This Privacy Policy applies to all personal data collected by ym777 in connection with the use of the ym777 platform at ym777.cam. By registering an account or continuing to use the ym777 platform, you acknowledge that you have read and understood this policy. If you do not agree to the terms of this Privacy Policy, please discontinue use of the platform and contact our support team to close your account.
1. Scope & Controller
This Privacy Policy governs the collection, use, storage, and disclosure of personal data by ym777 ("we", "us", "our") in connection with the operation of the ym777 online betting and casino platform, accessible at ym777.cam. It applies to all registered Players, prospective registrants, and visitors to the Platform.
ym777 acts as the data controller in respect of all personal data processed under this policy. This means ym777 determines the purposes for which, and the means by which, personal data is processed. Where ym777 engages third-party processors — such as payment providers, KYC verification services, or game studio partners — those parties act as data processors under ym777's instruction and are bound by contractual data-protection obligations.
The ym777 platform primarily serves players based in Indonesia. Where data is processed or stored outside Indonesia, ym777 ensures that appropriate safeguards are in place, as described in Section 11 (International Transfers).
2. Data We Collect
ym777 collects personal data through several channels — directly from you during registration and account use, automatically via the Platform's technical systems, and from third parties involved in service delivery. The categories of data we collect are set out below.
2.1 Data You Provide Directly
| Data Category |
Specific Examples |
When Collected |
| Identity Data |
Full legal name, date of birth, KTP or passport number, nationality |
Registration & KYC verification |
| Contact Data |
Email address, Indonesian mobile phone number |
Registration |
| Address Data |
Residential address, city (e.g., Jakarta, Surabaya, Bandung), province, postal code |
KYC verification |
| Financial Data |
Bank account details (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon), e-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja), deposit and withdrawal history |
Deposit / withdrawal processing |
| Document Data |
Copies or images of KTP, passport, utility bills, bank statements |
KYC verification |
| Support Data |
Live chat transcripts, email correspondence, complaint records |
Customer support interactions |
2.2 Data Collected Automatically
| Data Category |
Specific Examples |
| Technical Data |
IP address, browser type and version, device type, operating system, screen resolution |
| Usage Data |
Pages visited, session duration, games accessed, bet history, wagering patterns |
| Location Data |
Approximate geographic location derived from IP address (country and region level only; no GPS data is collected) |
| Cookie Data |
Session tokens, authentication cookies, preference cookies — see Section 6 for full details |
2.3 Data Received from Third Parties
- Identity verification results and fraud-risk scores from our KYC and anti-money-laundering (AML) service providers.
- Payment confirmation data and transaction reference numbers from Indonesian banks and e-wallet operators.
- Game outcome and transaction data from licensed game studio providers such as Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, and Pocket Games Soft.
3. Legal Basis for Processing
ym777 processes personal data on one or more of the following legal grounds, depending on the specific processing activity:
- Contractual Necessity: Processing is required to perform our contract with you — for example, creating and maintaining your account, processing deposits and withdrawals, and delivering the gaming services you have requested.
- Legal Obligation: Processing is necessary for ym777 to comply with applicable legal requirements, including KYC obligations, AML regulations, and financial record-keeping requirements.
- Legitimate Interests: Processing serves ym777's legitimate business interests, provided those interests are not overridden by your rights and freedoms. Examples include fraud prevention, platform security monitoring, and internal analytics to improve service quality.
- Consent: Where we rely on your consent — for example, to send you promotional communications — you have the right to withdraw that consent at any time by contacting our support team or updating your account notification preferences. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.
4. How We Use Your Data
ym777 uses the personal data we collect for the following purposes:
- Account Management: To create, maintain, and administer your ym777 account, including verifying your identity, processing login requests, and managing your account settings and preferences.
- Transaction Processing: To process deposits via local Indonesian banks (BCA, BRI, BNI, Mandiri, and others) and e-wallets (OVO, DANA, GoPay, ShopeePay, LinkAja), and to process withdrawal requests to your registered payment method.
- Compliance & Fraud Prevention: To conduct KYC and AML checks, monitor transactions for suspicious activity, detect and prevent fraud, and report to relevant authorities where legally required.
- Platform Delivery: To provide access to all betting markets and casino games on the ym777 platform, including sports markets such as BRI Liga 1, EPL, and Champions League, as well as togel (Indonesia's traditional numbers lottery) draws, live casino games, and slot titles.
