Legal Document

Privacy Policy — mex77

Your privacy matters to mex77. This Privacy Policy explains what personal data we collect when you use our platform, why we collect it, how it is stored and protected, who we share it with, and the rights you hold over that data. This policy applies to all Members and visitors accessing https://mex77.bet from Indonesia and other jurisdictions.

Last Updated: January 2026
Clause 1

Introduction

mex77 ("we", "us", "our", "the Platform") is committed to protecting the privacy and personal data of all individuals who interact with our online betting and casino services. This Privacy Policy describes our practices in relation to the collection, use, storage, disclosure, and protection of personal data submitted by Members and visitors to https://mex77.bet.

We operate in compliance with internationally recognised data protection principles and apply technical and organisational measures designed to maintain the confidentiality, integrity, and availability of your personal information. We process your data only for the specific, legitimate purposes described in this document, and we do not sell your personal data to unaffiliated third parties for their own marketing purposes.

This policy should be read together with the mex77 Terms & Conditions, which contain additional provisions governing your use of the Platform. In the event of any conflict between this Privacy Policy and the Terms & Conditions with respect to the handling of personal data, this Privacy Policy shall prevail.

Clause 2

Data Controller

The data controller responsible for the personal data collected through https://mex77.bet is the mex77 Platform operator, operating under an internationally recognised gaming licence. For all data protection enquiries, please contact us through the channels set out in Clause 15 of this policy.

Where mex77 engages third-party service providers to process personal data on its behalf (for example, KYC verification providers or payment processors), those providers act as data processors under written agreements that require them to handle your data in accordance with applicable data protection standards and solely on mex77's documented instructions.

Clause 3

Data We Collect

Depending on how you interact with the mex77 Platform, we may collect the following categories of personal data:

3.1 Identity Data

Full legal name, date of birth, nationality, and a copy of your government-issued photo identification document (such as an Indonesian National Identity Card — KTP — or a valid passport). This data is collected as part of the mandatory KYC verification process applicable to all Members.

3.2 Contact Data

Residential address (street, city, province, and postal code within Indonesia), email address, and mobile telephone number registered in Indonesia. We use these details to deliver account communications, transaction notifications, and, where you have consented, promotional messages.

3.3 Financial Data

Details of the payment method(s) you use to transact on mex77, including bank account numbers associated with BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Permata, or BSI, and e-wallet identifiers for OVO, DANA, GoPay, ShopeePay, or LinkAja. We do not store full payment card numbers or internet banking credentials.

3.4 Transaction Data

Records of all deposits, withdrawals, bonus claims, wagers placed, games played, and outcomes achieved on the Platform. This data is retained as required for financial record-keeping, dispute resolution, and responsible gaming monitoring purposes.

3.5 Technical Data

IP address, device type and operating system, browser type and version, screen resolution, session timestamps, clickstream data, page views, and referral source. This data is collected automatically via server logs and on-site tracking technologies described in Clause 12.

3.6 Profile Data

Your mex77 username, account preferences, responsible gaming tool settings (deposit limits, session time limits, cooling-off status, self-exclusion status), communication preferences, and any feedback or correspondence you submit to our support team.

3.7 Special Category Data

mex77 does not intentionally collect special category data (such as health data, biometric data, or data revealing racial or ethnic origin) except where strictly necessary to process a responsible gaming intervention (for example, recording a self-exclusion request initiated by a Member). Where such data is processed, it is handled with enhanced security controls and is not used for any commercial purpose.

Clause 4

How We Collect Data

mex77 collects personal data through the following means:

Collection Method Examples
Direct submission Registration form, KYC document upload, support ticket submission, WhatsApp or live chat messages
Automated technologies Cookies, server-side logs, device fingerprinting, session analytics, fraud detection systems
Third-party sources KYC identity verification providers, payment processors (e-wallets, banks), fraud prevention databases, publicly available registries
Platform activity Bets placed, games launched, deposit and withdrawal requests, bonus activation, responsible gaming tool usage
Clause 5

Purposes of Processing

mex77 processes your personal data for the following specific purposes:

