Privacy Policy

1. Introduction and Scope

This Privacy Policy ("Policy") explains how cmd77 ("we," "us," "our," or "Company") collects, uses, stores, shares, and protects personal information obtained from users ("you," "your," or "Player") of our online gaming platform available at https://cmd77.cam (the "Platform"). This Policy applies to all personal data processed by cmd77 in connection with your use of our services, including account registration, deposits, withdrawals, gameplay, customer support interactions, and marketing communications.

By creating an account or using cmd77 services, you acknowledge that you have read, understood, and consent to the data practices described in this Privacy Policy. If you do not agree with our data handling practices, you must not use the Platform and should close your account immediately. We are committed to protecting your privacy rights in accordance with international data protection standards including GDPR (General Data Protection Regulation) principles, even though cmd77 operates under international gaming licenses outside the European Union.

This Privacy Policy should be read in conjunction with our Terms & Conditions, which govern your overall use of cmd77 services. For Indonesian residents, this Policy reflects our understanding of Indonesia's data protection landscape and our commitment to handling your information with the highest standards of care and security.

2. Information We Collect

cmd77 collects several categories of personal information necessary to provide our gaming services, comply with legal and regulatory obligations, prevent fraud, and improve user experience. The types of information we collect include:

2.1 Information You Provide Directly

• Account Registration Data: When you create an account, we collect your full legal name, date of birth, gender, residential address, email address, phone number, username, and password. This information is required to establish your identity, verify you meet age requirements (21+ for Indonesian residents), and enable account access.
• Identity Verification (KYC) Documents: To comply with international gaming regulations and anti-money laundering (AML) requirements, we collect copies of government-issued identification (Indonesian KTP national ID card, passport, or driver's license), proof of address documents (utility bills, bank statements), selfie photographs for biometric verification, and proof of payment method ownership.
• Financial Information: We collect payment method details including bank account numbers, e-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja), transaction histories, deposit amounts, withdrawal requests, and betting activity. Financial data is used solely for processing payments and ensuring transaction security.
• Communication Records: When you contact customer support via live chat, email, WhatsApp, or Telegram, we retain records of your communications including message content, timestamps, and any attachments you provide. This helps us resolve issues efficiently and maintain service quality.
• Marketing Preferences: You may choose to opt in or opt out of promotional emails, SMS notifications, and push notifications. Your consent preferences are stored and honored in accordance with this Policy.

2.2 Information Collected Automatically

• Technical and Device Information: We automatically collect your IP address, device type (mobile, tablet, desktop), operating system (Android, iOS, Windows, macOS), browser type and version, screen resolution, device identifiers, and network provider information. This data helps us optimize platform performance for Indonesian users and detect suspicious access patterns.
• Usage and Behavioral Data: We track pages visited, games played, bet amounts and outcomes, session duration, click patterns, deposit and withdrawal frequency, login timestamps, and navigation paths through the Platform. Behavioral analytics help us understand user preferences, improve game offerings, and identify potential problem gambling patterns for responsible gaming intervention.
• Cookies and Tracking Technologies: cmd77 uses cookies (small text files stored on your device), local storage, session tokens, and similar technologies to maintain login sessions, remember preferences, personalize content, analyze traffic patterns, and deliver targeted advertising. You can control cookie settings through your browser, though disabling certain cookies may limit Platform functionality.
• Geolocation Data: We may collect approximate location data based on your IP address to verify you are accessing the Platform from Indonesia or another permitted jurisdiction, comply with geo-blocking regulations, and provide localized services (e.g., displaying odds in Indonesian Rupiah, offering Indonesian bank payment methods).

2.3 Information from Third Parties

• Payment Processors: Our Indonesian banking partners (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata, Bank Danamon) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) share transaction confirmation data, payment success/failure status, and fraud screening results with us to facilitate deposits and withdrawals.
• Identity Verification Services: We use third-party KYC and AML verification providers who cross-reference your submitted documents against government databases, sanctions lists, and fraud watchlists. These providers may share verification status, risk scores, and flagged activities with cmd77.
• Game Providers: Software providers including Evolution Gaming, Pragmatic Play, Microgaming, NetEnt, Ezugi, Spribe, and others track your gameplay within their games and share aggregated data (game rounds played, RTP results, bonus feature triggers) with cmd77 for licensing compliance and platform integration purposes.

3. How We Use Your Information

cmd77 processes your personal data for the following legitimate business purposes:

3.1 Service Provision and Account Management

• Creating and maintaining your cmd77 user account.
• Processing deposits, withdrawals, and internal fund transfers.
• Enabling you to place bets on sports markets, play casino games, and access live dealer tables.
• Managing bonuses, promotions, and loyalty rewards.
• Providing customer support and responding to your inquiries via live chat, email, WhatsApp, or Telegram.
• Sending transactional notifications including deposit confirmations, withdrawal approvals, bonus activations, and account security alerts.

