Privacy Policy

This Privacy Policy ("Policy") governs the collection, use, storage, and disclosure of personal information by naa777 ("we", "us", "our") in connection with the platform accessible at https://naa777.cam and all associated mobile interfaces and sub-domains (collectively, the "Platform"). By registering an Account, accessing the Platform, or placing any wager, you acknowledge that you have read and understood this Policy and consent to the data practices described herein. If you do not agree, you must discontinue use of the Platform immediately.

1. Definitions

In this Policy, the following terms carry the meanings assigned below:

• "Personal Data" — any information that identifies or could reasonably identify a natural person, including name, national ID number, date of birth, contact details, financial account details, and device identifiers.
• "Processing" — any operation performed on Personal Data, including collection, recording, storage, adaptation, retrieval, consultation, use, disclosure, erasure, or destruction.
• "Data Controller" — naa777, which determines the purposes and means of Processing your Personal Data.
• "Data Processor" — a third party that processes Personal Data on behalf of naa777, under contractual instruction.
• "Player" / "you" / "your" — any individual who accesses the Platform or registers an Account.
• "KYC" — Know Your Customer identity verification, required before withdrawal processing.
• "Cookies" — small text files placed on your device to enable Platform functionality and analytics.

2. Personal Data We Collect

naa777 collects the following categories of Personal Data in the course of providing its services:

We do not collect any special categories of Personal Data (such as health data, religious beliefs, or political opinions) unless explicitly required by a responsible gaming intervention and only with your express consent.

3. How We Collect Your Data

naa777 gathers Personal Data through the following channels:

• Direct interactions: Data you provide when registering an Account, completing KYC verification, making deposits or withdrawal requests, contacting support, or responding to surveys.
• Automated technologies: Cookies, web beacons, server logs, and similar tracking technologies that record how you navigate the Platform.
• Payment providers: Transaction confirmation data received from Indonesian banking partners (BCA, BRI, BNI, Mandiri) and e-wallet services (OVO, DANA, GoPay, ShopeePay, LinkAja) to verify and reconcile payments.
• Identity verification partners: Data returned by third-party KYC and anti-fraud vendors used to validate identity documents during account verification.
• Third-party analytics: Aggregated, anonymised behavioural data from analytics tools used to improve Platform performance and user experience.

4. Purpose of Processing

We process your Personal Data for the following clearly defined purposes:

• Account management: Creating, maintaining, and securing your Account, including password resets and session authentication.
• Service delivery: Processing deposits and withdrawals, settling bets, crediting bonuses, and providing access to all Platform features.
• Identity verification (KYC): Confirming your identity and age (21+) in compliance with our anti-money-laundering and fraud-prevention obligations.
• Regulatory compliance: Meeting obligations under applicable international gaming, anti-money-laundering (AML), and financial crime prevention regulations.
• Fraud detection and security: Monitoring transactions and gameplay patterns to detect and prevent fraudulent activity, account takeovers, and prohibited conduct.
• Customer support: Responding to your queries, complaints, and dispute submissions in a timely and informed manner.
• Responsible gaming: Monitoring for signs of problem gambling behaviour and proactively offering support tools such as deposit limits and self-exclusion.
• Marketing communications: Sending you promotions, bonuses, and platform updates where you have opted in to receive such communications. You may withdraw consent at any time.
• Platform improvement: Analysing aggregated usage data to optimise the Platform's design, performance, and game selection.

5. Legal Basis for Processing

naa777 processes your Personal Data under the following legal grounds:

• Contractual necessity: Processing required to fulfil our obligations under the Terms and Conditions you accepted at registration, including payment processing and account management.
• Legal obligation: Processing mandated by applicable law, including AML regulations, KYC requirements, and regulatory reporting obligations under our international gaming licence.
• Legitimate interests: Processing necessary for our legitimate business interests — fraud prevention, platform security, service improvement — where those interests do not override your privacy rights.
• Consent: Processing based on your explicit opt-in, particularly for marketing communications and optional responsible gaming programmes. Consent may be withdrawn at any time by contacting [email protected].

