Privacy Policy — nv777

nv777 is the data controller responsible for the personal data collected and processed through the Platform. As data controller, nv777 determines the purposes and means of processing your personal data and is accountable for ensuring that processing activities comply with applicable data protection principles.

For all data-related inquiries, requests, and complaints, please contact the nv777 Data Protection team using the contact details provided in Section 14 of this Policy. nv777 will acknowledge all privacy-related correspondence within five (5) business days and will endeavour to resolve all requests within thirty (30) calendar days of receipt.

nv777 collects and processes the following categories of personal data, grouped by the context in which they are collected:

2.1 Registration & Identity Data

• Full legal name (as it appears on your government-issued ID).
• Date of birth (used to verify that you meet the 21+ age requirement).
• Indonesian residential address, including province, city, and postal code.
• Email address — used for account communications, transaction confirmations, and (where opted in) promotional messaging.
• Mobile phone number — used for two-factor authentication (2FA) and WhatsApp support.
• Username and hashed password — credentials for accessing your nv777 Account.

2.2 Identity Verification (KYC) Data

• Copy of a valid government-issued photo ID: Indonesian National Identity Card (KTP) or valid passport.
• Proof of payment method: bank statement or screenshot confirming the account holder's name and account number for the linked BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, or LinkAja account.
• Selfie photograph holding the ID document, if requested by the nv777 compliance team during enhanced due diligence.

2.3 Financial & Transaction Data

• Deposit transaction records: amount (IDR), date and time, payment method, transaction reference number.
• Withdrawal transaction records: amount (IDR), date and time, destination payment method, transaction reference number.
• Account balance history and bet history, including bet type, stake amount, odds, and settlement outcome.
• Bonus and promotion redemption records.

2.4 Technical & Device Data

• IP address at the time of registration and at each login.
• Device type, operating system, browser type and version.
• Session duration, pages visited, and clickstream data collected via cookies and similar tracking technologies (see Section 7).
• Geolocation data derived from IP address (country/city level — not GPS-level precision).

2.5 Communications Data

• Records of live chat, email, and WhatsApp support interactions, including the content of messages and the date and time of each interaction.
• Records of any formal complaints or dispute submissions made by you to nv777.
• Marketing preference records: whether you have opted in or out of receiving promotional communications by email or other channel.

nv777 collects personal data through the following channels and mechanisms:

nv777 processes your personal data only where a valid legal basis exists for doing so. The legal bases applicable to nv777's data processing activities are as follows:

• Contractual necessity: Processing your registration data, KYC documents, financial transaction records, and bet history is necessary for nv777 to fulfil its obligations to you under the Terms & Conditions — specifically, to create and maintain your Account, process deposits and withdrawals, and settle bets.
• Legal obligation: Processing for identity verification (KYC), anti-money laundering (AML) checks, and fraud prevention is required to comply with the international regulatory obligations applicable to nv777's gaming licence. Retention of financial records for the periods specified in Section 8 is similarly required by applicable financial regulation.
• Legitimate interests: Processing of technical and device data for security monitoring, fraud detection, and platform optimisation is conducted on the basis of nv777's legitimate interest in operating a safe, secure, and commercially viable betting platform. This processing does not override your rights and freedoms as a data subject.
• Consent: Where nv777 sends you promotional communications by email, SMS, or WhatsApp, this is done on the basis of your freely given, specific, and informed consent at the time of registration or via the marketing preferences section of your Account. You may withdraw this consent at any time.
• Vital interests: In rare circumstances where processing is necessary to protect your vital interests or those of another person — for example, in the context of a safeguarding concern related to problem gambling — nv777 may process relevant personal data on this basis.

nv777 uses the personal data it collects exclusively for the following defined purposes. We do not use your data for purposes that are incompatible with those listed below:

5.1 Account Management & Service Delivery

We use your registration and identity data to create and maintain your nv777 Account, authenticate your identity at login, process your deposits and withdrawals in IDR via local payment channels, settle your bets and wagers, and apply bonuses and promotional credits to your Account in accordance with the applicable promotion terms.

5.2 Identity Verification & Regulatory Compliance

We use your KYC documents to verify that you are at least 21 years of age, that you are the genuine owner of the payment methods linked to your Account, and that your use of the Platform does not give rise to money laundering or fraud concerns. This processing is required by nv777's international gaming licence obligations and cannot be waived or opted out of.

5.3 Fraud Prevention & Security

We analyse your IP address, device fingerprint, login history, and transaction patterns to detect and prevent unauthorised Account access, duplicate account fraud, payment fraud, bonus abuse, and other forms of prohibited conduct described in the nv777 Terms & Conditions. Automated risk-scoring systems may flag unusual activity for manual review by our compliance team.

5.4 Customer Support

We use your contact details and the records of your support interactions to respond to your inquiries, resolve disputes, process responsible gaming requests (such as deposit limit changes or self-exclusion), and deliver the 24/7 live chat and email support service. Indonesian-speaking support agents have access to your Account records to the extent necessary to resolve your inquiry.

5.5 Marketing Communications (Consent-Based)

Where you have opted in to receive promotional communications, nv777 may use your email address, phone number, or WhatsApp number to send you information about new games, bonus offers, seasonal promotions (such as those tied to BRI Liga 1, Ramadhan, or Idul Fitri), and platform updates. You may unsubscribe at any time via the link in any promotional email or by contacting support.