  • Account creation and management: Registering your mex77 Account, verifying your identity via KYC, maintaining account records, and managing login security including optional two-factor authentication.
  • Transaction processing: Facilitating deposits via Indonesian payment channels (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja) and processing withdrawal requests to your verified payment account.
  • Platform delivery: Providing access to sportsbook markets (including BRI Liga 1, Champions League, and Timnas Indonesia fixtures), live casino games, premium slots, togel (Indonesia's traditional numbers lottery), and all other gaming products available on mex77.
  • Bonus and promotion administration: Verifying eligibility for and delivering welcome bonuses, reload offers, cashback, free spins, and seasonal promotions aligned with Indonesian calendar events such as Idul Fitri, Ramadhan, Imlek, and Indonesian Independence Day.
  • Fraud prevention and security: Detecting and preventing fraudulent activity, money laundering, duplicate account creation, bonus abuse, collusion, and other activities in breach of the mex77 Terms & Conditions.
  • Responsible gaming: Monitoring betting patterns for indicators of problem gambling behaviour, enforcing deposit limits and self-exclusion orders, and contacting Members where welfare concerns are identified.
  • Legal and regulatory compliance: Fulfilling obligations under applicable anti-money laundering (AML) regulations, responding to lawful requests from regulatory or law enforcement authorities, and maintaining mandatory financial records.
  • Customer support: Responding to enquiries, resolving disputes, processing complaints, and providing account assistance via live chat, WhatsApp (+62 811 0077 777), and email.
  • Service improvement: Analysing anonymised usage data to improve Platform performance, personalise the user experience, and develop new product features.
  • Marketing communications: Sending promotional emails, SMS, or in-app notifications about mex77 bonuses and new games — but only where you have provided explicit consent and in compliance with your communication preferences. You may withdraw marketing consent at any time.
Clause 7

Data Sharing

mex77 does not sell, rent, or trade your personal data to unaffiliated third parties for their own commercial purposes. We may share your data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate contractual protections:

7.1 Payment Processors

To process your deposits and withdrawals, we share necessary financial and identity data with the Indonesian banking and e-wallet partners you select (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Permata, BSI, OVO, DANA, GoPay, ShopeePay, LinkAja). Each payment partner operates under its own privacy policy and applicable Indonesian financial regulations.

7.2 KYC and Identity Verification Providers

To fulfil our AML and know-your-customer obligations, we share identity documents and personal data with authorised third-party KYC verification service providers. These providers are contractually prohibited from using your data for any purpose other than identity verification on mex77's behalf.

7.3 Game Content Providers

Third-party game studios integrated into the mex77 Platform — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft — receive session-level technical data (such as anonymous player identifiers and game round results) necessary to render their games and settle outcomes. These providers do not receive your full name, KTP number, or financial details.

7.4 Fraud Prevention and Security Services

mex77 uses specialist fraud detection and cybersecurity providers to monitor for suspicious activity, unauthorised login attempts, and patterns consistent with money laundering or bonus abuse. These providers receive technical and transaction data under strict confidentiality agreements.

7.5 Regulatory and Law Enforcement Authorities

mex77 will disclose personal data to competent authorities where required to do so by a valid court order, regulatory directive, or lawful law enforcement request. We will notify affected Members of such disclosures to the extent permitted by applicable law.

7.6 Corporate Transactions

In the event of a merger, acquisition, restructuring, or sale of all or part of the mex77 business, Member data may be transferred to the acquiring entity as part of that transaction, subject to equivalent data protection commitments being maintained by the acquirer.

