Privacy Policy

In this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information that identifies or can reasonably be used to identify a natural person, directly or indirectly. This includes name, date of birth, email address, phone number, residential address, government ID number, IP address, and payment account details.
• "Processing" means any operation performed on Personal Data, including collection, recording, organization, storage, adaptation, retrieval, use, disclosure, or deletion.
• "Controller" means dana77, which determines the purposes and means of processing your Personal Data.
• "Processor" means any third party that processes Personal Data on behalf of dana77 under a data processing agreement (e.g., payment gateways, cloud hosting providers).
• "Consent" means a freely given, specific, informed, and unambiguous indication of your agreement to the processing of your Personal Data for a stated purpose.
• "KYC" means Know Your Customer — identity and age verification documents submitted by Players.
• "Cookie" means a small data file stored on your device by your browser when you access the Platform.
• "Platform" means the dana77 website at https://dana77.cam and all associated pages and services.

This Privacy Policy applies to all Personal Data collected by dana77 in connection with:

• Registration and use of a dana77 Player Account.
• Any deposit, withdrawal, or financial transaction processed through the Platform.
• Communications between you and dana77's customer support team via live chat or email.
• Your participation in any promotional activity, tournament, or loyalty program offered by dana77.
• Your browsing activity on the Platform, including pages visited, games played, and features used.

This Policy does not apply to third-party websites, services, or applications that may be linked to or from the Platform. We encourage you to review the privacy policies of any third parties you interact with separately.

dana77 collects the following categories of Personal Data, depending on how you interact with the Platform:

We collect Personal Data through the following means:

1. Directly from You: When you complete the registration form, submit KYC documents, initiate a deposit or withdrawal, contact our support team, or participate in a promotion, you voluntarily provide Personal Data to us.
2. Automatically: When you browse the Platform, our servers automatically record Technical Data and Usage Data via server logs, cookies, and similar tracking technologies. This data is collected whether or not you are logged in to your Account.
3. From Payment Processors: When you transact via a local bank (BCA, BRI, BNI, Mandiri) or an e-wallet (OVO, DANA, GoPay), the payment processor may share transaction confirmation details with us, including the sender account name, account number, and transaction reference. We do not receive your full banking credentials or passwords.
4. From Fraud Prevention Partners: We may receive data from third-party identity verification and fraud detection services to help us assess the legitimacy of Account registrations and transactions.
5. From Publicly Available Sources: In limited circumstances related to fraud investigation or compliance, we may cross-reference information from publicly available records.

dana77 processes your Personal Data for the following specific, legitimate purposes:

• Account Administration: To create, maintain, and manage your Player Account, including verifying your identity, processing login requests, and applying account settings.
• Transaction Processing: To process deposits and withdrawals in IDR through your chosen payment channel (BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, or LinkAja), reconcile transaction records, and resolve payment disputes.
• KYC & Age Verification: To verify that you are at least 21 years of age and to satisfy our obligations under applicable identity verification requirements, in accordance with our Terms & Conditions.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, money laundering, bonus abuse, collusion, and unauthorized account access.
• Customer Support: To respond to your inquiries, resolve complaints, and provide technical assistance via live chat or email.
• Platform Improvement: To analyze Usage Data in aggregate to identify trends, improve game offerings, optimize page performance, and enhance the overall user experience on the Platform.
• Responsible Gaming: To monitor gaming behavior patterns that may indicate problem gambling and, where appropriate, to proactively offer responsible gaming tools or alerts in accordance with our Responsible Gaming policy.
• Marketing Communications: To send you promotional offers, bonus notifications, tournament announcements, and seasonal promotions (such as Idul Fitri or Independence Day specials) — but only where you have provided explicit consent to receive such communications.
• Legal Compliance: To comply with applicable laws, regulations, court orders, or lawful requests from competent authorities.

For each processing purpose described in Clause 5, we rely on one or more of the following legal bases:

• Contractual Necessity: Processing that is required to perform our contract with you — specifically, to operate your Account, process transactions, and deliver gaming services. Without this processing, we cannot provide the Platform to you.
• Legal Obligation: Processing required to comply with applicable laws, including KYC requirements, anti-money laundering regulations, and responses to lawful authority requests.
• Legitimate Interests: Processing carried out for our legitimate business interests, such as fraud detection, platform security, and aggregate analytics — provided these interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing for marketing communications, optional personalization features, and non-essential cookies — carried out only where you have provided clear, affirmative consent, which you may withdraw at any time without affecting the lawfulness of prior processing.

dana77 does not sell, rent, or trade your Personal Data. We share your data only in the following limited and controlled circumstances:

1. Payment Processors: We share the minimum necessary transaction data with payment processing partners (local bank gateways, OVO, DANA, GoPay, ShopeePay, LinkAja) to execute your deposit and withdrawal instructions. These processors are contractually bound to handle your data securely and to use it only for payment processing purposes.
2. Identity Verification Providers: KYC documents may be shared with third-party identity verification services that assist us in confirming your identity and age. These providers operate under strict data processing agreements.
3. Fraud Detection & Security Services: Technical Data and account activity signals may be shared with fraud prevention platforms to detect and block suspicious activity on the Platform.
4. Cloud Infrastructure Providers: Personal Data is stored on secure cloud servers. Our hosting providers are contractually prohibited from accessing or using your data for any purpose beyond infrastructure provision.
5. Legal and Regulatory Authorities: We may disclose Personal Data to law enforcement agencies, regulators, or courts where required by law, a court order, or where we have a good-faith belief that disclosure is necessary to protect the rights, property, or safety of the Company, its Players, or the public.
6. Business Transfers: In the event of a merger, acquisition, or sale of all or a substantial portion of the Company's assets, Personal Data may be transferred to the acquiring entity, provided that the acquiring entity agrees to honor this Privacy Policy or provide equivalent protections.

