coy77 Privacy Policy

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• "coy77" / "we" / "us" / "our" — the internationally operated online gaming platform accessible at https://coy77.app, including all subdomains, mobile applications, and associated services.
• "Player" / "you" / "your" — any individual who registers an account on, accesses, or otherwise uses the coy77 platform.
• "Personal Data" — any information relating to an identified or identifiable natural person, including but not limited to name, date of birth, national identification number, contact details, payment information, IP address, device identifiers, and behavioural data generated through use of the platform.
• "Processing" — any operation performed on Personal Data, including collection, recording, storage, adaptation, retrieval, use, disclosure, transmission, restriction, erasure, or destruction.
• "Data Controller" — the entity that determines the purposes and means of Processing Personal Data. coy77 is the Data Controller with respect to all Personal Data collected via the platform.
• "Data Processor" — a third party that Processes Personal Data on behalf of coy77, under instruction and subject to a binding data processing agreement.
• "KYC" — Know Your Customer identity verification procedures required to confirm a Player's identity, age, and the legitimacy of funds used on the platform.
• "Cookies" — small text files placed on a Player's device by the coy77 platform or authorised third-party services, used to maintain sessions, record preferences, and gather anonymised usage statistics.
• "Sensitive Personal Data" — a subset of Personal Data requiring heightened protection, including financial account credentials, national identification numbers, and any data that could reveal a Player's health status or gambling habits for the purpose of responsible gaming interventions.

coy77 operates as the Data Controller for all Personal Data collected through the coy77 platform. As Data Controller, coy77 is responsible for establishing the lawful purposes for which Personal Data is Processed, ensuring that appropriate security measures are in place, and upholding the data rights of Players as described in this Privacy Policy.

All enquiries relating to data privacy, data rights requests, and concerns about the handling of your Personal Data should be directed to the coy77 support team. Contact details are provided in Section 16 of this Policy.

Where coy77 engages third-party Data Processors to perform specific functions — such as payment processing, identity verification, or fraud detection — coy77 retains responsibility as Data Controller and ensures that those processors operate under binding contractual obligations consistent with the standards set out in this Policy.

coy77 collects the following categories of Personal Data in the course of providing its services:

coy77 does not collect Special Category data (such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data) except where a Player voluntarily discloses health-related information in the context of a responsible gaming self-exclusion request, in which case such information is used solely to action the request and is not used for any other purpose.

coy77 collects Personal Data through the following means:

• Directly from you: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting customer support, or updating your account profile.
• Automatically through platform use: Technical and usage data collected via server logs, session management systems, and analytics tools when you access and interact with the coy77 platform. This includes data collected through Cookies and similar tracking technologies as described in Section 10.
• From identity verification partners: Where you consent to electronic KYC verification, our approved identity verification partner may return a verified identity status, date-of-birth confirmation, or document authenticity indicator to coy77. The underlying document images are processed by the verification partner under their own privacy framework.
• From payment processors: Transaction confirmation data, payment status updates, and — where required for AML purposes — additional information returned by our payment processing partners following a transaction.
• From fraud prevention and security services: Risk scores, device reputation data, and IP geolocation information returned by third-party fraud detection systems that coy77 uses to protect Players and the integrity of the platform.

coy77 Processes Personal Data under the following legal bases, depending on the category of data and the purpose of Processing:

• Contractual necessity: Processing required to perform our obligations under the player account agreement — including account creation, identity verification, processing deposits and withdrawals, settling wagers, and providing customer support. Without this processing, coy77 cannot provide its core services.
• Legal obligation: Processing required to comply with applicable anti-money-laundering (AML) regulations, responsible gaming obligations, age verification requirements, and any mandatory reporting obligations to competent authorities. This includes retaining KYC documentation and transaction records for the legally required retention period.
• Legitimate interests: Processing carried out for coy77's legitimate business interests where those interests are not overridden by your privacy rights. This includes fraud detection and prevention, platform security monitoring, internal analytics to improve product quality, and communicating material changes to platform terms or policies.
• Consent: Processing for optional purposes where you have provided a clear, affirmative opt-in — specifically, the sending of marketing communications (promotional offers, bonus notifications, personalised recommendations). You may withdraw consent for marketing communications at any time via your account settings or by contacting support, without affecting the lawfulness of any Processing carried out prior to withdrawal.

