nan77 is committed to protecting your personal data. This Privacy Policy explains exactly what information we collect, why we collect it, how we use and store it, and what rights you hold as a player based in Indonesia.
In this Privacy Policy, the following terms carry the meanings set out below:
nan77 acts as the data controller in respect of all Personal Data collected through the Platform. As data controller, we determine the purposes and means of processing your Personal Data and are responsible for ensuring that processing is carried out lawfully, fairly, and transparently.
Our primary market is Indonesia, and we serve players who are residents of that country. While Indonesian law does not currently include a single comprehensive data-protection statute equivalent to the EU's GDPR, we voluntarily adopt data-protection standards aligned with internationally recognised best practice, including principles of data minimisation, purpose limitation, and storage limitation.
For all data-related enquiries or to exercise your rights under Section 10 of this Policy, please contact our Data Protection team at [email protected].
We collect Personal Data through several channels. The categories below describe what we collect and the circumstances under which we collect it.
3.1 Registration Data
When you create an Account, we collect your full legal name, date of birth, residential address (including city and province within Indonesia), email address, and a chosen username. This information is required to open your Account and is used for identity verification, service delivery, and compliance purposes.
3.2 KYC and Identity Verification Documents
To comply with our international anti-money-laundering obligations and to process withdrawals, we request supporting identity documents — typically a scanned copy or photograph of your Indonesian national identity card (KTP), passport, or equivalent government-issued document. In certain circumstances we may also request proof of address (e.g., a recent utility bill or bank statement) and source-of-funds documentation.
3.3 Financial and Payment Data
We collect bank account details and e-wallet identifiers associated with your payment method — for example, BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, BSI, OVO, DANA, GoPay, ShopeePay, or LinkAja account numbers — solely for the purpose of processing deposits and withdrawals in Indonesian Rupiah (IDR). We do not store full card numbers or CVV codes.
3.4 Transactional Data
We maintain records of all deposits, withdrawals, wagers placed, games played, bonus credits, and account adjustments. These records are essential for account management, dispute resolution, fraud prevention, and regulatory compliance.
3.5 Technical and Device Data
When you access the Platform, our servers automatically log your IP address, browser type and version, operating system, device type, screen resolution, referring URL, and pages visited. This data is used for security monitoring, fraud detection, and improving Platform performance.
3.6 Communications Data
If you contact our support team via live chat or email, we retain a record of that correspondence, including the content of messages and any attachments you provide. This helps us resolve disputes, train our support team, and maintain a history of your account-related communications.
3.7 Responsible Gaming Data
If you use our responsible-gaming tools — such as deposit limits, session limits, cooling-off periods, or self-exclusion — we record the parameters you set, the date they were applied, and any modifications. This data is treated with particular sensitivity and is used only to enforce your chosen restrictions.
We process your Personal Data under one or more of the following legal grounds:
| Legal Basis | Examples of Processing Activities |
|---|---|
| Contractual necessity | Creating your Account, processing deposits and withdrawals, settling wagers, delivering customer support. |
| Legal obligation | KYC identity verification, anti-money-laundering checks, retaining transaction records as required by our gaming licence. |
| Legitimate interests | Fraud prevention, security monitoring, platform improvement, responsible-gaming enforcement, internal analytics. |
| Consent | Marketing communications (email newsletters, promotional alerts) — you may withdraw consent at any time by contacting support. |
nan77 uses your Personal Data for the following purposes:
We do not sell, rent, or trade your Personal Data to any third party for their independent marketing purposes. We share your data only in the following limited circumstances:
All third parties with whom we share data are subject to contractual data-processing agreements that require them to process your data lawfully, keep it secure, and not use it beyond the agreed purpose.
We retain your Personal Data only for as long as necessary to fulfil the purposes for which it was collected, and to comply with our legal and regulatory obligations. The table below outlines our standard retention periods:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account registration data | Duration of account + 5 years post-closure | AML compliance, dispute resolution |
| KYC / identity documents | Duration of account + 5 years post-closure | Gaming licence obligations |
| Transaction records | 7 years from transaction date | Financial audit requirements |
| Support communications | 3 years from last contact | Dispute resol ution, service improvement |
| Marketing data (with consent) | Until consent is withdrawn | Opt-out respected at all times |
Once the relevant retention period expires, your Personal Data is permanently deleted or anonymised in a manner that renders it irreversibly unidentifiable.
