Your privacy matters to us. This document explains in plain terms how syp77 collects, processes, stores, and protects your personal data when you use our platform — and the rights you hold over that data.
Last Updated: 1 January 2026This Privacy Policy ("Policy") describes how syp77 ("we", "us", "our", "the Platform") collects, uses, discloses, stores, and protects personal data relating to individuals ("you", "User", "Member") who access or use the syp77 online gaming platform available at syp77.com, including all product verticals — sportsbook, live casino, slots, togel (Indonesia's traditional numbers lottery), and card games.
This Policy applies to all personal data collected through the syp77 website and associated mobile-optimised interfaces, regardless of the device or network you use to access the platform. By registering an account or continuing to use the syp77 platform, you acknowledge that you have read and understood this Policy and consent to the data practices described herein.
This Policy should be read alongside our Terms & Conditions, which govern the contractual relationship between you and syp77. In the event of any inconsistency between this Policy and the Terms & Conditions on a privacy-related matter, this Policy prevails.
The following terms are used throughout this Policy with the meanings set out below:
syp77 collects the following categories of personal data depending on how you interact with the platform:
syp77 collects personal data through the following channels:
You provide data directly to syp77 when you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, participate in promotions, or update your account profile. This is the primary source of your registration and financial data.
syp77 automatically collects technical and behavioural data when you access and use the platform. This includes data collected via server logs, session tracking systems, and first-party cookies placed on your device. Automated collection begins as soon as you load any page of the syp77 platform, including before you log into your account.
In certain circumstances, syp77 may receive personal data about you from third-party sources, including:
syp77 processes your personal data for the following clearly defined purposes:
| Purpose | Data Categories Used |
|---|---|
| Account creation and authentication — establishing and maintaining your Member account, verifying your identity at login, and enabling two-factor authentication. | Registration data, technical data |
| Age and identity verification (KYC) — confirming you are 21 years of age or older and that your identity matches the details you provided at registration. | Identity data, KYC documents |
| Processing deposits and withdrawals — executing financial transactions between your registered Indonesian bank or e-wallet and your syp77 account balance. | Financial data, identity data |
| Delivering gaming and betting services — recording bets, settling wagers, awarding winnings, and maintaining accurate game and transaction histories. | Usage data, financial data |
| Bonus and promotions administration — determining eligibility, crediting bonuses, monitoring wagering requirements, and preventing bonus abuse. | Usage data, financial data, registration data |
| Fraud prevention and AML compliance — identifying and investigating suspicious account activity, preventing money laundering, and fulfilling applicable regulatory obligations. | All categories |
| Responsible gaming obligations — monitoring for indicators of problem gambling, administering player-initiated limits and self-exclusion, and conducting affordability reviews where required. | Usage data, responsible gaming data, financial data |
| Customer support — handling enquiries, complaints, disputes, and technical issues raised through chat, email, or other support channels. | Registration data, usage data, financial data |
| Platform analytics and improvement — understanding how Members use the platform in aggregate to improve performance, navigation, and product offerings. | Technical data, behavioural data (anonymised where possible) |
| Marketing communications — sending promotional offers, bonus notifications, and event announcements to Members who have opted in to receive them. | Registration data, usage data |
syp77 processes your personal data under one or more of the following legal bases:
syp77 shares personal data only with carefully selected third-party processors who are contractually bound to process data solely on our instructions and to maintain appropriate security standards. Categories of processors include:
syp77 does not sell, rent, or trade your personal data to third-party marketers or data brokers under any circumstances. Any data sharing is strictly limited to what is necessary for operational, legal, or security purposes as described in this Policy.
syp77 may disclose personal data to regulatory authorities, law enforcement agencies, or courts of competent jurisdiction where we are legally required to do so, or where disclosure is necessary to protect the safety of our Members or the integrity of the platform. Where permitted by law, we will notify you of such disclosure requests.
In the event that syp77 undergoes a merger, acquisition, restructuring, or sale of all or a substantial part of its assets, personal data held about Members may be transferred to the acquiring entity as part of that transaction. You will be notified via the in-platform notification centre and via email if such a transfer results in a material change to how your data is processed.
syp77 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or to comply with applicable legal, regulatory, and contractual obligations. The following indicative retention periods apply:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account registration and KYC documents | 5 years from account closure | AML and regulatory compliance |
| Financial transaction records | 5 years from transaction date | Legal and tax compliance |
| Game and betting history | 3 years from session date | Dispute resolution and audit trail |
| Customer support records | 3 years from last interaction | Legitimate interest and legal claims |
| Marketing consent records | Until consent is withdrawn + 1 year | Consent management compliance |
| Self-exclusion records | Indefinitely or until exclusion period lapses | Responsible gaming obligation |
| Technical and access logs | 12 months from log creation | Security and fraud monitoring |
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be linked to an identifiable individual.
syp77 implements a multi-layered security framework designed to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Our primary security measures include:
syp77 uses first-party cookies and similar tracking technologies to ensure the platform functions correctly and to improve the Member experience. We do not use third-party advertising or cross-site tracking cookies.
| Cookie Type | Purpose | Duration |
|---|---|---|
| Strictly Necessary | Maintain your login session, store authentication tokens, and preserve your account preferences across page loads. These cannot be disabled without breaking core platform functionality. | Session / up to 30 days |
| Functional | Remember your preferred language display settings, last-visited game category, and responsible gaming tool configurations. | Up to 12 months |
| Analytics | Collect anonymised data on page views, navigation paths, and feature interactions to help syp77 improve platform performance and usability. No personally identifiable information is included in analytics data. | Up to 13 months |
You can manage or delete cookies at any time through your browser settings. Please note that disabling strictly necessary cookies will impair your ability to log in and use core platform features. Deleting functional cookies will reset your stored preferences. Disabling analytics cookies will not affect your platform access or gaming experience.
