Privacy Policy

1. Introduction

nk77 ("we", "us", "our", "the Platform", "the Company") operates the online betting and casino platform accessible at https://nk77.cam. This Privacy Policy ("Policy") explains in clear, transparent terms how nk77 collects, uses, stores, shares, and protects the personal data of users ("you", "your", "User", "Player", "Member") who access or use our services. It also describes your rights in relation to your personal data and how to exercise them.

By registering an account on nk77, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. This Policy forms part of your agreement with nk77 and should be read in conjunction with our Terms & Conditions and Responsible Gaming guidelines.

If you have any questions about this Policy or wish to exercise any of your data rights, you may contact our Data Protection team at any time. Contact details are provided in Section 16 of this document.

2. Definitions

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information that relates to an identified or identifiable natural person. This includes your name, email address, phone number, financial information, IP address, device identifiers, and any other information that can reasonably be used to identify you directly or indirectly.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, retrieval, use, disclosure, transmission, deletion, or destruction.
• "Data Controller" refers to nk77, the entity that determines the purposes and means of processing your Personal Data.
• "Data Processor" refers to third-party service providers who process Personal Data on behalf of nk77 under contractual data protection obligations.
• "KYC" (Know Your Customer) refers to the mandatory identity verification process required of all nk77 account holders.
• "Cookies" refers to small text files placed on your device by our website to store preferences and facilitate session management.
• "UU PDP" refers to Indonesia's Personal Data Protection Law (Undang-Undang Perlindungan Data Pribadi), enacted in 2022.

3. Personal Data We Collect

3.1 Account Registration Data

When you create an nk77 account, we collect the following information:

• Full legal name (as it appears on your KTP / national identity card)
• Date of birth (to verify you are 21 years of age or older)
• Email address (primary communication channel)
• Mobile phone number (for two-factor authentication and account security)
• Residential address (street, city/regency, province, postal code)
• Username and encrypted password
• Preferred currency (Indonesian Rupiah, IDR)

3.2 KYC Verification Data

To comply with our identity verification obligations, we collect:

• Photograph or scan of government-issued photo ID (KTP / Kartu Tanda Penduduk)
• Proof of address document (dated within 3 months)
• Live selfie photograph holding your ID card
• Selfie video (in some cases, for enhanced verification)

3.3 Financial Data

To process deposits, withdrawals, and bonus payments, we collect:

• Bank account number and bank name (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata, or other registered Indonesian banks)
• E-wallet account identifiers (OVO, DANA, GoPay, ShopeePay, or LinkAja account details)
• Transaction history (amounts, dates, payment methods, references)
• Deposit and withdrawal records

nk77 does not store full card numbers, CVV/CVC codes, or any payment card magnetic stripe data on our servers. Card processing, where applicable, is handled by PCI-DSS-compliant payment processors.

3.4 Gameplay and Behavioral Data

nk77 records gameplay data to ensure platform integrity, prevent fraud, and improve user experience:

• Betting history (stakes, outcomes, game titles, dates, and times)
• Session duration and frequency metrics
• Game preferences (sports, live casino, slot games, togel)
• Bonus usage and wagering progress
• Responsible gaming settings (deposit limits, session limits, self-exclusion status)

3.5 Technical and Device Data

When you access nk77, our servers automatically record:

• IP address and geolocation data (country, region, city)
• Device type, operating system, and browser version
• Browser language preference
• Referring URL and exit URL
• Pages visited, time on page, and click patterns
• Session cookies and persistent cookies

3.6 Communications Data

If you contact our support team, we collect:

• Live chat transcripts
• Email correspondence
• Support ticket contents and resolution history
• Complaint details and associated documentation

4. How We Collect Your Data

nk77 collects your personal data through the following methods:

• Directly from you: When you register, complete KYC, make deposits or withdrawals, contact support, or update your account settings.
• Automatically: When you browse our website, through cookies, server logs, and analytics tools that record your device and usage behavior.
• From third parties: From payment processors (to confirm transaction status), KYC verification services (to validate identity documents), fraud detection partners (to flag suspicious activity), and analytics providers (to understand aggregate user behavior). All third-party providers are contractually bound to data protection standards.
• From public sources: In limited circumstances, we may verify information against public records to detect fraud or confirm residential addresses.

