guss77 Privacy Policy

This Privacy Policy ("Policy") describes how guss77 ("we", "us", "our", or "the Company") collects, uses, stores, and shares personal data belonging to players ("you", "your") who access or use the guss77 platform at https://guss77.app (the "Platform"). This Policy forms part of the guss77 Terms & Conditions and should be read alongside them.

guss77 is an internationally licensed online gaming operator offering sportsbook, live casino, slot games, online poker, in-play betting, and togel (Indonesia's traditional numbers lottery) services, with operations directed primarily at players located in Indonesia. We take the privacy of Indonesian players seriously and are committed to handling all personal data with integrity, transparency, and appropriate security controls.

By registering an account on the Platform, you acknowledge that you have read and understood this Policy in full and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you should not create or continue to use a guss77 account.

guss77 collects personal data through several distinct channels. The categories of data we collect, and the method of collection for each, are set out in the table below:

We do not collect sensitive special-category data (such as health information, religious beliefs, or political opinions) unless you voluntarily disclose such information during a responsible gaming self-exclusion process, in which case it is used solely to administer your exclusion request.

We process your personal data only for specific, documented purposes. The primary purposes for which guss77 uses the data categories described in Section 2 are:

1. Account Management: Creating, maintaining, and securing your guss77 account; processing your login; enforcing single-account policies; and communicating account-related notifications to your registered email or phone number.
2. Identity Verification (KYC): Confirming that you meet the eligibility criteria set out in our Terms and Conditions, specifically that you are a resident of Indonesia aged 21 or older, and that you are the legitimate owner of the payment method associated with your account.
3. Payment Processing: Facilitating IDR deposits via BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, OVO, DANA, GoPay, ShopeePay, and LinkAja; processing withdrawal requests; and maintaining accurate transaction records.
4. Gaming Services Delivery: Enabling access to sportsbook, live casino, slot games, online poker, in-play betting, and togel products; settling bets and game outcomes; applying bonus credits and wagering requirements.
5. Fraud Prevention & Security: Detecting, investigating, and preventing fraudulent activity, money laundering, collusion, bonus abuse, and other prohibited conduct as defined in our Terms and Conditions. Technical and usage data are used to identify anomalous patterns that may indicate misuse.
6. Responsible Gaming: Monitoring gameplay patterns to identify indicators of problem gambling; applying self-exclusion and deposit limit restrictions requested by you; communicating responsible gaming resources when appropriate.
7. Legal & Regulatory Compliance: Meeting international anti-money-laundering (AML) and counter-terrorist-financing (CTF) obligations; responding to requests from competent regulatory or law-enforcement authorities; and maintaining records as required by applicable compliance standards.
8. Platform Improvement: Analyzing aggregated, anonymized usage data to improve game performance, optimize payment flows, and enhance the overall player experience. No individual player is identifiable in these analyses.
9. Marketing Communications (opt-in only): Sending promotional offers, bonus notifications, and event-based communications to players who have explicitly opted in to receive such messages. You may withdraw marketing consent at any time via your Account settings or by contacting support.
10. Customer Support: Investigating and resolving queries, complaints, and disputes submitted via live chat or email; maintaining records of communications for quality assurance and audit purposes.

guss77 processes personal data only where a valid legal basis exists. Our processing activities are grounded in the following legal bases under internationally recognized data protection principles:

• Contractual Necessity: Processing that is required to perform the contract between guss77 and the Player — including account creation, KYC, payment processing, and delivery of gaming services.
• Legal Obligation: Processing required by applicable AML, CTF, licensing, and record-keeping laws — including the retention of KYC documents and transaction records for the legally mandated period.
• Legitimate Interests: Processing that serves guss77's legitimate business interests and does not override your fundamental privacy rights — including fraud detection, security monitoring, and aggregated analytics for Platform improvement.
• Consent: Processing based on your freely given, specific, and informed consent — primarily for marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

Where processing is based on legitimate interests, guss77 has conducted an assessment confirming that those interests are not outweighed by your rights and freedoms. Summaries of these assessments are available on request by contacting support.

