fula77 Privacy Policy

1. Introduction

fula77 ("we", "us", "our", or "the Company") operates the online gaming platform accessible at https://fula77.cam (the "Platform"), which is designed and operated specifically for players based in Indonesia. We are committed to protecting the personal data of everyone who visits, registers on, or otherwise interacts with the Platform.

This Privacy Policy explains the types of personal data we collect about you, the purposes for which we use it, the circumstances under which we may share it with third parties, the security measures we employ to safeguard it, and the rights available to you in relation to your data.

This policy applies to all personal data we collect through the Platform, including data collected via the website, customer support communications, and any related services offered under the fula77 brand. It should be read alongside our Terms & Conditions, which govern your use of the Platform as a whole.

2. Definitions

In this Privacy Policy, the following terms have the meanings set out below:

• "Personal Data" means any information that identifies or could reasonably be used to identify a natural person, either directly or in combination with other data.
• "Processing" means any operation performed on personal data, including collection, storage, use, disclosure, or deletion.
• "Data Controller" means fula77, the entity that determines the purposes and means of processing personal data.
• "Data Processor" means a third party that processes personal data on behalf of and under the instruction of fula77.
• "Consent" means a freely given, specific, informed, and unambiguous indication of your agreement to the processing of your personal data.
• "KYC Data" means identity and address verification documents submitted as part of the Know Your Customer verification process.
• "Cookies" means small text files placed on your device by the Platform to enable certain functionality and collect usage data.

3. Personal Data We Collect

fula77 collects personal data in the following categories:

4. How We Collect Your Data

fula77 collects personal data through the following means:

4.1 Direct Collection

You provide data directly when you register an account, complete KYC verification, make a deposit or withdrawal, contact our support team, or interact with any feature of the Platform that requires you to submit information.

4.2 Automated Collection

When you access the Platform, our servers and analytics tools automatically collect certain Technical Data — including your IP address, browser type, device identifiers, and session activity — through server logs, cookies, and similar technologies. This data is collected regardless of whether you are logged into an account.

4.3 Third-Party Sources

In limited circumstances, fula77 may receive personal data about you from third-party sources, including:

• Identity verification service providers used to confirm your KYC documents
• Payment processors and banking partners (BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata, OVO, DANA, GoPay, ShopeePay) who confirm transaction status
• Fraud detection and anti-money-laundering (AML) screening services
• Publicly available databases used to screen against sanctions lists and politically exposed persons (PEP) registries

5. Legal Basis for Processing

fula77 processes your personal data on the following legal grounds:

• Contractual Necessity: Processing required to fulfill our obligations under the Terms & Conditions — including operating your account, processing deposits and withdrawals, and delivering gaming services.
• Legal Obligation: Processing required to comply with our licensing conditions, anti-money-laundering regulations, and applicable KYC requirements.
• Legitimate Interests: Processing carried out in pursuit of fula77's legitimate business interests, including fraud prevention, platform security, and service improvement, where those interests are not overridden by your rights and interests.
• Consent: Processing based on your specific, informed consent — principally for marketing communications and the use of non-essential cookies. You may withdraw consent at any time by contacting [email protected].

6. How We Use Your Personal Data

fula77 uses the personal data we collect for the following purposes:

• Account Management: Creating, maintaining, and securing your fula77 account, including authentication and credential recovery.
• Transaction Processing: Executing IDR deposits and withdrawals through local Indonesian payment channels and verifying the legitimacy of those transactions.
• KYC & Compliance: Verifying your identity and age (21+), screening against sanctions and PEP lists, and maintaining records as required by our operating license.
• Customer Support: Responding to your inquiries, resolving disputes, and improving support quality through review of interaction records.
• Responsible Gaming: Monitoring gaming patterns to identify potential problem gambling indicators, enforcing self-imposed limits, and acting on self-exclusion requests.
• Platform Security & Fraud Prevention: Detecting and preventing unauthorized access, bonus abuse, collusion, money laundering, and other fraudulent activity.
• Platform Improvement: Analyzing aggregated usage data to optimize performance, fix bugs, and develop new features that serve our Indonesian player base better.
• Marketing Communications: Sending promotional offers, bonus notifications, and seasonal campaigns (such as those tied to Idul Fitri, Ramadhan, or Indonesian Independence Day) exclusively to members who have opted in to receive them.
• Legal Proceedings: Preserving and disclosing data where required by a valid court order, regulatory directive, or law enforcement request.

7. Data Sharing and Disclosure

fula77 does not sell or rent your personal data. We may share your data only in the following circumstances and only to the minimum extent necessary:

7.1 Service Providers

We engage carefully vetted third-party processors to support platform operations, including payment processors (BCA, BRI, BNI, Mandiri and affiliated e-wallet providers), identity verification partners, fraud detection services, cloud infrastructure providers, and customer support tooling vendors. All processors operate under binding data processing agreements that prohibit them from using your data for any purpose beyond the contracted service.

7.2 Regulatory and Legal Disclosure

fula77 may disclose personal data to regulators, licensing authorities, law enforcement agencies, or courts when required to do so by applicable law, by the conditions of our operating license, or pursuant to a valid legal process. We will notify affected players of such disclosures wherever we are legally permitted to do so.