5. How We Use Your Personal Data

nk77 uses your personal data for the following specific purposes:

Purpose	Data Used
Account creation and authentication	Name, email, password, phone number
KYC identity verification (21+ age check)	ID document, selfie, proof of address
Processing deposits and withdrawals	Bank/e-wallet details, transaction records
Fraud prevention and AML compliance	All financial, device, and behavioral data
Responsible gaming monitoring	Gameplay data, session duration, deposit frequency
Customer support and complaints	Communications data, account history
Platform security and abuse prevention	IP address, device data, behavioral patterns
Service improvement and analytics	Aggregated and anonymized usage data
Promotional communications (with consent)	Email address, game preferences
Legal and regulatory obligations	All data categories as required by law

nk77 does not use your personal data for automated decision-making that produces significant legal effects without human review. Where automated systems are used — for example, to flag suspicious transactions — a human compliance officer reviews any consequential decisions before action is taken on your account.

6. Legal Basis for Processing

nk77 processes your personal data on one or more of the following legal grounds:

• Contractual necessity: Processing required to create your account, verify your identity, and deliver the services you have requested under our Terms & Conditions.
• Legal obligation: Processing required to comply with applicable laws, including anti-money laundering (AML) regulations, responsible gaming mandates, and data retention obligations under Indonesian law.
• Legitimate interests: Processing necessary for fraud prevention, platform security, abuse detection, and service improvement, where these interests are not overridden by your fundamental privacy rights.
• Consent: Where we send you optional marketing communications or use non-essential cookies, we do so only with your explicit prior consent. You may withdraw consent at any time by contacting our support team or updating your account preferences.

7. Data Sharing and Disclosure

nk77 does not sell, rent, or trade your personal data. We share your data only in the following limited and controlled circumstances:

7.1 Service Providers (Data Processors)

We engage trusted third-party companies to perform functions on our behalf, including payment processing, KYC verification, fraud detection, customer support tooling, and analytics. These providers receive only the minimum data necessary to perform their function and are contractually bound by data processing agreements (DPAs) that prohibit them from using your data for their own purposes or disclosing it to unauthorized parties.

7.2 Regulatory and Legal Authorities

nk77 may disclose personal data to Indonesian government authorities, law enforcement agencies, financial intelligence units, or other regulatory bodies where required to do so by law, valid court order, or regulatory directive. We will notify you of such disclosure where legally permitted to do so.

7.3 Business Transfers

In the event that nk77 undergoes a merger, acquisition, restructuring, or asset sale, your personal data may be transferred to the successor entity as part of that transaction. We will provide advance notice via email and a prominent website notice before your data becomes subject to a different privacy policy.

7.4 With Your Explicit Consent

In circumstances not covered above, nk77 will share your personal data with third parties only with your prior, explicit, and informed consent, which you may withdraw at any time without detriment to your account.

8. Cookies and Tracking Technologies

8.1 What Cookies We Use

nk77 uses the following categories of cookies:

• Strictly Necessary Cookies: Required for core platform functionality such as session authentication, maintaining your login state, and processing transactions. These cannot be disabled.
• Performance Cookies: Collect anonymous data about how visitors interact with our website (pages visited, time on site, error messages) to help us improve platform performance. Used with your consent.
• Functional Cookies: Remember your preferences such as language settings, display options, and game preferences to provide a more personalized experience. Used with your consent.
• Analytical Cookies: Enable aggregate usage analytics through privacy-compliant tools to understand user behavior and improve our service. No personally identifiable information is shared externally. Used with your consent.

