Privacy Policy
7jitu

7jitu ("we", "us", "our") is the operator of the online gaming platform accessible at https://7jitu.net. We provide sports betting, live casino games, slot games, togel (Indonesia's traditional numbers lottery), poker tournaments, keno, and related gaming entertainment services to registered members.

For the purposes of this Privacy Policy, 7jitu is the data controller — meaning we determine the purposes and means by which your personal data is processed. Our primary audience is adult players based in Indonesia, particularly those in major cities including Jakarta, Surabaya, Bandung, Medan, Bali, Yogyakarta, Semarang, Makassar, and Palembang, though the platform is also accessible internationally where not restricted by local law.

If you have any questions about this Privacy Policy or about how 7jitu processes your personal data, please contact us at [email protected]. We are available 24 hours a day, 7 days a week, including all Indonesian public holidays.

7jitu collects personal data through several channels: directly from you when you register an account or interact with the platform; automatically as you browse and use the platform; and from third parties such as payment processors and identity verification providers. The categories of personal data we collect are set out in the table below.

7jitu uses your personal data only for the specific, legitimate purposes described below. We do not use your data in ways that are incompatible with the purpose for which it was originally collected.

• Account Registration & Management. To create and maintain your 7jitu account, authenticate your identity on each login, and ensure the accuracy of your account information over time.
• KYC Verification & Compliance. To verify your identity, confirm your age (21+), screen against sanctions and watchlists, and fulfil our obligations under applicable anti-money-laundering (AML) and counter-terrorism financing (CTF) regulations.
• Processing Transactions. To process deposits and withdrawals via local Indonesian payment methods including BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, and LinkAja; to detect and prevent fraudulent or suspicious transactions; and to maintain accurate financial records.
• Providing Gaming Services. To deliver the games and betting markets you request, settle bets and tournaments accurately, apply bonuses and promotions, and personalise your platform experience based on your gaming preferences.
• Responsible Gaming. To monitor your gaming behaviour for indicators of problem gambling, enforce self-imposed limits and exclusions, and provide proactive responsible gaming interventions where appropriate. This processing is carried out in your vital interest and as required by our operating obligations.
• Customer Support. To respond to your enquiries, resolve disputes, and improve the quality of our support services. All support communications are retained for a defined period as described in Section 8.
• Security & Fraud Prevention. To detect, investigate, and prevent unauthorised access, cheating, collusion, bonus abuse, and other forms of fraudulent or prohibited conduct on the platform.
• Platform Improvement. To analyse usage patterns, diagnose technical issues, test new features, and improve the overall performance and user experience of the 7jitu platform.
• Marketing Communications. To send you promotional offers, bonus notifications, and gaming updates by email or in-platform notification — but only where you have given your explicit consent. You may opt out at any time.
• Legal Compliance & Enforcement. To comply with applicable laws and regulations, respond to lawful requests from authorities, enforce our Terms & Conditions, and protect the legal rights and interests of 7jitu and our members.

Where international data protection principles require us to identify a legal basis for processing personal data, we rely on the following grounds:

• Contract Performance. Processing your identity, contact, financial, and gaming activity data is necessary to fulfil our contractual obligations to you under the 7jitu Terms & Conditions — including creating your account, processing your transactions, and delivering gaming services.
• Legal Obligation. Processing for KYC verification, AML/CTF screening, record-keeping, and responding to lawful authority requests is necessary for compliance with applicable legal obligations.
• Legitimate Interests. Processing for fraud prevention, security monitoring, platform improvement, and responsible gaming monitoring is carried out on the basis of 7jitu's legitimate interests, provided those interests are not overridden by your fundamental rights and freedoms.
• Consent. Processing for marketing communications and non-essential cookies is based on your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.
• Vital Interests. In exceptional circumstances, we may process personal data to protect the vital interests of a player, for example where a player discloses a risk of self-harm in the context of a responsible gaming communication.

7jitu uses cookies and similar tracking technologies (including local storage and session tokens) to operate the platform, remember your preferences, maintain your logged-in session, and gather anonymised analytics data. The categories of cookies we use are as follows:

Most web browsers allow you to control cookie settings through the browser menu. Disabling strictly necessary cookies will impair or prevent your ability to use the 7jitu platform. For all other cookie categories, disabling them will not prevent you from accessing the platform but may reduce the quality of your experience.

7jitu does not sell, rent, or trade your personal data. We share your data only in the following limited and controlled circumstances:

• Payment Processors. We share financial data with Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) solely to process your deposit and withdrawal transactions. These providers act as independent data controllers for their own services.
• Identity Verification Providers. We share identity and document data with third-party KYC and AML screening providers to verify your identity and screen against regulatory watchlists. These providers are bound by strict confidentiality obligations and process data only as instructed by 7jitu.
• Game Technology Providers. Game studios and live casino operators (including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, and Spribe) receive limited session data necessary to deliver their games within the 7jitu platform. These providers do not receive your full identity or financial data.
• IT Infrastructure & Security Providers. We use trusted cloud hosting, CDN, and cybersecurity providers to operate the platform. These providers process data strictly as our data processors under contractual data processing agreements.
• Legal & Regulatory Authorities. We will disclose personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by applicable law, or where we believe in good faith that such disclosure is necessary to protect the rights, property, or safety of 7jitu, our members, or the public.
• Corporate Transactions. In the event of a merger, acquisition, or sale of all or substantially all of 7jitu's assets, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer and of any material changes to this Privacy Policy that result from it.

