Privacy Policy — hcs77

hcs77 ("hcs77", "we", "us", or "our") operates the online betting and gaming platform at https://hcs77.vu (the "Platform"). This Privacy Policy describes how hcs77 collects, uses, stores, shares, and protects personal data relating to individuals who visit, register on, or otherwise interact with the Platform ("Players", "you", or "your").

hcs77 primarily serves players based in Indonesia and handles data with the care and standards expected of a responsible international operator. We are committed to handling your personal information transparently, proportionately, and in accordance with applicable data protection principles. By creating an account or continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy.

Definitions

• "Personal Data" means any information that identifies or could reasonably be used to identify a living individual, directly or in combination with other data hcs77 holds.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, use, disclosure, erasure, or destruction.
• "Data Controller" means the entity that determines the purposes and means of Processing Personal Data — in this context, hcs77.
• "Data Processor" means any third party that Processes Personal Data on behalf of hcs77, subject to a binding data processing agreement.
• "Sensitive Personal Data" means Personal Data relating to identity documents, financial account details, and any other category of data that warrants heightened protection due to the risks associated with its disclosure.
• "Cookie" means a small text file placed on your device by the Platform for the purposes of session management, analytics, personalisation, or fraud detection.
• "KYC" means Know Your Customer — the identity and document verification process hcs77 uses to confirm the identity and eligibility of Players prior to processing withdrawal requests.
• "Platform" means the hcs77 website at https://hcs77.vu, its mobile interface, and all associated services and products operated under the hcs77 brand.

Data Controller

hcs77 acts as the Data Controller for all Personal Data collected from Players through the Platform. As Data Controller, hcs77 determines why and how your Personal Data is Processed, and bears primary responsibility for ensuring that such Processing complies with applicable data protection standards.

hcs77 operates as an internationally licensed and regulated platform. All data processing activities are conducted in accordance with the standards of hcs77's international operating jurisdiction and with the reasonable expectations of Indonesian players who use the Platform.

For all privacy-related enquiries, requests, or complaints, you may contact hcs77's data protection team directly at [email protected]. We aim to acknowledge all data-related correspondence within 48 hours (WIB) and to provide a substantive response within 15 business days.

Data We Collect

hcs77 collects the following categories of Personal Data from Players:

hcs77 does not intentionally collect Sensitive Personal Data beyond what is strictly necessary for identity verification (KYC) and fraud prevention. hcs77 does not collect biometric data, health data, religious or political beliefs, or ethnicity data.

How We Collect Data

hcs77 collects Personal Data through the following means:

• Direct provision by you: When you create an Account, complete the KYC verification process, make a deposit or withdrawal request, contact our support team, or respond to a survey or promotion, you directly provide Personal Data to hcs77.
• Automated collection: When you visit the Platform, our servers automatically log Technical Data and Usage Data. Cookies and similar tracking technologies also collect this data passively — see Section 8 for full details.
• Third-party payment processors: When you initiate a payment via a local Indonesian bank or e-wallet, the relevant payment processor shares transaction confirmation data with hcs77 to reconcile your account balance. hcs77 does not receive your full bank credentials — only the information necessary to match the payment to your account.
• Game studio integrations: Third-party studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft may share game session identifiers and round results with hcs77 for the purpose of settling bets and resolving disputes. This data is limited to gameplay outcomes and does not include personal financial data held by the studio.
• KYC verification partners: hcs77 may engage third-party identity verification services to cross-check the accuracy of documents submitted during KYC. These partners act as Data Processors under binding agreements with hcs77.
• Publicly available sources: In connection with fraud investigations, hcs77 may reference publicly available information such as sanctions lists, adverse media databases, and law enforcement registers.

Legal Basis for Processing

hcs77 Processes your Personal Data on one or more of the following legal bases:

• Contractual necessity: Processing is necessary to perform the contract between hcs77 and you as a registered Player — including account management, bet settlement, payment processing, and customer support.
• Legitimate interests: Processing is necessary for hcs77's legitimate interests in operating a secure, fair, and commercially sustainable platform — including fraud detection, security monitoring, product improvement, and responsible gaming enforcement — provided those interests are not overridden by your fundamental rights.
• Legal obligation: Processing is necessary to comply with applicable legal and regulatory obligations, including anti-money laundering (AML) requirements, KYC mandates, and responses to court orders or law enforcement directions.
• Consent: Where hcs77 relies on your consent as the legal basis for Processing (for example, for optional marketing communications), you have the right to withdraw that consent at any time by contacting [email protected]. Withdrawal of consent does not affect the lawfulness of Processing carried out before the withdrawal.