8.2 Managing Cookies

You can control non-essential cookies through your browser settings. Most browsers allow you to block, delete, or be notified before cookies are set. Please be aware that disabling certain cookies may affect the functionality of the nk77 platform — for example, you may need to log in more frequently, or some game features may not load correctly. Strictly necessary cookies cannot be disabled without preventing basic platform access.

8.3 Third-Party Tracking

nk77 does not permit third-party advertising networks to place tracking cookies on our platform. Any third-party scripts used on our site (e.g., analytics providers) are selected on the basis of their privacy-compliance credentials and are subject to data minimization agreements. We do not participate in cross-site behavioral advertising or retargeting networks.

9. Data Retention

nk77 retains your personal data only for as long as is necessary to fulfill the purposes described in this Policy, or as required by applicable law. Our standard retention periods are as follows:

• Active Account Data: Retained for the duration of your account's active status plus 5 years following permanent account closure, to satisfy our anti-money laundering and regulatory record-keeping obligations.
• KYC Documents: Retained for a minimum of 5 years from account closure in accordance with AML regulations applicable to our licensed jurisdiction.
• Transaction Records: Retained for 5 years from the date of each transaction for financial audit and fraud investigation purposes.
• Customer Support Communications: Retained for 3 years from the date of the interaction.
• Gameplay Logs: Retained for 2 years in an identifiable form; older records are anonymized and retained indefinitely for aggregate statistical analysis.
• Marketing Consent Records: Retained for the duration of your consent plus 3 years, to demonstrate compliance with consent-based processing obligations.

When data is no longer required, it is securely deleted from active systems and purged from backup archives on their next scheduled rotation. Anonymized or aggregated data derived from your information may be retained indefinitely, as it can no longer be used to identify you.

10. Data Security

nk77 implements a comprehensive, layered data security framework designed to protect your personal data against unauthorized access, disclosure, alteration, or destruction. Our security measures include:

• Encryption at rest: All personal data stored on nk77 servers is encrypted using AES-256 block cipher encryption. Database backups are encrypted with the same standard before being transmitted offsite.
• Encryption in transit: All data transmitted between your device and nk77's servers is protected using TLS 1.3 (Transport Layer Security), visible as the padlock icon in your browser address bar.
• Access controls: Personal data is accessible only to nk77 staff members who require it to perform their job functions. All internal access is logged, audited, and subject to role-based permission controls.
• Two-factor authentication (2FA): nk77 supports 2FA on player accounts and mandates it for all internal administrative access to systems holding personal data.
• Penetration testing: Our platform undergoes regular third-party penetration testing and security audits to identify and remediate vulnerabilities proactively.
• Incident response: nk77 maintains a documented data breach response plan. In the event of a breach that poses a risk to your personal data, we will notify affected users and relevant authorities within the timeframes required by applicable law.

While nk77 takes every reasonable measure to protect your data, no system can guarantee absolute security. You also play a role in protecting your account by keeping your login credentials confidential and notifying us immediately if you suspect unauthorized access.

11. Your Data Rights

Subject to applicable Indonesian law (UU PDP) and the data protection framework under which nk77 operates, you have the following rights in relation to your personal data:

• Right of Access: You may request a copy of the personal data nk77 holds about you at any time. We will provide this within 30 days of receiving your verified request.
• Right to Rectification: If any of your personal data is inaccurate or incomplete, you may request that we correct or update it. You can update basic account information directly through your account dashboard; for KYC and financial records, contact our support team.
• Right to Erasure ("Right to be Forgotten"): You may request that nk77 delete your personal data. Please note that this right is subject to overriding legal obligations — we are required to retain certain data (KYC, transaction records) for regulatory compliance periods, as described in Section 9. Once those periods expire, your data will be deleted.
• Right to Restriction of Processing: You may request that we restrict the processing of your personal data in certain circumstances — for example, if you contest its accuracy while we investigate your request.
• Right to Data Portability: You may request a structured, machine-readable copy of the personal data you have provided to nk77 (such as account information and transaction history), for the purpose of transferring it to another service provider.
• Right to Object: You may object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on our legitimate interests, though we may continue processing if we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where we rely on your consent to process data (e.g., for marketing emails), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact our Data Protection team at [email protected]. We will verify your identity before processing any data rights request and respond within 30 calendar days. Requests will be fulfilled at no charge unless they are manifestly unfounded or excessive, in which case we may charge a reasonable administrative fee.

