Privacy Policy — daun77 Platform

Introduction

This Privacy Policy ("Policy") describes how daun77 ("we", "our", "us", "the Platform") collects, uses, stores, shares, and protects the personal information of users ("you", "User", "Member") who register for or access the services available at https://daun77.cam.

daun77 is committed to handling your personal data responsibly and in a manner consistent with applicable international data protection standards. We recognise that privacy is a fundamental right, and we design our data practices around the principle of collecting only what is genuinely necessary for the legitimate purposes described in this Policy.

This Policy forms part of our overall legal framework alongside our Terms & Conditions and Responsible Gaming guidelines, all of which govern your relationship with daun77. By registering an account or continuing to use the platform, you acknowledge that you have read and understood this Policy and consent to the data practices described herein.

Definitions

The following terms carry the meanings set out below throughout this Policy:

Data We Collect

The categories of personal data we collect about you depend on the nature of your interaction with the daun77 platform. The following table summarises what we collect and when:

We do not collect or process special categories of sensitive personal data beyond what is strictly required for KYC compliance (such as a copy of your government-issued identity document). We do not collect biometric data for profiling, political opinions, religious beliefs, or health information.

How We Collect Data

4.1 Data You Provide Directly

The majority of personal data we hold is provided by you voluntarily when you register an account, complete KYC verification, make a deposit or withdrawal, or contact our support team. You are not legally required to provide this data, but without it we cannot provide the Services.

4.2 Data Collected Automatically

When you visit or use the daun77 platform, our servers automatically record Technical Data and Usage Data. This includes your IP address, device identifiers, the pages you navigate to, and the duration of your sessions. This data is collected through server logs, session cookies, and analytics tools operated by daun77 or its authorised processors.

4.3 Data from Third Parties

In limited circumstances, we may receive personal data about you from third parties, including:

• KYC Verification Providers: Third-party identity verification services that cross-check the documents you submit against public or licensed databases;
• Payment Processors: Local Indonesian bank networks and e-wallet operators (such as OVO, DANA, and GoPay) that confirm transaction status and account ownership;
• Fraud Prevention Services: Specialist providers that flag high-risk IP addresses, device fingerprints, or behavioural anomalies associated with known fraudulent activity.

Purposes of Processing

We process your personal data only for specific, documented purposes. We do not repurpose your data for activities that are incompatible with the original reason for collection. Our processing purposes are:

• Account Management: Creating, maintaining, and securing your daun77 account, including password resets and login monitoring;
• Payment Processing: Facilitating deposits via BCA, BRI, BNI, Mandiri, and e-wallets, and processing withdrawal requests to your verified payment method;
• KYC & Compliance: Verifying your identity and age (21+) as required by our licensing obligations and anti-money-laundering procedures;
• Fraud Prevention & Security: Detecting, investigating, and preventing fraudulent transactions, account duplication, collusion, and abuse of our promotional offers;
• Customer Support: Responding to your enquiries, resolving disputes, and processing responsible gaming tool activations (deposit limits, self-exclusion);
• Platform Improvement: Analysing aggregate usage data to improve the performance, usability, and product range of the daun77 platform;
• Legal Obligations: Fulfilling our obligations under applicable laws, including responding to lawful requests from regulatory or law enforcement authorities;
• Marketing Communications: Sending you relevant promotional offers and bonus notifications, subject to your communication preferences and applicable opt-out rights.

Legal Basis for Processing

daun77 processes your personal data on one or more of the following legal grounds:

• Contractual Necessity: Processing that is required to perform the contract between you and daun77, including account management, payment processing, and delivering the gaming services you have requested;
• Legal Obligation: Processing required to comply with our legal and regulatory obligations, including KYC verification, anti-money-laundering checks, and responding to lawful authority requests;
• Legitimate Interests: Processing undertaken to pursue the legitimate interests of daun77, including fraud prevention, platform security, and aggregate analytics, provided such interests are not overridden by your fundamental privacy rights;
• Consent: Processing for purposes such as marketing communications, where we have obtained your explicit and freely given consent. You may withdraw this consent at any time without detriment to your account access.

Data Sharing

7.1 We Do Not Sell Your Data

daun77 does not sell, rent, or otherwise transfer your personal data to third-party marketers, data brokers, or advertising networks. Your data is shared with external parties only in the specific circumstances described below.

7.2 Authorised Third-Party Processors

We engage carefully selected third-party Data Processors who act strictly on our documented instructions. These include:

• Payment Infrastructure Providers: Local Indonesian banking networks, e-wallet operators (OVO, DANA, GoPay, ShopeePay, LinkAja), and payment gateway services that facilitate your deposit and withdrawal transactions;
• KYC & Identity Verification Services: Specialist providers that verify the authenticity of identity documents submitted during the KYC process;
• Fraud Detection Services: Providers that analyse technical signals — including IP geolocation and device fingerprinting — to identify and prevent account abuse;
• Cloud Hosting & Infrastructure: Secure server infrastructure providers responsible for hosting the daun77 platform and its databases under strict data processing agreements;
• Customer Support Tools: Helpdesk and live-chat software used to manage support conversations initiated by you.

All third-party processors are contractually bound to maintain the confidentiality of your data, use it only for the specified purpose, and apply security standards no less stringent than our own.

