Privacy Policy

1 Definitions

In this Privacy Policy, the following terms carry the meanings given below:

• "era77" / "Platform" / "We" / "Us" / "Our" — The online betting and gaming platform operated at https://era77.cam and all associated sub-services and interfaces.
• "Member" / "Player" / "You" / "Your" — Any individual who registers for, accesses, or uses the era77 Platform.
• "Personal Data" — Any information that identifies or can reasonably be used to identify a living natural person, directly or in combination with other data.
• "Processing" — Any operation performed on Personal Data, including collection, storage, use, disclosure, transfer, deletion, or destruction.
• "Data Controller" — The entity that determines the purposes and means of processing Personal Data — in this context, era77.
• "Data Processor" — A third party that processes Personal Data on era77's behalf under a written data processing agreement.
• "Cookies" — Small text files stored on your device by a web browser to retain session and preference information.

2 Data Controller

era77 acts as the Data Controller for all Personal Data collected through the Platform. As Data Controller, era77 determines how and why your information is processed and is accountable for ensuring that processing is lawful, fair, and transparent.

For all privacy-related inquiries, requests, or complaints, please contact the era77 Data Protection team at:

3 Data We Collect

era77 collects Personal Data through several distinct channels. The categories of data collected, and the context in which they are gathered, are set out in the table below:

4 Purpose & Legal Basis for Processing

era77 processes Personal Data only where a lawful basis exists. The primary purposes and their corresponding legal bases are:

4.1 — Contract Performance

Processing your Identity, Contact, and Financial Data is necessary to create and manage your account, process deposits and withdrawals in Indonesian Rupiah, and deliver the betting and gaming services you have contracted with era77 to receive. Without this data, we cannot fulfil the contract.

4.2 — Legal and Regulatory Compliance

era77 is required by applicable gaming regulations and anti-money laundering (AML) obligations to conduct identity verification (KYC), maintain transaction records, and report suspicious activity. This processing is mandatory and cannot be refused by members who wish to use the Platform.

4.3 — Legitimate Interests

era77 processes Technical and Usage Data on the basis of legitimate interests, specifically to: detect and prevent fraud, collusion, and bonus abuse; ensure Platform security and stability; analyse usage patterns to improve products and services; and enforce our Terms and Conditions. We have assessed that these interests are not overridden by members' fundamental rights and freedoms.

4.4 — Consent

Where era77 sends promotional communications (including offers, bonuses, and event notifications) by email or mobile, we do so only on the basis of your explicit opt-in consent provided at registration or subsequently through account preferences. You may withdraw this consent at any time without affecting the lawfulness of processing prior to withdrawal.

5 Data Sharing

era77 does not sell, rent, or trade your Personal Data. We may share data with the following categories of recipients, and only to the extent strictly necessary:

• Payment Processors: Your financial data is shared with the relevant Indonesian bank (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata) or e-wallet provider (OVO, DANA, GoPay, ShopeePay, LinkAja) solely to execute your deposit or withdrawal instruction.
• KYC / Identity Verification Providers: Verification data may be processed by a contracted third-party KYC service acting as a Data Processor under a written agreement that prohibits any secondary use.
• Game Content Providers: Technical session data (bet amounts, game selections) is shared with licensed game studios (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft) to render and record game outcomes. These providers do not receive identity or contact data.
• Fraud Prevention & Security Services: Technical and Usage Data may be shared with fraud detection platforms to protect era77 and its members from unauthorized access and financial crime.
• Regulatory Authorities: era77 may be required to disclose Personal Data to competent regulatory, law enforcement, or judicial authorities when required by applicable law or a valid legal order.
• Professional Advisers: Lawyers, auditors, and accountants may access Personal Data on a strictly need-to-know basis for the purpose of obtaining professional advice, subject to binding confidentiality obligations.

6 International Data Transfers

era77's primary servers are hosted in data centers that maintain ISO 27001-certified information security management systems. Some of our contracted Data Processors — including certain game studios and fraud prevention providers — may operate infrastructure outside Indonesia. Where Personal Data is transferred internationally, era77 ensures that adequate safeguards are in place, including:

• Standard contractual clauses that impose data protection obligations equivalent to those described in this policy.
• Transfer only to jurisdictions that maintain an adequate level of data protection as assessed against international standards.
• Binding corporate rules where applicable within corporate group structures.

