lon177 ("lon177", "We", "Us", "Our") is committed to protecting the privacy and personal data of all users ("You", "User", "Player") who access or use the lon177 online betting and casino platform at https://lon177.cam. This Privacy Policy ("Policy") explains what personal data we collect, why we collect it, how we use and store it, who we share it with, and what rights you hold over your data.
This Policy applies to all lon177 products and services, including the website https://lon177.cam, mobile-optimized platform, live chat, email communications, and any related applications. It should be read alongside our Terms & Conditions and Responsible Gaming Policy.
By registering an account or using our platform, you acknowledge that you have read and understood this Privacy Policy. If you disagree with any part of this Policy, you should discontinue use of lon177 immediately. We may update this Policy periodically; continued use of the platform after an update constitutes acceptance of the revised terms.
Indonesia Market Notice: lon177 primarily serves players based in Indonesia. Your data is processed in accordance with applicable international data-protection standards. You must be at least 21 years of age and a legal resident of Indonesia to create an account and use our services.
1 Definitions
- "Personal Data" means any information relating to an identified or identifiable natural person, including name, email address, phone number, date of birth, financial account details, IP address, device identifiers, and gameplay data.
- "Processing" means any operation performed on Personal Data, including collection, recording, storage, adaptation, retrieval, consultation, use, disclosure, erasure, or destruction.
- "Data Controller" means lon177, the entity that determines the purposes and means of processing your Personal Data.
- "Data Processor" means any third party engaged by lon177 to process Personal Data on our behalf (e.g., payment processors, KYC verification providers, cloud infrastructure providers).
- "Cookies" means small text files placed on your device by a website to record preferences, session state, and usage analytics.
- "KYC" (Know Your Customer) means the identity-verification process required by lon177 to confirm a user's age, identity, and residency before withdrawals are permitted.
- "Sensitive Data" means special categories of Personal Data requiring heightened protection, such as government identification numbers, biometric data, or financial account credentials.
2 Data We Collect
lon177 collects only the personal data that is necessary to provide our services, comply with legal obligations, and maintain platform integrity. The categories of data we collect are described below.
| Data Category | Examples | Purpose |
|---|---|---|
| Identity Data | Full legal name, date of birth, gender, government ID (KTP/passport number) | Account registration, KYC age/identity verification, fraud prevention |
| Contact Data | Email address, phone number (including WhatsApp), residential address | Account communications, support, promotional messages (with consent) |
| Financial Data | Bank account numbers (BCA, BRI, BNI, Mandiri), e-wallet IDs (OVO, DANA, GoPay), transaction history | Deposit and withdrawal processing, fraud detection, AML compliance |
| Technical Data | IP address, device type, browser type, operating system, session tokens, login timestamps | Security monitoring, fraud detection, platform optimization |
| Usage Data | Games played, bets placed, bet amounts, game duration, win/loss history, bonus usage | Service provision, responsible gaming monitoring, personalization |
| Communications Data | Live chat transcripts, email correspondence, support ticket content | Support resolution, quality assurance, dispute resolution |
| KYC Documents | Copies of KTP, passport, driver's license, proof of address, payment method screenshots | Age verification, identity confirmation, AML/fraud compliance |
We do not collect sensitive personal data such as racial or ethnic origin, religious beliefs, political opinions, health records, or biometric data, except where a government-issued ID containing a photograph is submitted for KYC purposes.
3 How We Collect Your Data
lon177 collects your personal data through the following channels:
3.1 Direct Collection
You provide data directly when you:
- Register an account on lon177 (name, email, date of birth, phone number, password);
- Complete the KYC verification process (government ID, proof of address, payment method details);
- Make a deposit or withdrawal (bank account or e -wallet account information, transaction details);
- Contact our customer support team via live chat, email, or WhatsApp;
- Complete surveys, promotions, or feedback forms on the platform;
- Set responsible gaming limits or self-exclusion preferences in your Account settings.
