Privacy Policy for new77

1. Definitions

The following definitions apply throughout this Privacy Policy:

• "Platform" means the new77 website at new77.cam, all associated subdomains, mobile interfaces, and any related software applications.
• "Member" means any natural person who has registered an account on the new77 Platform.
• "Visitor" means any person who accesses the Platform without registering or logging in.
• "Personal Data" means any information that identifies or could reasonably identify a natural person, directly or indirectly — including name, date of birth, Indonesian National Identity Card (KTP) number, email address, Indonesian mobile phone number, Indonesian bank account details, IP address, and device identifiers.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, transfer, or deletion.
• "Data Controller" means new77, the entity that determines the purposes and means of Processing Personal Data on the Platform.
• "Third-Party Service Provider" means any external company or individual engaged by new77 to perform specific services on its behalf, such as payment processors (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja), KYC verification providers, cybersecurity vendors, and cloud hosting services.
• "KYC" means Know Your Customer — the mandatory identity and age verification process required before any withdrawal can be processed.
• "Cookies" means small text files placed on your device by the Platform to enable functionality, remember preferences, and support analytics.

2. Scope & Application

2.1 This Privacy Policy applies to all Personal Data collected by new77 in connection with:

• Registration and account management on the new77 Platform.
• Deposits, withdrawals, and any financial transactions conducted through the Platform using Indonesian payment methods including BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, OVO, DANA, GoPay, ShopeePay, and LinkAja.
• Participation in any betting, gaming, casino, sportsbook, or promotional activity on the Platform.
• Communications between you and new77 support staff via email, live chat, or WhatsApp.
• Visits to the Platform by unregistered users (limited to technical and analytical data only).

2.2 This Policy does not apply to third-party websites or services that may be referenced on the Platform. new77 is not responsible for the privacy practices of any third-party operator. We strongly encourage you to review the privacy policies of any external services you interact with.

3. Data We Collect

3.1 new77 collects the following categories of Personal Data:

4. How We Collect Data

4.1 new77 collects Personal Data through the following methods:

• Directly from you: When you register an account, complete KYC verification, make a deposit or withdrawal, contact support, or participate in a promotion.
• Automatically: Through cookies, web beacons, server logs, and other tracking technologies when you visit or interact with the Platform — including pages you view, games you launch, and searches you perform.
• From third-party payment providers: Transaction confirmation data from BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, and LinkAja when you initiate a deposit or withdrawal.
• From KYC verification partners: Identity verification status and document authentication results from our accredited KYC service providers.
• From fraud-detection systems: Risk-scoring data generated by automated systems that analyse betting patterns, device fingerprints, and account linkage to detect prohibited conduct.

5. Purpose & Legal Basis for Processing

5.1 new77 processes your Personal Data for the following purposes, each supported by an appropriate legal basis:

• Account creation and management — Necessary for the performance of the contract between you and new77 as a registered member.
• Identity and age verification (KYC) — Necessary to comply with new77's legal and regulatory obligations, including the strict 21+ age policy.
• Payment processing — Necessary for the performance of the contract, specifically to facilitate IDR deposits and withdrawals through local Indonesian banks and e-wallets.
• Fraud prevention and platform security — Necessary to pursue the legitimate interest of maintaining a fair, secure, and abuse-free gaming environment for all members.
• Responsible gaming compliance — Necessary to comply with new77's legal obligations and ethical commitments, including monitoring for signs of problem gambling and enforcing self-exclusion requests.
• Customer support — Necessary for the performance of the contract and to address your queries, complaints, and requests efficiently.
• Platform analytics and improvement — Based on new77's legitimate interest in understanding how the platform is used to improve user experience, fix technical issues, and develop new features.
• Marketing and promotional communications — Based solely on your explicit consent, which you may withdraw at any time. new77 may send communications about bonuses, seasonal promotions (e.g., Idul Fitri, Ramadhan, Indonesian Independence Day on 17 August), and new game launches via email or WhatsApp — but only where you have opted in.

6. Data Sharing & Disclosure

6.1 new77 shares Personal Data only in the circumstances listed below. We do not sell your data. We do not share your data for third-party advertising purposes.