guss77 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We share data only in the following limited circumstances:

1. Payment Processors: To complete IDR deposits and withdrawals, we share the minimum necessary payment data with our approved payment partners, including Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja). These partners operate under their own privacy policies and are contractually prohibited from using your data for any purpose beyond processing your specific transaction.
2. Game Studio Providers: To deliver live casino and slot content, technical session data (such as session token and stake amount) is shared with licensed game studios including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Pocket Games Soft. These providers are bound by strict data processing agreements.
3. KYC Verification Partners: Where guss77 uses a third-party identity verification service to assist with KYC, your identity documents and biometric data submitted during verification are processed by that service under a dedicated data processing agreement. The provider is prohibited from retaining or using your data for any purpose other than completing the verification.
4. Analytics & Security Providers: Aggregated, pseudonymized technical and usage data may be shared with security and analytics service providers to support fraud detection and Platform performance monitoring. These providers act as data processors under guss77's instructions and have no independent right to use the data.
5. Legal Authorities: guss77 may disclose personal data to regulatory bodies, law enforcement agencies, or courts where required by a lawful order, warrant, or legal obligation. We will notify affected players of such disclosures where legally permitted to do so.
6. Corporate Transactions: In the event of a merger, acquisition, or sale of all or part of guss77's business, player data may be transferred to the acquiring entity as part of that transaction. Players will be notified of any such transfer and of any resulting changes to data processing arrangements before they take effect.

The guss77 Platform uses cookies and similar tracking technologies to deliver a reliable, personalized experience and to support our security and fraud-prevention obligations. The following categories of cookies are in use:

• Strictly Necessary Cookies: These cookies are essential for the Platform to function. They maintain your login session, preserve your Account preferences during a session, and protect against cross-site request forgery. They cannot be disabled without breaking Platform functionality.
• Performance Cookies: These cookies collect anonymized information about how players use the Platform — such as which pages are visited most frequently, load times, and error events. The data is aggregated and not linked to any individual. We use this information to improve Platform performance.
• Functional Cookies: These cookies remember choices you have made — such as your preferred display settings, notification preferences, and last-viewed game lobby — to provide a more personalized experience on your next visit.
• Security Cookies: These cookies support our fraud detection system by tracking technical signals (such as device fingerprint consistency and login pattern anomalies) that help identify potentially unauthorized account access.

guss77 does not use third-party advertising or retargeting cookies. No data collected via Platform cookies is shared with advertising networks or used to build advertising profiles.

You may manage cookie preferences via your browser settings. Disabling strictly necessary cookies will impair your ability to log in and use the Platform. All other cookie categories may be disabled without affecting core functionality, though some personalization features will be unavailable.

guss77 retains personal data only for as long as is necessary for the purpose for which it was collected, or as required by applicable legal obligations. Our standard retention periods are as follows:

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymized. Data that has been anonymized is no longer considered personal data and may be retained indefinitely for statistical or research purposes.

guss77 implements a layered security architecture designed to protect your personal data against unauthorized access, disclosure, alteration, and destruction. Our technical and organizational security measures include:

• Transport Encryption: All data transmitted between your device and guss77's servers is encrypted using TLS 1.2 or higher with 256-bit AES encryption.
• At-Rest Encryption: Databases containing personal data are encrypted at rest using AES-256. KYC document stores are additionally protected by hardware security modules (HSMs).
• Access Controls: Access to personal data is restricted on a strict need-to-know basis. All internal access is authenticated via multi-factor authentication and logged for audit purposes.
• Network Security: guss77's infrastructure is protected by enterprise-grade firewalls, intrusion detection systems, and distributed denial-of-service (DDoS) mitigation services.
• Penetration Testing: The Platform undergoes regular penetration testing by independent security firms. Critical vulnerabilities are remediated within 24 hours of discovery.
• Incident Response: guss77 maintains a documented data breach response procedure. In the event of a breach likely to result in a high risk to affected players, impacted players will be notified without undue delay.
• Staff Training: All guss77 personnel with access to personal data receive regular mandatory training on data protection obligations and information security best practices.