coy77 uses the Personal Data we collect for the following specific purposes:

• Account management: Creating and maintaining your player account, verifying your identity and age (21+ requirement), processing login authentication, and enabling account self-service features.
• Financial transactions: Processing deposits via BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, OVO, DANA, GoPay, ShopeePay, and LinkAja; processing withdrawal requests; maintaining your wallet balance; and generating transaction records.
• Regulatory compliance: Conducting KYC verification, performing ongoing transaction monitoring for AML purposes, filing mandatory reports where legally required, and retaining records for the legally prescribed periods.
• Responsible gaming: Monitoring play patterns to identify potential problem gambling indicators, enforcing self-exclusion and deposit limit requests, applying cooling-off periods, and proactively contacting Players whose activity suggests they may benefit from responsible gaming support.
• Platform security: Detecting and preventing fraudulent account activity, unauthorised access, bonus abuse, collusion, and other prohibited activities as defined in the coy77 Terms & Conditions.
• Customer support: Responding to account queries, resolving disputes, processing complaints, and maintaining support records for quality assurance.
• Marketing communications: Sending promotional offers, bonus notifications, and personalised game recommendations to Players who have opted in to marketing communications. All marketing messages include a clear unsubscribe mechanism.
• Product improvement: Analysing aggregated, anonymised usage data to improve platform performance, identify popular features, and guide product development decisions. No individual Player is identifiable in this analysis.
• Legal proceedings: Using Personal Data to establish, exercise, or defend legal claims where coy77 or a Player initiates formal dispute resolution or legal proceedings.

coy77 does not sell, rent, or trade your Personal Data. We share Personal Data with third parties only in the following limited circumstances:

• Payment processors: Financial data necessary to process your deposit or withdrawal is shared with the relevant payment service provider (e.g., bank transfer networks, OVO, DANA, GoPay, ShopeePay, LinkAja). These processors handle your financial data under their own regulated frameworks and are contractually prohibited from using it for any purpose beyond transaction processing.
• Identity verification providers: Where electronic KYC verification is used, relevant identity data is transmitted to our approved verification partner. The partner returns a verification outcome to coy77 and processes document data in accordance with its own privacy policy.
• Game studios: Technical identifiers (anonymised player session IDs, not personal names or contact details) may be shared with licensed game providers — including Pragmatic Play, Evolution Gaming, Spribe, Pocket Games Soft, NetEnt, and Microgaming — to support game functionality, fairness auditing, and dispute resolution.
• Fraud prevention and security partners: Technical data (IP address, device fingerprint, behavioural signals) is shared with fraud detection service providers to assess transaction risk and protect the integrity of the platform.
• Legal and regulatory disclosure: coy77 may disclose Personal Data to competent governmental or regulatory authorities where required by applicable law, court order, or regulatory direction. We will notify you of any such disclosure where permitted to do so by law.
• Business transfers: In the event of a merger, acquisition, or transfer of all or substantially all of coy77's business assets, Personal Data held by coy77 may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and the privacy practices of the successor entity.

All third-party Data Processors engaged by coy77 are bound by data processing agreements that require them to: process Personal Data only for the specific purposes described above; implement appropriate technical and organisational security measures; and refrain from any further disclosure of Personal Data without coy77's authorisation.

coy77 operates as an internationally licensed platform. Some of our Data Processors — including game studio partners, fraud prevention services, and cloud infrastructure providers — may be located in jurisdictions outside Indonesia. Where Personal Data is transferred internationally, coy77 ensures that appropriate safeguards are in place, which may include:

• Standard contractual clauses or equivalent data transfer mechanisms that impose binding privacy and security obligations on the receiving party.
• Transfers to jurisdictions that maintain an adequate level of data protection as assessed against internationally recognised frameworks.
• Binding corporate rules applicable to transfers within a group of affiliated entities.