As a Member whose personal data is processed by syp77, you hold the following rights with respect to your data. To exercise any of these rights, contact our Data Protection Officer (DPO) at [email protected] with the subject line "Data Rights Request — [Your Full Name]".
You have the right to request a copy of the personal data syp77 holds about you, together with information about the purposes for which it is processed, the categories of data involved, and the recipients to whom it has been disclosed. syp77 will respond to verified access requests within 30 calendar days.
If any personal data syp77 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or supplemented without undue delay. For data that you can update directly within your account profile (e.g., email address, contact number), we encourage you to do so directly rather than submitting a formal rectification request.
You have the right to request that syp77 delete your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw your consent (and there is no other legal basis for processing), or where the data has been unlawfully processed. Please note that erasure requests may be limited by our legal retention obligations — particularly for KYC, financial transaction, and AML records — which must be retained for the periods specified in Section 8 regardless of an erasure request.
You may request that syp77 restrict the processing of your personal data in certain circumstances, such as while the accuracy of data you have contested is verified, or where you have objected to processing and we are assessing whether our legitimate grounds override your interests.
Where processing is based on your consent or on contractual necessity, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format and to request that it be transmitted to another controller where technically feasible.
You have the right to object at any time to the processing of your personal data for direct marketing purposes. Upon receipt of a valid objection to marketing, syp77 will cease processing your data for that purpose immediately. You may also object to processing based on legitimate interests; syp77 will assess your objection and cease processing unless we can demonstrate compelling legitimate grounds that override your rights.
Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal. To withdraw consent for marketing communications, update your notification preferences in your account settings or contact our support team.
The syp77 platform is strictly intended for adults aged 21 years and over. syp77 does not knowingly collect, process, or retain personal data relating to individuals under the age of 21. Age verification is a mandatory part of the registration and KYC process.
If syp77 discovers that personal data has been collected from an individual under the age of 21 — whether through a fraudulent registration or otherwise — the account will be immediately suspended, all real-money balances returned to the originating payment method, all winnings forfeited, and all personal data associated with the account securely deleted, except where retention is required for legal or regulatory purposes such as fraud reporting.
If you are a parent or guardian and believe your child may have registered an account with syp77, please contact us immediately at [email protected] with the subject line "Minor Account Report" and we will investigate and act on the report as a matter of priority.
syp77 operates globally distributed infrastructure, and as a result your personal data may be transferred to and stored on servers located outside of Indonesia. Where such transfers occur, syp77 takes appropriate steps to ensure that your data receives a standard of protection equivalent to that afforded within Indonesia, including:
By using the syp77 platform and accepting this Policy, you acknowledge that your personal data may be transferred internationally as described above.
syp77 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform features. When material changes are made, we will notify registered Members via the in-platform notification centre and update the "Last Updated" date at the top of this page.
We encourage all Members to review this Policy periodically. Your continued use of the syp77 platform after the effective date of any amendment constitutes your acceptance of the revised Policy. If you do not accept the amended terms, please contact us to close your account and request erasure of your data in accordance with Section 11.3.
syp77 has designated a Data Protection Officer (DPO) responsible for overseeing compliance with this Policy and applicable data protection obligations. If you have any questions, concerns, or requests relating to your personal data or this Privacy Policy, please reach out through the following channels:
Please note that email addresses listed above are displayed as plain text and are not clickable links. Copy the address manually to compose your message.
Six core commitments that define how we handle your personal data every day.
Every data exchange between your device and the syp77 platform — including login credentials, payment details, and personal information — is protected by industry-standard 256-bit SSL/TLS encryption at all times.
syp77 never sells, rents, or trades your personal data to third-party advertisers or data brokers. Any data shared with third parties is strictly limited to operational, legal, and security purposes described in this Policy.
You retain the right to access, correct, export, restrict, and request deletion of your personal data at any time. Submit a request to our Data Protection Officer and receive a formal response within 30 calendar days.
syp77 retains your data only for as long as legally or operationally necessary. After the applicable retention period, data is securely deleted or anonymised. We do not keep your information indefinitely without reason.
Access to Member personal data by syp77 internal staff is strictly governed by role-based controls and audit logging. Only personnel with a legitimate operational need may access your records.
In the event of a confirmed data breach affecting your personal information, syp77 will notify you without undue delay and take immediate containment action, in line with applicable data protection obligations.
Now that you understand how syp77 protects your privacy, you can explore our full range of games and betting markets knowing your personal data is handled with the highest standards of care. Adults only — 21+.
21+ only. Please gamble responsibly. For self-help tools, visit our Responsible Gaming page. Full terms at Terms & Conditions.