nada77 Privacy Policy

Introduction

nada77 ("we", "us", "our") operates the online gaming platform accessible at https://nada77.cam (the "Platform"). As the data controller for personal information provided by or collected from our Members and site visitors, we are responsible for determining how and why that data is processed.

This Privacy Policy applies to all personal data we collect through:

• The nada77 website and any related mobile-optimized interfaces at https://nada77.cam
• Member account registration, KYC verification, and ongoing account management
• Deposit and withdrawal transactions processed via Indonesian banking channels (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon) and e-wallets (OVO, DANA, GoPay, ShopeePay, LinkAja)
• Customer support interactions via live chat, email, and other communication channels
• Marketing and promotional communications you opt into
• Technical data collected automatically when you visit or use the Platform

By registering a nada77 account or continuing to use the Platform after this policy's effective date, you acknowledge that you have read and understood the practices described in this document. If you do not agree with any aspect of this Privacy Policy, please discontinue use of the Platform and contact us to request account closure.

Definitions

The following terms used throughout this Privacy Policy carry the meanings assigned below:

• "Personal Data" means any information that identifies or can reasonably be used to identify a living individual, including name, email address, phone number, national identity number, IP address, and device identifiers.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, analysis, disclosure, transfer, or deletion.
• "Member" means any individual who has registered an account with nada77.
• "Data Controller" means nada77, the entity that determines the purposes and means of processing Personal Data.
• "Data Processor" means a third party that processes Personal Data on nada77's behalf and under nada77's instructions (e.g., KYC verification providers, payment gateways).
• "KYC" means Know Your Customer — the identity and age-verification process mandated by nada77's international licensing obligations.
• "Cookies" means small text files placed on your device by the Platform to store session information and enable certain features.
• "Sensitive Data" means a special category of Personal Data warranting heightened protection, including government-issued identification numbers and financial account details.

Data We Collect

nada77 collects only the data necessary to operate its services safely, legally, and effectively. The categories of Personal Data we collect are set out in the table below:

How We Collect Data

4.1 Directly from You

The majority of Personal Data we hold is provided directly by you through account registration forms, KYC document submission, deposit and withdrawal requests, customer support conversations, and promotional opt-ins. You are always informed at the point of collection what data is required and why.

4.2 Automatically

When you access or use the Platform, our servers and third-party analytics tools automatically record Technical Data including your IP address, browser fingerprint, device specifications, pages visited, time spent on each page, and referring URLs. This data is collected to maintain platform security, analyze usage patterns, and improve the Member experience.

4.3 From Third Parties

In certain circumstances, we receive Personal Data about you from third-party sources, including:

• KYC verification partners: Identity verification services that cross-reference your submitted documents against official databases to confirm authenticity.
• Payment processors: Indonesian banking partners (BCA, BRI, BNI, Mandiri) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) confirm transaction status and may share limited account holder information necessary to process your deposit or withdrawal.
• Fraud detection services: Third-party risk assessment tools that flag unusual account activity patterns, helping us protect both nada77 and our Members from financial crime.
• Analytics providers: Aggregated, anonymized behavioral data from analytics platforms that help us understand how Members navigate and use the Platform.

Purposes of Processing

nada77 processes your Personal Data for the following specific purposes:

• Account creation and management: To register your account, authenticate your identity on login, and maintain accurate account records throughout your membership.
• KYC and regulatory compliance: To verify your age (21+), confirm your identity, and fulfill anti-money laundering (AML) and counter-terrorism financing (CTF) obligations imposed by nada77's international gaming license.
• Transaction processing: To process deposits and withdrawals via your chosen Indonesian bank or e-wallet, reconcile account balances in IDR, and maintain complete transaction records.
• Service delivery: To make available all Platform features, including sports betting markets covering BRI Liga 1, EPL, La Liga, and Champions League; slot games from licensed studios; live dealer tables; and lottery products including togel (Indonesia's traditional numbers lottery).
• Customer support: To respond to your inquiries, investigate disputes, and resolve account issues efficiently through our 24/7 Indonesian-speaking support team.
• Fraud prevention and security: To detect and prevent unauthorized access, account takeovers, bonus abuse, multi-accounting, money laundering, and other prohibited conduct as described in our Terms and Conditions.
• Responsible gaming: To monitor gaming patterns that may indicate problem gambling behavior and to apply any self-imposed limits or exclusions requested by a Member.
• Marketing communications: To send you promotional offers, bonus notifications, and seasonal campaign information relevant to your preferences — only where you have opted in. You may withdraw consent at any time via your account settings.
• Platform improvement: To analyze aggregated usage data, identify technical issues, optimize page performance, and develop new features that enhance the Member experience.
• Legal obligations: To retain records as required by our licensing authority and to cooperate with lawful requests from regulatory or law enforcement bodies.

