mio77 Privacy Policy

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• "Platform" refers to the mio77 website accessible at https://mio77.pro, including all associated services, games, and account functionality.
• "Personal Data" refers to any information that identifies or could reasonably identify a living individual, including name, email address, phone number, date of birth, payment account details, and device identifiers.
• "Player" / "You" refers to any individual who registers an Account on the Platform or browses the Platform without registration.
• "Data Controller" refers to mio77, the entity that determines the purposes and means of processing your Personal Data.
• "Data Processor" refers to any third party that processes Personal Data on behalf of mio77 under a written data processing agreement.
• "KYC" (Know Your Customer) refers to the mandatory identity and age verification process that all Players must complete before withdrawals are enabled.
• "Cookies" refers to small text files placed on your device by the Platform to store session information, preferences, and analytics data.
• "IDR" refers to Indonesian Rupiah, the currency used for all financial transactions on the Platform.

mio77 acts as the Data Controller for all Personal Data collected through the Platform. As Data Controller, mio77 is responsible for determining the purposes for which your Personal Data is collected and the manner in which it is processed.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data, you may contact our Privacy Officer at:

mio77 collects Personal Data across three broad categories: data you provide directly, data generated by your use of the Platform, and data received from trusted third-party sources.

3.1 Data You Provide Directly

• Registration details: full name, date of birth, username, email address, and mobile phone number.
• Address information: residential address, city (e.g., Jakarta, Surabaya, Bandung, Medan, Bali, Yogyakarta), and postal code.
• KYC documentation: copies of government-issued photo identification (national identity card or passport) and proof of address documents.
• Payment details: bank account numbers for BCA, BRI, BNI, Mandiri, or CIMB Niaga; registered mobile numbers for e-wallets OVO, DANA, GoPay, ShopeePay, and LinkAja. Full payment credentials are tokenised and never stored in plain text.
• Communications: the content of any messages, complaints, or requests you submit to our support team via live chat or email.

3.2 Data Generated Automatically

• Technical identifiers: IP address, device type, operating system, browser type and version, and unique device identifier.
• Session data: login timestamps, session duration, pages visited, games played, bet history, and in-session navigation patterns.
• Transaction records: deposit amounts, withdrawal requests, bonus activations, and wagering history — all denominated in IDR.
• Cookie and tracking data: as described in Clause 8 below.

3.3 Data from Third Parties

• Identity verification results from our licensed KYC partner, confirming age (21+ requirement) and identity document validity.
• Payment status confirmations from our payment processing partners (e.g., BCA Virtual Account confirmation, OVO payment gateway).
• Fraud and risk signals from licensed anti-fraud service providers, used solely to protect the integrity of the Platform.

Summary Table — Data Categories and Purposes

mio77 collects your Personal Data through the following channels:

• Registration Forms: When you create an Account on the Platform, you voluntarily submit identity and contact information through the registration process.
• KYC Submission Portal: When prompted to complete identity verification prior to your first withdrawal, you upload documentation directly through the secure KYC portal within your Account.
• Cashier and Payment Gateway: When you initiate a deposit or withdrawal, our payment processing partners transmit transaction status data back to the Platform. Payment credentials are handled exclusively by the relevant payment gateway (BCA, BRI, OVO, GoPay, etc.) and are not stored in their raw form on mio77 servers.
• Live Chat and Support Tickets: Conversations with our 24/7 Indonesian-speaking support team are recorded and stored for quality assurance, dispute resolution, and regulatory compliance purposes.
• Automated Technologies: The Platform uses cookies, session tokens, and server-side logging to automatically collect technical and usage data as you navigate and interact with the site. See Clause 8 for full details.
• Third-Party Verification Providers: Our KYC and fraud-prevention partners may supply supplementary data points (such as document validation results or risk scores) to assist in verifying your identity and protecting your Account.

mio77 uses your Personal Data solely for the specific, documented purposes set out below. We do not use your data for any purpose incompatible with those listed here without first obtaining your consent or establishing a separate legal basis.

