At smg77, your personal data is handled with the same standard of care we apply to your funds. This Privacy Policy explains exactly what information we collect, why we collect it, how it is used, who it may be shared with, and what rights you hold over your own data.
These cards summarize smg77's core privacy commitments. They are an overview only — the full legal text in the sections below takes precedence in all cases.
All data transmitted between your device and smg77's servers is encrypted using industry-standard TLS 1.2 / TLS 1.3 protocols. Sensitive data such as payment details and identity documents are encrypted at rest using AES-256. No unencrypted personal data traverses smg77's network.
smg77 collects only the data that is strictly necessary for account operation, KYC compliance, payment processing, and responsible gaming monitoring. We do not build behavioral marketing profiles for sale to third parties. Data that no longer serves a legitimate purpose is deleted or anonymized on schedule.
You have the right to access, correct, export, or request deletion of your personal data at any time. smg77 honors all data subject requests within 30 days of receipt. Requests can be submitted by email to [email protected] with the subject line "Data Request."
smg77 does not sell, rent, or trade your personal data to any third party for commercial gain. Data may be shared with carefully vetted service providers — payment processors, KYC verification partners, fraud detection systems — but only under strict contractual data-processing agreements that prohibit secondary use.
smg77 uses cookies and similar tracking technologies exclusively for session management, fraud prevention, and anonymous Platform analytics. We do not deploy third-party advertising cookies or cross-site tracking pixels. A full list of cookies in use is maintained in Section 8 of this Policy.
Promotional communications from smg77 — including bonus offers, match previews, and seasonal promotions — are only sent to Players who have opted in. You may withdraw marketing consent at any time by updating your account notification preferences or by cont acting smg77 support. Opt-out requests are processed within 5 business days.
This Privacy Policy ("Policy") describes how smg77 ("smg77", "we", "us", "our"), the operator of the online gaming platform at https://smg77.cam ("Platform"), collects, processes, stores, shares, and protects personal data relating to users ("Player", "you", "your") of the Platform.
smg77 is committed to handling personal data responsibly and in accordance with applicable international data protection standards, including principles derived from the General Data Protection Regulation (GDPR) where relevant. While Indonesia's primary data protection framework is the Personal Data Protection Law (Undang-Undang Perlindungan Data Pribadi — UU PDP), smg77 has chosen to align its data practices with the higher GDPR standard to offer the strongest available protection to all Players, including those based in Indonesia.
By registering an Account or using the Platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not agree with any part of this Policy, you must not use the Platform.
The following terms have the meanings set out below throughout this Policy:
Any information that identifies or can reasonably identify a living individual, directly or indirectly — including but not limited to full name, email address, phone number, national identity number (KTP), IP address, and payment account details.
Any operation performed on Personal Data, including collection, recording, storage, use, disclosure, erasure, or destruction, whether by automated means or otherwise.
smg77, as the entity that determines the purposes and means by which Personal Data is processed in connection with the Platform.
Any third-party service provider that processes Personal Data on smg77's behalf and under smg77's documented instructions, such as payment processors, KYC verification partners, and cloud infrastructure providers.
Know Your Customer — identity and age verification procedures required before withdrawal processing, including review of KTP, proof of address, and payment method ownership documentation.
A freely given, specific, informed, and unambiguous indication of the Player's agreement to the processing of their Personal Data for a stated purpose, given by a clear affirmative action such as ticking a checkbox or submitting a registration form.
smg77 collects the following categories of Personal Data in connection with your use of the Platform:
| Category | Examples | Collection Point |
|---|---|---|
| Identity Data | Full name, date of birth, KTP number, selfie with ID document | Registration; KYC verification |
| Contact Data | Email address, phone number, city of residence (e.g., Jakarta, Surabaya, Bandung) | Registration; account settings |
| Financial Data | Bank account name and number (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon), e-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja), transaction history, deposit and withdrawal amounts in IDR/Rp | Deposit and withdrawal forms; payment processor integrations |
| Technical Data | IP address, device type, browser type and version, operating system, session duration, referring URL | Automatic collection via Platform access logs and cookies |
| Usage Data | Games played, wagers placed, bet history, bonus claims, login timestamps | Automatic collection via Platform activity logging |
| Communications Data | Live chat transcripts, email correspondence, support ticket content | Customer support interactions |
| Responsible Gaming Data | Self-exclusion status, deposit limit settings, time-out periods, problem gambling referrals | Responsible gaming tool activations; support interactions |
smg77 does not collect special category data (such as health data, biometric data, or political opinions) except where an identity document submitted for KYC incidentally contains such information — in which case that information is not extracted, processed, or stored separately from the identity document itself.
smg77 uses your Personal Data for the following purposes:
smg77 processes your Personal Data on one or more of the following legal bases:
| Legal Basis | Processing Activities Covered |
|---|---|
| Contract Performance | Account creation and management; deposit and withdrawal processing; game access; customer support. |
| Legal Obligation | KYC and AML compliance; retention of financial records; responding to lawful regulatory or law enforcement requests. |
| Legitimate Interests | Fraud detection and prevention; network and information security; responsible gaming monitoring; Platform analytics using anonymized data. |
| Consent | Marketing communications; non-essential cookies and analytics trackers. |
Where smg77 relies on legitimate interests as a legal basis, we have conducted a balancing assessment and concluded that our interests do not override your fundamental rights and freedoms, particularly given the security and responsible gaming benefits the relevant processing delivers to Players.
