Privacy Policy — kebo77

This Privacy Policy ("Policy") is published by kebo77 ("kebo77", "the Company", "we", "us", or "our"), the operator of the online gambling platform accessible at https://kebo77.bet and all associated subdomains, mobile-optimised interfaces, and APIs (collectively, the "Platform").

This Policy applies to all personal data we collect from or about you when you visit the Platform, register a kebo77 Account, make deposits or withdrawals, place bets on sports events including BRI Liga 1, EPL, and Champions League fixtures, play live casino games, slot titles from Pragmatic Play or PG Soft, participate in poker tournaments, wager on daily togel (Indonesia's traditional numbers lottery) draws, contact our customer support team, or interact with any kebo77 marketing communication.

By registering a kebo77 Account or continuing to use the Platform after the effective date of this Policy, you acknowledge that you have read, understood, and agree to the collection and processing of your personal data as described herein. If you do not agree, you must discontinue use of the Platform and contact [email protected] to request account closure.

This Policy forms part of — and must be read together with — kebo77's Terms & Conditions. Defined terms used in this Policy that are not separately defined here carry the same meaning as in the Terms & Conditions.

kebo77 collects personal data through several distinct channels. The categories of data we collect, and the circumstances in which we collect them, are set out in the table below:

Data We Do Not Collect. kebo77 does not collect full payment card numbers, CVV codes, or full bank account PINs. Payment card transactions — where applicable — are processed exclusively through PCI-DSS compliant third-party payment processors who handle and store card data independently of kebo77. kebo77 receives only a tokenised reference for reconciliation purposes.

Special Categories of Sensitive Data. kebo77 does not intentionally collect special-category sensitive personal data (such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data) unless voluntarily disclosed by a member during a responsible gaming interaction. Where such disclosure occurs in a support context, it is treated with the highest level of confidentiality and used solely to direct appropriate care and support resources.

kebo77 processes your personal data for the following specific, explicit, and legitimate purposes. We will not process your data in a manner that is incompatible with these stated purposes without providing you with prior notice and, where required, obtaining fresh consent.

• Account Management: Creating and maintaining your kebo77 Account, authenticating your identity at login, managing your IDR wallet balance, processing deposits and withdrawals, and communicating essential account information such as transaction confirmations, password resets, and security alerts.
• KYC and Age Verification: Verifying that you are at least 21 years of age, confirming your identity against government-issued documents, and confirming that your payment methods are registered in your own name — all as required by kebo77's international licensing conditions.
• Fraud Prevention and Security: Detecting and preventing fraudulent transactions, multi-accounting, bonus abuse, money laundering, collusion in poker games, and other forms of platform abuse. This includes real-time monitoring of transaction patterns, IP analysis, and device fingerprinting.
• Regulatory and Legal Compliance: Maintaining records required under kebo77's international gaming licence, responding to lawful requests from regulatory or law-enforcement authorities, and preserving documentation necessary to defend or pursue legal claims.
• Service Delivery and Improvement: Providing access to all Platform products — sportsbook, live casino, slot games, poker tournaments, and togel draws — personalising your experience, optimising platform performance, and developing new features based on aggregate usage data.
• Responsible Gaming: Monitoring account activity for behavioural indicators of problem gambling, applying and enforcing member-requested responsible gaming limits, contacting at-risk members proactively, and maintaining self-exclusion records.
• Customer Support: Responding to your queries, complaints, and requests via live chat and email, maintaining support-case records, and improving support quality through case-pattern analysis.
• Marketing Communications (consent-based): Sending you personalised offers, bonus notifications, promotional event announcements (including Idul Fitri, Ramadhan, and Indonesian Independence Day promotions), and product newsletters — only where you have explicitly opted in to receive such communications.
• Analytics and Business Intelligence: Generating anonymised, aggregate-level insights into Platform usage, game popularity, deposit and withdrawal patterns, and regional activity trends to inform product and commercial strategy. Individual-level data is never exposed in business intelligence outputs.

kebo77 processes your personal data on the following legal bases, consistent with internationally recognised data protection standards:

Where kebo77 relies on legitimate interests as the legal basis for processing, we have conducted and documented a legitimate interests assessment to confirm that our interests are not overridden by your rights and freedoms. You may request a copy of any such assessment by contacting [email protected].

kebo77 does not sell your personal data to any third party. We may share your data with the following categories of recipients, strictly on a need-to-know basis and only to the extent necessary for the stated purpose:

