dn777 Privacy Policy

dn777 is committed to protecting the privacy and personal data of every individual who interacts with our Platform. We recognise that our Members — primarily Indonesian players seeking a safe, fair, and feature-rich online gaming experience — entrust us with sensitive personal and financial information. That trust is something we take seriously and work to earn every day.

This Policy has been drafted to meet the standards of internationally recognised data-protection principles, including transparency of purpose, data minimisation, purpose limitation, accuracy, storage limitation, integrity and confidentiality, and accountability. Where Indonesian data-protection regulations impose additional obligations, dn777 will comply with those requirements to the fullest extent practicable.

This Policy should be read alongside dn777's Terms & Conditions and Responsible Gaming policy, which together form the complete set of rules governing your use of the Platform.

For the purposes of this Policy, dn777 acts as the data controller in respect of the personal data it collects from Members and site visitors. As data controller, dn777 determines the purposes and means of processing personal data and is responsible for ensuring that such processing is carried out lawfully, fairly, and in a manner that respects the rights of data subjects.

Where dn777 engages third-party service providers to process personal data on its behalf — such as payment processors, identity verification providers, or game studio partners — those providers act as data processors and are contractually bound to process data only in accordance with dn777's instructions and in compliance with applicable data-protection standards.

All enquiries, requests, and complaints relating to dn777's data practices should be directed to our designated data-privacy contact at [email protected].

dn777 collects only the personal data that is necessary for the purposes described in this Policy. The categories of data we collect are set out below:

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or biometric data beyond what is strictly required for identity verification purposes under our KYC obligations.

dn777 collects personal data through the following channels:

• Direct interactions: Data you provide when registering an Account, submitting identity documents for KYC, making deposits or withdrawals, contacting customer support, or responding to surveys and promotional campaigns.
• Automated technologies: Technical and usage data collected automatically via cookies, web beacons, server logs, and similar tracking technologies each time you access or interact with the Platform. See Section 9 for full details on our cookies policy.
• Third-party sources: Identity and fraud-risk data received from KYC verification partners, financial screening providers, and payment processors when you initiate a transaction or when dn777 is required to verify your identity. dn777 may also receive data from analytics providers to help us understand how Members discover and navigate the Platform.
• Game studios and data providers: Aggregated gameplay data from third-party studio partners such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, and Spribe, used solely for account management and dispute resolution purposes.

dn777 processes your personal data only where a valid legal basis exists. The table below sets out our primary processing purposes and the corresponding legal basis for each:

dn777 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We share personal data only in the following limited circumstances:

• Payment processors and banking partners: We share financial data (including bank account details and transaction amounts in IDR) with our payment processing partners — including local Indonesian bank transfer facilitators and e-wallet providers such as OVO, DANA, GoPay, ShopeePay, and LinkAja — solely for the purpose of executing your requested transactions.
• KYC and identity verification providers: When you submit identity documents as part of our KYC process, those documents and associated data are shared with our contracted identity verification partner. That partner processes the data under strict confidentiality obligations and is not permitted to use it for any purpose other than the verification service they provide to dn777.
• Game studio and content partners: Limited account-level data (such as Member ID and session tokens) is shared with third-party game studios including Pragmatic Play, Evolution Gaming, Spribe, Pocket Games Soft, and NetEnt to enable game delivery and session integrity. These studios do not receive your full identity or financial data.
• Fraud prevention and security services: We may share technical data (including IP addresses and device fingerprints) with third-party fraud-detection and cybersecurity providers for the purpose of identifying and preventing suspicious activity on the Platform.
• Regulatory and law enforcement authorities: Where required by applicable law, court order, or a valid regulatory request, dn777 may disclose personal data to government bodies or law enforcement agencies. We will notify you of any such disclosure to the extent permitted by law.
• Corporate transactions: In the event of a merger, acquisition, or sale of substantially all of dn777's assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified in advance of any such transfer and of any resulting changes to this Privacy Policy.

All third-party service providers with whom dn777 shares personal data are required to process that data in accordance with applicable data-protection standards and are prohibited from using it for any purpose beyond the specific service they provide to dn777.

dn777 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected or as required by applicable law. The following retention periods apply as a general guide:

• Account and identity data: Retained for the duration of your active membership and for a minimum of five (5) years following Account closure, in accordance with anti-money laundering record-keeping obligations.
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction to satisfy financial reporting and regulatory requirements.
• KYC documents: Retained for a minimum of five (5) years following the completion of the verification process or Account closure, whichever is later.
• Customer support communications: Retained for three (3) years from the date of the last interaction, or longer if the communication relates to an unresolved dispute or regulatory investigation.
• Marketing and preference data: Retained until you withdraw consent or for two (2) years of Account inactivity, whichever comes first.
• Technical and usage logs: Retained for twelve (12) months on a rolling basis for Platform security and performance monitoring purposes.

Upon expiry of the applicable retention period, personal data is either permanently deleted or irreversibly anonymised, unless a longer retention period is required by a specific legal obligation.

dn777 employs a layered approach to data security designed to protect your personal and financial information against unauthorised access, disclosure, alteration, or destruction. Our security infrastructure includes:

• SSL/TLS 256-bit encryption applied to all data transmitted between your browser or device and the dn777 Platform, ensuring that your login credentials, financial data, and personal information are protected in transit.
• At-rest encryption for sensitive data fields stored in our databases, including identity documents, financial account numbers, and authentication credentials.
• Two-factor authentication (2FA) available to all Members as an optional but strongly recommended additional layer of Account security. Members with 2FA enabled are significantly less vulnerable to credential-theft attacks.
• Role-based access controls within dn777's internal systems, ensuring that only authorised personnel with a legitimate operational need may access Member personal data, and that such access is logged and audited.
• Regular penetration testing and security audits conducted by independent third-party cybersecurity specialists to identify and remediate vulnerabilities before they can be exploited.
• 24/7 fraud monitoring using automated systems that flag unusual account activity, suspicious login patterns, and anomalous transaction behaviour for immediate review by our security team.

dn777 uses cookies and similar tracking technologies to provide a functional, personalised, and secure browsing experience. A cookie is a small text file placed on your device by a web server when you visit a website. Cookies do not contain executable code and cannot access other data stored on your device.