Legal Basis for Processing

nada77 relies on the following legal bases to process your Personal Data, as recognized under internationally accepted data protection frameworks:

• Contractual necessity: Processing required to perform the contract between nada77 and you as a Member — including account setup, KYC verification, and payment processing. Without this processing, we cannot provide the Services.
• Legal obligation: Processing necessary to comply with our international gaming license conditions, anti-money laundering regulations, and any lawful order from a competent authority.
• Legitimate interests: Processing carried out for nada77's legitimate business interests where those interests are not overridden by your fundamental rights. Examples include fraud detection, platform security monitoring, and aggregated analytics for service improvement.
• Consent: Where we rely on your consent — principally for marketing communications and certain non-essential cookies — you have the right to withdraw that consent at any time without affecting the lawfulness of prior processing.

Data Sharing & Disclosure

nada77 does not sell, rent, or trade your Personal Data. We share data only in the circumstances described below, and only to the minimum extent necessary for each purpose:

7.1 Service Providers (Data Processors)

We engage carefully vetted third-party companies to perform specific functions on our behalf. These processors are contractually bound to process data only on nada77's instructions and to apply security standards no less rigorous than our own. They include:

• KYC and identity verification providers — to validate government-issued identification documents and confirm age eligibility (21+).
• Payment gateways and banking partners — Indonesian bank transfer processors and e-wallet infrastructure providers enabling transactions in IDR.
• Game content providers — studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft receive only the session and game-result data necessary to operate their game software within our Platform.
• Customer support platforms — live chat software providers that host our support conversations. Chat data is stored securely and accessed only by authorized nada77 support agents.
• Fraud detection and cybersecurity services — risk-assessment tools that analyze transaction patterns and access logs to identify potentially fraudulent behavior.
• Email and SMS communication providers — services used to deliver transactional messages (deposit confirmations, withdrawal updates) and, where opted in, promotional communications.

7.2 Regulatory and Legal Disclosure

nada77 may disclose Personal Data to regulatory authorities, law enforcement agencies, courts, or other competent bodies where we are legally required to do so. We will notify you of such disclosures where we are legally permitted to do so.

7.3 Business Transfers

In the event that nada77 undergoes a merger, acquisition, or sale of all or a substantial portion of its assets, Member Personal Data may be transferred to the acquiring entity. You will be notified of any such transfer and of any material change to this Privacy Policy that results from it, with a minimum of 30 days' advance notice.

International Data Transfers

nada77 operates as an international platform. Some of our Data Processors — including game studios and cloud infrastructure providers — may be located outside Indonesia. When Personal Data is transferred internationally, nada77 takes the following steps to ensure it remains protected:

• We engage only processors that operate under recognized data protection frameworks or that have signed Standard Contractual Clauses (SCCs) committing them to equivalent protection standards.
• All data in transit between your device and nada77's servers is encrypted using 256-bit SSL/TLS protocols, regardless of the geographic location of the destination server.
• Data at rest is encrypted using AES-256 encryption on all servers that hold Member Personal Data.
• We conduct periodic security reviews of our international Data Processors to verify that appropriate safeguards remain in place.

By using the nada77 Platform, you acknowledge that your data may be transferred to and processed in countries outside Indonesia. We are committed to ensuring that any such transfer affords a level of protection consistent with internationally recognized data protection principles.

Data Retention

nada77 retains Personal Data only for as long as necessary to fulfill the purpose for which it was collected or as required by applicable legal and regulatory obligations. Our standard retention periods are as follows:

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymized so that it can no longer be linked to an identifiable individual. Anonymized, aggregated data may be retained indefinitely for statistical analysis without restriction.

Security Measures

nada77 implements a comprehensive, layered security framework to protect your Personal Data from unauthorized access, disclosure, alteration, and destruction. Our key security measures include:

• 256-bit SSL/TLS encryption: All data transmitted between your browser or device and our servers is encrypted in transit using industry-standard TLS protocols.
• AES-256 data-at-rest encryption: Databases containing Member Personal Data and financial records are encrypted at the storage layer.
• Password hashing: Member passwords are never stored in plain text. We use industry-standard adaptive hashing algorithms (bcrypt) that make brute-force attacks computationally infeasible.
• Access controls: Internal access to Personal Data is strictly limited on a need-to-know basis. Customer support agents, compliance officers, and finance staff each have role-based permissions that restrict access to data relevant only to their specific function.
• Two-factor authentication (2FA): Members are strongly encouraged to enable 2FA on their accounts. nada77 staff with access to Member data are required to use 2FA for all internal system access.
• Regular penetration testing: We commission independent security professionals to conduct periodic penetration tests and vulnerability assessments of the Platform's infrastructure.
• Incident response plan: In the event of a confirmed data breach affecting Member Personal Data, nada77 will notify affected Members and relevant authorities within 72 hours of becoming aware of the breach, in line with internationally accepted breach notification standards.