Clause 8

International Data Transfers

mex77 operates as an internationally licensed platform, and some of the third-party service providers we engage may process personal data in jurisdictions outside Indonesia. Where such international transfers occur, mex77 takes steps to ensure that appropriate safeguards are in place to protect your data, including:

  • Transferring data only to countries or organisations that provide an adequate level of data protection as recognised by applicable international standards.
  • Implementing standard contractual clauses or equivalent data transfer mechanisms with recipients in jurisdictions that do not provide an equivalent level of protection.
  • Conducting due diligence on all third-party processors to verify their technical and organisational security measures prior to engagement.
Clause 9

Data Retention

mex77 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, including for satisfying any legal, regulatory, accounting, or reporting obligations. The following indicative retention periods apply:

Data Category Retention Period Rationale
Account and identity data Duration of account + 5 years post-closure AML regulatory requirements and dispute resolution
Financial transaction records 7 years from transaction date Financial record-keeping and tax compliance obligations
KYC documents Duration of account + 5 years post-closure AML compliance and identity fraud prevention
Technical / session logs 12 months from collection date Security monitoring and fraud investigation
Marketing consent records Until consent is withdrawn + 3 years thereafter Evidence of lawful marketing basis
Responsible gaming records Duration of account + 5 years post-closure Member welfare and regulatory compliance
Support correspondence 3 years from last interaction Dispute resolution and quality assurance

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with an identifiable individual. Anonymised, aggregated data may be retained indefinitely for statistical and analytical purposes.

Clause 10

Security Measures

mex77 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security programme includes, but is not limited to, the following controls:

  • 256-bit SSL/TLS encryption: All data transmitted between your browser or device and the mex77 Platform is encrypted in transit using industry-standard 256-bit SSL/TLS protocols. Our SSL certificate is maintained and renewed on a continuous basis.
  • Password hashing: Member passwords are never stored in plain text. They are processed through a one-way cryptographic hashing algorithm (bcrypt or equivalent) with a unique salt per account, making them computationally infeasible to reverse.
  • Two-factor authentication (2FA): Optional 2FA is available to all Members via authenticator app or SMS. We strongly recommend enabling 2FA on your mex77 Account to add a second layer of protection beyond your password.
  • Access controls: Access to personal data within mex77's internal systems is restricted on a strict need-to-know basis. Staff with access to Member data are subject to confidentiality obligations and regular security training.
  • Automated fraud monitoring: Our security systems continuously monitor login patterns, transaction behaviour, and device fingerprints for anomalies that may indicate account takeover, identity fraud, or financial crime.
  • Data minimisation: mex77 collects only the minimum personal data necessary for each specific processing purpose. Data that is no longer required is deleted or anonymised in accordance with the retention schedule in Clause 9.
  • Vendor security due diligence: All third-party processors are subject to security assessments before onboarding and periodic reviews thereafter. Contractual security requirements are embedded in all data processing agreements.
Clause 11

Your Data Rights

As a mex77 Member, you have the following rights in relation to your personal data. These rights are subject to certain conditions and limitations as prescribed by applicable law. To exercise any of these rights, please contact us using the details in Clause 15.

Right of Access Request a copy of all personal data we hold about you. We will provide this within 30 days of a verified request.
Right to Rectification Request correction of inaccurate or incomplete personal data. Update basic contact details directly via your Account settings.
Right to Erasure Request deletion of your personal data where it is no longer necessary for the purposes collected, subject to our legal retention obligations.
Right to Restrict Processing Request that we limit how we use your data in specific circumstances, such as while the accuracy of data is being contested.
Right to Data Portability Receive your personal data in a structured, commonly used, machine-readable format and transmit it to another controller where technically feasible.
Right to Object Object to processing based on legitimate interests (including profiling) or direct marketing. Marketing objections take effect immediately.
Right to Withdraw Consent Where processing is based on consent (e.g., marketing), withdraw that consent at any time without affecting the lawfulness of prior processing.
Right to Lodge a Complaint Lodge a complaint with the relevant supervisory authority in your jurisdiction if you believe your data rights have been infringed.

We will respond to all data rights requests within 30 calendar days of receipt. Where a request is complex or we receive a high volume of requests, we may extend this period by a further 60 days, in which case we will inform you of the extension and the reasons for it within the initial 30-day window.