7.3 Business Transfers

In the event that fula77 undergoes a merger, acquisition, or sale of all or substantially all of its assets, personal data held by the Company may be transferred to the successor entity. Affected members will be notified by email at least thirty (30) days before any such transfer takes effect, and will be given the opportunity to request account closure and data deletion prior to the transfer.

7.4 Aggregated and Anonymized Data

fula77 may share aggregated, anonymized datasets — from which individual identities have been fully removed — with analytics partners, industry researchers, or in public reporting. Such data cannot be used to identify you and does not constitute a disclosure of personal data under this policy.

8. Cookies and Tracking Technologies

fula77 uses cookies and similar tracking technologies to operate the Platform effectively and deliver a personalized experience. The following cookie categories are in use:

You can manage your cookie preferences at any time through your browser settings. Disabling strictly necessary cookies will impair Platform functionality. Opting out of analytics or marketing cookies will not affect your ability to use core account features.

9. Data Retention

fula77 retains personal data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable law and our licensing obligations. The following standard retention periods apply:

• Account and Identity Data: Retained for the lifetime of your account plus a minimum of five (5) years following account closure, in accordance with anti-money-laundering record-keeping requirements.
• Financial and Transaction Data: Retained for a minimum of five (5) years from the date of each transaction, as required by our operating license conditions.
• KYC Documents: Retained for five (5) years from account closure or from the date verification was completed, whichever is later.
• Gaming Activity Records: Retained for five (5) years to support dispute resolution, responsible gaming monitoring, and regulatory audit requirements.
• Support Communications: Retained for three (3) years from the date of the last interaction to enable dispute resolution and quality improvement.
• Marketing Preferences: Retained until you withdraw consent or close your account, whichever occurs first.
• Technical / Log Data: Retained for ninety (90) days for security monitoring, then deleted or anonymized.

When data reaches the end of its retention period, fula77 will securely delete or anonymize it in accordance with industry-standard data destruction procedures.

10. Data Security

fula77 implements a layered security program to protect your personal data against unauthorized access, accidental loss, alteration, or disclosure. Key measures include:

• Encryption in Transit: All communications between your browser and our servers use TLS 1.3, the current industry standard for encrypted data transport.
• Encryption at Rest: Sensitive stored data — including KYC documents, financial records, and password hashes — is encrypted using AES-256.
• Access Controls: Internal access to personal data is governed by strict role-based access controls. Staff may access only the data necessary for their specific role, and all access is logged and audited.
• Two-Factor Authentication: All internal systems containing personal data require multi-factor authentication for staff login.
• Penetration Testing: fula77 commissions independent security assessments on a regular basis to identify and remediate vulnerabilities.
• Incident Response: fula77 maintains a documented data breach response plan. In the event of a breach affecting your personal data, we will notify you and relevant regulatory authorities within the timeframes required by applicable law.

11. Your Data Rights

As a fula77 member, you hold the following rights with respect to your personal data. To exercise any of these rights, submit a written request to [email protected] with the subject line "Data Rights Request — [Your Username]". We will acknowledge your request within forty-eight (48) hours and respond substantively within thirty (30) days.

Please note that certain rights are subject to limitations where processing is required by law or to fulfill contractual obligations. Where we are unable to fully honor a request, we will explain the reason clearly in our response.

12. International Data Transfers

fula77 operates infrastructure and engages service providers in multiple countries. As a result, your personal data may be transferred to and processed in jurisdictions outside Indonesia. Where such transfers occur, fula77 ensures that appropriate safeguards are in place to protect your data, including:

• Contractual clauses that impose data protection obligations on the recipient entity equivalent to those applicable in the originating jurisdiction
• Transfer only to jurisdictions that maintain adequate data protection standards as recognized by relevant international frameworks
• Binding corporate rules where data is transferred within a corporate group of entities

You may request details of the safeguards applicable to any specific international transfer of your personal data by contacting us at [email protected].

13. Protection of Minors

The fula77 Platform is strictly intended for adults aged 21 years and over. fula77 does not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory component of the KYC process, and accounts found to belong to underage individuals will be closed immediately and all associated funds returned to the depositor of record.

If you believe that a minor has registered an account on the Platform, please notify us immediately at [email protected] so that we can investigate and take appropriate action without delay. Parents and guardians are encouraged to use parental control software to prevent minors from accessing online gaming platforms.

14. Changes to This Privacy Policy

fula77 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, platform functionality, legal requirements, or regulatory guidance. Material changes — those that meaningfully affect your rights or how we use your data — will be communicated to registered members by email to the address on file no less than fourteen (14) days before the change takes effect.

The date of the most recent revision is displayed at the top of this page. We encourage you to review this policy periodically. Your continued use of the Platform after any update constitutes acceptance of the revised policy. If you do not agree with a change, you may close your account and request deletion of your data prior to the effective date.

15. Contact Us and Data Protection Officer

If you have questions, concerns, or complaints about how fula77 handles your personal data, or if you wish to exercise any of your data rights, please contact our dedicated Privacy team:

We take every privacy inquiry seriously and aim to resolve all concerns fairly and promptly. If you are not satisfied with our response, you have the right to escalate your complaint to the data protection supervisory authority or regulatory body applicable in your jurisdiction.