mog77 Privacy Policy

The data controller responsible for the personal information collected through the mog77 platform is the company operating https://mog77.pro under its internationally recognised offshore gaming licence. For all data-related enquiries, the designated point of contact is the mog77 Privacy Team, reachable at [email protected] with the subject line "Privacy Request".

mog77 processes personal data in accordance with the principles of data minimisation, purpose limitation, storage limitation, accuracy, integrity, and confidentiality. We collect only the information that is genuinely necessary to operate the platform, fulfil our regulatory obligations, and deliver a secure and personalised gaming experience to Indonesian players.

In this Privacy Policy, the following terms carry the meanings assigned below:

• "Personal Data" — any information relating to an identified or identifiable natural person, including name, date of birth, email address, IP address, device identifiers, and financial account details.
• "Processing" — any operation performed on personal data, including collection, recording, storage, use, disclosure, transmission, restriction, erasure, or destruction.
• "Data Subject" — the individual whose personal data is being processed; in the context of this policy, this refers to the registered mog77 Player.
• "Third Party" — any natural or legal person, public authority, or body other than the Data Subject, the Data Controller, or persons authorised to process data under the Data Controller's direct authority.
• "Consent" — any freely given, specific, informed, and unambiguous indication of the Data Subject's agreement to the processing of their personal data for a stated purpose.
• "KYC Provider" — a third-party identity verification service engaged by mog77 to conduct Know Your Customer checks on Player accounts, including document verification and liveness checks.

mog77 collects personal data across the following categories. The table below summarises each category, specific data points within it, and the primary reason for collection:

mog77 does not collect sensitive personal data categories such as racial or ethnic origin, political opinions, religious beliefs, health data (beyond responsible gaming disclosures made voluntarily by the Player), biometric data for identification purposes, or data concerning sexual orientation.

mog77 collects personal data through the following channels:

• Direct Submission: Data you provide voluntarily during account registration, KYC document upload, deposit and withdrawal requests, support ticket submissions, and promotional opt-ins.
• Automated Technical Collection: Data collected automatically when you access the Platform, including IP address, browser fingerprint, device identifiers, and session behaviour data gathered via server logs and first-party analytics tools.
• Payment Providers: Confirmation data returned by Indonesian bank transfer processors and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) when a deposit or withdrawal is executed. mog77 does not store full bank account numbers; only the last four digits and the registered account name are retained for verification purposes.
• KYC Providers: Verification results and document authenticity scores returned by our third-party KYC service providers following identity document review.
• Cookies and Tracking Technologies: First-party cookies and similar technologies as described in Section 9 of this policy.

mog77 processes personal data only where a valid legal basis exists. The primary legal bases under which mog77 processes player data are:

• Contractual Necessity: Processing required to perform the contract between mog77 and the Player — including account creation, payment processing, game delivery, and support services. Without this processing, mog77 cannot provide the Platform services.
• Legal Obligation: Processing required to comply with applicable legal and regulatory requirements, including anti-money laundering (AML) obligations, Know Your Customer (KYC) requirements imposed by mog77's licensing jurisdiction, and financial record-keeping mandates.
• Legitimate Interests: Processing necessary for mog77's legitimate business interests where those interests are not overridden by the Player's privacy rights. This includes fraud detection and prevention, platform security monitoring, responsible gaming analytics, and service improvement activities.
• Consent: Where mog77 relies on consent as its legal basis — specifically for direct marketing communications — consent is obtained through an explicit opt-in mechanism. Players may withdraw consent at any time without affecting the lawfulness of prior processing or the continued provision of Platform services.

mog77 does not sell, rent, or otherwise commercially transfer personal data to third parties. Data is shared only in the following limited and necessary circumstances:

• Payment Processors: Indonesian bank transfer processors and e-wallet platforms (OVO, DANA, GoPay, ShopeePay, LinkAja) receive transaction data strictly necessary to execute deposit and withdrawal instructions. These providers operate under their own privacy policies and applicable financial regulations.
• KYC and Identity Verification Providers: Player identity documents and verification data are transmitted to our contracted KYC service providers for the sole purpose of completing identity verification. These providers are contractually bound to process data only for verification purposes and to maintain equivalent data security standards to mog77.
• Game Studio Technology Providers: Game studios including Pragmatic Play, Evolution Gaming, PG Soft, Microgaming, NetEnt, Habanero, Spribe, and Pocket Games Soft receive a unique player token (not personal identity data) to render game sessions. No name, email, or financial data is transmitted to game studios during normal gameplay.
• Regulatory and Law Enforcement Authorities: mog77 will disclose personal data to relevant authorities where required to do so by a valid legal demand, court order, or regulatory obligation under its licensing jurisdiction. mog77 will notify the affected Player of such disclosure where legally permitted to do so.
• Fraud Prevention and Security Services: mog77 may share technical identifiers (IP addresses, device fingerprints) with fraud prevention platforms to detect and block suspicious account activity across the industry.
• Business Transfers: In the event of a merger, acquisition, or sale of substantially all of mog77's assets, Player data may be transferred to the successor entity. Players will be notified of any such transfer and given the opportunity to close their accounts prior to completion.

All third-party service providers engaged by mog77 are required to implement appropriate technical and organisational security measures and to process personal data only in accordance with mog77's documented instructions.

mog77 retains personal data for no longer than is necessary to fulfil the purposes for which it was collected, subject to applicable legal retention obligations. The following standard retention periods apply:

• Active Account Data: Retained for the full duration of the Player's active account relationship with mog77, plus a mandatory post-closure period of 5 years to satisfy AML record-keeping and licensing audit requirements.
• Financial Transaction Records: Retained for a minimum of 5 years from the date of each transaction, consistent with standard financial compliance obligations applicable to mog77's licensing jurisdiction.
• KYC Documents: Retained for the account lifetime plus 5 years post-closure. Originals of identity documents are not stored; only verification results and document metadata are retained after the initial KYC review.
• Support Communications: Retained for 3 years from the date of the most recent interaction in a support thread, unless the thread relates to a formal complaint or dispute in which case the retention period extends to 5 years.
• Technical and Session Logs: Retained for 12 months from the date of collection, after which they are automatically purged from active systems.
• Marketing Preference Records: Retained for the duration of the account relationship and for 3 years following account closure or marketing opt-out, as evidence of consent status.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with an identifiable individual.

mog77 implements a comprehensive set of technical and organisational security measures designed to protect personal data against unauthorised access, accidental loss, destruction, disclosure, or alteration. Key security measures include:

• Transport Layer Security: All data in transit between player devices and mog77 servers is encrypted using TLS 1.2 or higher with 256-bit AES encryption.
• Database Encryption: Sensitive fields in mog77's databases — including identity documents, financial account details, and authentication credentials — are stored in encrypted form using industry-standard encryption algorithms.
• Access Controls: Internal access to personal data is restricted by role-based access controls (RBAC). Access rights are reviewed quarterly and revoked immediately upon staff departure or role change.
• Two-Factor Authentication: Two-factor authentication (2FA) is available and strongly recommended for all Player accounts. All mog77 staff with access to production systems are required to use 2FA.
• Penetration Testing: mog77's platform undergoes regular third-party penetration testing and vulnerability assessments. Critical findings are remediated within documented SLA timelines.
• Incident Response: mog77 maintains a documented data breach incident response plan. In the event of a breach affecting Player data, affected Players will be notified within 72 hours where technically feasible and where notification is required under applicable regulations.

mog77 uses first-party cookies and similar browser storage technologies to operate and improve the Platform. mog77 does not use third-party advertising cookies or behavioural tracking cookies for cross-site advertising purposes.

The categories of cookies used on the mog77 platform are:

• Strictly Necessary Cookies: Required for the Platform to function. These include session authentication tokens, load-balancing identifiers, and CSRF protection tokens. These cookies cannot be disabled without breaking core platform functionality. No consent is required for strictly necessary cookies.
• Functional Cookies: Remember your preferences such as preferred language display, last visited game category, and responsible gaming tool settings. These cookies are set only after you have logged in and improve your experience on return visits.
• Analytics Cookies: First-party analytics cookies collect anonymised aggregate data about page visit patterns, game load times, and navigation flows. This data is used solely to improve platform performance and user experience. No individual player is identified through analytics data.
• Security Cookies: Used to detect and prevent automated bot activity, brute-force login attempts, and other security threats. These cookies are strictly necessary for platform integrity.