- Customer Support: To respond to your enquiries, resolve disputes, process complaints, and assist with responsible gaming requests such as self-exclusion or deposit limit adjustments.
- Security & Integrity: To protect the ym777 platform and its users from unauthorised access, account takeover, bot activity, and other security threats.
- Service Improvement: To analyse usage patterns, identify technical issues, and improve the overall player experience on the ym777 platform.
- Marketing Communications (with consent): To send you information about promotions, bonus offers, and platform updates where you have opted in to receive such communications. You may opt out at any time.
ym777 does not use automated decision-making or profiling in ways that produce legal or similarly significant effects on Players without providing an opportunity for human review. If you have concerns about any decision affecting your account, please contact our support team.
5. Data Sharing & Disclosure
ym777 does not sell, rent, or trade your personal data to any third party for their own marketing purposes. Data is shared only in the following circumstances:
- Service Providers: ym777 engages carefully selected third-party processors to help deliver platform services. These include payment-processing partners (Indonesian banks and e-wallet operators), KYC and identity-verification providers, fraud-detection services, and cloud-hosting providers. All processors are contractually bound to process your data only on ym777's instructions and to maintain appropriate security standards.
- Game Studio Partners: To deliver live and RNG casino games, certain session and transaction data is shared with licensed studio providers such as Evolution Gaming, Pragmatic Play, Microgaming, NetEnt, Spribe, and Pocket Games Soft. These partners receive only the data required to deliver the game session and record the outcome.
- Legal & Regulatory Disclosure: ym777 may disclose personal data to law enforcement agencies, financial regulators, or courts where required by applicable law, a court order, or a lawful regulatory request. ym777 will notify affected Players of such disclosure where permitted to do so.
- Business Transfers: In the event of a merger, acquisition, or sale of all or part of ym777's business, personal data held by ym777 may be transferred to the acquiring entity as part of that transaction. Players will be notified of any such transfer and any material change to data-processing terms.
- With Your Consent: In any other circumstance, ym777 will share your personal data with third parties only where you have provided explicit prior consent.
No Data Sales. ym777 has never sold personal data to advertisers, data brokers, or marketing networks, and commits not to do so. Our business model is built on delivering a trusted betting platform — not on monetising player data.
6. Cookies & Tracking
ym777 uses cookies and similar local storage technologies to deliver a functional, secure, and consistent player experience. The cookies we deploy fall into the following categories:
| Cookie Type |
Purpose |
Duration |
| Strictly Necessary |
Session authentication, security tokens, CSRF protection, load balancing. These cannot be disabled without breaking core platform functionality. |
Session / up to 24 hours |
| Functional |
Remembering your preferred language, lobby layout, odds format, and notification settings between sessions. |
Up to 12 months |
| Analytics |
Aggregated, anonymised data on page performance, error rates, and feature usage — used internally to improve the platform. No individual player is identified in analytics reports. |
Up to 12 months |
ym777 does not deploy third-party advertising cookies, retargeting pixels, or social-media tracking scripts. You may manage or delete cookies through your browser settings at any time; however, disabling strictly necessary cookies will impair your ability to log in and use the platform.
7. Data Retention
ym777 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or to comply with applicable legal and regulatory obligations. Our standard retention periods are:
- Account Data & Transaction Records: Retained for a minimum of 5 years from account closure, in accordance with AML record-keeping obligations. This includes KYC documents, deposit and withdrawal history, and bet records.
- Customer Support Records: Live chat transcripts and email correspondence are retained for 2 years from the date of the interaction, or longer if the matter relates to an unresolved dispute or regulatory investigation.
- Marketing Preferences & Consent Records: Retained for 3 years from the date of last interaction, or until consent is withdrawn, whichever is earlier.
- Technical Logs & Security Data: Server logs and security-event data are retained for 12 months, after which they are securely deleted or anonymised.
- Closed or Suspended Accounts: Following account closure at a Player's request, ym777 will anonymise or delete personal data that is no longer required for legal compliance, typically within 90 days of confirming the closure. Data retained for legal purposes is stored in a restricted access environment.
8. Data Security
ym777 implements a layered security architecture to protect personal data against unauthorised access, accidental loss, alteration, and disclosure. Our technical and organisational security measures include:
- Encryption in Transit: All data transmitted between your device and the ym777 platform is encrypted using TLS 1.2 or higher (256-bit SSL). Our domains carry valid SSL certificates that are renewed automatically.
