Privacy Policy NAA77
Your data is safe — and we want you to know how

1 Introduction and Scope

Naa77 understands that user trust is our most valuable asset. That trust cannot be built without transparency, especially regarding how users' personal data is handled. This Privacy Policy applies to all users who access the naa77 platform — whether through the website, mobile app, or any other channel we provide.

This policy details: what data we collect from you, the purposes for which it is used, who it may be shared with, and what rights you have regarding your personal data. We aim to present this in plain language rather than confusing legal jargon.

2 Data We Collect

Naa77 only collects data that is strictly necessary to operate the service safely and effectively. No excessive data collection or collection beyond the platform's operational needs takes place.

Data You Provide Directly

• Identity data: full name, date of birth, ID number (National ID/Driver's License/Passport)
• Contact data: email address, phone number, residential address
• Account data: bank account or e-wallet information for deposit and withdrawal purposes
• Security data: username, password (stored in encrypted form), and security questions
• Verification documents: photos or scanned identity documents for the KYC process

Automatically Collected Data

• Technical data: IP address, browser type and version, operating system, screen resolution
• Activity data: pages visited, visit duration, games played, time and date of activity
• Transaction data: deposit, withdrawal, betting, and wins history
• Device data: device identifier, city-level location (not GPS coordinates), time zone

3 How We Use Your Data

Every piece of data we collect is used for clear and measurable purposes. naa77 does not use user data for purposes unrelated to platform operations without the explicit consent of the user in question.

• Creating and managing user accounts — including the registration process, identity verification, and profile management
• Processing financial transactions — deposits, withdrawals, and all game-related transactions
• Preventing fraud and misuse — detecting suspicious activity, duplicate accounts, and potential fraud
• Providing customer support — responding to inquiries, complaints, and support requests
• Sending important communications — transaction notifications, policy updates, and account security information
• Improving service quality — analyzing usage patterns to optimize the platform
• Meeting regulatory obligations — reporting required by applicable law

4 Sharing Data with Third Parties

Naa77 does not sell or rent users' personal data to anyone. However, in certain situations, we may need to share data with trusted partners to ensure the service runs properly.

Partners That May Receive Data

• Payment gateway providers — to securely process deposit and withdrawal transactions
• Identity verification service providers — to assist with the KYC process in accordance with regulatory standards
• Cloud infrastructure providers — that manage the platform's servers and data storage
• Analytics service providers — to understand platform usage patterns in aggregate (data cannot be traced to any individual)

All third-party partners working with naa77 are bound by strict data confidentiality agreements and are prohibited from using user data for any purpose other than what has been agreed upon in the cooperation contract.

Legally Required Disclosure

In certain situations, naa77 may be required to disclose user data to competent authorities pursuant to a court order, a legitimate legal investigation request, or regulatory reporting obligations. Such disclosures are made only to the extent necessary and as required by applicable law.

5 Data Security

Naa77 implements comprehensive technical and organizational security measures to protect user data from unauthorized access, disclosure, alteration, or accidental destruction.

• Data encrypted in transit using 256-bit TLS/SSL protocols
• Sensitive data encrypted at rest
• Passwords are stored in hashed form using modern cryptographic algorithms (bcrypt)
• Intrusion detection systems and real-time threat monitoring
• Access to user data is restricted to staff with a legitimate operational need
• Security testing (penetration testing) is conducted periodically by independent parties
• Scheduled data backups with encrypted storage at separate locations

6 Data Storage and Retention

Naa77 retains users' personal data for the duration of the active account and for the period required after account closure, in accordance with applicable legal obligations.

• Financial transaction data: retained for a minimum of 5 years in accordance with financial regulatory requirements
• Identity and KYC data: retained for the duration of the active account plus 3 years after account closure
• Activity log data: retained for 12 months for security and audit purposes
• Support communication data: retained for 2 years as a service reference

Once the retention period expires, data will be permanently deleted or anonymized so it can no longer be linked to any individual. The deletion process is carried out using methods that ensure data cannot be recovered.

7 Cookies and Similar Technologies

Naa77 uses cookies and similar tracking technologies to enhance the functionality and user experience on our platform. Cookies are small files stored on your device when you visit our website.

Types of Cookies We Use

• Essential cookies: required for basic platform functions such as maintaining login status and session security. These cookies cannot be disabled.
• Preference cookies: store your personal settings such as language, display preferences, and frequently played game preferences.
• Analytics cookies: help us understand how users interact with the platform, so we can continuously improve our services. Data is collected in aggregate and anonymous form.
• Security cookies: used to detect suspicious activity and protect accounts from unauthorized access.

You can manage your cookie preferences through your browser settings. Disabling certain cookies may affect platform functionality, but will not prevent access to our core services.

8 Your Rights as a User

Naa77 respects users' rights over their personal data. The following are rights you can exercise at any time:

9 International Data Transfers

In order to provide reliable and fast services, some user data may be processed or stored on servers located outside Indonesia. These international data transfers are carried out with adequate safeguards in place, including:

• Use of internationally recognized standard contractual clauses
• Ensuring that the destination country or region provides an adequate level of data protection
• Applying data encryption during transfer

Naa77 only works with infrastructure providers that hold recognized international data security certifications, such as ISO 27001 and SOC 2.

10 Privacy Policy Changes

Naa77 reserves the right to update this Privacy Policy at any time to reflect changes in our privacy practices, service updates, or applicable legal requirements. Any material changes will be communicated to active users via:

• In-platform notifications (banners or messages in the account dashboard)
• Notification email to the registered address
• Update of the "Last updated" date at the top of this page

Continued use of the naa77 platform after policy changes take effect will be considered acceptance of the updated policy. We encourage users to review this page periodically.

11 Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please don't hesitate to reach out to our team. We are committed to responding to every inquiry seriously and as promptly as possible.

For requests related to your personal data rights (access, correction, deletion, and others), please include your full name and the email address registered to your naa77 account so we can verify your identity and process the request accurately.