ceri77 Privacy Policy

1 Definitions

The following definitions apply throughout this Privacy Policy:

• "Platform" means the ceri77 website at https://ceri77.cam, including all subdomains, mobile-optimized versions, and associated software applications.
• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to name, date of birth, email address, mobile number, financial data, device identifiers, and IP addresses.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, use, disclosure, or deletion.
• "Data Controller" means ceri77, the entity that determines the purposes and means of processing Personal Data collected via the Platform.
• "Data Processor" means any third-party service provider that processes Personal Data on behalf of ceri77 pursuant to a data processing agreement.
• "Member" / "User" / "You" means any individual who has registered an account on the ceri77 Platform or who otherwise interacts with the Platform.
• "KYC" means Know Your Customer — the identity and age verification procedures mandated by anti-money laundering (AML) regulations.
• "Cookies" means small text files stored on your device by a web browser, used to record session information, preferences, and behavioral analytics.
• "AML" means Anti-Money Laundering — the regulatory framework requiring financial and gaming platforms to monitor and report suspicious financial activity.

2 Data Controller Information

The Data Controller responsible for your Personal Data collected via the ceri77 Platform is:

• Brand Name: ceri77
• Website: https://ceri77.cam
• Contact Email: [email protected]
• Primary Markets Served: Indonesia and select international territories
• Operating Framework: International gaming license jurisdictions

ceri77 is committed to ensuring that the Personal Data of all Members — the vast majority of whom are located in Indonesia — is processed in accordance with applicable data protection principles, including lawfulness, fairness, transparency, purpose limitation, data minimization, accuracy, storage limitation, and integrity.

3 Personal Data We Collect

ceri77 collects Personal Data across several categories, depending on how you interact with our Platform. The table below summarizes the categories of data we collect:

We do not collect sensitive categories of Personal Data such as racial or ethnic origin, political opinions, religious beliefs, health information, or biometric data beyond what is strictly necessary for KYC age and identity verification purposes.

4 How We Collect Your Data

ceri77 collects your Personal Data through the following channels:

1. Direct Submission: When you complete the account registration form, submit KYC documents, request a deposit or withdrawal, contact customer support, or participate in a survey or promotion.
2. Automated Technical Collection: Our servers automatically log certain technical data each time you access the Platform, including your IP address, device fingerprint, and browser metadata. This occurs through server logs, cookies, and similar tracking technologies.
3. Payment Processors: When you make a deposit or request a withdrawal via BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, or any supported e-wallet (OVO, DANA, GoPay, ShopeePay, LinkAja), we receive transaction confirmation data from the relevant payment provider to reconcile your account balance.
4. Third-Party Game Providers: Game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft may share session-level gameplay data with ceri77 for account crediting, dispute resolution, and RNG audit purposes.
5. Fraud Detection Services: We use third-party fraud detection and device-fingerprinting tools that may collect additional technical identifiers to protect the integrity of our Platform.
6. Publicly Available Sources: In some cases, we may verify information you provide against publicly available databases or official records for AML compliance purposes.

5 Purposes of Data Processing

ceri77 processes your Personal Data for specific, legitimate purposes. We do not process your data in ways that are incompatible with the purposes for which it was originally collected. The primary purposes of our data processing activities are:

• Account Administration: To create, maintain, and manage your ceri77 account, process login requests, and administer account settings.
• Service Delivery: To process bets, credit winnings, execute deposit and withdrawal transactions, and deliver all Platform services you request.
• Identity Verification (KYC): To verify your age (21+), confirm your identity, and meet our AML obligations by confirming that your payment methods are registered in your own name.
• Fraud Prevention and Security: To detect and prevent unauthorized access, fraudulent transactions, multi-accounting, bonus abuse, and other prohibited activities.
• AML and Regulatory Compliance: To monitor transactions for suspicious patterns, file required reports with relevant authorities, and cooperate with law enforcement as required by applicable regulations.
• Customer Support: To respond to your inquiries, resolve disputes, and maintain records of support interactions for quality assurance and training.
• Responsible Gaming: To enforce self-exclusion settings, deposit limits, loss limits, and session timers; to monitor gameplay patterns that may indicate problem gambling; and to communicate resources to at-risk Members.
• Personalization: To personalize your experience on the Platform, including recommending games, displaying localized content, and showing promotions relevant to your preferences and play history.
• Marketing Communications: To send you promotional emails, SMS messages, or in-platform notifications about bonuses, tournaments, and seasonal offers — subject to your notification preferences. You may opt out at any time.
• Platform Analytics and Improvement: To analyze usage patterns, identify technical issues, test new features, and continuously improve the performance and user experience of the Platform.
• Legal Obligations: To comply with applicable laws, court orders, or requests from regulatory or law enforcement authorities.