3.2 Legal and Regulatory Compliance

• Verifying your identity and age to ensure compliance with 21+ age restrictions for Indonesian residents.
• Conducting Know Your Customer (KYC) and anti-money laundering (AML) checks as required by international gaming licenses.
• Detecting and preventing fraudulent transactions, bonus abuse, multiple account creation, and money laundering activities.
• Cooperating with law enforcement, regulatory authorities, and legal processes including subpoenas, court orders, and government investigations.
• Maintaining records of all financial transactions for audit and tax compliance purposes.

3.3 Security and Fraud Prevention

• Monitoring account activity for suspicious login attempts, unusual betting patterns, and potential account compromise.
• Implementing 256-bit SSL encryption, multi-factor authentication, and secure password hashing to protect your data.
• Blacklisting known fraudsters, bot operators, and banned individuals from creating new accounts.
• Conducting regular security audits and penetration testing to identify and patch vulnerabilities.

3.4 Responsible Gaming and Player Protection

• Monitoring your deposit frequency, bet sizes, session durations, and loss patterns to identify signs of problem gambling.
• Enforcing deposit limits, loss limits, session time limits, and self-exclusion requests you activate.
• Proactively reaching out to players exhibiting risky behavior patterns with responsible gaming resources and intervention offers.
• Providing access to self-assessment tools, reality-check reminders, and links to professional gambling addiction support services.

3.5 Marketing and Personalization

• Sending promotional emails, SMS, and push notifications about new games, bonuses, tournaments, and special events (only if you opt in to marketing communications).
• Personalizing content recommendations based on your game preferences, betting history, and past activity.
• Conducting market research, surveys, and focus groups to understand Indonesian player preferences and improve our offerings.
• Delivering targeted advertising on social media platforms and affiliate websites (your personal identifiers are hashed and anonymized for ad targeting).

3.6 Platform Improvement and Analytics

• Analyzing user behavior to identify popular games, optimize navigation, and improve mobile responsiveness for Indonesian network conditions.
• Testing new features, A/B testing interface designs, and measuring feature adoption rates.
• Generating aggregated, anonymized statistics for business intelligence and reporting to gaming software providers and regulatory auditors (no individual identities are disclosed).

4. Data Sharing and Disclosure

cmd77 does not sell your personal information to third parties for marketing purposes. However, we may share your data with the following categories of recipients under strict confidentiality and security agreements:

4.1 Service Providers and Processors

• Payment Processors: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata, Bank Danamon) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) receive transaction details necessary to process deposits and withdrawals. They are contractually bound to use your data only for payment processing.
• KYC and AML Verification Vendors: Third-party identity verification services receive your submitted documents and personal data to conduct fraud checks, sanctions screening, and identity authentication. Verified results are returned to cmd77, and these vendors retain data only as required by their own legal obligations.
• Cloud Hosting and IT Infrastructure: Our platform is hosted on secure cloud servers operated by reputable data center providers. These providers have physical and technical access to our databases but are prohibited from accessing or using your data for any purpose other than providing hosting services to cmd77.
• Customer Support Tools: Live chat software, ticketing systems, and CRM platforms used by our support team may store conversation histories and customer interaction records. These vendors sign data processing agreements ensuring your information is protected.
• Analytics and Tracking Services: We use Google Analytics, Hotjar, and similar tools to analyze Platform traffic and user behavior. These services collect anonymized or pseudonymized data and are configured to respect user privacy preferences where possible.

4.2 Gaming Software Providers

When you play games from Evolution Gaming, Pragmatic Play, Microgaming, NetEnt, Ezugi, Spribe, Pocket Games Soft, and other providers, your gameplay data (bet amounts, game outcomes, session durations) is shared with these providers to enable game functionality and comply with their licensing requirements. Game providers are bound by their own privacy policies and industry regulations.

4.3 Legal and Regulatory Authorities

cmd77 may disclose your personal information to law enforcement agencies, gaming regulators, tax authorities, and courts when legally required to do so. This includes responding to subpoenas, court orders, search warrants, and investigations related to fraud, money laundering, match-fixing, or other illegal activities. We may also disclose data to protect our legal rights, enforce our Terms & Conditions, or defend against legal claims.

4.4 Business Transfers

In the event cmd77 is acquired by, merges with, or sells assets to another company, your personal information may be transferred to the acquiring entity as part of the business transaction. You will be notified via email and Platform announcement of any such change in ownership, and you will have the opportunity to close your account if you do not wish your data to be transferred.

5. Data Security Measures

cmd77 employs industry-standard technical and organizational measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction:

• Encryption: All data transmitted between your device and our servers is encrypted using 256-bit SSL/TLS protocols. Sensitive data at rest (passwords, financial information, KYC documents) is encrypted using AES-256 encryption algorithms.
• Access Controls: Personal data is accessible only to authorized cmd77 employees and contractors who require access to perform their job functions. Access is granted on a need-to-know basis and logged for audit trails.
• Multi-Factor Authentication: Our internal systems and sensitive operations require multi-factor authentication to prevent unauthorized employee access.
• Regular Security Audits: cmd77 undergoes annual third-party security audits, penetration testing, and vulnerability assessments to identify and remediate potential weaknesses.
• Secure Data Centers: Our servers are housed in ISO 27001 certified data centers with 24/7 physical security, fire suppression systems, redundant power supplies, and climate controls.
• Incident Response Plan: We maintain a documented data breach response plan. In the event of a security incident affecting your personal data, we will notify you and relevant authorities within 72 hours as required by applicable law.