We retain your Personal Data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable law. The following retention periods apply as general guidelines:

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymized so that it can no longer be associated with any identifiable individual.

dana77 takes the security of your Personal Data seriously. We implement a layered security architecture that includes both technical and organizational measures:

• Encryption in Transit: All data exchanged between your browser and our servers is encrypted using TLS 1.2 or higher with 256-bit AES encryption — the same standard deployed by major Indonesian banks for their internet banking portals.
• Encryption at Rest: Sensitive data fields (including KYC documents and financial account details) are encrypted at rest in our database using AES-256 encryption.
• Access Controls: Access to Personal Data within the Company is restricted on a strict need-to-know basis. Staff members with access to sensitive data undergo background checks and are bound by confidentiality obligations.
• Two-Factor Authentication (2FA): Internal systems that store or process Personal Data require multi-factor authentication for staff access. Players are also encouraged to enable 2FA on their own Accounts for enhanced security.
• Penetration Testing: Our Platform undergoes periodic third-party penetration testing to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: We maintain a documented data breach response procedure. In the event of a confirmed breach that poses a risk to your rights and freedoms, we will notify affected Players and relevant authorities within 72 hours of becoming aware of the incident.

dana77 uses cookies and similar tracking technologies to operate and improve the Platform. The following types of cookies may be placed on your device:

• Strictly Necessary Cookies: These cookies are essential for the Platform to function correctly. They manage your login session, maintain your Player Balance display, and enable core security features. These cookies cannot be disabled without breaking Platform functionality.
• Performance Cookies: These cookies collect anonymized data about how Players use the Platform — which pages are visited most frequently, how long sessions last, and where errors occur. This data is used to improve Platform performance and user experience.
• Functional Cookies: These cookies remember your preferences, such as your preferred language display and notification settings, so you do not need to re-configure them on every visit.
• Analytics Cookies: We use analytics tools to understand aggregate Player behavior and improve our gaming product lineup — including which sports markets, slot gacor (high-payout slot) titles, and live casino offerings are most popular among Indonesian Players.

You can manage cookie preferences through your browser settings. Note that disabling certain cookies may impair the functionality of the Platform. For more detail on specific cookies in use, please contact our support team.

As a Player on the dana77 Platform, you have the following rights with respect to your Personal Data. To exercise any of these rights, please contact us via the details in Clause 15.

1. Right of Access: You have the right to request a copy of all Personal Data we hold about you, together with information about how it is being processed.
2. Right to Rectification: You have the right to request correction of any inaccurate or incomplete Personal Data we hold about you. For basic Account details, you can update these directly through Account settings or by contacting support.
3. Right to Erasure ("Right to Be Forgotten"): You may request the deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, or where you have withdrawn consent and no other legal basis applies. Note that we may be required to retain certain data for legal or regulatory reasons even after an erasure request.
4. Right to Restriction of Processing: You may request that we restrict processing of your Personal Data in certain circumstances — for example, while we investigate a dispute about accuracy.
5. Right to Data Portability: Where processing is based on consent or contractual necessity and is carried out by automated means, you have the right to receive your Personal Data in a structured, commonly used, machine-readable format.
6. Right to Object: You have the right to object to processing based on legitimate interests, including profiling. You also have an unconditional right to object to processing of your data for direct marketing purposes at any time.
7. Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

We will respond to all valid rights requests within 30 days of receipt. Where a request is complex or voluminous, we may extend this period by a further 30 days, of which we will notify you.

The dana77 Platform is strictly intended for adults aged 21 years and over. We do not knowingly collect Personal Data from any individual under the age of 21. Our registration process includes an age declaration step, and our KYC process verifies age through government-issued identification documents.

If we discover that we have inadvertently collected Personal Data from a minor, we will immediately suspend the associated Account, delete the collected data (except where retention is required for legal compliance), and return any deposited funds where verifiably attributable to the minor.

dana77 operates internationally, and your Personal Data may be stored on or transferred to servers located outside of Indonesia. Where such transfers occur, we ensure that appropriate safeguards are in place to protect your data to a standard equivalent to the protections described in this Privacy Policy. These safeguards may include:

• Contractual clauses in agreements with data processors that require them to protect Personal Data to an equivalent standard.
• Transfers only to jurisdictions that maintain adequate data protection frameworks recognized by international standards.
• Technical measures such as encryption of data both in transit and at rest to protect data integrity across borders.

If you would like more information about the safeguards in place for international data transfers, please contact our support team using the details in Clause 15.

dana77 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or Platform features. When we make material changes, we will notify you by:

• Sending a notification to your registered email address at least 7 days before the change takes effect.
• Displaying a prominent notice on the Platform for a period of at least 14 days following the update.
• Updating the "Last Updated" date at the top of this page.

Your continued use of the Platform after the effective date of any amendment constitutes acceptance of the revised Privacy Policy. If you do not agree with the changes, you should close your Account before the effective date and request deletion of your data as described in Clause 11.

If you have any questions, concerns, or complaints about how dana77 handles your Personal Data, or if you wish to exercise any of your rights as described in Clause 11, please contact our Data Protection team through the following channels:

• Live Chat: Available 24/7 on the Platform. Indonesian and English-speaking agents are ready to assist.
• Email: [email protected] (plain text only — not a clickable link). Please include "Privacy Request" in the subject line and provide your registered Account username to help us locate your records efficiently.

We aim to acknowledge all privacy-related inquiries within 48 hours and to resolve them within 30 days. If you are not satisfied with our response, you have the right to escalate your complaint to the relevant data protection authority in your jurisdiction.