Cookies & Tracking Technologies

nada77 uses cookies and similar tracking technologies to operate the Platform, remember your preferences, analyze usage, and deliver relevant promotional content where you have consented to receive it.

11.1 Types of Cookies We Use

• Strictly necessary cookies: Essential for the Platform to function. These include session cookies that keep you logged in and security cookies that protect against cross-site request forgery. These cannot be disabled without breaking core site functionality.
• Functional cookies: Remember your preferences such as language settings and last-used payment method, providing a more personalized experience on return visits.
• Analytics cookies: Collect anonymized, aggregated data about how Members navigate the Platform — which pages are visited most, how long sessions last, and which features are used. This information helps us improve the Member experience. We use privacy-respecting analytics configurations that do not share identifiable data with third-party advertising networks.
• Marketing cookies: Used only where you have explicitly opted in to receive promotional communications. These cookies help us understand whether you opened a promotional email and navigated to the Platform as a result, allowing us to measure campaign effectiveness.

11.2 Managing Cookies

You may control non-essential cookies through your browser settings. Most modern browsers allow you to block or delete cookies at any time. Please note that disabling strictly necessary cookies will prevent you from logging in or using core Platform features. Detailed instructions for managing cookies in popular browsers (Chrome, Firefox, Safari, Edge) are available in each browser's help documentation.

Your Data Rights

As a Member of nada77, you have the following rights with respect to your Personal Data. To exercise any of these rights, please contact us using the details in Clause 15. We will respond to all verified requests within 30 days.

• Right of access: You may request a copy of all Personal Data we hold about you, including the categories of data, the purposes for which it is processed, and the third parties with whom it has been shared.
• Right to rectification: If any Personal Data we hold is inaccurate or incomplete, you have the right to request that we correct or update it without undue delay.
• Right to erasure ("right to be forgotten"): You may request that we delete your Personal Data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where processing is unlawful. This right is subject to our legal obligation to retain certain records (see Clause 9).
• Right to restrict processing: You may ask us to suspend processing of your data in certain circumstances — for example, while a dispute about data accuracy is being resolved.
• Right to data portability: Where processing is based on your consent or on contractual necessity, you may request that we provide your Personal Data in a structured, machine-readable format so that you can transfer it to another service provider.
• Right to object: You may object to processing based on nada77's legitimate interests, including profiling for direct marketing purposes. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing emails), you may withdraw that consent at any time via your account notification settings or by contacting support. Withdrawal does not affect the lawfulness of processing that occurred prior to withdrawal.

Minors & Age Policy

nada77 strictly prohibits access to its Platform by any person under the age of 21. This age threshold is set in recognition of Indonesian cultural standards and the responsible gaming obligations that nada77 upholds as an international operator serving the Indonesian market.

We do not knowingly collect Personal Data from individuals under the age of 21. Age verification is a mandatory step of the KYC process, and accounts found to belong to individuals under 21 will be immediately suspended, all associated data preserved only to the extent required for regulatory purposes, and the matter escalated to our compliance team.

If you are a parent or guardian and believe that a minor in your care has registered an account with nada77, please contact us immediately at [email protected]. We will investigate the matter and take appropriate action, including closure of the account and deletion of the minor's data to the extent permitted by our regulatory obligations.

Policy Amendments

nada77 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, services, or applicable legal requirements. When we make material changes to this policy, we will notify all active Members via the email address registered to their account at least seven (7) days before the updated policy takes effect.

For minor, non-material changes — such as clarifications of existing language or corrections of typographical errors — the revised policy will be published on this page with an updated effective date, without individual notification. We therefore recommend that Members review this Privacy Policy periodically to remain informed of how their data is handled.

Your continued use of the Platform after the effective date of any amendment constitutes acceptance of the revised Privacy Policy. If you do not accept the updated terms, you must cease using the Platform and request account closure before the new policy takes effect.

Contact & Complaints

If you have questions about this Privacy Policy, wish to exercise a data right, or want to raise a concern about how nada77 handles your Personal Data, please contact our Data Protection team through the following channel:

• Email: [email protected] — please include "Privacy Request" or "Data Rights" in the subject line so your message is routed to the appropriate team.
• Response time: We aim to acknowledge all privacy-related inquiries within 24 hours (WIB, UTC+7) and to provide a substantive response within 30 calendar days. Complex requests may require up to 60 days; in such cases we will notify you of the extended timeline.
• Live chat: For general privacy questions, our 24/7 live chat support team can provide guidance and escalate formal requests to the Data Protection team on your behalf.

If you are dissatisfied with our response to a privacy concern, you have the right to escalate your complaint to the data protection authority in your jurisdiction or to the regulatory body that oversees nada77's international gaming license. We commit to cooperating fully with any such regulatory inquiry.