• Account Creation and Management: To register your Account, verify your identity, manage your profile settings, and maintain accurate records of your Account status.
• Transaction Processing: To process IDR deposits via BCA, BRI, BNI, Mandiri, and the OVO / DANA / GoPay / ShopeePay e-wallet ecosystem, and to execute withdrawal requests to your verified payment account.
• KYC and Fraud Prevention: To verify that you are at least 21 years of age, that your identity matches your registered account details, and to detect, investigate, and prevent fraudulent or abusive activity on the Platform.
• Responsible Gaming: To monitor betting patterns for signs of problem gambling, to enforce self-imposed deposit limits and cooling-off periods, and to communicate responsible gaming resources to players who may be at risk.
• Customer Support: To respond to your queries, resolve disputes, and process account-related requests submitted via live chat or email.
• Platform Security: To identify and mitigate security threats, including unauthorised login attempts, account takeover attempts, and exploitation of platform vulnerabilities.
• Legal and Regulatory Compliance: To fulfil obligations under our international gaming licence, respond to lawful requests from regulatory authorities, and maintain the transaction and audit records required by our licensing jurisdiction.
• Marketing Communications (opt-in only): To send you promotional offers, bonus notifications, and seasonal campaign communications relevant to the Indonesian market — including Idul Fitri and Ramadhan promotions, BRI Liga 1 event offers, and tournament announcements — where you have explicitly opted in to receive such communications. You may withdraw consent at any time.
• Platform Improvement: To analyse aggregated, anonymised usage data in order to improve game selection, user experience, and platform performance. This analysis does not identify individual players.

mio77 processes your Personal Data on one or more of the following legal bases, depending on the specific processing activity:

• Contract Performance: Processing your registration details, financial data, and KYC documents is necessary to perform the contract between mio77 and you as a registered Player — specifically, to open your Account, process deposits and withdrawals, and deliver the gaming services you have requested.
• Legal Obligation: Certain processing activities — including KYC verification, transaction record-keeping, and cooperation with licensing authorities — are required by the legal and regulatory obligations associated with our international gaming licence.
• Legitimate Interests: mio77 processes technical and usage data on the basis of legitimate interests in maintaining platform security, preventing fraud, and improving the Platform, provided those interests are not overridden by your privacy rights.
• Consent: Marketing communications and optional analytics cookies are processed solely on the basis of your explicit, freely given, and withdrawable consent. You may withdraw consent for marketing at any time by contacting our support team at [email protected].

mio77 does not sell, rent, or trade your Personal Data. We share your data only in the limited circumstances described below, and only to the minimum extent necessary for the stated purpose:

• Payment Processors: Your bank account details (BCA, BRI, BNI, Mandiri) and e-wallet identifiers (OVO, DANA, GoPay, ShopeePay) are transmitted to the relevant payment processor solely to execute the deposit or withdrawal transaction you have initiated. Payment processors are contractually prohibited from using your data for any other purpose.
• KYC and Identity Verification Providers: Copies of identity documents and supporting verification data are shared with our licensed KYC partner to confirm your age (21+ requirement) and identity. KYC partners process data strictly under our instructions and under binding data processing agreements.
• Fraud Prevention and Risk Services: Anonymised or pseudonymised technical identifiers (such as IP address and device fingerprint) may be shared with our anti-fraud service provider to detect unusual activity patterns. No full identity data is shared for this purpose.
• Game Studios and Content Providers: Game session data (such as bet amounts and outcomes) is transmitted to the relevant game studio (e.g., Pragmatic Play, Evolution Gaming, Spribe, Pocket Games Soft, NetEnt, Microgaming) to resolve game-level disputes and to comply with studio audit requirements. Studios do not receive your name, address, or payment details.
• Regulatory and Legal Authorities: mio77 will disclose Personal Data to licensing bodies, law enforcement agencies, or courts where required by a valid legal obligation, court order, or regulatory directive. We will, where legally permitted, notify affected Players of such disclosures.
• Corporate Successors: In the event of a merger, acquisition, or sale of substantially all of mio77's assets, Player data may be transferred to the acquiring entity, subject to equivalent privacy protections. Players will be notified of any such transfer in advance.

mio77 uses cookies and similar tracking technologies to operate the Platform effectively, maintain your session security, and — with your consent — to improve the user experience through analytics. The following categories of cookies are in use:

You may manage your cookie preferences at any time through your browser settings. Please note that disabling strictly necessary or functional cookies may impair the performance of the Platform or prevent you from logging into your Account.

mio77 maintains a comprehensive set of technical and organisational security measures designed to protect your Personal Data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS Encryption: All data in transit between your device and mio77 servers is encrypted using industry-standard TLS 1.2 or higher. Our SSL certificate is maintained and renewed continuously.
• Encrypted Data Storage: Sensitive data at rest — including KYC documents and payment identifiers — is encrypted using AES-256 encryption within isolated, access-controlled data stores.
• Access Controls: Access to Personal Data is restricted to mio77 personnel and authorised Data Processors on a strict need-to-know basis. All access is logged and subject to regular internal audit.
• Two-Factor Authentication (2FA): mio77 strongly recommends that all Players enable 2FA on their Accounts. Internal administrative systems require mandatory 2FA for all staff access.
• Penetration Testing: The Platform undergoes regular independent security assessments, including penetration testing and vulnerability scanning, to identify and remediate security weaknesses proactively.
• Incident Response: mio77 maintains a documented data breach incident response plan. In the event of a breach that is reasonably likely to result in a risk to your rights, we will notify affected Players within 72 hours of becoming aware of the incident.

mio77 retains your Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, subject to the following retention schedules:

Upon expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymised, such that it can no longer be associated with any individual Player.