As an internationally operated platform serving Indonesian players, some of the personal data 7jitu processes may be transferred to and stored on servers located outside of Indonesia. Where such transfers occur, 7jitu takes appropriate safeguards to ensure that your data receives an equivalent level of protection to that afforded within Indonesia.

Safeguards applied to international transfers include:

• Contractual clauses equivalent to internationally recognised standard contractual clauses (SCCs) in data processing agreements with overseas service providers.
• Transfers only to jurisdictions or processors that maintain adequate data protection standards as assessed by 7jitu's internal privacy review process.
• Technical and organisational measures including encryption at rest and in transit, access controls, and regular security audits applied consistently regardless of where data is stored.

If you would like more information about the specific safeguards applied to international transfers of your personal data, please contact us at [email protected].

7jitu retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal, regulatory, or audit obligations. The following retention schedule applies as a general guide:

When the applicable retention period expires, personal data is securely deleted or anonymised. Anonymised data (which can no longer be linked to an identifiable individual) may be retained indefinitely for statistical and analytical purposes.

As a 7jitu member, you have the following rights with respect to your personal data. To exercise any of these rights, contact us at [email protected] with the subject line "Data Rights Request — [Your Username]". We will respond within 30 calendar days.

Age verification is a mandatory step in the 7jitu KYC process. If 7jitu becomes aware that personal data has been collected from an individual under the age of 21 — whether through a registration slip, a KYC document review, or any other means — we will immediately close the associated account, reverse any transactions, and securely delete all personal data relating to that individual.

If you believe that a minor has registered or is using a 7jitu account, please notify us immediately at [email protected] with the subject line "Underage Account Report". We take all such reports extremely seriously and will act without delay.

7jitu implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, and alteration. These measures include, but are not limited to:

• Encryption: All data in transit is protected by 256-bit SSL/TLS encryption. Sensitive data at rest (including passwords and financial data) is encrypted using industry-standard algorithms.
• Access Controls: Access to personal data is restricted to authorised employees and contractors who require it to perform their duties. Role-based access controls, multi-factor authentication, and detailed access logging are enforced across all internal systems.
• Network Security: The 7jitu platform is protected by firewalls, intrusion detection systems, DDoS mitigation services, and regular vulnerability scanning and penetration testing.
• Password Security: User passwords are stored as salted cryptographic hashes and are never stored or transmitted in plain text. 7jitu's systems are designed so that even internal staff cannot retrieve a user's plain-text password.
• Two-Factor Authentication (2FA): 7jitu strongly recommends that all members enable 2FA on their accounts. 2FA adds a critical second layer of verification that significantly reduces the risk of unauthorised account access.
• Staff Training: All 7jitu employees and contractors who handle personal data receive regular data protection and security awareness training.
• Incident Response: 7jitu maintains a documented incident response plan. In the event of a data security incident, a trained response team will act promptly to contain the breach, assess the impact, and notify affected members as required.

The 7jitu platform integrates third-party game content from studios including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Pocket Games Soft (PGSoft ). These third-party game providers operate their own platforms and may have their own privacy practices. When you launch a game within the 7jitu interface, limited session data (such as a session token and your account currency) is passed to the game provider to initialise the game. No additional personal data beyond what is strictly necessary for game delivery is shared.

The 7jitu platform may also integrate third-party payment gateways and identity verification services. When you interact with these services — for example, by initiating a deposit or submitting a KYC document — you are also subject to the privacy policies of those third-party providers. 7jitu is not responsible for the privacy practices of any third-party provider and encourages you to review their respective privacy policies before submitting any personal data directly to them.

Aside from these necessary integrations, 7jitu does not embed third-party advertising networks, social media tracking pixels, or external analytics scripts that share your browsing behaviour with outside parties for advertising purposes.

7jitu may update this Privacy Policy from time to time to reflect changes in our services, our data processing practices, or applicable legal requirements. When we make material changes to this Policy, we will notify you by:

• Posting a prominent notice on the 7jitu platform homepage and login page for at least 30 days before the changes take effect.
• Sending an email notification to the address registered on your account, if you have opted in to platform communications.
• Updating the "Last Updated" date at the top of this page.

Where changes to this Policy require a new consent from you (for example, if we wish to use your data for a purpose not previously disclosed), we will seek that consent explicitly before proceeding with the new processing activity. Continued use of the 7jitu platform after a non-material update takes effect constitutes your acceptance of the revised Privacy Policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or to 7jitu's processing of your personal data, please contact our Data Protection team. We are committed to addressing all privacy enquiries promptly and transparently.

• Email: [email protected]
• Subject Line for Data Rights Requests: "Data Rights Request — [Your Username]"
• Subject Line for Privacy Concerns: "Privacy Enquiry — [Your Username]"
• Subject Line for Underage Account Reports: "Underage Account Report"
• Response Time: We aim to acknowledge all privacy enquiries within 24 hours and to resolve them fully within 30 calendar days.
• Support Hours: 24 hours a day, 7 days a week, including all Indonesian public holidays (Idul Fitri, Idul Adha, Indonesian Independence Day, Nyepi, and others). Native Indonesian-speaking agents are always on shift.

All formal data rights requests and legal privacy notices must be submitted in writing via email to be considered valid. We do not accept verbal privacy requests via live chat for formal data rights purposes; live chat support can, however, help you prepare and submit a written request.