As a guss77 player, you have the following rights with respect to your personal data. To exercise any of these rights, contact our support team via live chat or email at [email protected]. We will respond to all valid requests within 30 days of receipt.

1. Right of Access: You have the right to request a copy of all personal data guss77 holds about you, together with information about the purposes for which it is processed and the categories of third parties with whom it has been shared.
2. Right to Rectification: You have the right to request that inaccurate or incomplete personal data be corrected without undue delay. For certain data fields (such as your registered name), documentary evidence of the correct information may be required.
3. Right to Erasure ("Right to be Forgotten"): You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where processing is unlawful. This right is subject to lawful retention obligations — data we are legally required to retain (such as KYC records and transaction logs) cannot be deleted on request.
4. Right to Restrict Processing: You have the right to request that we restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data you have contested is being verified.
5. Right to Data Portability: Where processing is based on consent or contractual necessity and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another data controller.
6. Right to Object: You have the right to object to processing based on legitimate interests, including profiling for responsible gaming monitoring purposes. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your rights.
7. Right to Withdraw Consent: Where processing is based on your consent (primarily marketing communications), you may withdraw that consent at any time by updating your notification preferences in your Account dashboard or by contacting support. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

guss77 is an internationally operating platform. In the course of delivering our services, your personal data may be transferred to and processed in countries outside Indonesia, including countries where our technology infrastructure, game studio partners, or third-party service providers are located.

Wherever such transfers occur, guss77 ensures that appropriate safeguards are in place to protect your personal data to the same standard as this Policy requires. These safeguards include:

• Contractual data processing agreements with all third-party processors incorporating internationally recognized data protection clauses.
• Transfer only to jurisdictions or partners that maintain data protection standards consistent with internationally accepted principles, including encryption in transit and at rest, access controls, and security audit obligations.
• Regular review of third-party processor compliance with contractual data protection obligations.

You may request further information about the specific safeguards applied to any international transfer of your personal data by contacting our support team.

The guss77 Platform is strictly for adults aged 21 years or older. We do not knowingly collect or process personal data from any individual under the age of 21. If we become aware that an account has been registered by or on behalf of a minor, we will immediately suspend the account, forfeit any balances, and permanently delete all associated personal data.

If you are a parent or guardian and believe that a minor in your household has registered for or accessed a guss77 account, please contact us immediately at [email protected]. We will treat such reports as an urgent compliance matter and respond within 24 hours.

We recommend that parents and guardians use parental control software to prevent minors from accessing any online gambling platform, including guss77. For additional guidance on responsible gaming and protecting minors, please visit our Responsible Gaming page.

guss77 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or Platform features. All revisions will be published on this page with an updated effective date prominently displayed at the top of the document.

For material changes — those that significantly affect how we collect, use, or share your personal data — we will provide advance notice via your registered email address or via a prominent in-platform notification at least 14 days before the change takes effect. Your continued use of the Platform after the effective date of any updated Policy constitutes your acknowledgment and acceptance of the revised terms.

We encourage you to review this Policy periodically to stay informed about how guss77 protects your information. If you disagree with any material change, you have the right to close your account before the change takes effect by contacting our support team.

If you have any questions, concerns, or requests regarding this Privacy Policy or the way guss77 handles your personal data, please contact our dedicated Data Protection team through any of the following channels:

• Live Chat: Available 24/7 directly within the guss77 Platform. Our support agents — including native Indonesian-speaking staff — can handle data protection queries in real time with a response time under 90 seconds.
• Email: [email protected] — Please include "Data Protection Request" in the subject line. We respond to all data protection correspondence within 5 business days (WIB, UTC+7).

If you are not satisfied with our response to a privacy concern or believe that we are processing your personal data in a manner that is inconsistent with this Policy or applicable data protection principles, you have the right to escalate your complaint to the relevant supervisory authority in your jurisdiction. guss77 will cooperate fully with any such authority investigation.

We are committed to resolving all privacy complaints fairly and promptly. In the vast majority of cases, complaints are resolved at the first point of contact with our support team without the need for formal escalation.