lego77 is committed to protecting the privacy and personal data of every Member. This Policy explains what data we collect, why we collect it, how we use and protect it, and what rights you have over your information.
The following terms carry the meanings defined below throughout this Privacy Policy:
| Term | Meaning |
|---|---|
| "lego77" / "We" / "Us" / "Our" | The operator of the online betting platform at https://lego77.beer and all associated sub-domains and mobile applications. |
| "Member" / "You" / "Your" | Any individual who registers an Account on lego77 or otherwise interacts with the platform. |
| "Personal Data" | Any information that identifies or could reasonably identify a living natural person, including name, date of birth, contact details, financial data, and device identifiers. |
| "Processing" | Any operation performed on Personal Data — including collection, recording, storage, use, disclosure, and deletion. |
| "KYC" | Know Your Customer — the identity and age verification procedures required under our Terms & Conditions and applicable regulations. |
| "Cookies" | Small text files placed on your device by our platform to enable functionality, analytics, and personalisation. |
lego77 acts as the data controller for all Personal Data collected through the platform. This means lego77 determines the purposes and means of processing your Personal Data. Where lego77 engages third-party service providers to process data on its behalf — for example, payment processors, KYC verification services, or game studios — those third parties act as data processors under written agreements that bind them to processing data solely on lego77's instructions and to maintaining appropriate security standards.
For all privacy-related enquiries, requests, and complaints, the primary contact is our Data Protection team, reachable at [email protected]. Please include the subject line "Privacy Request" and your registered Account email address in all correspondence.
lego77 collects the following categories of Personal Data, depending on your interactions with the platform:
lego77 does not intentionally collect sensitive personal data categories such as racial or ethnic origin, religious beliefs, health data, or biometric data, except where an identity document submitted for KYC purposes incidentally contains such information. Such data is not extracted, stored separately, or used for any purpose beyond identity verification.
lego77 collects Personal Data through the following channels:
| Channel | Examples of Data Collected |
|---|---|
| Account Registration | Identity, contact, and security data provided by you during sign-up. |
| KYC Verification | Document images (KTP, passport, proof of address) submitted to verify your identity and age. |
| Deposits & Withdrawals | Bank account numbers, e-wallet IDs, and transaction records generated when you move funds. |
| Platform Usage | Betting history, game sessions, and account activity recorded automatically as you use the platform. |
| Cookies & Tracking Technologies | Device identifiers, IP address, browser data, and session logs collected via cookies and server logs. |
| Customer Support Interactions | Communications data captured during live chat, email, or WhatsApp exchanges with our support team. |
| Third-Party Service Providers | Verification results from KYC partners, fraud-detection flags from security providers, and payment confirmation data from banks and e-wallet operators. |
lego77 processes your Personal Data only where a valid legal basis exists. The table below sets out our primary processing pu rposes and corresponding legal bases:
| Purpose | Legal Basis |
|---|---|
| Account creation and management | Performance of contract — necessary to provide the Services you have registered for. |
| Identity and age verification (KYC) | Legal obligation — required to confirm you are 21 or older and to comply with anti-money laundering obligations. |
| Processing deposits and withdrawals | Performance of contract — necessary to execute financial transactions you have requested. |
| Fraud prevention and security monitoring | Legitimate interest — to protect the platform, other Members, and lego77 from fraudulent or abusive activity. |
| Responsible gaming compliance | Legal obligation and legitimate interest — to enforce self-exclusion, deposit limits, and other player protection measures. |
| Customer support and dispute resolution | Performance of contract and legitimate interest — to resolve queries, complaints, and disputes effectively. |
| Personalisation and platform improvement | Legitimate interest — to improve platform performance and tailor the experience to your preferences. |
| Marketing communications (where opted in) | Consent — we will only send promotional communications where you have expressly opted in. You may withdraw consent at any time. |
| Regulatory reporting and legal compliance | Legal obligation — to comply with applicable laws, licence conditions, and court or regulatory orders. |
lego77 does not sell, rent, or trade your Personal Data to any third party for their own marketing purposes. We share your data only where necessary and only with the following categories of recipients, each bound by appropriate data processing agreements or legal obligations:
To process deposits and withdrawals, we share the minimum necessary financial data with Indonesian banking partners including BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, and Bank Danamon, as well as e-wallet operators OVO, DANA, GoPay, ShopeePay, and LinkAja. These providers receive only the data required to complete the specific transaction.
lego77 uses accredited third-party KYC verification services to authenticate the identity documents you submit. These providers process your identity data under strict contractual obligations and are prohibited from using it for any purpose other than verification on lego77's behalf.