The types of cookies used on the dn777 Platform are described below:

• Strictly necessary cookies: These cookies are essential for the Platform to function correctly. They maintain your login session, preserve your language and currency preferences, and protect the Platform against cross-site request forgery attacks. These cookies cannot be disabled without significantly impairing your ability to use the Platform.
• Performance and analytics cookies: These cookies collect anonymised information about how Members interact with the Platform — such as which pages are visited most frequently, how long sessions last, and where users encounter errors. This data helps us identify improvements and optimise the user experience.
• Functional cookies: These cookies remember your preferences and personalisation settings — such as your preferred deposit method, favourite game categories, or responsible gaming limits — to provide a more tailored experience across sessions.
• Marketing and targeting cookies: These cookies track your browsing behaviour across sessions to help dn777 display relevant promotions and content. They are only set with your explicit consent. You may withdraw consent at any time by clearing cookies in your browser settings.

You can control cookie settings through your browser's privacy preferences. Note that disabling strictly necessary cookies may prevent you from accessing certain features of the Platform, including secure login. Disabling performance or marketing cookies will not affect core Platform functionality.

As a data subject, you hold the following rights with respect to the personal data dn777 holds about you. To exercise any of these rights, please contact us at [email protected] with a clear description of your request. We will respond within 30 calendar days.

• Right of access: You have the right to request a copy of the personal data dn777 holds about you, along with information about how it is processed and the legal basis for that processing.
• Right to rectification: You have the right to request correction of any inaccurate or incomplete personal data we hold about you. You may update certain data fields directly through your Account settings.
• Right to erasure: You have the right to request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to dn777's legal retention obligations. Note that we are required to retain certain data for regulatory and anti-money-laundering purposes even after Account closure.
• Right to restrict processing: You have the right to request that dn777 restrict the processing of your personal data in specific circumstances — for example, while the accuracy of the data is being contested or pending the outcome of a complaint.
• Right to data portability: You have the right to receive a copy of the personal data you have provided to dn777 in a structured, commonly used, and machine-readable format, and to request that we transmit it directly to another data controller where technically feasible.
• Right to object: You have the right to object to the processing of your personal data where that processing is based on dn777's legitimate interests. dn777 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to the withdrawal.

The dn777 Platform is strictly intended for adults aged 21 years or older. We do not knowingly collect personal data from any individual under the age of 21. Our registration process requires all applicants to provide a date of birth, and accounts are subject to age verification as part of the KYC process.

If dn777 becomes aware that personal data has been collected from a person under the age of 21 — whether through a falsified date of birth at registration or any other means — we will promptly suspend the relevant Account, delete the personal data concerned to the extent not required for fraud-investigation or legal-obligation purposes, and return any real-money deposits to the payment method from which they originated.

If you are a parent or guardian and believe that a person under 21 in your care has registered on the Platform, please contact us immediately at [email protected] so that we can take appropriate action without delay.

The dn777 Platform does not contain links to external third-party websites other than those expressly required to deliver Platform services (such as the secure payment gateway interface presented during a deposit flow). dn777 exercises no control over, and accepts no responsibility for, the privacy practices or content of any third-party websites that may be independently accessed by Members outside the Platform environment.

We encourage you to review the privacy policies of any third-party services you use in connection with your dn777 Account — including your chosen Indonesian bank (BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata, BSI) and your e-wallet provider (OVO, DANA, GoPay, ShopeePay, LinkAja) — as those entities operate under their own independent privacy frameworks and data-handling obligations.

dn777 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or Platform features. When material changes are made, we will notify Members via the email address registered to their Account and/or by displaying a prominent notice on the Platform upon their next login.

The revised Policy will specify the updated effective date at the top of the document. Your continued use of the Platform following the effective date of any amendment constitutes your acknowledgement of the updated Policy. We encourage you to review this page periodically so that you remain informed of how your data is being handled.

For minor, non-material changes — such as typographical corrections or clarifications that do not alter the substance of our data practices — dn777 may update the Policy without issuing a direct notification to Members, though the revised effective date will always be updated on the page.

For all privacy-related enquiries, data subject rights requests, or concerns about how dn777 handles your personal data, please contact our data-privacy team through the following channel:

• Email: [email protected] — please include "Privacy Request" in the subject line to ensure your message is routed to the correct team.
• Live Chat: Available 24/7 via the chat widget on the Platform. Our Indonesian-speaking agents can assist with privacy enquiries in real time and escalate complex requests to our data-privacy team where necessary.
• Response Time: We aim to acknowledge all privacy-related requests within 48 hours and to provide a full substantive response within 30 calendar days. Where a request is complex or where multiple requests have been received simultaneously, we may extend this period by up to an additional 30 days and will notify you accordingly.

If you are not satisfied with the outcome of your privacy request or believe that dn777 has handled your personal data in a manner inconsistent with this Policy or applicable law, you may escalate your complaint by requesting a formal review through our internal escalation procedure. Details of this procedure are available from the support team on request.