Privacy Policy — gen777

1 Definitions

Throughout this Privacy Policy, the following terms carry the meanings set out below:

• "gen777", "we", "us", "our" — the online betting and casino platform operated at https://gen777.cam, including its parent entity, subsidiaries, and data-processing affiliates.
• "Player", "you", "your" — any individual who visits, registers on, or uses any part of the gen777 platform.
• "Personal Data" — any information that directly or indirectly identifies a living individual, including name, date of birth, email address, residential address, payment details, device identifiers, and behavioural data.
• "Processing" — any operation performed on Personal Data, including collection, storage, use, transmission, alteration, or deletion.
• "Controller" — the entity that determines the purposes and means of processing Personal Data. For data collected via gen777, the Controller is gen777.
• "Processor" — a third party that processes Personal Data on behalf of gen777, such as payment service providers, KYC verification partners, and cloud hosting providers.
• "KYC" — Know Your Customer procedures, comprising identity verification, age verification, and source-of-funds checks required under anti-money-laundering regulations.
• "Cookie" — a small data file placed on your device by a website to remember user preferences, session state, and analytical information.

2 Data We Collect

gen777 collects the following categories of personal data in the course of operating its platform and providing services to players across Indonesia:

3 How We Collect Data

gen777 collects personal data through the following channels and mechanisms:

• Direct Submission: Information you provide voluntarily when registering an account, completing KYC verification, making a deposit or withdrawal, or contacting our support team.
• Automated Collection: Technical and behavioural data gathered automatically when you access or interact with the gen777 platform, including through cookies, web beacons, and server log files.
• Payment Processors: Transaction confirmation data received from payment partners including local Indonesian banks (BCA, BRI, BNI, Mandiri) and e-wallet providers (OVO, DANA, GoPay) when y ou initiate a financial transaction.
• KYC Verification Partners: Identity confirmation data returned by our third-party KYC verification service providers after you submit identity documents for review.
• Fraud Detection Systems: Device fingerprinting and behavioural signals gathered by our automated fraud and anti-money-laundering detection systems during normal platform use.
• Third-Party Game Studios: Aggregated gameplay and session data shared by licensed game providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft, to the extent necessary for dispute resolution and game-integrity purposes.

4 Purpose of Processing

gen777 processes your personal data only for defined, legitimate purposes. The following table sets out each processing purpose alongside the data categories involved:

• Account Management: To create, maintain, and administer your gen777 player account, including authentication, password resets, and account preference settings.
• Payment Processing: To facilitate deposits and withdrawals in Indonesian Rupiah (IDR) via your chosen local bank or e-wallet, and to maintain an accurate transaction ledger for your account.
• Identity Verification (KYC): To verify your identity and age (21+) in compliance with anti-money-laundering regulations, confirm that you are a resident of Indonesia, and prevent fraudulent account creation.
• Fraud and Security: To detect, investigate, and prevent fraudulent activity, money laundering, account takeover, collusion, and other prohibited conduct on the platform.
• Regulatory Compliance: To meet our obligations under the international gaming licence under which gen777 operates, including record-keeping, reporting, and responding to lawful requests from regulatory authorities.
• Customer Support: To respond to your enquiries, resolve disputes, process complaints, and provide ongoing assistance via our 24/7 support channels, which are staffed by English- and Indonesian-speaking agents.
• Responsible Gaming: To monitor betting patterns for signs of problem gambling behaviour, implement deposit limits and self-exclusion tools, and fulfil our duty of care to players. See our Responsible Gaming page for full details.
• Platform Improvement: To analyse aggregated and anonymised usage data for the purpose of improving platform performance, game selection, payment method availability, and overall user experience.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates by email, where you have provided explicit consent and have not subsequently withdrawn it. You may opt out of marketing communications at any time by contacting our support team.

