Privacy Policy

1. Introduction

hig777 ("we," "us," or "our") operates the online gaming platform accessible at https://hig777.cam and through associated mobile applications. We are committed to safeguarding the privacy of every individual who visits our website, registers an account, or uses our services.

This Privacy Policy applies to all personal data we collect about you in connection with your use of hig777 services, whether you access them through a desktop browser, mobile browser, or native mobile application. It applies to all players located in Indonesia, our primary target market, as well as any other individuals who interact with our platform.

By creating an account or otherwise using hig777 services, you confirm that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you do not agree, you must discontinue use of our services and may request account closure by contacting our support team.

This policy should be read alongside our Terms & Conditions and our Responsible Gaming Policy, which together form the complete regulatory framework governing your relationship with hig777.

2. Definitions

• "Personal Data" — any information that can identify you directly or indirectly, including your name, national identity number (KTP), email address, IP address, device identifiers, and financial account details.
• "Processing" — any operation performed on personal data, including collection, storage, use, disclosure, transfer, or deletion.
• "Data Controller" — hig777, the entity that determines the purposes and means of processing your personal data.
• "Data Processor" — a third party that processes personal data on behalf of hig777 under a written data-processing agreement, such as payment gateway providers or KYC verification service providers.
• "Cookies" — small text files placed on your device by our website to store preferences, session information, and analytics data.
• "KYC" — Know Your Customer; the regulatory identity-verification process we use to confirm the identity and eligibility of account holders.

3. Personal Data We Collect

3.1 Registration Data

When you create a hig777 account, we collect: full legal name, date of birth, residential address (including city and province within Indonesia), email address, mobile phone number, chosen username, and a hashed version of your password. This information is mandatory to establish and maintain your account.

3.2 Identity Verification Data

To comply with anti-money-laundering (AML) obligations and our KYC policy, we collect: copies of government-issued identification (e.g., KTP — Indonesian National Identity Card), proof of address documents (utility bills, bank statements), and selfie photographs taken alongside your identification document. Document images are processed by our accredited KYC partner and stored securely.

3.3 Financial Data

We collect details about your payment instruments including bank account numbers (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata), e-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja), transaction amounts, timestamps, and reference numbers. We do not store full card numbers; card payments are tokenized by our PCI-DSS-compliant payment processor.

3.4 Gaming Activity Data

We record details of your gaming sessions including: games played, bet amounts, win/loss outcomes, session durations, wagering history, bonus usage, and responsible gaming tool activations (deposit limits, time-outs, self-exclusion requests). This data is used for account management, regulatory compliance, and responsible gaming monitoring.

3.5 Technical and Usage Data

When you access our platform, we automatically collect: IP address, browser type and version, operating system, device type and model, screen resolution, pages visited, time spent on pages, referral URLs, click-stream data, and session identifiers. This data is collected via cookies, web beacons, and server logs.

3.6 Communications Data

If you contact our support team via live chat, email ([email protected]), or WhatsApp, we retain records of those communications including message content, timestamps, and agent notes. This enables us to resolve disputes, maintain service quality, and comply with record-keeping obligations.

4. How We Collect Your Data

We collect personal data through the following channels:

• Directly from you — when you complete registration forms, submit KYC documents, make deposits or withdrawal requests, contact support, or participate in promotions.
• Automatically — through cookies, pixel tags, and server-side logging as you browse and interact with our website and mobile application.
• From third-party service providers — including our KYC verification partner (identity check results), payment processors (transaction confirmation and fraud signals), and analytics services (aggregated usage metrics).
• From public sources — such as sanctions lists, politically exposed persons (PEP) databases, and adverse media searches conducted as part of our AML screening obligations.

5. How We Use Your Personal Data

hig777 uses your personal data for the following purposes:

• Account creation and management — creating, maintaining, and administering your hig777 account, including processing deposits and withdrawals.
• Service delivery — enabling you to access and participate in sports betting, live casino, slot games, and other gaming services offered on the platform.
• Identity verification and fraud prevention — conducting KYC checks, verifying your age (21+ requirement), and detecting fraudulent or suspicious activity.
• Regulatory compliance — meeting anti-money-laundering (AML), counter-terrorism financing (CTF), and other applicable legal obligations.
• Responsible gaming — monitoring gaming patterns to identify potential problem gambling behavior, enforcing self-exclusion and deposit limits, and communicating responsible gaming resources.
• Customer support — responding to your inquiries, re solving disputes, and improving our service quality based on support interactions.
• Marketing and promotions — sending you relevant bonus offers, tournament announcements, and promotional communications where you have consented to receive them. You may opt out at any time by contacting support.
• Platform improvement — analyzing usage patterns, testing new features, and optimizing platform performance and user experience.
• Legal proceedings — establishing, exercising, or defending legal claims where necessary.

We will not use your personal data for purposes materially different from those listed above without first notifying you and, where required, obtaining your consent.

6. Legal Basis for Processing

hig777 processes your personal data under one or more of the following legal bases:

• Contractual necessity — processing is required to perform the contract between you and hig777 (i.e., to operate your account and deliver gaming services).
• Legal obligation — processing is required to comply with applicable laws and regulations, including AML, KYC, and age-verification requirements.
• Legitimate interests — processing is necessary for our legitimate business interests, such as fraud prevention, platform security, and service improvement, provided those interests are not overridden by your rights and freedoms.
• Consent — where we rely on your consent (for example, for marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

7. Data Sharing and Disclosure

7.1 Service Providers

We share personal data with carefully selected third-party service providers who assist us in operating the hig777 platform. These include payment processors (handling transactions via BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, and LinkAja), KYC and identity-verification providers, cloud hosting and infrastructure services, fraud detection and cybersecurity providers, and customer support software vendors. All service providers are bound by written data-processing agreements and are prohibited from using your data for any purpose other than providing their contracted services to hig777.