- Encryption at Rest: Sensitive personal data — including KYC documents and financial data — is encrypted at rest using AES-256 encryption on our storage systems.
- Access Controls: Access to personal data within ym777 is restricted on a strict need-to-know basis. Staff with access to personal data undergo background screening and receive regular data-protection training.
- Intrusion Detection: ym777's systems are monitored continuously for anomalous activity. Automated intrusion detection and rate-limiting systems are deployed to mitigate DDoS attacks and brute-force login attempts.
- Two-Factor Authentication: ym777 strongly recommends that all Players enable two-factor authentication (2FA) on their accounts. 2FA significantly reduces the risk of unauthorised account access.
- Incident Response: In the event of a data breach that is likely to result in a risk to Players' rights and freedoms, ym777 will notify affected Players and relevant authorities as promptly as practicable and in accordance with applicable legal requirements.
No system is entirely immune to attack. While ym777 applies industry-standard security measures, we cannot guarantee absolute security. You are responsible for keeping your login credentials confidential and for notifying us immediately if you suspect any unauthorised access to your account.
9. Your Rights
As a Player on the ym777 platform, you hold the following rights in respect of your personal data. To exercise any of these rights, contact our support team via live chat or at [email protected]. We will respond to verified requests within 30 days.
You have the right to request a copy of the personal data ym777 holds about you, along with information about how it is being processed. We will provide this in a structured, commonly used, machine-readable format. There is no charge for a first access request within any 12-month period.
If any personal data ym777 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update most contact details directly within your account settings; for identity and KYC data corrections, please contact support with supporting documentation.
You may request that ym777 delete your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent (and no other legal basis applies), or where the data has been unlawfully processed. Please note that ym777 may be required to retain certain data for legal and regulatory compliance even after an erasure request — for example, financial transaction records required by AML law.
In certain circumstances — such as where you contest the accuracy of data, or where processing is unlawful but you prefer restriction to deletion — you may request that ym777 restrict processing of your data. Restricted data will be stored but not actively used until the restriction is lifted.
Where processing is based on your consent or on contractual necessity, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format, and to transmit that data to another data controller where technically feasible.
You have the right to object to processing of your personal data based on ym777's legitimate interests, including profiling based on those interests. You also have an absolute right to object to processing of your data for direct marketing purposes, including profiling related to direct marketing. If you object to marketing communications, we will stop processing your data for that purpose immediately.
10. Minors & Age Verification
The ym777 platform is strictly for adults aged 21 and over. ym777 does not knowingly collect personal data from any person under the age of 21. All registration attempts are subject to automated age checks, and KYC verification requires documentary proof that the Player is at least 21 years of age.
If ym777 becomes aware that personal data has been collected from a person under 21, we will immediately suspend the account, delete the data as far as legally permissible, and return any deposited funds to the originating payment source. If you believe that a person under 21 has registered on ym777, please contact us at [email protected] immediately.
21+ Only. Parental controls are available on most internet service providers and mobile devices. We encourage parents and guardians to use these tools to prevent underage access to gambling platforms.
11. International Transfers
ym777 primarily processes and stores personal data within data centres that serve the Asia-Pacific region. However, some of our service providers — including game studio partners and KYC technology providers — may process data in other regions. Where personal data is transferred internationally, ym777 ensures appropriate safeguards are in place, including:
- Contractual clauses that require the recipient to protect data to the same standard as applied by ym777.
- Transfers only to recipients in jurisdictions that maintain adequate data-protection frameworks, as assessed by ym777's data protection team.
- Regular audits of third-party processors to confirm ongoing compliance with data-protection obligations.
If you would like more information about the safeguards in place for any specific international transfer, please contact us at [email protected].
12. Policy Amendments
ym777 reviews this Privacy Policy periodically and reserves the right to update it to reflect changes in our data-processing practices, applicable law, or regulatory guidance. When material changes are made:
- The "Last updated" date at the top of this page will be revised.
- Registered Players will be notified via email or an in-platform notification at least 7 days before the revised policy takes effect, except where immediate changes are required for security or legal compliance reasons.
- Continued use of the ym777 platform after the effective date of any amendment constitutes acceptance of the revised Privacy Policy.
We recommend that you review this page periodically to stay informed of any updates. Previous versions of this Privacy Policy are available on request by contacting our support team.