Clause 12

Cookies & Tracking Technologies

mex77 uses cookies and similar tracking technologies on the Platform to enhance your experience, maintain session security, and gather analytics data. The following categories of cookies are deployed:

Cookie Type Purpose Duration
Strictly Necessary Maintain your login session, protect against cross-site request forgery (CSRF), and enable core Platform functionality. Cannot be disabled. Session / up to 24 hours
Functional Remember your language preferences, display settings, and responsible gaming tool configurations between sessions. Up to 12 months
Analytical Collect anonymised usage data (page views, session duration, feature engagement) to help us understand how Members use the Platform and identify areas for improvement. Up to 24 months
Security / Fraud Prevention Device fingerprinting and risk-scoring cookies used by our fraud detection systems to identify suspicious login patterns and prevent account takeover. Up to 12 months

You can manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will prevent you from logging into your mex77 Account and using core Platform features. For detailed instructions on managing cookies in your specific browser, please refer to your browser's help documentation.

Clause 13

Minors

mex77 employs age verification controls as part of the KYC process to prevent underage access. If you are a parent or guardian and believe that a minor has created a mex77 Account using false information, please contact our support team immediately so that we can investigate and take appropriate action.

Clause 14

Changes to This Policy

mex77 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the services we offer. The date of the most recent revision is displayed at the top of this page.

Where changes are material — for example, where we introduce a new purpose for processing your personal data or share data with a new category of third party — we will notify you in advance by email to your registered address and/or via a prominent notice on the Platform. Your continued use of the Platform following such notification constitutes your acceptance of the revised policy.

We encourage you to review this Privacy Policy periodically to stay informed about how mex77 protects your information. If you do not agree with any changes, you may close your Account in accordance with Clause 11.2 of the mex77 Terms & Conditions.

Clause 15

Contact

For all data protection enquiries, rights requests, or privacy-related complaints, please reach our dedicated privacy team through the following channels:

  • Email: support@mex77.bet — mark the subject line "Privacy Enquiry" for priority routing. We aim to respond to all privacy-related emails within 5 business days.
  • Live Chat: Available 24/7 directly on the mex77 Platform. Indonesian-speaking agents are on duty at all hours covering WIB, WITA, and WIT time zones.
  • WhatsApp: +62 811 0077 777 — for urgent account security issues, our WhatsApp line offers the fastest response time around the clock.

If you are not satisfied with our response to a data rights request or privacy complaint, you have the right to escalate the matter to the relevant data protection supervisory authority in your jurisdiction.

Your Privacy at mex77

Six Core Privacy Commitments We Make to Every Member

A plain-English summary of the six most important data protection principles that govern how mex77 handles your personal information every day.

256-Bit Encryption on Every Session

Every connection between your device and the mex77 Platform is protected by 256-bit SSL/TLS encryption — the same standard used by major international banks. Your login credentials, financial data, and personal details are never transmitted in plain text.

We Never Sell Your Data

mex77 does not sell, rent, or trade your personal data to unaffiliated third parties for marketing purposes — ever. Data sharing is limited strictly to the service providers needed to operate the Platform: payment processors, KYC providers, and fraud prevention systems.

Full Control Over Your Data

You hold eight distinct data rights — access, rectification, erasure, restriction, portability, objection, consent withdrawal, and the right to complain. Submit a request via live chat or email and receive a response within 30 days. No bureaucratic runaround.

Clear Retention Schedules

We keep your data only as long as legally required or operationally necessary. Account and KYC records are held for five years after account closure to satisfy AML obligations. Session logs are purged after 12 months. When retention periods expire, data is securely deleted or anonymised.

Strict 21+ Age Enforcement

mex77 enforces a mandatory 21+ age policy backed by KYC identity verification on every new account. We do not knowingly collect or retain data from individuals under 21. Any account found to belong to a minor is closed and its data deleted immediately upon discovery.

24/7 Indonesian-Speaking Support

Our privacy and support team is available around the clock, with Indonesian-speaking agents on duty at all hours covering WIB, WITA, and WIT time zones. Reach us via live chat on the Platform, WhatsApp, or email for any privacy concern — no matter how small.

Ready to Play?

Experience mex77 — Trusted, Secure & Built for Indonesian Players

Now that you understand how mex77 protects your privacy, explore everything the Platform has to offer — from world-class sportsbook markets and premium slots to live casino tables and togel. Your data is safe with us.

21+ Only. Please gamble responsibly. If you need help, visit our Responsible Gaming page.