As a Player on the mio77 Platform, you have the following rights with respect to your Personal Data. To exercise any of these rights, submit a written request to [email protected]. We will respond within 30 days.

• Right of Access: You have the right to request a copy of the Personal Data that mio77 holds about you, along with information about how it is used and with whom it has been shared.
• Right to Rectification: If any Personal Data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. For Account details such as your registered email address or mobile number, you may also update these directly through your Account settings.
• Right to Erasure ("Right to Be Forgotten"): You have the right to request deletion of your Personal Data. This right is subject to our legal obligations — where we are required to retain data for a specified period under our licensing obligations, we cannot delete it before that period expires, but we will restrict its use to the legally required purpose only.
• Right to Restriction of Processing: You have the right to request that we restrict the processing of your Personal Data in certain circumstances — for example, while a dispute regarding the accuracy of your data is being resolved.
• Right to Data Portability: You have the right to receive a machine-readable copy of the Personal Data you have provided to mio77, in a structured, commonly used format, for transfer to another service provider.
• Right to Object: You have the right to object to the processing of your Personal Data where that processing is based on mio77's legitimate interests. You also have an unconditional right to object to the processing of your data for direct marketing purposes at any time.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing emails, analytics cookies), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal.

mio77 is strictly an adults-only platform. You must be at least 21 years of age to register an Account or use any service on the Platform. We do not knowingly collect Personal Data from any individual under the age of 21.

If we become aware that an Account has been registered by, or that Personal Data has been submitted by, a person under the age of 21, we will immediately suspend the Account, forfeit any balance held in that Account, and permanently delete all associated Personal Data from our systems in accordance with our data deletion procedures.

If you are a parent or legal guardian and you believe that a minor in your care has registered on or accessed the mio77 Platform, please contact us immediately at [email protected] so that we can take prompt corrective action.

mio77 serves players predominantly located in Indonesia, including major cities such as Jakarta, Surabaya, Bandung, Medan, Semarang, Makassar, Bali, and Yogyakarta. Our primary data processing infrastructure is located in jurisdictions with robust data protection frameworks.

Where Personal Data is transferred to or processed in a jurisdiction outside Indonesia, mio77 ensures that equivalent protections are in place through one or more of the following safeguards:

• Contractual data transfer agreements that impose obligations on the receiving party that are equivalent to those contained in this Privacy Policy.
• Transfers exclusively to Data Processors who are contractually bound to process data only on mio77's documented instructions.
• Transfers to jurisdictions that maintain an adequate level of data protection as assessed by recognised international standards.

By registering an Account on the Platform, you acknowledge that your Personal Data may be processed in jurisdictions outside Indonesia in accordance with the safeguards described in this clause.

The mio77 Platform does not contain links to external third-party websites. All navigation links on this site direct exclusively to pages within the mio77.pro domain. As a result, there is no risk of inadvertent data transfer to third-party websites through link navigation on this Platform.

If you access the mio77 Platform via a link from a third-party website, please note that we are not responsible for the privacy practices of that third-party site and we encourage you to review its privacy policy before submitting any personal information.

mio77 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or platform functionality. When changes are made, the "Last Updated" date at the top of this page will be revised accordingly.

Where changes are material — that is, where they represent a significant change to how we collect, use, or share your Personal Data — we will notify registered Players via the email address associated with their Account at least 14 days before the changes take effect.

Your continued use of the Platform after the effective date of any revised Privacy Policy constitutes your acknowledgement of the changes. If you do not accept the revised policy, you must cease using the Platform and may request Account closure by contacting our support team.

For any questions, requests, or concerns regarding this Privacy Policy or the handling of your Personal Data, please contact the mio77 Privacy Officer through the following channel:

• Email: [email protected] (plain text — not a clickable link; copy the address manually)
• Live Chat: Available 24/7 via the chat widget on the Platform after completing your mio77 login.
• Response Language: Native Indonesian-speaking privacy support is available across all time zones — WIB (UTC+7), WITA (UTC+8), and WIT (UTC+9).
• Response Time: We aim to acknowledge all privacy-related requests within 5 business days and to provide a full response within 30 calendar days.

If you are unsatisfied with our response to a privacy concern, you have the right to escal ate the matter to the relevant regulatory authority in your jurisdiction or to our licensing body.