3.2 Automated Collection
We automatically collect certain technical and usage data when you access lon177, including:
- IP address and approximate geographic location (city/region level);
- Device identifiers, browser type, and operating system;
- Pages visited, links clicked, time spent on each page, and navigation paths;
- Game sessions initiated, bets placed, and outcomes recorded;
- Session start and end times, login frequency, and idle periods;
- Cookie and tracking pixel data (see Section 7 for full cookie details).
3.3 Third-Party Sources
In some circumstances, lon177 may receive data about you from third parties, including:
- KYC and identity-verification service providers who confirm the authenticity of documents you submit;
- Payment processors and Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP) that confirm transaction validity;
- E-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) that confirm account ownership;
- Fraud-prevention and anti-money-laundering (AML) screening services that flag high-risk profiles;
- Analytics partners who aggregate non-identifiable usage data to help us improve platform performance.
4 Purpose of Processing
lon177 processes your personal data for the following specific purposes:
- Service Provision: To create and manage your Account, process deposits and withdrawals, settle bets, deliver game outcomes, and provide customer support;
- Identity and Age Verification: To confirm that you are at least 21 years of age and legally entitled to use online gaming services in Indonesia, in compliance with our 21+ policy;
- Security and Fraud Prevention: To detect, investigate, and prevent fraudulent transactions, account takeovers, bonus abuse, money laundering, and other illegal activity;
- Regulatory Compliance: To comply with applicable anti-money-laundering (AML) regulations, Know Your Customer (KYC) requirements, and any other legal obligations that apply to lon177's operations;
- Responsible Gaming: To monitor gameplay patterns for signs of problem gambling, enforce deposit limits and self-exclusion requests, and proactively reach out to players who may be at risk;
- Platform Improvement: To analyze usage patterns, identify bugs, test new features, and optimize the platform's performance and user experience;
- Marketing and Promotions: To send you promotional offers, bonus notifications, and personalized recommendations based on your gameplay preferences — only where you have given explicit consent or where we have a legitimate interest;
- Dispute Resolution: To investigate and resolve complaints, chargebacks, and disputes relating to bets, payments, or account activity;
- Legal Claims: To establish, exercise, or defend legal claims arising from your use of lon177.
5 Legal Basis for Processing
lon177 processes your personal data on the following legal grounds:
- Contractual Necessity: Processing required to fulfill our obligations under the Terms & Conditions you accepted upon registration — including account management, deposits, withdrawals, and bet settlement;
- Legal Obligation: Processing required by applicable laws, including KYC/AML regulations, tax reporting obligations, and court orders or regulatory directives;
- Legitimate Interests: Processing that serves lon177's legitimate business interests, such as fraud prevention, security monitoring, platform improvement, and responsible gaming oversight — provided those interests do not override your fundamental rights;
- Consent: Processing for marketing communications and optional personalization features, where you have given explicit, freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.
6 Data Sharing and Disclosure
lon177 does not sell your personal data to third parties. We share your data only in the following limited and controlled circumstances:
6.1 Service Providers (Data Processors)
We engage trusted third-party service providers who process data on our behalf under strict contractual obligations and may not use your data for their own purposes. These include:
- Payment processors and Indonesian banking partners (BCA, BRI, BNI, Mandiri) for transaction processing;
- E-wallet integration providers (OVO, DANA, GoPay, ShopeePay, LinkAja);
- KYC and identity-verification vendors;
- Cloud infrastructure and server-hosting providers with ISO 27001 certification;
- Customer support software providers (live chat, ticketing systems);
- Fraud detection and AML screening services;
- Analytics platforms that process non-identifiable, aggregated usage data.
6.2 Game Software Providers
Game studios such as Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, PG Soft, and Spribe may receive limited technical data (e.g., session tokens, bet amounts) necessary to deliver game functionality. These providers operate under their own privacy policies and data-processing agreements with lon177.
