777sl Privacy Policy — Your Data, Protected

This Privacy Policy ("Policy") describes how 777sl ("we", "us", "our") collects, processes, stores, and protects the personal data of individuals ("you", "Player", "Member") who access or use the online gambling platform available at https://777sl.club (the "Platform").

This Policy applies to all personal data processed in connection with:

• Registration and maintenance of a 777sl player account.
• Use of any game, sportsbook market, live dealer product, crash game, or promotional feature on the Platform.
• Deposit and withdrawal transactions conducted via Indonesian local banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata) or e-wallets (OVO, DANA, GoPay, ShopeePay, LinkAja).
• Any communication between you and 777sl's customer support team.
• Browsing or visiting the Platform, whether or not you hold a registered account.

By registering an account or continuing to use the Platform, you acknowledge that you have read and understood this Policy and consent to the data practices described herein. This Policy is incorporated by reference into 777sl's Terms & Conditions, which govern your overall relationship with the Platform.

This Policy applies exclusively to data processed by 777sl. It does not govern the data practices of third-party game studios, payment processors, or other external services whose links or integrations may appear on the Platform. We encourage you to review the privacy policies of those third parties independently.

For the purposes of this Policy, 777sl is the data controller — the entity that determines the purposes and means of processing your personal data. 777sl operates the Platform under an international gaming license and is responsible for ensuring that all personal data is handled in accordance with applicable data protection principles.

Questions, requests, or concerns about how your personal data is handled should be directed to:

• Data Inquiries Email: [email protected] — use the subject line "Privacy & Data Request" for fastest routing to the responsible team.
• Response Commitment: 777sl will acknowledge all data-related inquiries within 24 hours and will provide a substantive response within 30 calendar days of receipt.

777sl collects personal data across several categories. The table below provides a structured overview of the types of data we may hold about you, together with examples of specific data points within each category.

We do not intentionally collect sensitive special-category data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, biometric data (beyond the photograph on an identity document submitted for KYC), or health data — unless you voluntarily disclose health-related information in the context of a responsible-gaming support interaction, in which case that information is used solely to provide appropriate support and is not shared with third parties.

777sl collects personal data through the following channels and mechanisms:

• Direct submission by you. When you complete the registration form, update your profile, submit KYC documents, initiate a deposit or withdrawal, contact support, or participate in a survey or promotion, you directly provide us with personal data.
• Automated technical collection. When you access the Platform — whether logged in or as an anonymous visitor — our servers and analytics systems automatically log technical data including your IP address, device identifiers, browser configuration, and session activity. This data is collected via server logs, cookies, and similar tracking technologies (see Section 9 for full cookie details).
• Payment processor data. When you make a deposit or request a withdrawal via a local Indonesian bank or e-wallet, the relevant payment processor shares transaction confirmation data with us — including the sending account name, account number, transaction reference, amount, and timestamp. This data is necessary to match payments to your 777sl Account and to conduct AML checks.
• KYC verification provider data. If we use a third-party identity verification service to cross-check your submitted identity documents against authoritative databases, that provider may return a verification status, risk score, or flag to us. We do not receive raw third-party database records; we receive only the verification outcome.
• Game studio data. Licensed game studios integrated on the Platform (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft) transmit game-round results, RNG outputs, and bet/win records to 777sl systems. This data is used for dispute resolution, RTP compliance monitoring, and responsible-gaming analysis.

777sl processes your personal data only where a valid legal basis exists. The table below maps each processing purpose to its legal basis and the categories of data involved.

Where we rely on legitimate interests as a legal basis, we have conducted a balancing test to confirm that our interests do not override your fundamental privacy rights. You may request a summary of that balancing assessment by contacting us at the address in Section 14.

777sl shares your personal data only in the limited circumstances described below. In all cases, data sharing is governed by written data processing agreements that require the receiving party to protect your data to a standard equivalent to or greater than this Policy.