12. Minors and Age Restriction

nk77 is strictly intended for adults aged 21 years or older. We do not knowingly collect, store, or process personal data from individuals under the age of 21. Age verification is a mandatory step in our account registration and KYC process, and we employ technical and procedural measures to detect and prevent underage registration.

If nk77 discovers or is informed that a registered account belongs to an individual under 21 years of age, we will immediately suspend the account, conduct an investigation, and delete all associated personal data as soon as legally permissible. All funds in such accounts will be handled in accordance with our Terms & Conditions and applicable law.

If you believe that a minor has registered an account on nk77, please contact us immediately at [email protected] with relevant details so we can investigate and take appropriate action.

13. Third-Party Services and Links

The nk77 platform integrates with certain third-party services to deliver its functionality, including game content providers (such as Pragmatic Play, Evolution Gaming, Spribe, and Pocket Games Soft), payment gateway providers, and KYC verification services. These third parties may process limited personal data on our behalf as data processors under contractual data protection agreements.

nk77's Privacy Policy does not extend to the privacy practices of third-party game providers' internal platforms, software development kits, or any services not directly operated by nk77. We encourage you to review the privacy policies of any third-party services you interact with directly. nk77 is not responsible for the data practices of third parties beyond the scope of our contractual agreements with them.

14. Cross-Border Data Transfers

As an international online platform, nk77 may transfer your personal data to servers or service providers located outside Indonesia. Where such transfers occur, nk77 ensures that adequate protections are in place by:

• Transferring data only to countries or recipients that provide an adequate level of data protection as recognized by applicable Indonesian law or international data protection frameworks.
• Implementing contractual data transfer mechanisms (such as Standard Contractual Clauses or equivalent arrangements) with recipients in jurisdictions that do not meet the adequacy threshold.
• Conducting transfer impact assessments for high-risk transfers to ensure your rights remain protected regardless of where your data is processed.

By using nk77's services, you acknowledge that your personal data may be transferred to, stored, and processed in countries outside Indonesia. nk77 will always ensure that such transfers are conducted with appropriate safeguards that uphold your privacy rights.

15. Changes to This Privacy Policy

nk77 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. When we make material changes, we will:

• Update the "Last Updated" date at the top of this Policy.
• Send an email notification to your registered email address summarizing the key changes.
• Display a prominent notice on our website for a minimum of 14 days following the change.

Minor, non-material changes (such as typographical corrections or clarifications that do not alter the substance of our data practices) may be made without formal notification. Your continued use of nk77 services after the effective date of any updated Policy constitutes your acceptance of the changes. If you do not agree to the revised Policy, you must discontinue use of our platform and may request account closure.

We recommend reviewing this Privacy Policy periodically to stay informed about how nk77 protects your personal data. All previous versions of this Policy are available upon request from our Data Protection team.

16. Contact and Complaints

For any questions, concerns, or requests related to this Privacy Policy or your personal data, you may contact nk77's Data Protection team through the following channels:

• Email: [email protected] (marked "Privacy Request" in the subject line)
• Live Chat: Available 24/7 on our website — average response time under 90 seconds
• Response Time: Privacy-related requests are handled within 30 calendar days of receipt of a verified request
• Support Timezone: WIB (UTC+7), with coverage for WITA (UTC+8) and WIT (UTC+9)

If you are not satisfied with our response to your privacy concern, you have the right to escalate your complaint to the relevant Indonesian data protection supervisory authority. nk77 takes all privacy complaints seriously and will cooperate fully with any regulatory investigation.

---

By continuing to use nk77, you confirm that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.
This Policy was last updated on January 15, 2026 and is effective immediately for all registered users.