5 Legal Basis for Processing

gen777 relies on the following legal bases when processing your personal data, consistent with internationally recognised data-protection principles:

1. Contractual Necessity: Processing that is required to perform our contract with you — specifically, to operate your player account, process deposits and withdrawals, and deliver the betting and gaming services you have requested. Without this processing, we cannot provide the Services.
2. Legal Obligation: Processing required to comply with applicable laws and regulations, including anti-money-laundering obligations, KYC requirements under our gaming licence, and lawful orders from regulatory or law-enforcement authorities.
3. Legitimate Interests: Processing carried out to pursue gen777's legitimate business interests, where those interests are not overridden by your rights and freedoms. This includes fraud prevention, platform security, responsible gaming monitoring, and internal analytics for service improvement.
4. Consent: Processing based on your freely given, specific, and informed consent — primarily for marketing communications and for the placement of non-essential cookies. You may withdraw consent at any time, and withdrawal will not affect the lawfulness of processing carried out prior to withdrawal.

6 Data Sharing & Third Parties

gen777 does not sell your personal data. We share data only with carefully selected third parties where such sharing is necessary for the operation of the platform or required by law. The categories of recipients are as follows:

• Payment Service Providers: Local Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Permata, BSI) and e-wallet platforms (OVO, DANA, GoPay, ShopeePay, LinkAja) receive transaction data necessary to process your deposits and withdrawals. These providers operate under their own privacy policies and are bound by applicable financial regulations.
• KYC and Identity Verification Providers: Specialist third-party verification services receive copies of identity documents and related data for the purpose of confirming your identity and age. All KYC partners are bound by confidentiality agreements and data-processing contracts.
• Game Studio Partners: Licensed studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft receive the minimum data necessary to deliver their games, settle disputes, and ensure game integrity. No marketing data is shared with studio partners.
• Cloud Infrastructure and Security Providers: gen777 uses reputable international cloud hosting and cybersecurity providers to operate its platform. These providers process data as Processors under contract and may not use your data for their own purposes.
• Regulatory and Law-Enforcement Authorities: gen777 will disclose personal data to competent authorities — including gaming regulators, financial intelligence units, and law-enforcement agencies — when required to do so by law, court order, or valid regulatory instruction. Where legally permissible, we will notify you of such disclosure.
• Professional Advisors: Legal counsel, auditors, and compliance consultants may access data on a strictly need-to-know basis under binding confidentiality obligations.

7 Data Retention

gen777 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law and our gaming licence obligations. The following retention periods apply as a general guide:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to an identified individual. Anonymised data may be retained indefinitely for aggregated analytical purposes.

8 Data Security

gen777 implements a comprehensive suite of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. Our security programme includes the following controls:

• Encryption in Transit: All communications between your device and gen777 servers are encrypted using 256-bit TLS/SSL protocols. This protects login credentials, financial data, and personal information during transmission.
• Encryption at Rest: Sensitive personal data stored on gen777 infrastructure — including identity documents and financial records — is encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data is restricted to authorised personnel who require it to perform their job functions. Role-based access controls, multi-factor authentication, and regular access reviews are enforced across all internal systems.
• Penetration Testing: gen777 commissions independent security audits and penetration tests on a regular basis to identify and remediate potential vulnerabilities in our platform infrastructure.
• Incident Response: gen777 maintains a documented data-breach response procedure. In the event of a data breach that poses a risk to your rights and freedoms, we will notify affected players and the relevant supervisory authority within the timeframe required by applicable regulations.
• Staff Training: All gen777 personnel with access to personal data receive regular data-protection and security-awareness training as part of their onboarding and ongoing compliance obligations.

9 Cookies & Tracking Technologies

gen777 uses cookies and similar tracking technologies to operate the platform, remember your preferences, and analyse platform usage. The following cookie categories are in use:

• Strictly Necessary Cookies: Essential for the platform to function. These include session authentication cookies, CSRF protection tokens, and load-balancing cookies. These cookies cannot be disabled without preventing the platform from working correctly.
• Functional Cookies: Used to remember your preferences, such as your chosen language, preferred deposit method, and display settings. Disabling these cookies will not prevent you from using the platform but may result in a less personalised experience.
• Analytical Cookies: Used to collect anonymised and aggregated data about how players navigate and interact with the gen777 platform. This data helps us identify areas for improvement. These cookies are placed only with your consent.
• Fraud Prevention Cookies: Used by our security systems to detect automated bots, account-takeover attempts, and other suspicious activity patterns. These form part of our legitimate interest in platform security.