• Payment Processors. To facilitate deposits and withdrawals, we share your name, account number, and transaction amount with the relevant Indonesian bank (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata) or e-wallet provider (OVO, DANA, GoPay, ShopeePay, LinkAja). These entities process payment data under their own regulated frameworks as independently licensed financial institutions.
• KYC Verification Providers. Copies of your identity documents and facial photographs submitted during KYC are shared with our third-party identity verification partner solely for the purpose of document authenticity checks and age verification. KYC providers are contractually prohibited from using your data for any other purpose.
• Licensed Game Studios. To deliver game content and settle bets, we share a pseudonymous player identifier and session data with integrated studios (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Pocket Games Soft). Your full name, identity document data, and financial account details are not shared with game studios.
• IT Infrastructure & Security Providers. Cloud hosting, DDoS mitigation, and cybersecurity service providers may process technical data (including IP addresses and server logs) as data processors operating under our instructions. These providers are contractually restricted from accessing or using the data for any independent purpose.
• Regulatory and Law Enforcement Authorities. Where required by our international gaming license, by court order, or by a lawful request from a competent authority, we may disclose personal data to regulatory bodies or law enforcement agencies. We will notify you of such disclosure where legally permitted to do so.
• Business Transfers. In the event of a merger, acquisition, or sale of all or a material part of 777sl's business, personal data may be transferred to the successor entity as part of that transaction, subject to equivalent privacy protections being maintained. You will be notified of any such transfer in advance.

777sl retains personal data only for as long as is necessary to fulfill the purpose for which it was collected, or as required by law. The following retention periods apply:

When the applicable retention period expires, 777sl will securely delete or irreversibly anonymize the relevant data. Anonymized data (from which no individual can reasonably be identified) may be retained indefinitely for statistical and business intelligence purposes.

777sl maintains a comprehensive security framework to protect your personal data against unauthorized access, disclosure, alteration, or destruction. Our current technical and organizational security measures include:

• Transport Encryption. All data exchanged between your browser or device and 777sl servers is encrypted using TLS 1.2 or higher (256-bit encryption). The Platform enforces HTTPS on every page and uses HSTS (HTTP Strict Transport Security) headers to prevent protocol downgrade attacks.
• Data-at-Rest Encryption. Sensitive personal data stored in 777sl's database infrastructure — including identity document scans, bank account details, and KYC photographs — is encrypted at rest using AES-256 encryption.
• Access Controls. Access to systems holding personal data is restricted to authorized 777sl personnel on a strict need-to-know basis. All administrative access requires multi-factor authentication (MFA), and access logs are retained and reviewed regularly.
• Intrusion Detection & Penetration Testing. 777sl operates continuous intrusion detection systems (IDS) and engages independent security firms to conduct penetration tests on a regular scheduled basis. Identified vulnerabilities are remediated within defined SLA timeframes based on severity classification.
• DDoS Protection. The Platform is protected by enterprise-grade distributed denial-of-service (DDoS) mitigation infrastructure to ensure consistent availability and to prevent traffic-based attacks from being used as a vector for data exfiltration.
• Staff Training. All 777sl employees and contractors who handle personal data undergo mandatory data protection training at onboarding and annually thereafter. Confidentiality obligations are embedded in all employment and contractor agreements.
• Incident Response Plan. 777sl maintains a documented data breach incident response plan. In the event of a security incident that materially affects your personal data, we will notify affected players within 72 hours of becoming aware of the breach (where technically feasible) and provide details of the incident, data involved, and remediation steps taken.

777sl uses cookies and similar tracking technologies to operate the Platform effectively, maintain your login session, remember your preferences, detect fraud, and analyze Platform usage. The following categories of cookies are used:

• Strictly Necessary Cookies. These cookies are essential for the Platform to function. They manage your authenticated session (keeping you logged in securely), enforce security controls such as CSRF protection, and preserve your language and currency preferences. These cookies cannot be disabled without breaking core Platform functionality.
• Functional Cookies. These cookies remember your preferences to provide a more personalized experience — for example, your preferred sports league for the sportsbook or your last-used game lobby filter. Disabling these cookies will not prevent you from using the Platform but may reduce convenience.
• Analytics Cookies.777sl uses anonymized, first-party analytics to understand how players navigate the Platform — which pages are visited most frequently, where users encounter errors, and how game lobby designs affect engagement. This data is aggregated and does not identify individual players. No third-party analytics SDK transmits your personal data to external servers under this category.
• Security and Fraud-Detection Cookies. These cookies assign a pseudonymous device fingerprint to help identify unusual login patterns, multi-accounting attempts, and automated bot activity. They are classified as necessary for fraud prevention and cannot be disabled.