5.6 Platform Analytics & Improvement

We use aggregated, pseudonymised session and clickstream data to understand how players navigate the Platform, which features are most used, and where usability improvements can be made. This analysis informs product development decisions and helps nv777 deliver a faster, more intuitive betting experience.

nv777 does not sell, rent, or commercially exploit your personal data. We share personal data only with the following categories of recipients, and only to the extent strictly necessary for the described purpose:

All third-party service providers engaged by nv777 are subject to data processing agreements that require them to process personal data only on nv777's documented instructions, to maintain appropriate technical and organisational security measures, and to delete or return personal data upon termination of the service relationship.

nv777 uses cookies and similar tracking technologies to operate the Platform, remember your preferences, maintain your login session, and collect usage analytics. The following categories of cookies are used:

• Strictly necessary cookies: These cookies are essential for the Platform to function. They maintain your login session, store your language and currency preferences, and enable the cashier to process transactions securely. These cookies cannot be disabled without impairing the functionality of the Platform.
• Performance and analytics cookies: These cookies collect anonymised data about how visitors interact with the Platform — which pages are visited most, how long sessions last, and where users exit the site. This data helps nv777 improve the usability and performance of the Platform.
• Functionality cookies: These cookies remember choices you have made — such as your preferred deposit method or notification settings — so that you do not need to re-enter them on each visit.
• Marketing and retargeting cookies: With your consent, nv777 may use cookies to understand your interests and deliver relevant promotional content on the Platform. These cookies do not share your personal data with advertisers outside the nv777 Platform.

nv777 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable regulatory and legal obligations. The following retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be linked to any identifiable individual. Where data is anonymised rather than deleted, it may be retained indefinitely for aggregate statistical analysis.

As a data subject whose personal data is processed by nv777, you hold the following rights with respect to your information. You may exercise any of these rights at any time by contacting the nv777 Data Protection team as described in Section 14:

nv777 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include, but are not limited to:

• Transport-layer encryption: All data transmitted between your browser or app and nv777 servers is encrypted using TLS 1.2 or higher with 256-bit AES encryption, enforced via HTTPS on every page of the Platform.
• Encryption at rest: Sensitive data fields — including payment account identifiers, KYC document images, and password hashes — are stored in encrypted form in our database. Encryption keys are managed separately from the encrypted data and rotated on a regular schedule.
• Access controls: Internal access to personal data is restricted on a strict need-to-know basis. Each employee and contractor is granted the minimum level of access required to perform their role. Access privileges are reviewed quarterly and revoked immediately upon termination of employment or contract.
• Multi-factor authentication: Administrative access to nv777's production infrastructure and data systems requires multi-factor authentication (MFA). Players are strongly encouraged to enable 2FA on their own nv777 Accounts.
• Intrusion detection and monitoring: nv777 operates 24/7 security monitoring of its infrastructure, including intrusion detection systems (IDS), web application firewall (WAF) protection, and automated alerting for anomalous access patterns.
• Vulnerability management: nv777 conducts regular security assessments, including penetration testing by qualified third-party security professionals, and applies security patches to our infrastructure on a timely basis.
• Staff training: All nv777 staff who handle personal data receive regular data protection and information security training. Employees are subject to confidentiality obligations that survive the termination of their employment.

nv777 is strictly an adults-only platform. You must be at least 21 years of age to register an Account or use any betting or gaming service on the Platform. This age requirement applies to all players regardless of jurisdiction, and is enforced at the point of registration and again during the KYC identity verification process.

nv777 does not knowingly collect personal data from any person under the age of 21. If nv777 becomes aware — through the KYC process, a complaint, or any other means — that personal data has been collected from a minor, nv777 will immediately suspend the Account, refund any remaining balance to the deposit source, delete all personal data associated with that Account, and (where required by applicable law) report the incident to the relevant regulatory authority.

Parents and guardians who believe that a minor in their care has registered an Account on nv777 are requested to contact nv777 support immediately at support@nv777.my (plain text — not a clickable link). nv777 will treat all such reports as a matter of urgency and will take action within 24 hours of receiving credible evidence.

nv777 operates as an internationally licensed online betting platform. Some of the third-party service providers with whom we share personal data (as described in Section 6) are located outside Indonesia. As a result, personal data may be transferred to, stored in, and processed in countries other than your country of residence.

Where personal data is transferred internationally, nv777 takes steps to ensure that an appropriate level of protection is applied to that data by putting in place one or more of the following safeguards:

• Standard contractual clauses approved by the relevant data protection authority, binding the recipient to process the data only in accordance with nv777's instructions and applicable data protection principles.
• Binding corporate rules where the transfer is to a member of the same corporate group as nv777.
• Transfers to recipients in countries that have been assessed as providing an adequate level of data protection by the relevant regulatory authority.

For further information about the safeguards applied to any specific international transfer, please contact the nv777 Data Protection team using the details provided in Section 14.

nv777 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, new regulatory requirements, or updates to the services offered on the Platform. When material changes are made to this Policy, nv777 will update the "Last updated" date at the top of this page and, where the changes are significant, notify registered players via email using the address on file for their Account.

Your continued use of the Platform following the publication of a revised Privacy Policy constitutes your acknowledgment of the revised terms. We encourage you to review this Policy periodically to stay informed about how nv777 protects your personal information. If you disagree with a material change to this Policy, you should stop using the Platform and close your Account before the effective date of the change.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way nv777 handles your personal data, please contact the nv777 Data Protection team through any of the channels listed below. All privacy-related correspondence is treated as confidential and will be responded to within the timeframes stated.