Privacy Policy

1. Introduction

muso77 ("we," "us," or "our") is committed to protecting the privacy and security of every individual who accesses or uses the muso77 online gaming platform available at muso77.cam (the "Platform"). This Privacy Policy explains what personal information we collect from users ("you" or "Player"), why we collect it, how we use and store it, with whom we may share it, and what rights you have regarding your own data.

This Policy applies to all Indonesian players and to anyone who interacts with our Platform, customer support channels, promotional communications, or any other muso77 service. It should be read alongside our Terms & Conditions and our Responsible Gaming policy, both of which form part of the agreement between you and muso77.

By creating an account or using any part of the Platform, you confirm that you have read and understood this Privacy Policy and consent to the collection and processing of your personal information as described herein. If you do not consent, you must not use the Service.

2. Definitions

Throughout this Policy, the following terms carry the meanings below:

• "Personal Data" — any information that identifies or could reasonably identify a living individual, directly or indirectly (e.g., name, email address, bank account number, device identifier).
• "Processing" — any operation performed on Personal Data, including collection, storage, use, transfer, disclosure, or deletion.
• "Controller" — the entity that determines the purposes and means of Processing. For this Policy, muso77 is the Controller.
• "Processor" — a third party that Processes Personal Data on behalf of the Controller (e.g., our payment partners, analytics providers).
• "KYC" — Know Your Customer verification procedures required under international gaming and anti-money-laundering regulations.
• "Cookie" — a small text file placed on your device by the Platform to facilitate session management and analytics.
• "Indonesian Banking Partners" — payment service providers including BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata, OVO, DANA, GoPay, ShopeePay, and LinkAja through which Players transact.

3. Information We Collect

muso77 collects only the minimum Personal Data necessary to deliver a secure, compliant, and personalised gaming experience. The categories of data we collect are described below.

3.1 Information You Provide Directly

• Registration data: full legal name, date of birth, Indonesian residential address, email address, and mobile phone number.
• KYC documents: copies of your Indonesian National Identity Card (KTP), passport, or other government-issued identification; proof-of-address documents; and a selfie photograph for identity confirmation.
• Financial data: bank account numbers or e-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja) used for deposits and withdrawals. We do not store full card numbers — card payments are processed exclusively by PCI-DSS-compliant payment processors.
• Communications data: messages exchanged with customer support via live chat, WhatsApp, or email.
• Preference data: voluntary information such as your preferred sports leagues (e.g., BRI Liga 1, EPL), preferred game types, and communication preferences.

3.2 Information Collected Automatically

• Device and browser data: IP address, device type, operating system, browser type and version, screen resolution, and language settings.
• Session and usage data: pages visited, time on page, links clicked, games played, bet amounts, and Platform features accessed.
• Transaction logs: records of all deposit and withdrawal events, timestamps, amounts in IDR (Rp), and payment method used.
• Cookie and tracking data: session tokens, authentication cookies, and analytics data (see Section 8 for full Cookie Policy).

3.3 Information from Third Parties

• Payment verification data: transaction confirmations received from Indonesian banking partners to validate deposits and withdrawals.
• Fraud-prevention data: risk scores and signals from third-party fraud-detection services that help identify suspicious account activity.
• Identity verification data: responses from KYC verification service providers confirming the authenticity of identity documents.

4. How We Use Your Information

muso77 processes Personal Data only for specific, legitimate purposes. The table below maps each purpose to its lawful basis.

We will not use your Personal Data for any purpose incompatible with those listed above without first obtaining your explicit consent.

5. Sharing and Disclosure of Your Information

muso77 does not sell or rent Personal Data to any third party under any circumstances. We may share information with the categories of recipient listed below, strictly on a need-to-know basis and subject to confidentiality obligations.

5.1 Payment Service Providers

To process deposits and withdrawals, we share relevant financial identifiers with our Indonesian banking partners (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja, and others). These providers are independently regulated financial institutions bound by their own privacy and data security obligations under Indonesian banking law.