You may manage your cookie preferences through your browser settings. Most modern browsers allow you to block, delete, or receive a notification before a cookie is placed. Please note that disabling strictly necessary or fraud-prevention cookies may impair your ability to use the platform. gen777 does not currently respond to browser "Do Not Track" signals, as no uniform technical standard for such signals has been established.

10 Your Data Rights

As a gen777 player, you hold the following rights over your personal data. To exercise any of these rights, please contact our support team using the details in Section 13. We will respond to all verified requests within thirty (30) calendar days.

• Right of Access: You may request a copy of the personal data gen777 holds about you, along with information about how that data is being used and with whom it has been shared.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or supplement it without undue delay.
• Right to Erasure ("Right to Be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where processing is unlawful. This right is subject to overriding legal retention obligations.
• Right to Restrict Processing: You may request that gen777 restrict the processing of your personal data in specific circumstances — for example, while the accuracy of the data is being contested, or while an objection to processing is being evaluated.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity, and is carried out by automated means, you have the right to receive your personal data in a structured, machine-readable format and to request that it be transmitted to another controller where technically feasible.
• Right to Object: You have the right to object to the processing of your personal data where that processing is based on gen777's legitimate interests. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Rights Related to Automated Decision-Making: Where gen777 uses automated systems to make decisions that significantly affect you — such as account suspension triggered by fraud-detection algorithms — you have the right to request human review of that decision.

11 Minors & Age Restriction

gen777 operates a strict 21+ age policy. Our platform is not intended for, and does not knowingly collect personal data from, individuals under the age of 21. The following safeguards are in place:

• All Players are required to confirm they are aged 21 or over at the point of account registration. This declaration forms part of the binding agreement between the Player and gen777.
• KYC verification — which requires a government-issued identity document confirming date of birth — is mandatory before any withdrawal is processed. Where age verification reveals that an account holder is under 21, the account will be closed immediately, all pending wagers will be voided, and any deposited funds will be returned to the originating payment method.
• If gen777 becomes aware or has reason to suspect that personal data has been collected from a minor, we will take immediate steps to delete that data and close the associated account.
• Parents and guardians who are concerned that a minor may have accessed gen777 should contact our support team at [email protected] immediately. We will investigate and act on all such reports as a priority matter.

12 Policy Amendments

gen777 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data-processing practices, applicable law, or regulatory requirements. The following process governs material changes:

• When a material change is made to this Privacy Policy, gen777 will notify registered Players by email to the address associated with their account, by an in-platform notification, or both, prior to the change taking effect.
• The "Last Updated" date shown at the top of this page will be revised to reflect the date of each amendment. We encourage you to review this page periodically to stay informed of how your data is being used.
• Continued use of the gen777 platform after the effective date of an amendment constitutes your acceptance of the revised Privacy Policy. If you do not accept the revised terms, you should cease using the platform and may request account closure in accordance with our Terms & Conditions.
• Changes required by a regulatory authority or by applicable law may take immediate effect without prior notice. In such cases, gen777 will inform affected Players as soon as practicable.

13 Contact & Data Protection Officer

If you have any questions, concerns, or requests relating to this Privacy Policy or gen777's data-processing practices, please contact us using the details below. All enquiries will be acknowledged within two (2) business days and resolved within thirty (30) calendar days wherever possible.

For questions specifically about your data rights under Section 10 of this Policy, please include your registered account email address and a brief description of your request so we can direct it to the appropriate team member promptly.

For responsible gaming concerns or to request a self-exclusion, please visit our dedicated Responsible Gaming page, which provides full details of the tools and support options available to gen777 players across Indonesia.