• Payment processors: Your name, account number, and transaction amount are shared with the relevant Indonesian bank (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP) or e-wallet provider (OVO, DANA, GoPay, ShopeePay, LinkAja) solely to execute the requested transaction.
• KYC verification providers: Your identity documents and date of birth are shared with our accredited KYC partner to verify your identity and confirm that you meet the 21+ age requirement.
• Fraud detection and cybersecurity vendors: Technical data including IP addresses, device fingerprints, and behavioural patterns may be shared with specialist providers that help new77 identify and prevent fraudulent activity on the platform.
• Cloud and hosting infrastructure providers: Your data is stored on secure servers operated by our cloud infrastructure partners. These providers are contractually bound to process data only on new77's instructions and to maintain appropriate security standards.
• Legal and regulatory authorities: Where new77 is required by applicable international law, a valid court order, or a lawful request from a recognised regulatory body to disclose Personal Data, we will comply. We will notify you of any such disclosure where permitted by law.
• Business restructuring: In the event of a merger, acquisition, or sale of all or substantially all of new77's assets, your Personal Data may be transferred to the acquirer as part of the transaction. You will be notified in advance of any such transfer and your rights under this Policy will be maintained.

6.2 All Third-Party Service Providers that receive Personal Data from new77 are contractually obligated to maintain appropriate technical and organisational security measures, to use the data only for the purpose for which it was shared, and to comply with applicable data protection standards.

7. Data Retention

7.1 new77 retains Personal Data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal or regulatory obligations. The following retention periods apply as a general guide:

• Active account data: Retained for the duration of your account and for a period of five (5) years following permanent account closure, to satisfy anti-money-laundering and record-keeping requirements.
• KYC documents: Retained for a minimum of five (5) years following the date of verification, in line with international KYC and AML standards.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction.
• Customer support communications: Retained for three (3) years from the date of the last communication, unless a longer period is required for an ongoing dispute.
• Marketing consent records: Retained for the duration of the consent and for one (1) year following withdrawal, as evidence that consent was appropriately obtained and honoured.
• Technical and analytical data (cookies, logs): Retained for a maximum of thirteen (13) months from the date of collection.

7.2 At the end of the applicable retention period, Personal Data is either securely deleted or, where deletion is not technically feasible, anonymised so that it can no longer be attributed to any individual.

8. Security Measures

8.1 new77 implements a layered security architecture to protect your Personal Data against unauthorised access, accidental loss, destruction, or disclosure. Key measures include:

• 256-bit SSL/TLS encryption on all data transmissions between your device and new77 servers.
• AES-256 encryption at rest for all sensitive Personal Data fields stored in our databases, including KYC documents and financial records.
• Multi-factor authentication (MFA) available for all member accounts and mandatory for all new77 internal staff who access member data.
• Role-based access controls (RBAC) ensuring that new77 employees can only access the data categories necessary for their specific job functions. No single employee has unrestricted access to all Personal Data.
• Regular penetration testing and independent security audits conducted by third-party cybersecurity specialists.
• Intrusion detection and real-time monitoring systems that flag and respond to anomalous access patterns or potential breaches within minutes.
• Secure data centres with physical access controls, redundant power and cooling systems, and ISO-standard operational procedures.

8.2 In the event of a Personal Data breach that is likely to result in a risk to your rights and freedoms, new77 will notify affected members without undue delay — and no later than 72 hours after becoming aware of the breach — via the email address registered on your account. The notification will describe the nature of the breach, the categories of data affected, the likely consequences, and the measures new77 is taking to address it.

9. Cookies & Tracking Technologies

9.1 new77 uses cookies and similar tracking technologies to operate and improve the Platform. The following categories of cookies are in use:

• Strictly necessary cookies: Required for the Platform to function correctly — including session management, login state, and security tokens. These cannot be disabled without impairing Platform functionality.
• Functional cookies: Remember your preferences such as language, currency display (IDR), and game lobby filters to personalise your experience across sessions.
• Analytical cookies: Collect anonymised data on how visitors use the Platform — including pages viewed, time spent, and error events — to help new77 improve performance and usability.
• Marketing cookies: Used only where you have provided explicit consent, to help new77 understand the effectiveness of promotional campaigns. These cookies do not track your activity on external websites.

9.2 You may manage your cookie preferences at any time through your browser settings. Note that disabling strictly necessary cookies will impair your ability to log in and use the Platform. Disabling functional or analytical cookies will not prevent you from using core Platform features.

9.3 new77 does not use third-party advertising networks or cross-site tracking cookies. The analytical data collected via our cookies is processed solely for internal platform improvement purposes and is not shared with advertising platforms.

