wiz77 Privacy Policy

Throughout this Privacy Policy, the following terms carry the meanings assigned below unless the context clearly requires otherwise.

wiz77 is an internationally licensed online sportsbook and casino platform accessible at wiz77.ws. The platform is operated by the company identified in wiz77's licensing documentation, which acts as the Data Controller for all Personal Data collected from players who access the platform from Indonesia and other permitted jurisdictions.

wiz77's primary market is Indonesia. The platform is designed to serve Indonesian players and processes data in accordance with the principles of the applicable international data protection framework under which wiz77 is licensed, as well as with due regard to the data protection norms applicable in Indonesia.

wiz77 collects Personal Data across several categories, depending on the nature of your interaction with the platform. The table below summarises the categories, specific data points, and the context in which each is collected.

wiz77 collects Personal Data through the following channels:

• Directly from you: When you complete the registration form, submit KYC documentation, enter payment details in the cashier, configure your account settings, or contact our support team.
• Automatically through platform use: The wiz77 platform logs technical and gameplay data automatically when you access and interact with it. This includes server-side logs of all bets placed, games launched, and account actions performed.
• Via cookies and similar technologies: Session cookies, preference cookies, and analytics cookies are placed on your device when you visit wiz77.ws. For full details, see Section 10 (Cookies & Tracking).
• From third-party verification providers: During KYC processing, wiz77 may use a third-party identity verification service to cross-reference the documents you provide. The data returned from that service is limited to a verification result and is handled under a data processing agreement.
• From payment processors: Payment confirmation data (transaction reference numbers, success/failure status) is received from the payment gateways used to process IDR deposits and withdrawals. Full payment card or full bank account numbers are never stored by wiz77 directly.

wiz77 uses the Personal Data it collects for the following purposes. Each purpose is tied to a specific legal basis, as detailed in Section 6.

wiz77 does not use your Personal Data to build or sell advertising profiles, does not share your data with social media advertising networks, and does not engage in automated decision-making that produces legal or similarly significant effects without human review.

wiz77 processes Personal Data only where it has a valid legal basis to do so. The primary legal bases relied upon are as follows:

• Contractual necessity: Processing required to deliver the services you have contracted for when you register a wiz77 account — including account management, payment processing, and game delivery.
• Legal obligation: Processing required to comply with wiz77's obligations under its international gaming licence, including KYC verification, AML monitoring, and record-keeping requirements.
• Legitimate interests: Processing conducted for wiz77's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and aggregate analytics — provided those interests are not overridden by your privacy rights.
• Consent: Processing for promotional communications is conducted only where you have explicitly consented at registration or through your account notification preferences. You may withdraw this consent at any time without affecting your ability to use the platform.

wiz77 does not sell your Personal Data. We share data only in the limited circumstances described below, and only to the minimum extent necessary for each purpose.

• KYC verification providers: Identity documents submitted during the KYC process are shared with our contracted third-party identity verification service solely for the purpose of verifying your identity and age. This service operates under a data processing agreement with wiz77.
• Payment processors: Financial data necessary to process your deposit or withdrawal is shared with the relevant payment gateway (e.g., the processor facilitating your BCA, BRI, GoPay, or DANA transaction). No unnecessary data is transmitted beyond what the payment requires.
• Game content providers: When you launch a game supplied by a third-party studio (such as Evolution Gaming, Pragmatic Play, or Pocket Games Soft), your account identifier and session token are passed to that studio's servers to load the game. Your full personal profile is not shared with game studios.
• Regulatory and law enforcement authorities: Where wiz77 is required by its licensing authority, a court order, or applicable law to disclose Personal Data, we will comply with that requirement. We will notify you of such a request where we are legally permitted to do so.
• Business transfers: In the event of a merger, acquisition, or sale of all or substantially all of wiz77's assets, your Personal Data may be transferred to the acquiring entity, subject to the same privacy protections described in this Policy. You will be notified of any such transfer in advance.

wiz77 operates internationally, and some of the third-party service providers it engages — including KYC verification providers and game content studios — may process data on servers located outside Indonesia. Where Personal Data is transferred across borders, wiz77 ensures that appropriate safeguards are in place to protect your data to a standard at least equivalent to that described in this Policy.

Safeguards used for cross-border transfers include: contractual data processing agreements that incorporate standard data protection clauses, and selection of service providers that operate under recognised international data protection frameworks. Where you have questions about the specific safeguards applied to a particular transfer, please contact wiz77 at the address in Section 16.

wiz77 retains Personal Data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law or our licensing obligations. The general retention periods applied are set out below.