7.2 Regulatory and Law Enforcement Authorities

We may disclose personal data to governmental, regulatory, or law enforcement authorities when required by applicable law, court order, or other legal process. We will, where legally permissible, notify you of such disclosure requirements before complying.

7.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of hig777's business, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and any material changes to this Privacy Policy that result from it.

7.4 No Sale of Personal Data

hig777 does not sell, rent, or trade your personal data to third parties for their own marketing or commercial purposes. Any sharing of data is strictly limited to the purposes described in this Privacy Policy.

8. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. Our standard retention periods are as follows:

• Account and registration data — retained for the lifetime of your account and for five (5) years following account closure, to satisfy AML and regulatory record-keeping requirements.
• KYC and identity documents — retained for five (5) years following account closure or the completion of the relevant transaction, whichever is later.
• Financial transaction records — retained for five (5) years from the date of each transaction in compliance with anti-money-laundering regulations.
• Gaming activity logs — retained for three (3) years from the date of each gaming session, or longer if required for dispute resolution or regulatory purposes.
• Support communications — retained for two (2) years from the date of the last interaction.
• Technical and usage data — retained in identifiable form for twelve (12) months, after which it is anonymized or deleted.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in a manner that prevents reconstruction or re-identification.

9. Security Measures

hig777 employs industry-standard technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, or disclosure. Our security framework includes:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers.
• AES-256 encryption at rest for sensitive data stored in our databases, including identity documents and financial information.
• PCI-DSS compliant payment infrastructure ensuring card and bank payment data is handled to the highest financial security standard.
• Two-factor authentication (2FA) available for all accounts and mandatory for administrative access.
• Regular penetration testing and security audits conducted by independent cybersecurity firms.
• Role-based access controls limiting employee access to personal data to those with a legitimate operational need.
• 24/7 intrusion detection and monitoring with automated alerting for suspicious activity patterns.

While we take all reasonable steps to protect your data, no system is entirely immune to risk. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, we will notify you without undue delay and take all necessary steps to mitigate the impact.

10. Your Data Rights

As a hig777 user, you have the following rights with respect to your personal data. To exercise any of these rights, contact us at [email protected]. We will respond to verified requests within 30 days.

• Right of access — you may request a copy of all personal data we hold about you, together with information about how it is used.
• Right to rectification — you may request correction of any inaccurate or incomplete personal data we hold about you.
• Right to erasure — you may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to restriction of processing — you may ask us to restrict processing of your data in certain circumstances, such as while a dispute about its accuracy is being resolved.
• Right to data portability — you may request a structured, machine-readable copy of personal data you have provided to us, for transfer to another service provider.
• Right to object — you may object to processing based on our legitimate interests or for direct marketing purposes. We will cease such processing unless we can demonstrate compelling legitimate grounds.
• Right to withdraw consent — where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of processing carried out prior to withdrawal.

Please note that certain rights may be limited where we are required by law to retain data (for example, AML transaction records) or where exercising a right would adversely affect the rights of others.

11. Cookies Policy

11.1 What Are Cookies?

Cookies are small text files stored on your device when you visit our website. They help us recognize your browser, remember your preferences, maintain your login session, and collect analytics data to improve our platform.

11.2 Types of Cookies We Use

• Strictly necessary cookies — essential for the website to function, including session management and security tokens. These cannot be disabled without breaking core platform functionality.
• Performance and analytics cookies — help us understand how visitors interact with our platform by collecting aggregated, anonymized usage data such as page views, session duration, and navigation paths.
• Functionality cookies — remember your preferences such as language settings, display options, and last-visited game categories to improve your experience on return visits.
• Targeting and marketing cookies — used, with your consent, to deliver relevant promotional content and measure the effectiveness of our marketing campaigns. You may opt out of these at any time.

11.3 Managing Cookies

You can control and delete cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of our platform. For detailed guidance on managing cookies in your specific browser, refer to your browser's help documentation.

12. Minors and Age Restrictions

hig777 services are strictly intended for adults aged 21 years or older. We do not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from a minor, we will delete that data immediately and close the associated account.

If you are a parent or guardian and believe that your child has registered an account with hig777, please contact us immediately at [email protected] so that we can take appropriate action. Age verification is a mandatory step in our registration and KYC process, and we take our obligation to prevent underage gambling extremely seriously.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or business operations. When we make material changes, we will notify you by posting a prominent notice on our website and, where appropriate, by sending a notification to your registered email address.

The "Last Updated" date at the top of this page indicates when the current version came into effect. We encourage you to review this policy periodically. Your continued use of hig777 services after a policy update constitutes acceptance of the revised terms.

14. Contact and Data Requests

If you have any questions, concerns, or requests regarding this Privacy Policy or the way hig777 handles your personal data, please reach out to our dedicated privacy team:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 through the website chat widget
• Response Time: We aim to acknowledge all privacy requests within 48 hours and resolve them within 30 calendar days.

For data erasure or data portability requests, please include your full name, registered email address, and a description of your request so we can locate your records and respond efficiently.