10. Your Rights

10.1 As a new77 member, you hold the following rights with respect to your Personal Data. To exercise any of these rights, contact our Data Protection team at [email protected] with the subject line "Data Rights Request":

• Right of Access: You have the right to request a complete copy of all Personal Data that new77 holds about you, free of charge, within 30 days of your request.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete Personal Data held about you. Minor corrections (e.g., email address or phone number updates) can be made directly within your account settings.
• Right to Erasure ("Right to Be Forgotten"): You have the right to request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (and no other legal basis applies), or where the data has been processed unlawfully. This right is subject to new77's legal retention obligations — for example, financial transaction records must be retained for five years.
• Right to Restriction of Processing: You have the right to request that new77 restricts the processing of your Personal Data in certain circumstances — for example, while the accuracy of data is being contested, or while an objection is being considered.
• Right to Data Portability: You have the right to receive your Personal Data in a structured, commonly used, machine-readable format (such as JSON or CSV) for transfer to another service provider, where technically feasible.
• Right to Object: You have the right to object to the processing of your Personal Data where new77 relies on legitimate interests as its legal basis. new77 will cease processing unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw it at any time. Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.

10.2 new77 will respond to all data rights requests within 30 calendar days. Where a request is complex or where new77 receives a high volume of requests, this period may be extended by a further two months, with prior written notice to the requestor explaining the reasons for the delay.

10.3 new77 will not charge a fee for exercising your data rights unless a request is manifestly unfounded, repetitive, or excessive, in which case a reasonable administrative charge may apply. new77 will notify you before any charge is levied.

11. Minors & Age Restriction

11.1 The new77 Platform is strictly for adults aged 21 years and above. new77 does not knowingly collect Personal Data from any person under the age of 21.

11.2 Age verification is a mandatory step in the new77 registration and KYC process. Any account found to have been registered by, or on behalf of, a person under 21 will be immediately closed, all funds will be returned to the originating payment method (less any winnings, which will be forfeited), and the associated Personal Data will be deleted from our systems within 30 days.

11.3 If you believe a minor has registered an account on the new77 Platform, please contact us immediately at [email protected]. new77 takes underage gambling extremely seriously and will act on any such report without delay.

12. International Data Transfers

12.1 new77 operates as an international platform and may transfer your Personal Data to servers or processors located outside Indonesia. Where such transfers occur, new77 ensures that appropriate safeguards are in place to protect your data to the same standard as described in this Policy.

12.2 Safeguards for international transfers include contractual data processing agreements with all Third-Party Service Providers that incorporate standard data protection clauses, and selection of service providers that operate under internationally recognised security and privacy frameworks.

12.3 By using the new77 Platform, you acknowledge that your Personal Data may be transferred to, stored, and processed in countries outside Indonesia. new77 will always ensure that your data is handled securely and in accordance with this Privacy Policy, regardless of where it is processed.

13. Third-Party Services & Links

13.1 The new77 Platform may reference or integrate with third-party services in a limited capacity — for example, game content delivered by licensed studio providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Pocket Games Soft. These providers operate their game content under their own data processing terms and are bound by contractual obligations to process data only as directed by new77.

13.2 new77 does not embed third-party social media widgets, advertising networks, or external tracking pixels on the Platform. This ensures that your browsing activity on new77 is not tracked by external ad platforms.

13.3 new77 is not responsible for the privacy practices of any third-party service whose content appears on the Platform or which is linked from it. This Privacy Policy governs only the processing of Personal Data by new77 as Data Controller.

14. Policy Amendments

14.1 new77 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, new legal requirements, or improvements to the Platform. Where changes are material, new77 will notify you via the email address registered on your account at least 14 days before the updated Policy takes effect.

14.2 The most current version of the Privacy Policy is always available at new77.cam/privacy-policy. The "Last Updated" date at the top of this page reflects the date of the most recent revision.

14.3 Your continued use of the Platform following the effective date of any updated Privacy Policy constitutes your acknowledgement of and agreement to the revised terms. If you do not agree to the changes, you must discontinue use of the Platform and request account closure.

15. Contact & Data Protection Requests

15.1 For any questions, concerns, or formal requests relating to this Privacy Policy or the processing of your Personal Data, please contact new77's Data Protection team using the following details:

• Email: [email protected] — please use the subject line "Privacy Policy Inquiry" or "Data Rights Request" as appropriate.
• Live Chat: Available 24 hours a day, 7 days a week via the Platform.
• WhatsApp: +62 811 9977 0077 (plain text — not a clickable link).
• Priority Support Hours: 08:00–24:00 WIB (Western Indonesia Time, UTC+7). Our support agents are native Indonesian-speaking and available around the clock.

15.2 new77 is committed to resolving all privacy-related inquiries promptly and transparently. We aim to acknowledge all Privacy Policy inquiries within 24 hours and to provide a full written response within 30 calendar days.