When the retention period for a data category expires, the relevant data is securely deleted or irreversibly anonymised. Anonymised data — which cannot be used to identify you — may be retained indefinitely for aggregate analytical purposes.

wiz77 uses cookies and similar browser-based technologies to operate the platform effectively. The cookies wiz77 deploys fall into the following categories:

• Strictly necessary cookies: Required for the platform to function. These include session cookies that keep you logged in during your visit and security tokens that protect your account from cross-site request forgery (CSRF) attacks. These cookies cannot be disabled without rendering the platform non-functional.
• Preference cookies: Store your interface preferences — such as your selected language and display settings — so they are remembered between sessions. These cookies do not track your activity across other websites.
• Analytics cookies: Collect aggregated, anonymised data about how players navigate the platform — which pages are visited most frequently, where players exit, and how long sessions last. This data is used to improve platform design and performance. wiz77 uses first-party analytics only; no third-party analytics networks with cross-site tracking capabilities are deployed.

wiz77 does not deploy third-party advertising cookies, retargeting pixels, or any tracking technology that follows your activity outside of the wiz77.ws domain. You may configure your browser to reject or delete cookies at any time; however, disabling strictly necessary cookies will prevent you from logging in and using the platform.

As a player whose Personal Data is processed by wiz77, you hold the following rights. wiz77 will respond to all valid rights requests within 30 days of receipt, by written response to the email address registered to your account.

To exercise any of the above rights, contact wiz77 at [email protected] (plain text — not a clickable link) with the subject line "Data Rights Request" and a description of the right you wish to exercise. wiz77 may request proof of identity before processing your request.

wiz77 is strictly an adult platform. Access to all real-money services is limited to individuals aged 21 years and above, in accordance with our Terms & Conditions and our responsible gaming commitments. wiz77 does not knowingly collect or process the Personal Data of any person under the age of 21.

If wiz77 becomes aware — through KYC verification or any other means — that an account is held by a person under 21, that account will be suspended immediately, the relevant Personal Data will be securely deleted (subject to any legal obligation to retain evidence of the underage access), and any deposited funds will be returned to the source payment method.

If you are a parent or guardian and believe that your child has registered a wiz77 account without your knowledge, please contact us immediately at [email protected] so we can take appropriate action without delay.

wiz77 implements a multi-layered technical and organisational security programme to protect your Personal Data against unauthorised access, accidental loss, destruction, or disclosure. Key measures include:

• Encryption in transit: All data transmitted between your browser and wiz77's servers is encrypted using TLS 1.2 or higher (256-bit SSL). This applies to login, account management, cashier operations, and all other platform interactions.
• Encryption at rest: Sensitive data fields — including passwords (stored as salted hashes, never in plaintext), identity document images, and payment account numbers — are encrypted in the database using AES-256 encryption.
• Access controls: Internal access to Personal Data is restricted on a strict need-to-know basis. All staff who interact with Personal Data undergo data privacy training and are bound by confidentiality obligations.
• Two-factor authentication (2FA): Optional 2FA via SMS OTP to your registered Indonesian mobile number is available for all player accounts. wiz77 strongly recommends enabling 2FA.
• Automatic session timeout: Inactive sessions are automatically terminated after 60 minutes of inactivity to prevent unauthorised access on shared or unattended devices.
• Penetration testing and vulnerability scanning: wiz77's platform infrastructure undergoes regular security assessments, including third-party penetration testing, to identify and remediate potential vulnerabilities before they can be exploited.
• Incident response: In the event of a confirmed data breach that poses a risk to players' rights, wiz77 will notify affected players and the relevant supervisory authority within the timeframe required by applicable law, and will take immediate remedial action.

The wiz77 platform may, in certain contexts, reference or link to third-party services — for example, the payment processors or game studios whose products are integrated into the platform. wiz77 is not responsible for the privacy practices of any third-party website or service. Each third party operates under its own privacy policy, and wiz77 has no control over how those parties collect or use data once you have left the wiz77.ws domain.

We encourage you to review the privacy policy of any third-party service before providing your personal information to them. The presence of a third-party integration on the wiz77 platform does not constitute an endorsement of that party's data practices.

wiz77 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, platform features, or applicable legal requirements. When material changes are made — for example, changes to the categories of data collected, the purposes for which it is used, or the third parties with whom it is shared — wiz77 will notify registered players by email to the address on their account at least 7 days before the revised Policy takes effect.

The effective date displayed at the top of this page reflects the date on which the current version came into force. Your continued use of the wiz77 platform after the effective date of any revision constitutes your acceptance of the updated Policy. If you do not agree with a material change, you may close your account and withdraw your remaining balance before the change takes effect by contacting support.

Minor updates — such as typographical corrections, clarifications that do not alter the substantive meaning of any clause, or updated contact details — may be made without advance notice. We recommend reviewing this page periodically to stay informed of our current data practices.

For any question, concern, or formal request relating to this Privacy Policy or the way wiz77 handles your Personal Data, please contact our Data Protection team using the details below. All enquiries are handled in strict confidence.

If you are not satisfied with wiz77's response to a privacy complaint, you have the right to escalate the matter to the relevant data protection supervisory authority in the jurisdiction under which wiz77 is licensed. Details of the appropriate authority are available upon request.

For questions about responsible gaming, self-exclusion, or deposit limits, please visit the Responsible Gaming page. For questions about the platform's general rules and eligibility requirements, please refer to our Terms & Conditions.