6. Sharing & Disclosure of Personal Data

naa777 does not sell Personal Data. We share your information only in the following limited circumstances and always under strict contractual safeguards:

• Payment processors: Your banking details are shared with BCA, BRI, BNI, Mandiri, and e-wallet providers solely to process your deposit and withdrawal transactions.
• KYC and fraud-prevention vendors: Identity document data is shared with licensed third-party verification partners to complete the KYC process.
• Game software providers: Anonymised session data may be shared with our game studio partners (such as Pragmatic Play, Evolution Gaming, Microgaming, and Spribe) for game performance monitoring. These providers do not receive personally identifiable information.
• Legal and regulatory authorities: We will disclose Personal Data to law-enforcement agencies, regulatory bodies, financial intelligence units, or courts where required by law or valid legal process.
• Professional advisors: Lawyers, auditors, and compliance consultants may access Personal Data on a need-to-know basis and are bound by strict confidentiality obligations.
• Corporate transactions: In the event of a merger, acquisition, or sale of assets, Personal Data may be transferred to a successor entity, subject to equivalent privacy protections.

7. International Data Transfers

7.1 naa777's Platform infrastructure and some third-party service providers may be located outside of Indonesia. Where Personal Data is transferred internationally, we ensure adequate protections are in place, including:

• Data processing agreements incorporating internationally recognised standard contractual clauses.
• Transfers only to jurisdictions or service providers that maintain data protection standards equivalent to those applied by naa777.
• Encryption of Personal Data in transit using 256-bit SSL/TLS protocols.

7.2 By using the Platform, you acknowledge that your Personal Data may be processed in countries outside Indonesia. We take all reasonable steps to ensure such transfers are conducted securely and that your data receives an equivalent level of protection regardless of where it is processed.

8. Data Retention

8.1 naa777 retains Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulatory obligations. The following retention periods apply as a general guide:

8.2 At the end of the applicable retention period, Personal Data is securely deleted or anonymised so that it can no longer be associated with any identifiable individual. Anonymised, aggregated data may be retained indefinitely for statistical and analytical purposes.

9. Security Measures

9.1 naa777 implements a comprehensive, layered security framework to protect your Personal Data against unauthorised access, accidental loss, alteration, or disclosure. Our measures include:

• Transport security: All data transmitted between your device and the Platform is encrypted using 256-bit SSL/TLS protocols. Our domain enforces HTTPS across all pages and API endpoints.
• Access controls: Personal Data is accessible only to naa777 staff who require it in the course of their specific role. Access is granted on a least-privilege basis and reviewed regularly.
• Database encryption: Sensitive Personal Data fields — including identity document references and financial account numbers — are encrypted at rest in our databases.
• Intrusion detection: Our infrastructure is monitored 24/7 by automated intrusion detection systems. Suspicious activity triggers immediate alerts and incident-response procedures.
• Regular security audits: We conduct periodic penetration testing and independent security assessments to identify and remediate vulnerabilities before they can be exploited.
• Staff training: All naa777 personnel with access to Personal Data receive mandatory data-privacy and security training on an annual basis.

9.2 In the event of a Personal Data breach that poses a risk to your rights and freedoms, naa777 will notify affected Players without undue delay and will take all necessary remediation steps. We maintain a documented incident-response plan for this purpose.

10. Cookies & Tracking Technologies

10.1 naa777 uses cookies and similar technologies to operate the Platform effectively, remember your preferences, and gather anonymised analytics data. The types of cookies we deploy are:

• Strictly necessary cookies: Essential for core Platform functions such as session authentication, login persistence, and secure form handling. These cannot be disabled without affecting Platform usability.
• Functional cookies: Remember your preferences such as language settings, odds format, and display configuration to provide a more personalised experience.
• Analytics cookies: Collect anonymised data about how Players navigate the Platform — pages visited, session duration, click paths — to help us improve Platform design and performance. This data is aggregated and does not identify individual users.
• Security cookies: Help detect and prevent fraudulent login attempts, bot traffic, and other malicious activity targeting your Account.