While we take extensive precautions to secure your data, no system is entirely immune to cyberattacks. You are responsible for maintaining the confidentiality of your account password and should never share your login credentials with others. If you suspect unauthorized access to your account, contact our support team immediately.

6. Data Retention

cmd77 retains your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements. Specific retention periods include:

Data Type	Retention Period	Reason
Account Registration Data	Active account + 7 years after closure	Legal, tax, and audit compliance
KYC Documents	Active account + 7 years after closure	AML regulations and regulatory audits
Financial Transactions	Active account + 7 years after closure	Tax reporting and financial audits
Gameplay and Betting History	Active account + 5 years after closure	Dispute resolution and game provider licensing
Customer Support Records	Active account + 3 years after closure	Service quality and legal defense
Marketing Consent Records	Until consent is withdrawn + 1 year	Compliance with marketing regulations
Technical Logs (IP, Device)	90 days	Security monitoring and fraud detection

After the applicable retention period expires, your personal data is securely deleted or anonymized such that it can no longer be associated with you as an individual. Anonymized data may be retained indefinitely for statistical analysis and business intelligence purposes.

7. Your Privacy Rights

Subject to applicable law, you have the following rights regarding your personal data held by cmd77:

• Right of Access: You may request a copy of all personal data we hold about you. We will provide this information in a structured, commonly used, machine-readable format within 30 days of your request.
• Right to Rectification: If any personal information we hold is inaccurate or incomplete, you may request corrections. You can update most information directly through your account settings.
• Right to Erasure ("Right to Be Forgotten"): You may request deletion of your personal data. However, we may be legally required to retain certain information for compliance, fraud prevention, or legal defense purposes (see Section 6 retention periods).
• Right to Restrict Processing: You may request that we limit how we use your data in certain circumstances, such as while disputing data accuracy or objecting to processing.
• Right to Data Portability: You may request a copy of your data in a portable format to transfer to another service provider.
• Right to Object: You may object to processing of your data for direct marketing purposes at any time. You can opt out of marketing emails via the unsubscribe link in any promotional message.
• Right to Withdraw Consent: Where processing is based on consent (e.g., marketing communications), you may withdraw consent at any time without affecting the lawfulness of processing based on consent before withdrawal.

To exercise any of these rights, contact our support team at [email protected] (plain text, not a clickable link) or via live chat. We will respond to your request within 30 days. Please note that exercising certain rights (e.g., erasure) may result in closure of your cmd77 account, as we cannot provide gaming services without processing some personal data.

8. International Data Transfers

cmd77 operates internationally and may transfer your personal data to countries outside Indonesia, including jurisdictions where our servers, service providers, and business partners are located. These countries may have data protection laws different from Indonesian regulations. When we transfer your data internationally, we ensure appropriate safeguards are in place, including:

• Standard contractual clauses approved by international data protection authorities.
• Data processing agreements requiring recipients to protect your information with standards equivalent to those in this Policy.
• Encryption and security measures during data transmission and storage.

By using cmd77, you consent to the transfer of your information to countries outside Indonesia for the purposes described in this Privacy Policy.

9. Children's Privacy

cmd77 services are strictly intended for adults aged 21 years and older. We do not knowingly collect personal information from individuals under the age of 21. Our registration process includes age verification, and our KYC procedures further confirm age through government-issued identification documents.

If we discover that we have inadvertently collected personal data from a person under 21 years of age, we will immediately delete that information and permanently ban the account. If you believe a minor has created an account on cmd77, please contact us immediately at [email protected] so we can investigate and take appropriate action.

10. Changes to This Privacy Policy

cmd77 reserves the right to modify or update this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. Material changes will be communicated via email to the address associated with your account and through a prominent notice on the Platform at least 30 days before the changes take effect.

Your continued use of cmd77 services after changes become effective constitutes acceptance of the revised Privacy Policy. If you do not agree with any changes, you must close your account and cease using the Platform. We encourage you to review this Policy periodically to stay informed about how we protect your information.

11. Contact Us

If you have questions, concerns, or complaints about this Privacy Policy or our data handling practices, please contact us:

• Email: [email protected] (plain text, not clickable)
• Live Chat: Available 24/7 via your account dashboard
• Subject Line for Privacy Inquiries: "Privacy Policy Question" or "Data Protection Request"

We aim to respond to all privacy-related inquiries within 30 days. For urgent security concerns or suspected data breaches affecting your account, please mark your message as "URGENT" and contact us immediately via live chat for faster response.