• Gaming Software Providers: Licensed partners such as Pragmatic Play, Evolution Gaming, PG Soft, NetEnt, Microgaming, and Spribe receive the minimum technical data (e.g., session tokens, player identifiers) required to serve game content and return results to your account. These providers do not receive your full identity or financial data.
• Payment Processors and Banking Partners: Indonesian payment infrastructure partners (including those facilitating transfers via BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, and LinkAja) receive the transaction data strictly necessary to execute your deposit or withdrawal instructions. All payment partners are contractually bound to process your data only for the specified payment purpose.
• KYC and Identity Verification Services: Third-party KYC providers receive your identity documents (KTP, passport, selfie) solely to perform the one-time verification process. Results are shared with kebo77 in the form of a pass/fail determination; the verification provider does not retain copies of documents beyond its contractual retention period.
• Fraud Prevention and Anti-Money-Laundering Services: Specialist fraud intelligence providers may receive anonymised or pseudonymised transaction and device data to assist in detecting patterns of financial crime. No unnecessary personal identifiers are shared with these services.
• Customer Support Platform Providers: Our live chat and email support infrastructure is powered by third-party customer relationship management (CRM) software. Support conversations and account reference data are stored within this CRM system, which is contractually prohibited from accessing kebo77 member data for any purpose beyond the delivery of support services.
• Regulatory Authorities and Law Enforcement: kebo77 will disclose personal data to regulatory bodies, law-enforcement agencies, or courts when required to do so by applicable law, a valid court order, or the conditions of our international gaming licence. kebo77 will notify affected members of such disclosures where legally permitted to do so.
• Business Transfers: In the event of a merger, acquisition, or sale of all or substantially all of kebo77's assets, member personal data may be transferred to the successor entity as part of the transaction. Members will be notified in advance of any such transfer and given the opportunity to close their accounts before the transfer takes effect.

kebo77 uses first-party cookies and similar tracking technologies on the Platform to deliver core functionality, maintain your logged-in session, remember your preferences, and generate anonymised analytics about Platform usage. We do not deploy third-party advertising cookies or social media tracking pixels.

The specific categories of cookies used by kebo77 are as follows:

• Strictly Necessary Cookies: These cookies are essential for the Platform to function correctly. They maintain your authenticated session after login, store your IDR wallet state during active game sessions, and preserve security tokens that protect your account against cross-site request forgery (CSRF) attacks. You cannot opt out of strictly necessary cookies without abandoning use of the Platform entirely.
• Functional Cookies: These cookies remember your non-essential preferences — such as your preferred game lobby sort order, notification display settings, and language preferences — so that you do not need to re-configure them on each visit. Functional cookies do not track your activity across other websites.
• Analytics Cookies: kebo77 uses a self-hosted, first-party analytics solution to count sessions, measure page performance, and understand broad usage patterns. No data from these cookies is shared with external analytics vendors. You may opt out of analytics cookies in your account privacy settings without affecting Platform functionality.
• Fraud-Prevention Cookies: Device fingerprinting tokens and session-integrity markers help kebo77's fraud detection systems identify and block automated bots, credential stuffing attacks, and suspicious login patterns. These cookies are processed solely for security and fraud prevention and are classified as strictly necessary.

You can manage cookie preferences for functional and analytics cookies at any time via the Privacy Settings section of your kebo77 Account dashboard. Your browser's built-in cookie controls may also be used, though blocking strictly necessary cookies will prevent the Platform from functioning correctly.

kebo77 retains your personal data for no longer than is necessary to fulfil the purposes for which it was collected, subject to any mandatory minimum retention periods imposed by our international gaming licence or applicable law. The following retention schedule applies:

When a retention period expires, personal data is securely deleted or anonymised so that it can no longer be associated with any individual. Anonymised aggregate data may be retained indefinitely for statistical and business-intelligence purposes.

kebo77 implements a comprehensive, layered security programme to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security measures include, but are not limited to:

• Encryption in Transit: All data transmitted between your device and kebo77 servers is protected by TLS 1.2 or higher. HTTP connections are automatically redirected to HTTPS. HSTS (HTTP Strict Transport Security) is enforced to prevent downgrade attacks.
• Encryption at Rest: Sensitive personal data fields — including identity document data, bank account details, and password hashes — are encrypted at rest using AES-256 encryption. Encryption keys are stored separately from the data they protect and are rotated on a scheduled basis.
• Access Controls: Access to systems containing personal data is restricted on a strict need-to-know basis. All internal access is authenticated via multi-factor authentication (MFA). Role-based access control (RBAC) ensures that support staff, compliance officers, and technical engineers can only access the data necessary for their specific functions.
• Penetration Testing and Security Audits: The kebo77 platform undergoes regular independent penetration testing and security code reviews. Identified vulnerabilities are remediated on a prioritised basis according to their severity.
• Incident Response: kebo77 maintains a documented data breach incident response plan. In the event of a data security incident that poses a risk to member rights, kebo77 will notify affected members and relevant authorities within the timeframes required by applicable law and licensing conditions.
• Staff Training: All kebo77 personnel with access to member personal data complete mandatory data protection and security awareness training upon onboarding and annually thereafter.