10.2 naa777 does not deploy third-party advertising or retargeting cookies that track your activity across external websites for commercial advertising purposes.

10.3 You may configure your browser to block or delete cookies at any time. Please note that disabling strictly necessary cookies may impair your ability to log in or use certain Platform features. Analytics and functional cookies can be disabled without affecting core Platform access.

11. Your Data Protection Rights

Subject to applicable law and certain regulatory exceptions (for example, AML retention obligations), you hold the following rights with respect to your Personal Data held by naa777:

• Right of Access: You may request a copy of the Personal Data naa777 holds about you, along with information about how it is being processed.
• Right to Rectification: If any of your Personal Data is inaccurate or incomplete, you have the right to request that it be corrected without undue delay.
• Right to Erasure: You may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, subject to our overriding legal retention obligations.
• Right to Restriction: You may ask us to restrict processing of your Personal Data in certain circumstances — for example, while the accuracy of data is being contested.
• Right to Data Portability: Where processing is based on your consent or on a contract, you may request that your Personal Data be provided to you in a structured, machine-readable format.
• Right to Object: You may object to processing carried out on the basis of our legitimate interests, including profiling for responsible gaming monitoring.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that took place prior to withdrawal.

To exercise any of the above rights, submit a written request to [email protected] with the subject line "Data Privacy Request", including your full name and registered email address. We will respond within 30 days. Complex or multiple requests may take up to 60 days; we will notify you if an extension is needed.

12. Minors

12.1 The naa777 Platform is strictly intended for adults aged 21 years and older. We do not knowingly collect Personal Data from individuals under the age of 21. Registration by a person under 21 is a violation of our Terms and Conditions and will result in immediate Account closure and the return of any deposited funds to the originating payment method.

12.2 If you are a parent or guardian and believe that a minor in your care has accessed or registered on the Platform, please contact us immediately at [email protected]. We will investigate and take prompt corrective action, including deletion of any Personal Data collected from the minor.

12.3 naa777 supports parental control software and encourages guardians to use device-level restrictions to prevent underage access to online gaming platforms.

13. Third-Party Links

13.1 The Platform may, on occasion, reference third-party services such as game studios or payment providers. naa777 is not responsible for the privacy practices, content, or security of any third-party websites or services. We encourage you to review the privacy policy of any third-party service before providing your Personal Data to them.

13.2 The inclusion of any third-party reference on the Platform does not constitute an endorsement of that party's data-handling practices.

14. Amendments to This Policy

14.1 naa777 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or Platform functionality. When material changes are made, we will notify registered Players via email or a prominent on-screen notice at least 7 days before the revised Policy takes effect.

14.2 The effective date displayed at the top of this page indicates when the current version was last updated. Continued use of the Platform after the effective date of any revision constitutes your acceptance of the updated Policy.

14.3 We encourage you to review this Policy periodically. The latest version is always available at https://naa777.cam/privacy-policy.

15. Contact & Data Protection Officer

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way naa777 handles your Personal Data, please reach out through the following channel:

• Email: [email protected]
• Subject line for privacy matters: "Data Privacy Request" or "Privacy Complaint"
• Support hours: 24 hours a day, 7 days a week, including Indonesian public holidays
• Response time: Standard privacy requests within 30 days; urgent security concerns within 24 hours

naa777 takes all privacy complaints seriously. Upon receipt of a complaint, we will acknowledge it within 5 business days and aim to provide a full resolution within 30 days. If you are not satisfied with our response, you may escalate the matter to the relevant data protection authority in your jurisdiction.