Audits: Independent security firms conduct penetration testing and vulnerability assessments quarterly.
• Secure Password Storage: User passwords are hashed using bcrypt with salt, making them unreadable even to sor777 staff.

7.2 Organizational Security Controls

• Access Controls: Personal data is accessible only to authorized employees who require it to perform their job duties, on a need-to-know basis.
• Employee Training: All staff members receive regular training on data protection, privacy laws, and security best practices.
• Confidentiality Agreements: Employees and contractors sign confidentiality agreements prohibiting unauthorized data disclosure.
• Incident Response Plan: Documented procedures for detecting, responding to, and recovering from data breaches.
• Data Retention Policies: Regular review and deletion of data no longer necessary for specified purposes (see Section 8 below).

7.3 User Security Responsibilities

While sor777 implements robust security measures, you also play a crucial role in protecting your account:

• Create a strong, unique password and change it regularly
• Never share your login credentials with anyone
• Enable two-factor authentication (2FA) for enhanced security
• Log out after each session, especially on shared devices
• Monitor your account for unauthorized activity and report suspicious transactions immediately
• Keep your email account secure, as it can be used to reset your password
• Be cautious of phishing emails or fake websites impersonating sor777

8. Data Retention

sor777 retains personal information only for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements. Retention periods vary depending on data type and legal requirements:

Data Category	Retention Period	Legal Basis
Account Information	Duration of account + 5 years after closure	Regulatory requirements, dispute resolution
Transaction Records	10 years from transaction date	Anti-money laundering laws, tax regulations
Betting History	5 years from bet settlement	Gaming license conditions, audit requirements
KYC Documents	5 years after account closure	Anti-money laundering compliance
Communication Logs	3 years from communication date	Customer service quality, dispute resolution
Marketing Consent	Until withdrawn by user	Consent-based processing
Self-Exclusion Records	Permanent (not deleted)	Player protection obligations

After retention periods expire, personal data is securely deleted or anonymized so it can no longer identify individuals. Self-exclusion records are retained permanently to prevent inadvertent account reopening and protect vulnerable users.

9. Your Privacy Rights

Under international data protection standards, you have the following rights regarding your personal information:

9.1 Right of Access

You have the right to request confirmation of whether we process your personal data and to obtain a copy of your data. You can access much of your information directly through your account dashboard. For additional data, contact [email protected].

9.2 Right to Rectification

If your personal information is inaccurate or incomplete, you have the right to request correction. You can update most information through your account settings. For data you cannot modify directly, contact customer support.

9.3 Right to Erasure (Right to be Forgotten)

You may request deletion of your personal data in certain circumstances, such as when data is no longer necessary for its original purpose or when you withdraw consent. However, we may be legally required to retain certain data (e.g., transaction records for tax and anti-money laundering purposes).

9.4 Right to Restrict Processing

You can request that we limit how we use your data in specific situations, such as when you contest data accuracy or when processing is unlawful but you don't want data deleted.

9.5 Right to Data Portability

Where technically feasible, you have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another controller.

9.6 Right to Object

You can object to processing based on legitimate interests or for direct marketing purposes at any time. We will cease processing unless we have compelling legitimate grounds that override your interests.

9.7 Right to Withdraw Consent

Where processing is based on consent, you may withdraw it at any time. This does not affect the lawfulness of processing before withdrawal.

9.8 Exercising Your Rights

To exercise any of these rights, contact us at [email protected] or through Live Chat. We will respond within 30 days. We may request additional information to verify your identity before fulfilling requests. There is no fee for requests unless they are manifestly unfounded or excessive.

10. International Data Transfers

sor777 primarily operates within Indonesia and stores data on servers located in secure data centers within the region. However, some of our service providers (such as cloud hosting providers, payment processors, or game software providers) may be located outside Indonesia, which may involve transferring your personal data internationally.

When we transfer data internationally, we ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy. These safeguards may include standard contractual clauses approved by data protection authorities, adequacy decisions, or other legally recognized transfer mechanisms.

11. Cookies and Tracking Technologies

sor777 uses cookies and similar tracking technologies to enhance user experience, analyze platform usage, and deliver personalized content. A cookie is a small text file stored on your device when you visit the Website.

11.1 Types of Cookies We Use

• Essential Cookies: Necessary for platform functionality, including login authentication, session management, and security features. These cookies cannot be disabled.
• Functional Cookies: Remember your preferences (language, currency, display settings) to provide a personalized experience.
• Analytics Cookies: Collect anonymous usage statistics to understand how users interact with our platform and identify areas for improvement.
• Marketing Cookies: Track your interaction with marketing materials to measure campaign effectiveness and deliver relevant promotions (requires consent).

11.2 Managing Cookies

You can control cookie preferences through your browser settings. Most browsers allow you to refuse cookies or delete existing cookies. However, disabling essential cookies may prevent you from using certain platform features. To learn more about managing cookies, visit your browser's help documentation.

12. Children's Privacy

sor777 Services are strictly intended for adults aged 21 and older. We do not knowingly collect personal information from individuals under 21 years of age. If we discover that we have inadvertently collected data from a minor, we will delete it immediately and close the associated account. Parents or guardians who believe their child has provided information to sor777 should contact us at [email protected].

13. Changes to This Privacy Policy

sor777 reserves the right to amend this Privacy Policy at any time to reflect changes in our practices, technology, legal requirements, or business operations. When we make material changes, we will notify you by:

• Updating the "Last Updated" date at the top of this policy
• Sending an email notification to your registered email address
• Displaying a prominent notice on the Website homepage

Continued use of our Services after policy changes constitutes acceptance of the revised Privacy Policy. We encourage you to review this policy periodically to stay informed about how we protect your information.

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Data Protection Officer: [email protected]
• Customer Support: Available 24/7 via Live Chat on our Website
• Email: [email protected]

We are committed to resolving privacy concerns promptly and transparently. If you believe we have not adequately addressed your concerns, you have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.