smg77 does not sell, rent, or commercially trade your Personal Data. We share Personal Data only in the following circumstances:
All third-party Data Processors engaged by smg77 are required to execute data processing agreements that include: purpose limitation clauses, confidentiality obligations, security requirements at least as stringent as smg77's own standards, and an obligation to assist smg77 in honoring data subject requests.
smg77 retains Personal Data only for as long as is necessary to fulfill the purpose for which it was collected, or as required by applicable law. The following retention schedule applies:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account and Identity Data | Duration of Account + 5 years after closure | AML/CTF legal obligations; dispute resolution |
| Financial Transaction Records | 7 years from the date of transaction | Financial record-keeping obligations |
| KYC Documents | 5 years after Account closure | AML/CTF regulatory requirements |
| Customer Support Communications | 3 years from the date of last contact | Complaint handling; quality assurance |
| Technical and Usage Logs | 13 months from collection | Security monitoring; fraud detection |
| Marketing Consent Records | Until consent is withdrawn + 3 years | Proof of consent for regulatory purposes |
| Responsible Gaming Records | Duration of self-exclusion + 5 years | Enforcement of exclusion; player welfare |
Upon expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymized. Anonymized aggregate data (from which no individual can be identified) may be retained indefinitely for Platform analytics and improvement purposes.
smg77 uses cookies and similar technologies (local storage, session tokens) to operate the Platform securely and efficiently. The cookies deployed on the smg77 Platform fall into the following categories:
| Cookie Type | Purpose | Consent Required? |
|---|---|---|
| Strictly Necessary | Session management, authentication tokens, CSRF protection, load balancing. The Platform cannot function without these cookies. | No — essential operation |
| Functional | Remembering your preferred language, display settings, and last-visited game category. | No — core user experience |
| Analytics | Anonymous traffic measurement (page views, session duration, device breakdown) used solely to improve Platform performance. | Yes — opt-in at registration |
| Fraud Prevention | Device fingerprinting signals used to detect bot activity, account takeover attempts, and bonus abuse patterns. | No — legitimate interest (security) |
smg77 does not deploy third-party advertising cookies, social media tracking pixels, or cross-site tracking technologies. You may manage or delete cookies through your browser settings at any time; however, disabling strictly necessary cookies will impair Platform functionality.
smg77 implements a comprehensive set of technical and organizational security measures to protect your Personal Data against unauthorized access, disclosure, alteration, and destruction:
While smg77 takes all commercially reasonable steps to secure your data, no internet-based platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your own account credentials and for notifying smg77 immediately at [email protected] if you suspect unauthorized access to your Account.
As a Player whose Personal Data is processed by smg77, you hold the following rights. To exercise any of these rights, contact smg77 at [email protected] with the subject line "Data Request — [Right Name]". smg77 will respond within 30 days.
Request a copy of all Personal Data smg77 holds about you, together with information about how it is processed.
Request correction of any inaccurate or incomplete Personal Data held in your Account or KYC records.
Request deletion of your Personal Data where it is no longer necessary for the purpose it was collected, subject to legal retention obligations.
Object to processing based on legitimate interests, including profiling for fraud detection, where your specific circumstances warrant it.
Receive a copy of the Personal Data you provided to smg77 in a structured, machine-readable format (CSV or JSON).
Request that smg77 temporarily suspend processing of your data while an accuracy dispute or objection is being resolved.
Please note that certain rights are subject to limitations. For example, smg77 cannot delete financial transaction records that must be retained under AML regulations, and cannot erase data while an Account investigation is ongoing. smg77 will always explain any limitation that applies to your specific request.
smg77 operates as an internationally licensed platform. Your Personal Data may be transferred to and processed in countries outside Indonesia, including the jurisdiction where smg77's servers and Data Processors are located. Where such transfers occur, smg77 ensures that appropriate safeguards are in place to protect your data, including:
By using the Platform, you acknowledge and consent to the transfer of your Personal Data to countries outside Indonesia as described in this section.
The smg77 Platform is strictly intended for individuals aged 21 years or older. smg77 does not knowingly collect Personal Data from any person under the age of 21. If smg77 becomes aware that Personal Data has been collected from an individual under 21 — whether through registration fraud or any other means — all data associated with that individual will be permanently deleted and the Account immediately closed.
If you are a parent or guardian and believe that a minor in your care has registered on the Platform or provided Personal Data to smg77, please contact us immediately at [email protected] with the subject line "Minor Account Report." We will investigate and take remedial action without delay.
smg77 reserves the right to update or replace this Privacy Policy at any time to reflect changes in our data processing practices, new legal requirements, or updates to the Platform's features. The revised Policy will be published on the Platform with an updated "Last Updated" date at the top of this page.
Where a proposed change materially affects your rights or the way smg77 processes your Personal Data, we will provide at least 14 days' advance notice via email to your registered address before the change takes effect. Your continued use of the Platform after the effective date of any amendment constitutes your acknowledgment of the revised Policy. If you do not accept the revised Policy, you must close your Account before the amendment comes into effect.
For any questions about this Privacy Policy, to exercise a data subject right, or to submit a privacy complaint, please contact the smg77 Data Protection team using the details below:
If you are not satisfied with smg77's response to a privacy complaint, you have the right to escalate your complaint to the relevant data protection supervisory authority in your jurisdiction. Players based in Indonesia may direct unresolved complaints to the Kementerian Komunikasi dan Digital (Ministry of Communication and Digital Affairs) as the supervisory body responsible for personal data protection under UU PDP.
Our FAQ covers the most common questions about account security and data handling. You can also review our full Terms & Conditions or visit our Responsible Gaming page for tools to stay in control of your play.
21+ only | SSL Encrypted | smg77 — Trusted & Secure Platform