How We Use Your Data

hcs77 uses your Personal Data for the following purposes:

• Account creation and management: To register your Account, verify your identity, maintain your player profile, and manage your IDR balance on the Platform.
• Payment processing: To process deposits and withdrawals via Indonesian banks (BCA, BRI, BNI, Mandiri, and others), e-wallets (OVO, DANA, GoPay, ShopeePay, LinkAja), and card networks (Visa, Mastercard).
• Bet and game settlement: To record, settle, and audit all bets placed on the hcs77 sportsbook — including BRI Liga 1, EPL, La Liga, Champions League, and other markets — and all casino game sessions.
• KYC and fraud prevention: To verify that you meet the eligibility requirements (including the 21+ age requirement), to detect and investigate suspicious activity, and to prevent money laundering, account takeover, and bonus abuse.
• Responsible gaming: To administer deposit limits, session time reminders, time-out periods, and self-exclusion requests, and to identify Players who may be exhibiting signs of problem gambling.
• Customer support: To respond to your enquiries, complaints, and dispute requests through our 24/7 bilingual support team, including Indonesian-speaking agents covering WIB, WITA, and WIT time zones.
• Marketing communications (with consent): To send you information about Promotions, seasonal bonuses (such as Ramadhan or Idul Fitri offers), and new Platform features — where you have given valid consent or where we have a legitimate interest in contacting existing Players about related products.
• Platform improvement: To analyse Usage Data and Technical Data to optimise the Platform's performance, layout, and feature set.
• Legal and regulatory compliance: To fulfil our obligations under applicable laws and to respond to legal process, regulatory investigations, or court orders.

Data Sharing & Disclosure

hcs77 may share your Personal Data with the following categories of third parties, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment processors and banking partners: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata, OCBC NISP) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) receive the minimum data required to process your deposit or withdrawal request.
• Game studio providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Pocket Games Soft, and other certified studios receive a pseudonymous player identifier and game-relevant session data to operate their games on the Platform. They do not receive your full name, identity document details, or financial data.
• KYC and identity verification partners: Third-party verification services receive copies of identity documents submitted during KYC solely for the purpose of validating authenticity.
• Technology and infrastructure providers: Cloud hosting, content delivery, cybersecurity, and analytics service providers may process Technical Data and Usage Data as Data Processors under binding agreements that prohibit independent use of your data.
• Legal and regulatory authorities: hcs77 will disclose Personal Data to courts, law enforcement agencies, financial intelligence units, or regulators where required to do so by law, court order, or the direction of a competent regulatory authority.
• Corporate transactions: In the event of a merger, acquisition, restructuring, or sale of all or part of hcs77's business, your Personal Data may be transferred to the acquiring entity, subject to the same privacy protections described in this Policy.

All third-party Data Processors engaged by hcs77 are required to maintain appropriate technical and organisational security measures and are prohibited from using your Personal Data for any purpose beyond the specific service they are contracted to provide.

Cookies & Tracking Technologies

hcs77 uses cookies and similar technologies (including pixel tags and local storage objects) to operate core Platform functions, maintain your session, prevent fraud, and understand how the Platform is used. The following categories of cookies are in use:

Most modern browsers allow you to control cookies through their settings. Disabling strictly necessary cookies will impair your ability to log in and use the Platform. For guidance on managing cookies in your specific browser, please refer to your browser's official help documentation.

Data Retention

hcs77 retains your Personal Data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. The following general retention periods apply:

• Account and identity data: Retained for the duration of your Account plus a minimum of 5 years following permanent Account closure, to satisfy AML and regulatory record-keeping obligations.
• Transaction and betting records: Retained for a minimum of 5 years from the date of each transaction, consistent with standard financial record-keeping requirements.
• KYC documents: Retained for the duration of your Account plus 5 years following closure. In cases involving an active investigation or legal dispute, retention may be extended until the matter is fully resolved.
• Support communications: Retained for 2 years from the date of the last communication in a support thread.
• Technical and usage logs: Retained for up to 13 months from collection, after which they are aggregated and anonymised for analytical purposes.
• Self-exclusion records: Retained indefinitely to ensure that the exclusion remains effective even if you attempt to re-register under a different identity.

When Personal Data is no longer required, hcs77 securely deletes or irreversibly anonymises it in accordance with industry-standard data destruction procedures.