7 Data Retention

Personal Data is retained for the minimum period necessary to fulfil its stated purpose or to comply with applicable legal obligations:

• Account Data (Identity, Contact): Retained for the duration of the active account relationship, plus five (5) years following account closure to comply with AML record-keeping requirements.
• Financial Transaction Data: Retained for a minimum of five (5) years from the date of the transaction, in compliance with financial regulatory obligations applicable to gaming operators.
• KYC Verification Documents: Retained for five (5) years following account closure or the date of the last relevant transaction.
• Technical and Usage Data: Retained for up to two (2) years from collection for analytics and fraud prevention purposes, then anonymized or deleted.
• Marketing Preference Data: Retained until you withdraw consent or close your account, whichever is earlier.
• Support Communications: Retained for three (3) years from the date of the interaction for quality assurance and dispute resolution purposes.

8 Security Measures

era77 implements a layered security architecture designed to protect Personal Data against unauthorized access, alteration, disclosure, or destruction. Key measures include:

• 256-bit TLS encryption for all data in transit between your device and era77 infrastructure.
• AES-256 encryption for sensitive Personal Data stored at rest on era77 servers.
• Multi-factor authentication (MFA) requirements for administrative access to production systems.
• Role-based access controls (RBAC) limiting employee access to Personal Data to those with a legitimate operational need.
• Continuous intrusion detection monitoring and security information and event management (SIEM) systems.
• Regular penetration testing by independent external security firms.
• Documented incident response procedures, including member notification protocols in the event of a data breach that creates a risk to your rights.

While era77 takes all reasonable technical and organizational measures to protect your data, no system is entirely immune from risk. In the event of a data breach affecting your Personal Data, era77 will notify you and any applicable regulatory authority within the timeframes required by law.

9 Cookies & Tracking Technologies

era77 uses cookies and similar technologies to operate the Platform effectively. The categories of cookies in use are:

9.1 — Essential Cookies

These cookies are strictly necessary to authenticate your session, maintain your login state, and deliver core Platform functionality. They cannot be disabled without breaking fundamental Platform features.

9.2 — Performance & Analytics Cookies

These cookies collect anonymous data about how members navigate and use the Platform — page views, session durations, error events — enabling era77 to identify performance issues and improve the user experience. No personally identifiable information is collected for analytics purposes.

9.3 — Functional Cookies

These cookies remember your preferences — such as language, odds format, and default stake — to provide a personalized experience across sessions.

9.4 — Fraud Prevention Cookies

These cookies support era77's fraud detection system by recognizing trusted devices and flagging anomalous login patterns. They are essential to account security.

You may manage cookie settings through your browser controls. Note that disabling essential or fraud prevention cookies will impair your ability to access and use the Platform. era77 does not use third-party advertising or behavioural tracking cookies.

10 Your Rights

As a member, you have the following rights with respect to your Personal Data held by era77. To exercise any of these rights, please contact us at [email protected] with the subject line "Privacy Request":

era77 will respond to all valid privacy rights requests within 30 days of receipt. Where a request is complex or high in volume, we may extend this period by a further 60 days, with written notice to you.

11 Minors

era77 strictly prohibits access by individuals under the age of 21. The Platform does not knowingly collect Personal Data from anyone under 21. If era77 becomes aware that Personal Data has been collected from a person under 21, we will immediately close the associated account, delete the data, and return any deposited funds to the original payment source.

12 Third-Party Links

The era77 Platform does not contain links to external third-party websites. All navigable links on the Platform direct to pages within the era77 domain (era77.cam). era77 is not responsible for the privacy practices of any third-party service you independently choose to visit. This Privacy Policy applies solely to data processing activities conducted by era77 through the era77.cam Platform.

13 Policy Changes

era77 reviews this Privacy Policy periodically to ensure it remains accurate and reflective of our current data processing activities. When material changes are made, we will:

• Update the "Last Updated" date at the top of this page.
• Notify registered members via email at least seven (7) days before the revised policy takes effect.
• Display a prominent notice on the Platform's homepage for a period of 30 days following the update.

Your continued use of the Platform after the effective date of any revised Privacy Policy constitutes acceptance of the updated terms. If you do not accept the revised policy, you must discontinue use of the Platform and may request account closure by contacting our support team.

14 Contact & Complaints

era77 takes all privacy concerns seriously. If you have a question, request, or complaint regarding this Privacy Policy or our data processing practices, please contact us through the following channel:

If you are dissatisfied with our response to a privacy complaint, you have the right to escalate your concern to the competent data protection supervisory authority or consumer protection body in your jurisdiction. era77 will cooperate fully with any such authority in the course of an investigation.