5.2 Identity Verification and KYC Providers

We engage regulated third-party KYC service providers to verify the authenticity of identity documents submitted during account registration and before first withdrawal. These providers receive only the data necessary to perform verification and are contractually prohibited from retaining or repurposing your documents.

5.3 Fraud Prevention and Security Partners

We share anonymised or pseudonymised data with fraud-detection and cybersecurity partners to identify suspicious patterns, prevent money laundering, and protect the integrity of the Platform for all players.

5.4 Legal and Regulatory Authorities

We may disclose Personal Data to law enforcement agencies, regulatory bodies, or courts of competent jurisdiction when legally compelled to do so, or where disclosure is necessary to protect the rights, property, or safety of muso77, our players, or the public. We will notify you of such disclosures where legally permissible.

5.5 Business Transfers

In the event of a merger, acquisition, or sale of substantially all of muso77's assets, your Personal Data may be transferred to the acquiring entity. We will notify you of any such transfer and ensure the receiving entity is bound by privacy obligations at least as protective as those in this Policy.

5.6 Aggregate and Anonymised Data

We may share aggregate, de-identified statistical data (e.g., "65% of players from Jakarta prefer live dealer games") with business partners or publish it publicly. Such data cannot reasonably be used to re-identify any individual Player.

6. Data Retention

muso77 retains Personal Data only for as long as necessary to fulfil the purposes for which it was collected, comply with legal and regulatory obligations, resolve disputes, and enforce our agreements. The retention periods below reflect both our operational needs and applicable international gaming and financial regulations.

Upon expiry of applicable retention periods, Personal Data is securely deleted or irreversibly anonymised. Where deletion is not immediately possible due to backup schedules, data is isolated and protected from further processing until deletion can be completed.

7. Data Security

muso77 implements a layered security framework to protect your Personal Data against unauthorised access, accidental loss, alteration, or disclosure. Our security measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and our servers.
• AES-256 encryption for sensitive data stored at rest, including KYC documents and financial records.
• Multi-factor authentication (MFA) options for player accounts and mandatory MFA for all internal administrative access.
• Role-based access controls (RBAC) ensuring staff can only access Personal Data relevant to their job function.
• Regular penetration testing conducted by independent third-party security specialists at least twice per year.
• Continuous 24/7 monitoring by our dedicated security operations team for anomalous activity, intrusion attempts, and data exfiltration signals.
• Secure data centres with physical access controls, redundant power, and disaster recovery capabilities.

Despite these measures, no online platform can guarantee absolute security. If you suspect unauthorised access to your muso77 account, please change your password immediately and contact our support team. We will investigate and respond to all reported security incidents within 24 hours.

In the event of a data breach that poses a high risk to your rights and freedoms, we will notify affected Players without undue delay, explaining the nature of the breach, the data affected, and the steps we are taking to mitigate harm.

8. Cookie Policy

muso77 uses cookies and similar technologies (collectively, "Cookies") to operate core Platform functions, remember your preferences, and understand how the Platform is used. This section explains the types of Cookies we deploy and your options for managing them.

8.1 Types of Cookies We Use

8.2 Managing Cookies

You may configure your browser to refuse all cookies or to alert you when cookies are being set. Disabling strictly necessary cookies will impair or prevent your ability to log in and use the Platform. Analytics and functional cookies can be disabled without affecting core Platform access.

muso77 does not use cross-site tracking cookies or embed third-party advertising network cookies. Any analytics tools we use are configured to anonymise IP addresses and respect browser Do Not Track signals.

9. Your Privacy Rights

As a muso77 Player, you have the following rights with respect to your Personal Data. To exercise any of these rights, contact our support team — contact details are provided in Section 12.

9.1 Right of Access

You may request a copy of all Personal Data we hold about you, including the categories of data, the purposes for which it is processed, and the recipients with whom it has been shared. We will provide this information within 30 days of a verified request.

9.2 Right to Rectification

If any of your Personal Data is inaccurate or incomplete, you have the right to request correction. Minor details (such as email address or phone number) can be updated directly in your account settings. KYC-related corrections may require re-submission of supporting documents.