6.3 Legal and Regulatory Authorities
lon177 may disclose your personal data to government authorities, law enforcement agencies, courts, or regulatory bodies when required to do so by law, court order, or regulatory directive — including disclosures related to AML investigations, tax compliance, or criminal proceedings.
6.4 Business Transfers
In the event of a merger, acquisition, restructuring, or sale of lon177's business or assets, your personal data may be transferred to the acquiring entity as part of that transaction. We will notify you of any such transfer and your rights regarding your data.
Important: lon177 will never share your personal data with advertising networks, data brokers, social media platforms, or any third party for the purpose of targeted advertising without your explicit prior consent.
7 Cookies and Tracking Technologies
lon177 uses cookies and similar tracking technologies to operate the platform, remember your preferences, analyze usage, and detect fraudulent activity. By using lon177, you consent to our use of cookies in accordance with this Policy.
7.1 Types of Cookies We Use
| Cookie Type | Purpose | Duration |
|---|---|---|
| Strictly Necessary | Enable core platform functions: login sessions, bet placement, deposit flows, security tokens | Session / up to 24 hours |
| Functional | Remember your language preference, display settings, and notification preferences | Up to 12 months |
| Analytics | Aggregate, anonymized usage data to improve platform performance and identify errors | Up to 24 months |
| Security | Detect bots, prevent CSRF attacks, identify suspicious login patterns | Session / up to 7 days |
7.2 Managing Cookies
You may configure your browser to block or delete cookies at any time. Please note that disabling strictly necessary cookies will prevent you from logging into your Account or using core platform features. Disabling functional cookies may reset your preferences on each visit. Browser-level cookie controls are available in your browser's settings menu (e.g., Chrome: Settings → Privacy → Cookies; Firefox: Options → Privacy & Security → Cookies).
8 Data Retention
lon177 retains your personal data only for as long as necessary to fulfill the purposes described in this Policy, comply with legal obligations, resolve disputes, and enforce our agreements. Specific retention periods are as follows:
- Account and Identity Data: Retained for the duration of your account and for a minimum of 5 years after account closure, in compliance with AML and KYC record-keeping obligations;
- Financial Transaction Records: Retained for a minimum of 5 years after the transaction date, in accordance with financial record-keeping regulations;
- KYC Documents: Retained for a minimum of 5 years after account closure or the last transaction date, whichever is later;
- Customer Support Communications: Retained for 3 years after the support interaction, for quality assurance and dispute resolution purposes;
- Marketing Consent Records: Retained for the duration of your consent plus 3 years to demonstrate compliance;
- Technical and Usage Logs: Retained for 12-24 months for security monitoring and platform optimization;
- Cookie Data: Retained per the cookie duration specified in Section 7.
After the applicable retention period expires, your personal data will be securely deleted or permanently anonymized so that it can no longer be linked to your identity. Where legal obligations require extended retention, data will be restricted from active processing and archived securely.
9 Data Security
lon177 employs a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, loss, alteration, disclosure, or destruction. Our security framework includes:
- 256-Bit SSL/TLS Encryption: All data in transit between your device and our servers is encrypted using TLS 1.2 or higher, with HSTS enforced to prevent downgrade attacks;
- Data Encryption at Rest: Sensitive personal and financial data stored in our databases is encrypted at rest using AES-256 encryption;
- Access Controls: Strict role-based access controls ensure that only authorized lon177 personnel with a legitimate need can access specific categories of personal data;
- Multi-Factor Authentication (MFA): MFA is enforced for all lon177 internal administrative systems and is available to players for Account login security;
- Regular Security Audits: lon177 conducts periodic vulnerability assessments and penetration tests to identify and remediate security weaknesses;
- Intrusion Detection: Automated intrusion-detection systems monitor server traffic 24/7 for anomalous activity and trigger alerts for investigation;
- Incident Response: lon177 maintains a documented data-breach response plan. In the event of a breach that poses a risk to your rights, we will notify affected users within 72 hours of becoming aware of the incident.