7.3 Legal Disclosure

We may disclose your personal data to government agencies, regulatory bodies, or law enforcement authorities where we are legally required to do so, or where disclosure is necessary to protect the rights, property, or safety of daun77, its users, or the public. We will notify you of any such disclosure where legally permissible.

7.4 Business Transfers

In the event of a merger, acquisition, or sale of all or part of daun77's business assets, personal data held about registered users may be transferred to the acquiring entity. You will be notified by email prior to your data being transferred and becoming subject to a different privacy policy.

Data Retention

daun77 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and our licensing obligations. The following retention periods apply as a general guide:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be linked to an identifiable individual. Anonymised data may be retained indefinitely for aggregate statistical purposes.

Data Security

daun77 implements a comprehensive, layered approach to data security designed to protect your personal information against unauthorised access, disclosure, alteration, and destruction. Our technical and organisational measures include:

• 256-Bit SSL/TLS Encryption: All data in transit between your device and our servers is encrypted using industry-standard SSL/TLS protocols;
• Encryption at Rest: Sensitive data stored in our databases — including financial account details and KYC documentation — is encrypted at rest using AES-256;
• Access Controls: Access to personal data is restricted on a strict need-to-know basis, with role-based permissions enforced across all internal systems;
• Multi-Factor Authentication: Internal administrative systems require multi-factor authentication for all staff access;
• Penetration Testing: Our platform undergoes regular independent security audits and penetration testing to identify and remediate vulnerabilities;
• Intrusion Detection: Automated monitoring systems detect and alert on anomalous access patterns in real time;
• Staff Training: All daun77 personnel who handle personal data receive regular training on data protection obligations and security best practices.

In the event of a personal data breach that poses a risk to your rights and freedoms, daun77 will notify affected users without undue delay, and will report the breach to the relevant supervisory authority where required by law.

Cookies & Tracking Technologies

10.1 What Are Cookies

Cookies are small text files stored on your device when you visit a website. They enable the site to recognise your device on return visits, maintain session state, and collect aggregate usage information. daun77 uses cookies and similar tracking technologies (such as local storage and session tokens) on its platform.

10.2 Types of Cookies We Use

daun77 does not use advertising or retargeting cookies. We do not place third-party advertising tracking pixels on any page of the platform.

10.3 Managing Cookies

You can control and manage cookies through your browser settings. Most modern browsers allow you to refuse cookies, delete existing cookies, or be notified when a cookie is set. Please note that disabling essential cookies will impair or prevent access to the platform. Refer to your browser's help documentation for instructions on managing cookie preferences.

Your Rights

You have the following rights in relation to your personal data held by daun77. To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days of receiving your request.

Where your data is processed on the basis of consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal. Requests to exercise your rights will be processed free of charge unless they are manifestly unfounded or excessive.

Minors

The daun77 platform is strictly intended for adults aged 21 and over. We do not knowingly collect personal data from anyone under the age of 21. Our registration process includes mandatory age declaration, and our KYC verification process confirms the date of birth of all users who request a withdrawal or whom we have reason to believe may be underage.

If we discover that personal data has been collected from a person under 21 without appropriate parental or guardian consent, we will delete that data immediately and close the associated account. If you believe that a minor has registered an account on our platform, please notify us without delay at [email protected].

International Data Transfers

daun77 operates with server infrastructure and third-party processor relationships that may involve transferring your personal data to countries outside of Indonesia. Where such transfers occur, we ensure that adequate protections are in place to maintain a level of data protection equivalent to the standards described in this Policy. These protections may include:

• Standard contractual clauses binding the recipient to our data protection standards;
• Data processing agreements that restrict the recipient's use of your data to the specified purpose;
• Transfers only to jurisdictions assessed as providing an adequate level of data protection by relevant international standards;
• Encryption of data in transit, ensuring that it cannot be read even if intercepted during transfer.

You may request details of the specific safeguards applied to any international transfer of your data by contacting us at [email protected].

Third-Party Services

The daun77 platform integrates with third-party game studios and software providers — including Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, and Pocket Games Soft — in order to deliver our gaming product catalogue. These providers deliver game content directly to your browser via secure iFrame or API connections. While we ensure that contractual data protection obligations are in place with all integrated providers, their own independent privacy practices are governed by their respective privacy policies.

daun77 does not operate external social media pages and does not embed social media tracking pixels. The platform does not link to external websites. If you contact us through email, the communication channel is subject to the privacy policy of your email service provider.

Policy Amendments

daun77 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or our service offerings. When a material change is made, we will notify registered users via their registered email address or a prominent notice on the platform no less than 14 days before the change takes effect.

The "Effective Date" displayed at the top of this page reflects the date on which the current version of the Policy came into force. We encourage you to review this page periodically. Your continued use of the platform following the effective date of any amendment constitutes your acceptance of the revised Policy.

If any amendment materially reduces your privacy rights or significantly changes how we use your personal data, we will seek your explicit consent before applying the change where required by applicable law.

Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way daun77 handles your personal data, or if you wish to exercise any of your rights as described in Section 11, please contact our Data Protection team using the details below:

Our support team is available 24 hours a day, 7 days a week, including native Indonesian-speaking agents. We aim to acknowledge all data-related enquiries within 48 hours and to provide a substantive response within 30 calendar days. For complex requests, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it.

If you are dissatisfied with our response to a data protection concern, you have the right to escalate your complaint to the relevant data protection supervisory authority in your jurisdiction.