9.3 Right to Erasure

You may request deletion of your Personal Data where: (a) it is no longer necessary for the purposes it was collected; (b) you withdraw consent and no other lawful basis exists; or (c) the data has been unlawfully processed. Note that we may be legally obligated to retain certain records (e.g., transaction history for 7 years) and cannot erase those particular datasets on request.

9.4 Right to Restriction of Processing

You may request that we restrict processing of your Personal Data in specific circumstances, such as while we investigate a rectification request or assess an objection. During restriction, we will store but not actively use the data.

9.5 Right to Data Portability

Where processing is based on your consent or the performance of a contract, and is carried out by automated means, you may request that we provide your Personal Data in a structured, commonly used, machine-readable format (such as JSON or CSV).

9.6 Right to Object

You have the right to object to processing based on our legitimate interests, including profiling for responsible gaming monitoring. You may also withdraw consent for marketing communications at any time by clicking "unsubscribe" in any promotional email or by contacting support.

9.7 Rights Related to Automated Decision-Making

muso77 uses automated systems for fraud detection and account risk scoring. These systems may result in actions such as account flagging or withdrawal holds. You have the right to request human review of any decision made purely by automated means that significantly affects you.

10. International Data Transfers

muso77 primarily serves Indonesian players, and our core infrastructure and support operations are aligned to WIB (UTC+7). Some of our third-party service providers — including KYC verification platforms, analytics tools, and game software providers such as Pragmatic Play, Evolution Gaming, and Microgaming — may process data in jurisdictions outside Indonesia.

When Personal Data is transferred internationally, we ensure appropriate safeguards are in place, including:

• Contractual clauses binding the receiving party to data protection standards equivalent to those in this Policy.
• Transfers only to jurisdictions or entities with independently certified security frameworks (e.g., ISO 27001, SOC 2 Type II).
• Where possible, pseudonymisation or anonymisation of data before cross-border transfer to minimise privacy risk.

11. Children and Underage Players

muso77 strictly prohibits use of its Platform by anyone under the age of 21. We do not knowingly collect, process, or retain Personal Data from individuals below this age. Our registration flow includes mandatory date-of-birth entry and KYC age verification to enforce this requirement.

If you have reason to believe that a person under 21 has registered an account or provided Personal Data to muso77, please notify us immediately at the contact details in Section 12. We will investigate and, where confirmed, delete all associated data without delay and permanently close the account.

Parents and guardians are encouraged to use parental control software to restrict access to online gaming platforms on devices shared with minors. muso77 is not liable for access that circumvents such controls, but we take all reported cases of underage access seriously and act swiftly to address them.

12. Contact and Complaints

If you have any questions, concerns, or requests relating to this Privacy Policy or the way muso77 processes your Personal Data, please reach out to our dedicated privacy support team:

muso77 Privacy Support
Email: [email protected]
Support Hours: 24/7 via live chat and email (WIB timezone, 08:00–22:00 priority response)
After-hours email response within 12 hours

We will acknowledge all privacy-related requests within 48 hours and aim to resolve them within 30 calendar days. For complex requests requiring additional verification, we may extend this period by a further 30 days and will inform you of the extension and reason.

If you are dissatisfied with our response, you have the right to escalate your complaint to an independent dispute resolution body or the relevant supervisory authority in your jurisdiction.

13. Changes to This Privacy Policy

muso77 reviews this Privacy Policy at least once per year and whenever material changes occur to our data practices, applicable law, or the services we offer. When we make significant changes, we will:

• Update the "Effective Date" and "Last Reviewed" dates at the top of this page.
• Send an email notification to all active account holders summarising the key changes.
• Display a prominent notice on the Platform for at least 14 days following the update.

Minor clarifications or corrections that do not affect how we process Personal Data will be published without individual notification. We encourage you to review this Policy periodically to stay informed about how muso77 protects your information. Your continued use of the Platform following notification of material changes constitutes acceptance of the updated Policy.

If you do not agree with changes to this Policy, you should cease using the Service and contact support to close your account and request data deletion where permissible under applicable retention requirements.