Data Security

hcs77 implements a comprehensive set of technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption on all data transmitted between your device and the hcs77 Platform.
• Encrypted data storage for all identity documents, financial records, and authentication credentials — data at rest is never stored in plain text.
• Access control policies that restrict access to Personal Data to hcs77 staff and contractors on a strict need-to-know basis, enforced through role-based permissions and multi-factor authentication on internal systems.
• Automated fraud detection systems that monitor login activity, transaction patterns, and device fingerprints in real time to identify and block suspicious behaviour.
• Regular security assessments, including vulnerability scanning and penetration testing of the Platform by qualified independent security professionals.
• Incident response procedures that define how hcs77 identifies, contains, and remediates data security incidents, including timely notification to affected Players where required.

Your Rights

As a Player on the hcs77 Platform, you hold the following rights with respect to your Personal Data. To exercise any of these rights, submit a written request to [email protected] with sufficient information to verify your identity. hcs77 will respond within 15 business days of receiving a valid, verified request.

• Right of Access: You may request a copy of the Personal Data hcs77 holds about you, together with information about how it is used and with whom it is shared.
• Right to Rectification: If any Personal Data we hold about you is inaccurate or incomplete, you may request that it be corrected or updated. For data that cannot be self-corrected within the Account settings, contact our support team.
• Right to Erasure ("Right to be Forgotten"): You may request the deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, subject to hcs77's legal obligations to retain certain records (see Section 9). Data subject to a legal retention requirement cannot be deleted until the retention period has elapsed.
• Right to Restriction of Processing: You may request that hcs77 restricts the Processing of your Personal Data in certain circumstances — for example, while a dispute about data accuracy is being resolved.
• Right to Data Portability: You may request a copy of Personal Data you have actively provided to hcs77 (such as your Account profile and transaction history) in a structured, machine-readable format.
• Right to Object: You may object to the Processing of your Personal Data where that Processing is based on hcs77's legitimate interests. hcs77 will cease such Processing unless it can demonstrate compelling legitimate grounds that override your rights.
• Right to Withdraw Consent: Where Processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of Processing carried out prior to withdrawal.

hcs77 will not charge a fee for responding to data rights requests unless the request is manifestly unfounded, repetitive, or excessive, in which case a reasonable administrative fee may apply. hcs77 reserves the right to request additional proof of identity before processing any data rights request to protect against unauthorised disclosure.

Children's Privacy

The hcs77 Platform is strictly for adults aged 21 years and older. hcs77 does not knowingly collect Personal Data from any person under the age of 21. Age verification is a mandatory component of the KYC process, and any Account found to have been registered by a person under 21 will be immediately closed and any balance forfeited in accordance with the hcs77 Terms & Conditions.

If you have reason to believe that a minor has registered an Account on the hcs77 Platform or has otherwise submitted Personal Data to hcs77, please notify us immediately at [email protected]. hcs77 will investigate the matter promptly and delete any data confirmed to relate to a minor.

International Data Transfers

hcs77 operates as an internationally licensed platform and may store or process your Personal Data on servers located outside Indonesia. Where Personal Data is transferred to a jurisdiction that does not provide a level of data protection equivalent to the standards applied within Indonesia, hcs77 ensures that appropriate safeguards are in place. These may include:

• Binding contractual clauses between hcs77 and its Data Processors that require the recipient to apply data protection standards consistent with this Privacy Policy.
• Selection of cloud and infrastructure providers that maintain internationally recognised security certifications (such as ISO/IEC 27001 or SOC 2 Type II).
• Technical measures — including encryption in transit and at rest — that protect Personal Data regardless of where it is physically stored.

By using the Platform, you acknowledge that your Personal Data may be transferred to and stored in jurisdictions outside Indonesia, subject to the safeguards described above.

Policy Amendments

hcs77 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or Platform features. When material changes are made, hcs77 will notify registered Players by email and/or by displaying a prominent notice on the Platform for a minimum of 7 days before the changes take effect.

The version of this Privacy Policy currently in force is identified by the "Last Updated" date shown at the top of this page. We encourage you to review this page periodically. Your continued use of the Platform after the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. If you do not accept the amended terms, you must close your Account before the effective date of the changes.

Previous versions of this Privacy Policy are available on request by contacting [email protected].

Contact & Complaints

For all privacy-related queries, data rights requests, or complaints relating to hcs77's handling of your Personal Data, please contact our data protection team using the details below. Our support team is available 24 hours a day, 7 days a week — including Indonesian public holidays such as Idul Fitri, Nyepi, and Indonesian Independence Day (17 August) — in both English and Bahasa Indonesia.

If you are not satisfied with hcs77's response to a privacy complaint, you have the right to escalate the matter to the relevant data protection or regulatory authority in your jurisdiction. hcs77 will cooperate fully with any such authority in connection with a complaint relating to the Platform.