6 Legal Basis for Processing

Each processing activity conducted by ceri77 rests on one or more recognized legal bases. The primary legal bases we rely on are:

• Contractual Necessity: Processing required to perform our obligations under the Terms and Conditions you accepted at registration — including account administration, bet processing, and payment execution.
• Legal Obligation: Processing required to comply with applicable laws, including AML regulations, KYC obligations, and responses to lawful requests from authorities.
• Legitimate Interests: Processing carried out for purposes such as fraud prevention, security monitoring, platform analytics, and responsible gaming measures, where such interests are not overridden by your privacy rights.
• Consent: Processing for optional purposes — particularly marketing communications and enhanced personalization — where you have provided explicit, informed, and freely given consent. You may withdraw this consent at any time through your account settings or by contacting support.

7 Data Sharing and Disclosure

ceri77 does not sell, rent, or trade your Personal Data to third parties for their own commercial purposes. We share your data only as described below, and only to the extent necessary for the specific purpose:

1. Payment Processors and Banking Partners: We share the minimum financial data necessary to execute your deposit or withdrawal with your chosen payment provider (e.g., BCA, BRI, OVO, DANA). These providers act as independent data controllers for their own payment processing activities.
2. Game Technology Providers: Studios such as Pragmatic Play, Evolution Gaming, Spribe, and others receive session identifiers and wallet references to deliver games and settle results. They do not receive your full identity data.
3. KYC and Identity Verification Partners: Third-party verification services may process your identity documents to assist with KYC screening. These processors operate under strict data processing agreements.
4. Fraud Detection and Cybersecurity Providers: Specialist security vendors may process technical data (IP addresses, device fingerprints) to identify suspicious activity. These providers operate under contractual obligations that restrict their use of your data to fraud prevention purposes only.
5. Regulatory and Law Enforcement Authorities: We may disclose your Personal Data to competent authorities where required by law, court order, or regulatory directive. We will notify you of such disclosure where legally permitted to do so.
6. Professional Advisors: Our legal counsel, auditors, and compliance consultants may access limited Personal Data in the course of providing professional services, subject to applicable professional confidentiality obligations.
7. Business Successors: In the event of a merger, acquisition, or sale of all or part of our business assets, your Personal Data may be transferred to the successor entity, subject to equivalent privacy protections. We will notify you of any such transfer in advance.

All third-party Data Processors engaged by ceri77 are contractually bound to process your Personal Data only on our documented instructions, to implement appropriate technical and organizational security measures, and to delete or return your data upon termination of the engagement.

8 International Data Transfers

ceri77 operates on an internationally hosted infrastructure. As a result, your Personal Data may be transferred to and processed in countries outside Indonesia, including the jurisdiction where our gaming license is held and where our primary data centers are located.

Wherever such transfers occur, ceri77 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under applicable data protection principles. These safeguards may include:

• Standard contractual clauses binding the recipient to equivalent data protection standards;
• Transfers exclusively to jurisdictions recognized as providing adequate levels of data protection;
• Binding corporate rules for intra-group transfers within the ceri77 corporate group.

By using the ceri77 Platform, you acknowledge and consent to these international transfers being made on the basis described above.

9 Data Retention

ceri77 retains your Personal Data only for as long as is necessary to fulfill the purposes for which it was collected, to comply with our legal and regulatory obligations, and to resolve disputes. The following retention periods apply as a general guide:

Upon expiry of the applicable retention period, your Personal Data will be securely deleted or irreversibly anonymized so that it can no longer be associated with you as an individual.

10 Data Security

Protecting your Personal Data against unauthorized access, disclosure, alteration, or destruction is a top operational priority at ceri77. We implement a multi-layered security framework that includes:

• 256-Bit SSL/TLS Encryption: All data transmitted between your device and our servers is encrypted using industry-standard Transport Layer Security (TLS 1.3), the same protocol used by major Indonesian banks including BCA.
• Encrypted Data Storage: Sensitive Personal Data — including identity documents, financial records, and passwords — is stored in encrypted form on our servers. Passwords are hashed using bcrypt and are never stored in plaintext.
• Access Controls: Access to Personal Data within ceri77 is strictly role-based. Only staff with a demonstrable operational need may access Member data, and all access is logged and audited.
• Two-Factor Authentication (2FA): ceri77 supports and encourages all Members to enable 2FA on their accounts as an additional layer of identity protection.
• Regular Security Audits: We conduct periodic penetration testing and independent security audits to identify and remediate vulnerabilities before they can be exploited.
• Incident Response Plan: In the event of a confirmed data breach, ceri77 has a documented incident response procedure. Affected Members will be notified without undue delay in accordance with applicable notification obligations.
• Data Minimization Practices: We limit the Personal Data accessible to each internal system to only what is strictly necessary for that system's operational function.