By registering an account and using the coy77 platform, you acknowledge that your Personal Data may be transferred to and processed in jurisdictions outside Indonesia. coy77 will always ensure that any such transfer is conducted under appropriate safeguards that protect your data rights to the standard described in this Privacy Policy.

coy77 retains Personal Data for no longer than is necessary to fulfil the purposes for which it was collected, subject to the following specific retention periods:

Upon expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymised. Anonymised data — from which no individual can be identified — may be retained indefinitely for statistical and product development purposes.

coy77 uses Cookies and similar technologies (including local storage and session tokens) to operate the platform effectively and improve your experience. The categories of Cookies used are as follows:

• Strictly Necessary Cookies: Essential for the platform to function. These include session authentication cookies that keep you logged in between page loads, security tokens that protect against cross-site request forgery, and cookies that remember your language and display preferences. These cookies cannot be disabled without impairing core platform functionality.
• Performance & Analytics Cookies: Used to collect anonymised data about how Players use the coy77 platform — which pages are visited most frequently, how long sessions last, and where users navigate from. This data is used exclusively to improve platform performance and user experience. No individual Player is identified in this analysis.
• Functional Cookies: Enable enhanced features such as remembering your preferred game categories, storing your deposit method preference, and personalising your lobby display. These cookies are optional; disabling them may reduce the convenience of your experience but will not prevent core platform use.

coy77 does not deploy third-party advertising cookies, cross-site tracking pixels, or any cookie technology designed to build a profile of your interests for the purpose of serving targeted advertising on other websites.

You may manage Cookie preferences through your browser settings. Most modern browsers allow you to view, block, or delete cookies. Note that blocking strictly necessary cookies will prevent you from logging in to your coy77 account. For detailed guidance on managing cookies in your specific browser, refer to your browser's help documentation.

As a coy77 account holder, you have the following rights with respect to your Personal Data. coy77 is committed to honouring these rights promptly and without undue restriction:

• Right of Access: You may request a copy of all Personal Data that coy77 holds about you, together with information about the purposes for which it is processed, the categories of data held, and the recipients to whom it has been disclosed. coy77 will provide this information within 30 days of receiving a verified request.
• Right to Rectification: If any Personal Data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update basic account information directly via your account settings; for changes to KYC-verified identity data, contact support and provide supporting documentation.
• Right to Erasure: You may request that coy77 delete your Personal Data where: the data is no longer necessary for the purposes for which it was collected; you withdraw consent (for consent-based processing); or the data has been unlawfully processed. This right is subject to coy77's legal obligations to retain certain data categories (e.g., AML retention requirements) as described in Section 9.
• Right to Restriction: You may request that coy77 restrict the Processing of your Personal Data in certain circumstances — for example, while the accuracy of data is being contested, or where you have objected to processing and a determination is pending.
• Right to Data Portability: Where processing is carried out on the basis of consent or contractual necessity, and by automated means, you may request that your Personal Data be provided to you in a structured, commonly used, machine-readable format, or transmitted directly to another controller where technically feasible.
• Right to Object: You have the right to object to Processing carried out on the basis of legitimate interests — including profiling for responsible gaming monitoring and internal analytics. coy77 will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests, or the processing is necessary to establish, exercise, or defend legal claims.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without penalty. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

To exercise any of the above rights, contact the coy77 support team as described in Section 16. We will respond to all verified data rights requests within 30 days. In complex cases, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it.

coy77 implements a comprehensive suite of technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• Encryption in transit: All data transmitted between your device and the coy77 platform is protected using TLS 1.2 or higher encryption. Our platform enforces HTTPS across all pages and APIs.
• Encryption at rest: Personal Data and financial records stored in coy77's databases are encrypted using AES-256 encryption. Encryption keys are managed through a dedicated key management system with strict access controls.
• Access controls: Access to Personal Data within coy77's internal systems is restricted on a need-to-know basis. All staff with access to player data are subject to background checks, confidentiality agreements, and regular data privacy training.
• Intrusion detection: coy77 operates continuous network monitoring and intrusion detection systems to identify and respond to potential security threats in real time.
• Penetration testing: The coy77 platform undergoes regular security assessments, including third-party penetration testing, to identify and remediate vulnerabilities before they can be exploited.
• Incident response: coy77 maintains a documented data breach response plan. In the event of a security incident affecting your Personal Data, coy77 will notify you within 72 hours of becoming aware of the breach where such notification is required and technically feasible.