Your Responsibility: While lon177 implements robust security measures, you are also responsible for maintaining the security of your Account. Use a strong, unique password, enable MFA if available, never share your login credentials, and report any suspected unauthorized access to our support team immediately.
10 Your Data Rights
As a user of lon177, you hold the following rights over your personal data. You may exercise any of these rights by contacting our Data Protection team at the contact details provided in Section 14.
Right of Access
Request a copy of all personal data lon177 holds about you, free of charge, within 30 days of your request.
Right to Rectification
Request correction of inaccurate or incomplete personal data held in your Account or our records.
Right to Erasure
Request deletion of your personal data after account closure, subject to our legal retention obligations.
Right to Restriction
Request that we restrict processing of your data in certain circumstances while a dispute or correction request is pending.
Right to Portability
Receive your personal data in a structured, machine-readable format to transfer to another service provider.
Right to Object
Object to processing based on legitimate interests or for direct marketing purposes at any time.
lon177 will respond to all data-rights requests within 30 days. In complex cases, we may extend this period by an additional 60 days, in which case we will notify you. We may need to verify your identity before processing a rights request to prevent unauthorized access to another person's data.
11 Children's Privacy
lon177 is strictly an adults-only platform. We do not knowingly collect, process, or store personal data belonging to individuals under 21 years of age. Our registration process includes date-of-birth verification, and all accounts are subject to KYC age verification before withdrawals are permitted.
If lon177 becomes aware that personal data has been collected from a person under 21 years of age without proper verification, that account will be immediately suspended, all funds will be frozen pending investigation, and the relevant data will be securely deleted in accordance with our legal obligations.
Parents and guardians are encouraged to use parental-control software to prevent minors from accessing online gambling platforms. If you believe a minor has registered on lon177, please contact our support team immediately so we can investigate and take appropriate action.
12 International Data Transfers
lon177 operates globally and may transfer your personal data to servers or service providers located outside of Indonesia. When we transfer data internationally, we implement appropriate safeguards to ensure that your data receives an equivalent level of protection regardless of where it is processed. These safeguards include:
- Data processing agreements with all third-party service providers that incorporate binding contractual clauses aligned with internationally recognized data-protection standards;
- Transferring data only to jurisdictions that provide an adequate level of data protection as determined by recognized international frameworks;
- Applying technical security measures (encryption, access controls) during all international data transfers;
- Conducting due diligence on all third-party processors to confirm their data-protection practices before engagement.
For players based in Indonesia, your data is primarily processed within the Asia-Pacific region. Where data is transferred outside this region, the safeguards described above apply in full.
13 Changes to This Privacy Policy
lon177 reserves the right to amend this Privacy Policy at any time to reflect changes in our data-processing practices, legal obligations, or business operations. When we make material changes, we will:
- Update the "Last Updated" date displayed at the top of this page;
- Post a notice on the lon177 platform informing users of the update;
- Where required by law or where changes materially affect your rights, notify you directly via your registered email address at least 14 days before the changes take effect.
Your continued use of lon177 after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the changes, you must discontinue use of the platform and may request account closure.
14 Contact Us
If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact the lon177 Data Protection team through the following channels:
- Email: [email protected] (plain text — not a clickable link)
- Live Chat: Available 24/7 on the lon177 platform — click the chat icon at the bottom of any page
- WhatsApp: Contact number provided in your Account dashboard after login
For further information about our platform policies, please visit our Terms & Conditions, Responsible Gaming page, or our FAQ.
Response Commitment: lon177 aims to acknowledge all data-protection inquiries within 48 hours and resolve them within 30 days. For complex requests, we will keep you informed of progress throughout the process.
By using lon177, you confirm that you have read and understood this Privacy Policy in full and consent to the collection and processing of your personal data as described herein. Thank you for trusting lon177 with your data — we take that responsibility seriously.