maha77 is committed to protecting the personal information of every Member. This Privacy Policy explains exactly what data we collect, why we collect it, how it is used, and the rights you hold over your own information.
Last Updated: January 2026Summary: maha77 collects personal data only as necessary to operate a safe, compliant, and high-quality gaming platform for Indonesian Members. We do not sell your personal data to third parties. We use industry-standard encryption to protect all data in transit and at rest. You have the right to access, correct, or request deletion of your personal data at any time by contacting our support team.
This Privacy Policy ("Policy") is issued by maha77 ("the Company", "we", "us", "our") and governs the collection, processing, storage, and disclosure of personal data relating to individuals who visit, register on, or otherwise interact with the maha77 Platform at https://maha77.cam ("the Platform").
This Policy applies to all current and former Members, prospective registrants, and visitors to the Platform. By accessing or using the Platform, you acknowledge that you have read and understood this Policy in its entirety. If you do not agree with any part of this Policy, you should discontinue use of the Platform immediately.
This Policy should be read alongside our Terms & Conditions, which govern your overall use of the Platform. Where there is any conflict between this Policy and the Terms & Conditions, the Terms & Conditions shall prevail.
For the purposes of this Privacy Policy, the following terms carry the meanings assigned below:
maha77 collects Personal Data through several channels, including direct registration input, automated Platform interactions, KYC verification submissions, payment processing, and customer support communications. The categories of data we collect are set out in the table below:
| Data Category | Specifi c Items Collected | Collection Method |
|---|---|---|
| Account Registration Data | Full legal name, date of birth, gender, email address, mobile phone number, username, password (encrypted) | Provided directly by Member during registration |
| KYC Verification Data | Indonesian KTP (Kartu Tanda Penduduk) or passport copy, proof of payment method ownership, selfie holding ID document, residential address | Submitted by Member during KYC verification process |
| Financial Data | Bank account details (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon), e-wallet identifiers (OVO, DANA, GoPay, ShopeePay), deposit and withdrawal transaction records, wagering history, bonus claims | Provided during deposit/withdrawal requests; automatically recorded during gameplay |
| Technical & Usage Data | IP address, device type, browser type and version, operating system, time zone setting, screen resolution, login timestamps, page views, session duration, click patterns | Automatically collected via cookies, server logs, and analytics tools |
| Communication Data | Email correspondence, live chat transcripts, support ticket content, feedback submissions | Provided voluntarily during customer support interactions |
| Gameplay Data | Betting selections, stake amounts, game outcomes, RTP performance, session start/end times, active bonuses, responsible gaming limit settings | Automatically recorded during gameplay on sportsbook, casino, slot, togel, and sabung ayam products |
When you register an Account, submit KYC documents, make a deposit or withdrawal, adjust your responsible gaming settings, or contact customer support, you provide Personal Data to maha77 directly and voluntarily. The provision of certain data categories — particularly registration information, KYC verification documents, and payment method details — is mandatory for the Platform to function and for the Company to meet its legal obligations. Failure to provide mandatory data will prevent you from accessing certain features or processing withdrawal requests.
The Platform automatically collects Technical & Usage Data whenever you access or interact with it. This includes device information, IP addresses, and browsing behavior. Such data is collected through cookies, server logs, and third-party analytics services. Automatic data collection enables the Company to detect fraudulent activity, ensure platform stability, comply with anti-money laundering requirements, and improve user experience.
maha77 processes your Personal Data under one or more of the following legal grounds:
maha77 uses your Personal Data for the following purposes:
maha77 does not sell, rent, or trade your Personal Data to third parties for their own marketing purposes. We may, however, share your data with the following categories of recipients under strict contractual data processing agreements:
Indonesian bank partners (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) receive the minimum data necessary to process your deposit and withdrawal transactions. Payment data is tokenized wherever possible to minimize exposure of sensitive financial information.
Third-party identity verification services process your KTP, passport, and selfie verification images to confirm your identity and age. These processors operate under binding confidentiality agreements and are prohibited from using your data for any purpose other than identity verification.
Licensed game studios — including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Pocket Games Soft — receive anonymized gameplay data (bet amounts, game outcomes, session times) for RTP calculation, fair-play audits, and game performance monitoring. No personally identifiable registration or financial data is shared with game providers.
Cybersecurity firms and fraud detection platforms receive IP addresses, device fingerprints, and behavioral analytics to identify and block malicious activity, automated bot attacks, and account takeover attempts.
maha77 may disclose Personal Data to law enforcement, tax authorities, or other government bodies when required by law, court order, or valid legal process. We may also disclose data when necessary to protect the rights, property, or safety of the Company, our Members, or the public.
All third-party data processors are bound by contracts that prohibit them from using your Personal Data for purposes beyond the specific service they provide to maha77. We conduct regular audits of processor compliance with data protection standards.
The maha77 Platform uses cookies and similar tracking technologies (web beacons, local storage, session storage) to enable core functionality, analyze usage patterns, and deliver personalized experiences. Cookies are small text files stored on your device when you visit the Platform.