The security of your Personal Data is a top priority for nan77. We employ a layered approach to safeguard your information against unauthorised access, disclosure, alteration, or destruction:
While we take reasonable measures to protect your data, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security, but we are committed to responding promptly to any suspected data breach and notifying affected users where required.
nan77 uses cookies and similar technologies to distinguish you from other users, maintain your session, and improve your browsing experience. The table below describes the categories of cookies we use:
| Cookie Type | Purpose | Duration |
|---|---|---|
| Essential / session | Maintains your login session, ensures secure navigation, and enables core features such as placing bets. | Session |
| Preference | Remembers your settings — for example, odds format or preferred market display. | 12 months |
| Analytics | Collects anonymised statistics on how users navigate the Platform, allowing us to improve layout and performance. | 24 months |
| Security | Helps detect suspicious activity, such as repeated failed login attempts or potential account takeover. | 30 days |
You can control or delete cookies through your browser settings at any time. Please note that disabling essential cookies may prevent you from using certain features of the Platform, including account login and placing wagers.
Subject to the applicable law, and to any legal or contractual restrictions that apply, you have the following rights in respect of your Personal Data:
To exercise any of these rights, please contact us at [email protected]. We will respond to all verifiable requests within thirty (30) days, unless the request is complex or multiple requests are made, in which case we may require an additional period not exceeding a further thirty (30) days and will inform you of any delay.
nan77 is strictly for adults aged 21 and over, and we do not knowingly collect Personal Data from anyone under that age. Our platform is not directed at minors and we actively prevent underage access through age-gate prompts at registration.
If we become aware that we have inadvertently collected Personal Data from a person under the age of 21, we will promptly delete that data and close any associated Account. If you believe that someone under 21 has registered an Account, please notify us immediately at [email protected] so that we can take appropriate action.
We may request proof of age (including by asking you to upload a photograph of your KTP or passport) at any time, and we reserve the right to suspend or close any Account where the age requirement cannot be verified.
nan77 is an internationally licensed platform, and our servers are located outside Indonesia. As a result, the Personal Data we collect may be transferred to, stored on, and processed in jurisdictions other than Indonesia; including the jurisdiction in which we hold our gaming licence.
Where we transfer your data internationally, we ensure that appropriate safeguards are in place to protect it — including contractual clauses, data-processing agreements, and security controls that are substantially equivalent to or stronger than the standards described in this Policy. We will not transfer your Personal Data to a jurisdiction where it would not receive an adequate level of protection.
By using the Platform and registering an Account, you acknowledge and consent to the international transfer, storage, and processing of your data as described in this section.
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. Where changes are material, we will notify you by email to the address registered on your Account and/or by posting a prominent notice on the Platform at least seven (7) days before the changes take effect.
Your continued use of the Platform after the effective date of the revised Policy constitutes acceptance of the revised terms. The most current version of this Privacy Policy is always available at https://nan77.cam/privacy-policy.
If you have any questions about this Privacy Policy, or if you wish to exercise any of your rights described above, please contact nan77 through the channels below. Our team will assist you promptly and professionally.
We treat your personal data with the same care we expect for our own. Here is what you can count on.
Every connection between your device and nan77 is protected with TLS/SSL 256-bit encryption. Your data travels in a secure tunnel from the moment you log in.
We never sell, rent, or trade your personal information to third-party marketers. Your data is used only to run the platform and keep you safe.
Documents are stored encrypted and accessed only by verified compliance staff. Your KYC data is never shared beyond the verification purpose.
Access to your account and personal data is limited to authorised personnel on a need-to-know basis, enforced through role-based permissions.
We only use cookies for essential functionality, preferences, analytics, and security — and we explain each category openly in Section 9 above.
Access, correction, deletion, and portability of your data are all available on request. Contact us and we will action your request within 30 days.
We are committed to transparency about how we handle your information. If you'd like to know more, our FAQ page answers many common questions about data and accounts — or reach out to our team any time.
Return to the Home page or view the Sitemap to explore all available pages.