While coy77 takes all reasonable technical precautions, no internet-based platform can guarantee absolute security. You play an important role in keeping your account secure by maintaining a strong, unique password, not sharing your login credentials, and notifying coy77 immediately if you suspect any unauthorised access to your account.

The coy77 platform is strictly intended for adults aged 21 and above. coy77 does not knowingly collect Personal Data from individuals under the age of 21 and does not permit participation in any gaming activity by minors.

Age verification is a mandatory component of the coy77 KYC process. All Players are required to confirm their date of birth at registration and provide documentary proof of age as part of the identity verification process. coy77 employs automated age-screening tools and manual review to detect and prevent underage account registration.

If coy77 becomes aware that a Player account is held by an individual under 21 years of age, the account will be immediately suspended, all funds held in the account will be frozen pending investigation, and any winnings generated will be forfeited. The matter will be escalated to our responsible gaming team for appropriate action.

If you are a parent or guardian and believe your child may have registered an account on the coy77 platform, please contact our support team immediately via live chat. We will investigate and take prompt corrective action.

The coy77 platform integrates with a number of third-party services to deliver its full range of features. While coy77 selects its third-party partners carefully and requires them to maintain appropriate data protection standards, each third party operates under its own privacy framework. This Privacy Policy governs only coy77's own data practices.

Third-party categories whose services are integrated into the coy77 platform include:

• Game studios: Pragmatic Play, Evolution Gaming, Spribe, Pocket Games Soft, NetEnt, Microgaming, and other licensed providers. Game content is delivered via iframe or API integration. Game studios may collect limited technical data (session identifiers, RNG seeds, game outcome logs) for fairness auditing purposes.
• Payment service providers: Indonesian bank networks (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI), e-wallet platforms (OVO, DANA, GoPay, ShopeePay, LinkAja), and any international card scheme processing facilitated by licensed payment intermediaries. These providers handle financial transaction data under applicable banking and payments regulations.
• Identity verification providers: Electronic KYC and document verification services used to confirm Player identity and age. These providers process identity document images under their own regulated frameworks.
• Analytics and performance monitoring: Server-side analytics tools used to monitor platform uptime, response times, and aggregate usage patterns. These tools process anonymised technical data only.

coy77 does not integrate with social media platforms, advertising networks, or cross-site tracking services. No Player data is shared with social media providers for advertising or retargeting purposes.

coy77 reserves the right to update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or the services we offer. The "Last Updated" date at the top of this page will be revised whenever a material change is made.

For material changes — defined as those that substantially affect how your Personal Data is collected, used, or shared, or that significantly alter your data rights — coy77 will provide advance notice via the email address registered to your account, or via a prominent notification within the platform, no less than 14 days before the change takes effect.

Your continued use of the coy77 platform after the effective date of any updated Privacy Policy constitutes your acknowledgement of the revised terms. If you do not accept the updated Privacy Policy, you must stop using the platform and contact support to close your account.

All previous versions of this Privacy Policy are archived and available upon request by contacting the coy77 support team.

For any questions, concerns, or requests relating to this Privacy Policy or the handling of your Personal Data by coy77, please contact us through the following channels:

• Live Chat: Available 24/7 via the platform interface. Indonesian-speaking support agents are available around the clock to assist with all account and privacy-related queries.
• Email: [email protected] — for formal data rights requests, please include "DATA RIGHTS REQUEST" in the subject line, describe the specific right you wish to exercise, and provide your registered username and the email address on your account so we can verify your identity.

coy77 is committed to responding to all privacy-related enquiries within 5 business days (WIB, UTC+7) and to fulfilling verified data rights requests within 30 days of identity confirmation. Where a request is complex or involves a large volume of data, we may extend this period by a further 30 days and will inform you accordingly.

If you are not satisfied with coy77's response to your privacy enquiry or data rights request, you have the right to escalate your complaint to the relevant data protection authority in your jurisdiction.