Game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft may receive anonymised or pseudonymised session data to power game delivery and RNG certification. No directly identifiable personal data beyond a session token is passed to game studios.
We share IP addresses, device fingerprints, and behavioural signals with specialist fraud detection providers to identify suspicious activity, protect against account takeovers, and prevent money laundering.
lego77 will disclose Personal Data to law enforcement agencies, regulatory bodies, or courts where required to do so by applicable law, court order, or regulatory direction. We will notify affected Members of such disclosures where we are legally permitted to do so.
All third-party data processors engaged by lego77 are contractually prohibited from using your Personal Data for any purpose beyond the specific service they provide to lego77. We conduct due diligence on all new data processors before engagement.
lego77 operates internationally, and some of our service providers and infrastructure partners are located outside Indonesia. Where Personal Data is transferred outside Indonesia to countries that may not provide an equivalent level of data protection, lego77 implements appropriate safeguards to ensure your data remains protected, including:
By registering an Account and using lego77's Services, you acknowledge that your Personal Data may be transferred to, stored in, and processed in countries outside Indonesia where lego77 or its processors maintain infrastructure, provided such transfers are governed by the safeguards described above.
lego77 retains Personal Data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law and our licence obligations. The following general retention periods apply:
| Data Category | Retention Period |
|---|---|
| Account and identity data | Duration of Account plus 5 years after Account closure, to meet AML and regulatory reporting obligations. |
| KYC verification documents | 5 years from the date of verification or Account closure, whichever is later. |
| Financial transaction records | 7 years from transaction date, in line with financial record-keeping requirements. |
| Betting and gaming history | 5 years from the date of each transaction or session. |
| Customer support communications | 3 years from the date of the last communication in a support thread. |
| Self-exclusion and responsible gaming records | Indefinitely, to prevent circumvention of exclusion restrictions. |
| Marketing consent records | Until consent is withdrawn, plus 2 years thereafter as evidence of consent status. |
At the end of the applicable retention period, Personal Data is securely deleted or anonymised such that it can no longer be attributed to an identifiable individual.
lego77 implements a comprehensive set of technical and organisational security measures designed to protect your Personal Data against unauthorised access, accidental loss, disclosure, alteration, or destruction. Our key security controls include:
Despite these measures, no system is entirely immune to risk. In the event of a Personal Data breach that is likely to result in a high risk to your rights and freedoms, lego77 will notify affected Members without undue delay and will take immediate remediation steps.
You are responsible for keeping your Account password confidential and for enabling two-factor authentication. If you suspect your Account has been compromised, contact our support team immediately via live chat or at [email protected]. Do not share your login credentials with any third party under any circumstances.
lego77 uses cookies and similar tracking technologies on the platform to ensure core functionality, improve performance, and analyse usage patterns. The main categories of cookies we use are:
| Cookie Type | Purpose | Can Be Disabled? |
|---|---|---|
| Strictly Necessary | Enable core platform functions — session management, login state, and security tokens. The platform cannot function without these. | No |
| Performance & Analytics | Collect anonymised data about how Members use the platform — pages visited, time on page, error reports — to help us improve the platform. | Yes |
| Functional | Remember your preferences such as language setting, preferred payment method, and responsible gaming limits display. | Yes |
| Marketing & Personalisation | Track your interactions with promotional content to personalise bonus offers and communications, where you have consented to marketing. | Yes |
You may manage your cookie preferences at any time through your browser settings or the cookie preference panel within your Account. Disabling non-essential cookies may affect the functionality of certain platform features. Your browser's "Do Not Track" signal is acknowledged, and we will not deploy marketing-category cookies where this signal is detected.
Subject to applicable law and the specific circumstances of your request, you have the following rights in respect of your Personal Data held by lego77:
To exercise any of the above rights, please contact our Data Protection team at [email protected] with the subject line "Privacy Request — [Right Type]" and your registered email address. We will respond within 30 days. Where requests are complex or numerous, we may extend this period by a further 60 days with notice to you.