While ceri77 takes all reasonable technical and organizational measures to protect your data, no internet-based platform can guarantee absolute security. You are encouraged to maintain a strong, unique password for your ceri77 account, to enable 2FA, and to report any suspected unauthorized access to our support team immediately.

11 Cookies and Tracking Technologies

ceri77 uses cookies and similar tracking technologies to enhance your browsing experience, maintain session state, and gather analytics data. The categories of cookies we use are as follows:

• Strictly Necessary Cookies: Required for the Platform to function correctly. These include session authentication cookies, load-balancing identifiers, and security tokens. These cookies cannot be disabled without rendering the Platform non-functional.
• Functional Cookies: Enable the Platform to remember your preferences — such as your chosen language, default deposit method, and responsible gaming settings — across sessions.
• Performance and Analytics Cookies: Collect aggregated, anonymized data about how Members use the Platform (pages visited, session duration, click paths). This data helps us identify areas for improvement and optimize Platform performance.
• Marketing and Targeting Cookies: Used to display relevant promotional content based on your browsing and gameplay behavior. These cookies are only set with your explicit consent.

You may manage your cookie preferences at any time through your browser settings. Please note that disabling functional cookies may affect the Platform's ability to remember your preferences, and disabling strictly necessary cookies may prevent you from logging in or using certain features.

We do not use cookies to collect sensitive Personal Data or to track your activity on third-party websites beyond what is disclosed in this Policy.

12 Your Data Protection Rights

As a ceri77 Member, you hold the following rights with respect to your Personal Data. To exercise any of these rights, please contact our support team at [email protected] with the subject line "Data Rights Request — [Your Account Username]". We will respond within 30 calendar days.

Please note that certain rights are subject to limitations where processing is required to comply with a legal obligation (such as AML/KYC data retention requirements) or where the exercise of a right would conflict with the rights of third parties.

13 Protection of Minors

The ceri77 Platform is strictly intended for adults aged 21 and over. We do not knowingly collect, store, or process Personal Data from individuals under the age of 21. Age verification is a mandatory component of our KYC process, and any account found to belong to a person under 21 will be immediately closed.

If you are a parent or guardian and believe that your child has registered an account on ceri77 or submitted Personal Data without your consent, please contact us immediately at [email protected]. We will investigate and, where confirmed, promptly delete all data associated with the underage individual's account.

We encourage parents and guardians in Indonesia to use parental control tools and internet filtering software to prevent minors from accessing online gambling platforms.

14 Third-Party Services and Links

The ceri77 Platform integrates with a number of third-party service providers — including game studios, payment processors, and analytics tools — whose own privacy policies govern the data they collect independently. ceri77 is not responsible for the privacy practices of these third parties, and we encourage you to review their respective privacy policies before interacting with their services.

While the ceri77 Platform itself does not contain links to external websites, the game interfaces provided by third-party studios (such as Pragmatic Play, Evolution Gaming, and Spribe) may operate under their own technical environments. Data shared with these studios is limited to what is necessary to deliver the gaming service and settle results, as described in Section 7 of this Policy.

15 Amendments to This Policy

ceri77 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or operational requirements. Material changes — those that meaningfully affect how your Personal Data is used or your rights as a Member — will be communicated to you by email and/or by a prominent notice displayed on the Platform prior to the changes taking effect.

The "Last Updated" date at the top of this page reflects the date of the most recent revision. Your continued use of the Platform following notification of changes constitutes acceptance of the revised Privacy Policy. If you do not agree with any amendments, you must cease using the Platform and request account closure by contacting our support team.

We recommend reviewing this Privacy Policy periodically to remain informed of how ceri77 protects and processes your data.

16 Contact and Complaints

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data, please contact our Data Protection team using the details below:

• Email: [email protected]
• Subject Line: "Privacy Inquiry — [Your Account Username]"
• Live Chat: Available 24/7 through the ceri77 homepage
• Response Time: We aim to acknowledge all privacy-related inquiries within 24 hours and to resolve them within 30 calendar days.

If you are not satisfied with our response to your privacy inquiry or data rights request, you have the right to lodge a complaint with the competent data protection supervisory authority in your jurisdiction. For Members located in Indonesia, the relevant supervisory authority is the Ministry of Communication and Digital Affairs (Kementerian Komunikasi dan Digital Republik Indonesia).

ceri77 takes all privacy complaints seriously and will cooperate fully with any investigation by a competent supervisory authority.