Most web browsers allow you to control cookies through their settings. You can configure your browser to block all cookies, accept only first-party cookies, or delete cookies after each session. Note that disabling essential cookies will prevent you from logging into your Account and accessing most Platform features. For instructions on managing cookies in your specific browser, consult the browser's help documentation.
maha77 employs a multi-layered security framework to protect your Personal Data against unauthorized access, disclosure, alteration, or destruction:
Despite these measures, no internet transmission or electronic storage system is 100% secure. Members are responsible for maintaining the confidentiality of their Account credentials and for enabling two-factor authentication (2FA) where available. If you suspect unauthorized access to your Account, contact [email protected] (plain text — not a clickable link) immediately.
maha77 retains your Personal Data only for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements. The following retention periods apply:
Registration and gameplay data retained while Account is active
Financial transaction records retained for tax and AML compliance
KYC verification documents retained after Account closure
Customer support communications and dispute resolution records
Technical logs (IP addresses, session data) for fraud detection
Marketing cookies and non-essential tracking data
When Personal Data is no longer required, it is securely deleted or anonymized such that it can no longer be associated with an identifiable individual. Anonymized data may be retained indefinitely for statistical analysis and product development.
As a Member of maha77, you hold the following rights with respect to your Personal Data:
You may request a copy of all Personal Data we hold about you. We will provide this data in a structured, commonly used format within 30 days of your request.
You may correct inaccurate or incomplete Personal Data at any time through your Account settings or by contacting customer support.
You may request deletion of your Personal Data. Note that certain data must be retained for legal compliance (financial records, KYC documents) even after Account closure.
You may request that we limit the processing of your Personal Data in certain circumstances, such as while a dispute regarding data accuracy is being resolved.
You may request a machine-readable copy of your Personal Data for transfer to another service provider where technically feasible.
You may object to processing of your Personal Data for direct marketing purposes at any time. You may also object to processing based on legitimate interests by demonstrating compelling grounds.
To exercise any of these rights, submit a written request to [email protected] (plain text — not a clickable link) with the subject line "Data Protection Request". We will respond within 30 days of verifying your identity. There is no fee for exercising your rights unless your request is manifestly unfounded or excessive, in which case we may charge a reasonable administrative fee or refuse the request.
The maha77 Platform is strictly intended for individuals aged 21 years and older. We do not knowingly collect Personal Data from any person under the age of 21. If we discover that a minor has registered an Account or provided Personal Data to us, we will immediately close the Account, delete all associated data (except transaction records required by law), and may report the matter to appropriate authorities.
Parents and guardians are encouraged to monitor the online activities of minors in their care. If you become aware that a person under 21 has accessed the maha77 Platform, please contact us immediately at [email protected] so we can take corrective action.
The maha77 Platform may contain links to external websites operated by payment providers, game studios, or other third parties. This Privacy Policy applies exclusively to the maha77 Platform. We are not responsible for the privacy practices of third-party websites, even if you access them via links on our Platform.
When you click a link to an external site (for example, to complete a bank transfer via BCA or top up your OVO wallet), that site's own privacy policy will govern the collection and use of your Personal Data. We encourage you to review the privacy policies of all third-party services before providing them with any personal information.
maha77 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal requirements, or Platform functionality. When material changes are made, we will notify registered Members via the email address on file and display a prominent notice on the Platform homepage for at least 30 days.
The "Last Updated" date at the top of this page indicates when the Policy was most recently revised. Continued use of the Platform after the effective date of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with any amendment, you should cease using the Platform and may request Account closure and data deletion as described in Section 10.
For questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data, please contact the maha77 Data Protection team:
If you believe your data protection rights have been violated and your issue has not been resolved to your satisfaction through our internal channels, you may have the right to lodge a complaint with a relevant data protection authority in your jurisdiction.
maha77's privacy framework combines cutting-edge encryption, strict access controls, and transparent data practices to keep Indonesian players safe
Every page load, login, deposit, and withdrawal is transmitted over military-grade SSL encryption. Your data is unreadable to anyone intercepting the connection.
BCA, BRI, BNI, Mandiri, OVO, DANA, and GoPay transactions are tokenized. maha77 never stores your raw bank account or card numbers on our servers.
Indonesian KTP verification ensures every Member is a real person, 21 or older, and a legitimate resident. KYC documents are stored in encrypted form and shared only with certified verification partners.
We will never sell, rent, or trade your Personal Data to advertisers or third-party marketers. Your information is used exclusively to operate and improve the maha77 Platform.
We clearly state how long each data category is retained. Financial records are kept for 7 years for AML compliance; marketing cookies expire after 30 days.
Access, correct, or delete your data at any time. We respond to data protection requests within 30 days and provide data exports in machine-readable formats.
Our FAQ section answers common privacy questions, including how to update your KYC documents, manage cookie preferences, and request a copy of your data. You can also review our full Terms & Conditions or learn about our Responsible Gaming tools.