Privacy Policy

Throughout this Privacy Policy, the following terms carry the meanings defined below:

• "Personal Data" means any information relating to an identified or identifiable natural person — including but not limited to a name, identification number, email address, IP address, location data, or any factor specific to the physical, economic, or online identity of that person.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, retrieval, use, disclosure, transfer, erasure, or destruction.
• "Data Controller" means nan777, the entity that determines the purposes and means of processing Personal Data.
• "Data Processor" means any third party that processes Personal Data on behalf of nan777 under contractual obligation.
• "User", "You", "Your" means any individual who registers for or accesses the nan777 Platform.
• "Platform" means the nan777 website at nan777.cam and any associated services, mobile interfaces, or applications.
• "KYC" means Know Your Customer — the identity verification process required for Account withdrawals and compliance purposes.
• "Cookie" means a small text file stored on your device by your web browser when you visit the Platform, used to retain session information and usage preferences.

nan777 acts as the Data Controller for all Personal Data collected through the Platform. As Data Controller, nan777 is responsible for determining how and why your data is processed, and for ensuring that all processing activities meet the standards set out in this Privacy Policy.

For all data protection queries, subject access requests, or complaints, you may contact our dedicated privacy team at the email address listed in Section 16 (Contact Us) of this Policy. All privacy-related correspondence will be acknowledged within 5 business days.

nan777 collects the following categories of Personal Data in the ordinary course of providing its services:

3.1 Identity & Contact Data

• Full legal name as it appears on a government-issued identity document
• Date of birth (required to verify that you are 21 years of age or older)
• Email address and mobile phone number
• Residential address or city of residence (e.g., Jakarta, Surabaya, Bandung, Bali)

3.2 Identity Verification (KYC) Data

• Copy of government-issued photo ID: Indonesian National Identity Card (KTP), passport, or driving licence (SIM)
• Selfie photograph or video confirmation where required for enhanced verification
• Proof of payment method ownership (e.g., screenshot of bank account or digital wallet registered in your name)

3.3 Financial & Transaction Data

• Deposit and withdrawal history, including transaction amounts in IDR and timestamps
• Payment method details (bank name — BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, etc. — or digital wallet identifier for OVO, DANA, GoPay, ShopeePay, or LinkAja)
• Account balance history and bonus transaction records

3.4 Gaming & Betting Activity Data

• Betting history across all product verticals (sports, live casino, togel, slots, etc.)
• Game session duration, wagering volume, and win/loss records
• Responsible gaming settings you have applied (deposit limits, self-exclusion status, cool-off periods)

3.5 Technical & Usage Data

• IP address and inferred geographic location (city or region level)
• Device type, operating system, and browser version
• Pages visited on the Platform, click paths, time on page, and session duration
• Referral source (how you arrived at the Platform)

3.6 Communications Data

• Records of live chat conversations, email correspondence, and any other communications you initiate with our support team
• Customer satisfaction feedback and complaint records

nan777 collects Personal Data through the following channels:

• Direct collection: Information you voluntarily provide when registering an Account, completing KYC verification, making a deposit or withdrawal, contacting support, or updating your Account profile.
• Automated collection: Technical and usage data collected automatically via cookies, web server logs, and analytics tools when you navigate the Platform. See Section 10 (Cookies & Tracking) for full details.
• Third-party sources: Identity and fraud-screening data received from our KYC verification partner providers, used solely to confirm your identity and prevent fraudulent account creation. Payment data received from payment processors (BCA, BRI, OVO, DANA, GoPay, etc.) to verify transaction completion.
• Ongoing platform activity: Betting activity, game-session data, and responsible gaming tool usage generated automatically as you use the Platform's services.

nan777 processes your Personal Data only for the specific, legitimate purposes listed below. We do not process data for purposes that are incompatible with those originally stated at the time of collection.

nan777 relies on one or more of the following legal bases when processing your Personal Data:

• Contractual necessity: Processing required to fulfil our obligations under the Account agreement with you — including KYC verification, payment processing, and delivering the gaming services you have requested.
• Legitimate interests: Processing carried out to pursue nan777's legitimate business interests where those interests are not overridden by your rights — including fraud prevention, platform security, and aggregate analytics. We conduct a balancing assessment before relying on this basis.
• Legal obligation: Processing required to comply with applicable laws and regulations, including anti-money laundering obligations, licensing requirements, and responses to lawful orders from competent authorities.
• Consent: Where we rely on consent — for example, to send you promotional marketing communications — you may withdraw that consent at any time by contacting our support team or adjusting your Account notification settings. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

nan777 does not sell your Personal Data. We share data only with the categories of recipients listed below, and only to the extent necessary for the stated purpose:

7.1 Payment Processors

We share transaction-related data with Indonesian payment providers — including banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata) and digital wallet operators (OVO, DANA, GoPay, ShopeePay, LinkAja) — solely to facilitate deposit and withdrawal processing. These providers act as independent data controllers for their own platform operations and are subject to their own privacy policies.