As a kebo77 member, you have the following rights in relation to your personal data. These rights are subject to certain limitations and exemptions as required by our gaming licence and applicable law — in particular, data that must be retained for AML and regulatory purposes cannot be deleted on request, but will be restricted from active use.

To exercise any of the above rights, submit a written request to [email protected] from the email address registered to your kebo77 Account. Include your registered username, the specific right you wish to exercise, and any supporting context. kebo77 will acknowledge your request within 5 business days (WIB) and provide a substantive response within 30 calendar days. For complex requests, this period may be extended by a further 30 days, with prior notice provided.

The kebo77 Platform is strictly an adults-only service. You must be at least 21 years of age to register an Account or use any part of the Platform. kebo77 does not knowingly collect personal data from any person under the age of 21.

Age verification is conducted as part of the KYC process for all members. Where kebo77 identifies or has reasonable grounds to suspect that a member is under 21 years of age, the Account will be immediately suspended pending identity verification. If the member is confirmed to be under 21, the Account will be permanently closed, all funds will be returned to the verified payment source, and all associated personal data will be securely deleted within the timeframe permitted by our regulatory obligations.

The kebo77 Platform may contain links to third-party websites, game-provider portals, or payment infrastructure interfaces. Once you leave the kebo77 Platform by following such a link, this Privacy Policy no longer applies. kebo77 has no control over, and accepts no responsibility for, the privacy practices or content of third-party websites.

We strongly encourage you to review the privacy policy of any third-party website you visit. The presence of a link on the kebo77 Platform does not constitute an endorsement of that website or its privacy standards.

Certain third-party game studios (e.g., Pragmatic Play, Evolution Gaming, Spribe) deliver their content via embedded iframes within the kebo77 Platform. These studios may set strictly necessary technical cookies within their iframe domains to maintain game session state. These cookies are limited to game session functionality and do not track your activity outside the game window. kebo77 contractually requires all embedded studio partners to comply with data protection standards consistent with this Policy.

kebo77 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, Platform features, legal obligations, or regulatory requirements. The "Last Revised" date at the top of this Policy will be updated accordingly with each new version.

For material changes — defined as changes that significantly affect your rights, the categories of data collected, the purposes of processing, or the identity of third-party recipients — kebo77 will provide at least 14 days' advance notice by sending an email to your registered address and displaying a prominent in-Platform notification. Your continued use of the Platform after the effective date of a material change constitutes acceptance of the revised Policy.

For minor amendments — such as typographical corrections, clarification of existing language that does not alter the substance of any clause, or updates to the list of payment processing partners — kebo77 may publish changes without advance notice, and the updated Policy will take effect upon publication.

We encourage you to review this Privacy Policy periodically. Archived versions of prior policies are available on request by contacting [email protected].

If you have any questions, concerns, or complaints about this Privacy Policy or about the way kebo77 processes your personal data, please contact our Data Protection team through any of the following channels:

• Email: [email protected] — mark your subject line "Privacy Request" or "Data Protection Enquiry" to ensure prompt routing to the appropriate team. Responses are provided within 1 business hour during normal operating hours (WIB).
• Live Chat: Available 24 hours a day, 7 days a week directly within the kebo77 Platform. Indonesian-speaking data protection support agents are available at all times.

When submitting a privacy-related request or complaint, please include your registered kebo77 username, the email address associated with your Account, and a clear description of your request or the nature of your concern. Providing this information upfront will allow us to process your request without unnecessary back-and-forth correspondence.

kebo77 is committed to resolving all privacy complaints promptly and fairly. If you are not satisfied with our response to your complaint, you have the right to escalate the matter to the independent dispute resolution body designated by kebo77's licensing authority, as described in our Terms & Conditions.

Acknowledgement: By registering a kebo77 Account or continuing to use the Platform after the effective date of this Policy, you confirm that you have read and understood this Privacy Policy in full, and that you consent to the collection, processing, and use of your personal data as described herein. This Privacy Policy was last revised on 1 January 2026.