You can manage cookie preferences through your browser settings. Disabling functional or analytics cookies will not prevent you from using the Platform but may reduce the quality of your personalised experience. Disabling strictly necessary cookies will prevent you from logging in or using core platform features.

The mog77 Platform is strictly intended for adults aged 21 and over. mog77 does not knowingly collect personal data from individuals under the age of 21. Any account found to belong to a person under 21 will be immediately closed, all associated data will be deleted within 30 days (subject to any regulatory hold requirements), and the matter will be escalated in accordance with mog77's responsible gaming and child protection policies.

Parents and guardians are strongly encouraged to use parental control software to prevent underage access to online gambling platforms. If you believe a minor has registered a mog77 account, please contact us immediately at [email protected] and we will investigate and act on a priority basis.

As a Player whose personal data is processed by mog77, you hold the following rights in respect of your personal information. To exercise any of these rights, submit a written request to [email protected] with the subject line "Privacy Request" and your registered Account username. mog77 will respond within 30 days of receipt of a verified request.

mog77's primary data infrastructure is hosted in data centres operating within mog77's licensing jurisdiction. Some personal data may be transferred to, processed in, or stored in jurisdictions outside Indonesia in order to deliver certain services — for example, where a KYC provider or game studio operates servers in a different country.

Where personal data is transferred internationally, mog77 ensures that appropriate safeguards are in place, which may include: contractual data processing agreements incorporating standard data protection clauses, data transfer agreements with recipient organisations, or transfer to jurisdictions that maintain equivalent data protection standards to those required under mog77's licence.

By registering an account with mog77 and accepting these policies, you acknowledge that your personal data may be transferred to and processed in jurisdictions outside Indonesia as described in this section.

The mog77 Platform may contain links to third-party resources or integrate third-party services (such as live game studios or payment platforms). This Privacy Policy applies solely to data processing carried out by mog77. When you interact with a third-party service — including clicking through to an external payment provider's portal or interacting with a live studio interface — you are subject to that third party's own privacy policy.

mog77 is not responsible for the privacy practices of third-party service providers and encourages Players to review the privacy policies of any third-party service they interact with. The inclusion of a third-party service on the mog77 Platform does not constitute an endorsement of that third party's data practices.

mog77 reserves the right to update or replace this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or regulatory requirements. When material changes are made — meaning changes that affect the categories of data collected, the purposes for which data is used, or Player rights — mog77 will notify registered Players via their registered email address and by publishing a prominent notice on the Platform homepage at least 7 days before the revised policy takes effect.

The "Last Updated" date at the top of this page indicates when the currently effective version was published. We encourage Players to review this Privacy Policy periodically. Your continued use of the mog77 Platform following the effective date of an amended Privacy Policy constitutes your acknowledgment of the revised terms.

For minor, non-material changes such as typographic corrections or clarifications that do not affect the substance of our data practices, mog77 may update this policy without advance notice, though the "Last Updated" date will always reflect the most recent revision.

For all data privacy enquiries, requests to exercise your rights, complaints about mog77's data practices, or questions about this Privacy Policy, please contact the mog77 Privacy Team using the following details:

• Email: [email protected] (subject line: "Privacy Request" — plain text, not a clickable link)
• Response Time: mog77 aims to acknowledge all privacy requests within 48 hours and provide a substantive response within 30 days of identity verification.
• Support Language: Privacy requests may be submitted in English or Indonesian. mog77's privacy team includes native Indonesian-speaking staff.

If you are not satisfied with mog77's response to a privacy concern, you have the right to escalate the matter to the relevant data protection supervisory authority in mog77's licensing jurisdiction or, where applicable, to seek resolution through the dispute resolution mechanism provided under mog77's gaming licence.