7.2 KYC and Identity Verification Partners

We share identity document data with third-party KYC verification service providers for the purpose of confirming your identity and age. These providers are contractually bound to process your data solely for verification purposes and to maintain appropriate technical and organisational security measures.

7.3 Game Content Providers

Third-party game studio providers — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft — may receive limited technical session data (such as a pseudonymous player identifier and session token) necessary to deliver their games within the Platform environment. These studios do not receive your full identity or financial data.

7.4 Fraud Prevention and Security Services

We may share data with specialist fraud detection and cybersecurity service providers for the purpose of protecting the Platform against fraudulent activity, multi-accounting, and financial crime. All such providers operate under strict data processing agreements with nan777.

7.5 Regulatory and Law Enforcement Bodies

Where required by applicable law, a court order, or a legitimate request from a competent regulatory or law enforcement authority, nan777 may disclose Personal Data to the relevant body. We will, where legally permitted, notify you of such a disclosure.

7.6 Corporate Transactions

In the event of a merger, acquisition, restructuring, or sale of assets involving nan777, Personal Data held by nan777 may be transferred to the relevant successor entity. You will be notified of any such transfer and any material changes to this Privacy Policy that result from it.

nan777 operates internationally and may transfer your Personal Data to servers or service providers located outside of Indonesia. Where such transfers occur, nan777 takes appropriate steps to ensure that your data receives a level of protection equivalent to that provided under internationally recognised privacy frameworks.

Protective measures we employ for international transfers include:

• Contractual data processing agreements with all third-party processors that impose obligations equivalent to internationally recognised data protection standards.
• Technical security measures — including encryption in transit and at rest — applied uniformly regardless of where data is stored or processed.
• Regular assessment of third-party processor compliance with agreed data protection obligations.

By creating an Account and using the Platform, you acknowledge that your Personal Data may be transferred to and processed in jurisdictions outside Indonesia, subject to the safeguards described above.

nan777 retains your Personal Data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following retention guidelines:

Upon expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymised. Where data must be retained beyond these periods due to a specific legal obligation or ongoing dispute, we will retain only the minimum data necessary for that purpose and for no longer than required.

nan777 uses cookies and similar tracking technologies to operate the Platform effectively and to understand how it is used. The following categories of cookies are employed:

10.1 Strictly Necessary Cookies

These cookies are essential for the Platform to function. They enable core features such as user authentication, session management, and security functions. You cannot opt out of strictly necessary cookies while using the Platform, as the service cannot be delivered without them.

10.2 Functional Cookies

Functional cookies remember your preferences — such as your preferred language setting or your last-visited game category — to provide a more personalised experience when you return to the Platform. These cookies do not track your activity across other websites.

10.3 Analytics Cookies

We use analytics cookies to collect aggregated, anonymised data about how Users interact with the Platform — including which pages are visited most frequently, average session duration, and common navigation paths. This data is used solely to improve Platform performance and user experience. nan777 does not use third-party advertising networks or cross-site behavioural tracking cookies.

10.4 Managing Your Cookie Preferences

You may adjust your browser settings to refuse or delete cookies at any time. Please note that disabling certain cookies may impair Platform functionality — in particular, disabling strictly necessary cookies will prevent you from logging in or placing bets. Detailed instructions for managing cookies are available in the help documentation of your browser (Chrome, Firefox, Safari, Edge, etc.).

nan777 implements a comprehensive set of technical and organisational security measures to protect your Personal Data against unauthorised access, disclosure, alteration, or destruction:

• TLS/SSL Encryption: All data in transit between your browser and nan777's servers is protected by Transport Layer Security (TLS 1.2 or higher), indicated by the padlock icon in your browser's address bar.
• AES-256 Encryption at Rest: Sensitive data fields — including identity documents, financial records, and KYC files — are encrypted at rest using AES-256, the same standard used by global financial institutions.
• Access Controls: Access to Personal Data is restricted on a strict need-to-know basis. All staff with access to Personal Data undergo background screening and are bound by confidentiality obligations.
• Two-Factor Authentication: nan777 strongly encourages — and in some cases requires — the use of two-factor authentication (2FA) for Account login to protect against unauthorised access.
• Intrusion Detection and Monitoring: Our infrastructure is monitored around the clock for anomalous activity, potential security incidents, and unauthorised access attempts.
• Regular Security Audits: nan777 conducts periodic internal and third-party security audits to identify and remediate vulnerabilities in our systems and processes.

As a User of the Platform, you hold the following rights in respect of your Personal Data. To exercise any of these rights, contact our privacy team at the address in Section 16. We will respond within 30 days of receiving a valid request.

• Right of Access: You have the right to request a copy of the Personal Data nan777 holds about you, along with information about how it is processed.
• Right to Rectification: If any Personal Data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Minor profile updates (email address, phone number) can be made directly in your Account settings.
• Right to Erasure: You may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, subject to our legal obligations to retain certain records (see Section 9). Note that erasure of Account data will result in permanent Account closure.
• Right to Restrict Processing: You may request that we temporarily restrict the processing of your Personal Data while a rectification or objection request is assessed.
• Right to Data Portability: Where processing is based on your consent or contractual necessity and is carried out by automated means, you have the right to receive your Personal Data in a structured, machine-readable format.
• Right to Object: You have the right to object to processing carried out on the basis of legitimate interests, including profiling. We will assess your objection and cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on consent — for example, for marketing communications — you may withdraw that consent at any time without affecting the lawfulness of prior processing.

The Platform is strictly intended for adults aged 21 years or older. nan777 does not knowingly collect Personal Data from individuals under the age of 21. Age verification is a mandatory step in the KYC process, and any Account found to belong to an underage individual will be immediately closed and all associated funds handled in accordance with applicable regulatory requirements.

If you have reason to believe that a minor has created an Account on the Platform using false information, please notify our support team at [email protected] immediately. We will investigate and take appropriate action, including Account closure and data erasure, without undue delay.

The Platform may contain references to or integrations with third-party services — including game content providers, payment gateways, and analytics tools. nan777 is not responsible for the privacy practices of these third parties, and this Privacy Policy does not extend to their separate data processing activities.

When you interact with a third-party payment provider — such as making a deposit via your BCA or Mandiri bank account, or funding your Account through OVO or DANA — your data is processed by that provider in accordance with their own privacy policy. nan777 strongly encourages you to review the privacy policies of any third-party services you use in connection with your Platform activity.

Game studios integrated into the Platform (including Pragmatic Play, Evolution Gaming, Spribe, and others) receive only the minimum technical data required to deliver their games within the nan777 environment. These studios do not receive your full identity, contact, or payment information.

nan777 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or Platform functionality. The "Last Updated" date at the top of this Policy will be revised accordingly whenever changes are made.

Where changes are material — meaning they significantly affect how we collect, use, or share your Personal Data — we will notify you by email to the address registered on your Account at least 14 days before the revised Policy takes effect. For minor or clarificatory changes, the updated Policy will be posted on this page without direct notification.

Your continued use of the Platform after the effective date of any revised Policy constitutes your acceptance of the updated terms. If you do not agree with the revised Policy, you must stop using the Platform and may request Account closure in accordance with the procedure described in our Terms & Conditions.

For any questions, concerns, or requests relating to this Privacy Policy or to the processing of your Personal Data by nan777, please reach out to our privacy and support team through the following channels:

• Privacy & Data Requests (Email): [email protected] — use subject line "Privacy Request" for data subject access, rectification, erasure, or objection requests.
• General Support (Live Chat): Available 24 hours a day, 7 days a week directly on the Platform. Average response time under 90 seconds. Live chat is staffed by Indonesian-speaking agents for the convenience of players based in Jakarta, Surabaya, Bandung, Bali, and across Indonesia.
• Response Commitment: All privacy-related email enquiries will be acknowledged within 5 business days and fully resolved within 30 calendar days of receipt of a valid, verifiable request.

For issues specifically related to responsible gaming — including self-exclusion requests, deposit limit adjustments, or gambling-related support — please visit our dedicated Responsible Gaming page, where full guidance and direct contact options are available.