777sl does not use third-party advertising cookies, retargeting pixels, or cross-site tracking cookies that would allow advertisers to build a profile of your browsing activity across the wider internet.

Most browsers allow you to view, manage, and delete cookies via their privacy settings. Deleting strictly necessary cookies will log you out of your active 777sl session. For instructions on managing cookies in your specific browser, refer to the browser's help documentation.

As a 777sl player, you have the following rights in respect of your personal data. To exercise any of these rights, contact us at [email protected] with the subject line "Data Rights Request — [Your Username]".

777sl strictly prohibits use of the Platform by any person under the age of 21 years. We do not knowingly collect personal data from individuals under 21. Age verification is a mandatory step in the KYC process, and accounts where the holder is found to be underage are permanently closed with all data securely deleted (except records retained to prevent re-registration).

If you have reason to believe that a minor has registered an account or submitted personal data to 777sl, please notify us immediately at [email protected] with the subject line "Underage Account Report". We will investigate within 24 hours and take immediate action if the report is substantiated.

777sl's primary data infrastructure is hosted in server facilities located in jurisdictions with robust data protection frameworks. However, because 777sl integrates with game studios, KYC providers, and payment processors operating globally, your personal data may in some circumstances be transferred to or accessed from countries outside your country of residence.

Whenever personal data is transferred internationally, 777sl takes the following safeguards:

• Data processing agreements incorporating standard contractual clauses (SCCs) or equivalent international transfer mechanisms are in place with all recipients.
• Recipients are assessed for their data protection standards before any transfer relationship is established, and are subject to ongoing monitoring and contractual audit rights.
• Where a transfer destination does not provide an adequate level of data protection by default, additional technical safeguards — such as end-to-end encryption and pseudonymization — are applied before data leaves 777sl's primary infrastructure.
• Transfers of KYC identity documents are restricted to the minimum data necessary for the verification task and are not retained by the receiving KYC provider beyond the verification window.

You may request information about the specific international transfer safeguards applicable to your data by contacting us at [email protected] with the subject line "International Transfer Inquiry".

777sl reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform functionality. The following process applies to all revisions:

• Material Changes. Where a revision meaningfully affects your rights, the categories of data we collect, or the purposes for which we use your data, we will notify all registered members by email to the address on file at least seven calendar days before the revised Policy takes effect. The notification will summarize the key changes in plain English.
• Non-Material Changes. Minor corrections, clarifications, or formatting updates that do not alter the substance of any section may be made without advance email notice. The "Last Updated" date at the top of this page will always reflect the most recent revision.
• Continued Use as Acceptance. Your continued use of the Platform after the effective date of a revised Policy constitutes your acceptance of the updated terms. If you do not accept a material change, you should close your account before the effective date and request deletion of your data under Section 10.
• Version Archive. Previous versions of this Policy are archived by 777sl. You may request a copy of any prior version by contacting support with the date of the version you require.

For all privacy-related inquiries, data subject access requests, rectification requests, erasure requests, marketing opt-outs, and general questions about this Policy, please contact 777sl's data team using the details below. Our customer support team is available 24 hours a day, seven days a week, with Indonesian-speaking agents available on every shift.

• Privacy & Data Email: [email protected] — use the subject line "Privacy & Data Request" for fastest routing.
• General Support: [email protected] — for account, payment, and gameplay queries.
• Response Times: Acknowledgment within 24 hours; substantive response within 30 calendar days for data rights requests; within 1 business day for general support queries.
• Live Chat: Available within the Platform dashboard after login — fastest channel for real-time account queries.

If you believe that 777sl has handled your personal data in a manner that violates your rights and we have been unable to resolve your concern through direct contact, you have the right to lodge a formal complaint with the competent data protection authority in the jurisdiction governing 777sl's international license. Details of the relevant authority will be provided upon request.