To protect your data from unauthorised disclosure, we will verify your identity before processing any data rights request. You may be asked to confirm your registered email, phone number, or submit a brief identity confirmation. This step is mandatory and is not a barrier to exercising your rights — it is a safeguard for your protection.
lego77's platform is strictly intended for adults aged 21 years and older. We do not knowingly collect Personal Data from individuals under the age of 21. Age verification is a mandatory step in the KYC process, and any Account found to belong to a person under 21 will be immediately suspended, with all real-money funds returned to the depositing payment method and all winnings voided.
If you have reason to believe that a person under 21 has registered an Account on lego77, please contact us immediately at [email protected]. Upon receiving a credible report, lego77 will investigate and take prompt action, including Account suspension and secure deletion of any Personal Data collected from the minor.
Registering on lego77 while under the age of 21 is a violation of our Terms & Conditions and may constitute fraud. lego77 takes underage gambling extremely seriously and cooperates fully with any regulatory or law enforcement investigation in such cases.
The lego77 platform may reference or integrate with third-party services — including game studios, payment networks, and analytics tools — each of which operates under its own privacy policy. lego77 is not responsible for the privacy practices or content of any third-party service. We encourage you to review the privacy policies of any third-party providers whose services you use in connection with your lego77 Account.
Where lego77 embeds third-party game content (for example, live dealer tables from Evolution Gaming or slots from Pragmatic Play), those providers may set their own technical cookies or session tokens. Such cookies are limited to the functionality required to deliver the game and are governed by the respective studio's data processing terms, which are incorporated into lego77's game-provider agreements.
lego77 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform functionality. The "Effective Date" displayed at the top of this page indicates when the current version came into force. Where amendments are material — for example, a change in the purposes for which we use your data or the introduction of new third-party data sharing — we will notify registered Members via email or an in-platform notification at least 14 days before the changes take effect.
Your continued use of the lego77 platform after the effective date of an updated Privacy Policy constitutes your acknowledgement of the revised terms. If you do not agree with any amendment, you may close your Account before the changes take effect by contacting our support team.
If you have any questions about this Privacy Policy, wish to exercise a data right, or wish to raise a complaint about how lego77 has handled your Personal Data, please contact us through the following channels:
We aim to acknowledge all privacy-related contacts within 2 business days and to resolve complaints within 30 days. If you are not satisfied with our response to a complaint, you have the right to escalate the matter to the relevant data protection supervisory authority in the jurisdiction where lego77 holds its primary operating licence.
lego77's Data Protection team reviews all privacy requests during business hours (08:00–22:00 WIB, Monday to Friday). Requests submitted outside business hours will be actioned on the next business day. For urgent security concerns — such as suspected Account compromise — please use the live chat channel for the fastest response.
Six principles that guide every data decision we make at lego77
Every byte of data transmitted between your device and the lego77 platform is protected by industry-standard 256-bit SSL/TLS encryption — the same standard used by major international banks and financial institutions.
lego77 will never sell, rent, or trade your Personal Data to third parties for their own marketing purposes. Your information is used exclusively to operate your Account, process transactions, and keep the platform secure.
We collect identity documents solely for mandatory age verification and anti-money laundering compliance. KYC data is stored with AES-256 encryption, accessed only by authorised staff, and deleted promptly at the end of its retention period.
lego77 gives you meaningful control over your Personal Data. You can access, correct, export, or request deletion of your data at any time. Marketing communications require your explicit opt-in and can be withdrawn instantly from your Account settings.
lego77 does not retain your data indefinitely. Each category of Personal Data has a defined maximum retention period, after which it is securely deleted or anonymised. Our retention schedules are aligned with Indonesian and international regulatory requirements.
Our Data Protection team is available via email and live chat to handle privacy requests, complaints, and questions. We are committed to responding to all privacy-related contacts within 2 business days and resolving formal complaints within 30 days.
Review our full Terms & Conditions, explore our Responsible Gaming tools, or browse the FAQ for quick answers about how lego77 protects your data and your account.
Browse the FAQ Terms & Conditions