Privacy Policy — an777

In this Privacy Policy, the following terms carry the meanings set out below unless context requires otherwise.

This Privacy Policy applies to all Personal Data collected and processed by an777 in connection with the operation of the Platform and the provision of its online betting and gaming services to Members located in Indonesia, including players in Jakarta, Surabaya, Bandung, Medan, Bali, Yogyakarta, Semarang, and other Indonesian cities and regions.

an777 acts as the data controller for the Personal Data described in this Policy. This means that an777 determines the purposes for which your Personal Data is collected and the means by which it is processed. Where an777 engages Third-Party Processors to handle data on its behalf, those processors act under an777's documented instructions and are bound by contractual data-protection obligations.

This Policy governs data collected through all channels, including:

• The an777 website and any mobile-optimised version of it.
• The account registration, login, and KYC verification processes.
• Deposit and withdrawal transactions processed through BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata, OVO, DANA, GoPay, ShopeePay, and LinkAja.
• Customer support interactions via live chat and email.
• Cookies, log files, and other automated data collection technologies operating on the Platform.
• Participation in promotions, tournaments, and seasonal campaigns.

an777 collects Personal Data through two principal channels: information you provide directly when interacting with the Platform, and information collected automatically as a result of your use of the Platform. The categories of data collected are set out below.

3.1 Data You Provide Directly

• Registration Data: Full legal name, date of birth, Indonesian residential address, mobile phone number, and email address provided when creating your an777 account.
• KYC Documents: Government-issued identity documents (such as your KTP — Indonesian national identity card), selfie images taken alongside your KTP, and proof of payment method, submitted as part of the identity and age verification process.
• Financial Data: Bank account details (BCA, BRI, BNI, Mandiri, or other supported Indonesian banks), e-wallet account references (OVO, DANA, GoPay, ShopeePay, LinkAja), and transaction records relating to deposits and withdrawals.
• Communications: Content of messages sent to an777 support through live chat, email ([email protected]), or any other in-platform communication channel, including records of disputes and complaints.
• Preferences: Responsible gaming tool settings such as deposit limits, loss limits, session time limits, cooling-off requests, and self-exclusion requests.
• Promotion Participation: Responses to an777 surveys, bonus claim requests, and entries to promotions or tournaments.

3.2 Data Collected Automatically

• Device & Connection Data: IP address, browser type and version, operating system, device type, screen resolution, and the referral URL through which you arrived at the Platform.
• Usage Data: Pages visited, games played, betting markets accessed, session duration, click-stream data, search queries entered on the Platform, and feature interaction patterns.
• Transaction Logs: Automatically generated records of all bets placed, game rounds completed, deposits made, and withdrawals processed, including timestamps in WIB.
• Cookie & Tracking Data: Data collected via cookies, web beacons, and similar technologies as described in Section 6 of this Policy.

an777 uses the Personal Data it collects for the following purposes, each of which is described alongside the legal basis for processing in Section 5.

an777 processes your Personal Data only where there is a valid legal basis for doing so. The primary legal bases on which we rely are as follows:

1. Contractual Necessity: Processing that is necessary to perform the contract between an777 and you (the an777 Terms and Conditions), including account creation, service delivery, payment processing, and customer support.
2. Legal Obligation: Processing required to comply with an777's legal obligations, including KYC and AML verification, age verification (21+ requirement), fraud prevention, and responding to lawful authority requests.
3. Legitimate Interests: Processing carried out in the pursuit of an777's legitimate business interests — such as platform security monitoring, fraud detection, and aggregated analytics — where those interests are not overridden by your fundamental rights and freedoms. an777 conducts a balancing assessment before relying on this basis.
4. Consent: Processing that is based on your freely given, specific, informed, and unambiguous consent — primarily the sending of marketing communications. Where consent is the basis for processing, you may withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.
5. Vital Interests: In rare circumstances, an777 may process data to protect the vital interests of a Member or a third party — for example, where a Member has disclosed a risk of self-harm in connection with a gambling-related crisis.

Where an777 intends to use your Personal Data for a purpose materially different from those listed in Section 4, we will notify you in advance and, where required, seek your consent.

an777 uses cookies and similar tracking technologies to operate the Platform efficiently, remember your preferences, maintain your login session, and understand how Members interact with our services. The categories of cookies used by an777 are described below.

an777 does not use third-party advertising or retargeting cookies that track your browsing activity across external websites. You can manage or delete cookies at any time through your browser's settings. Deleting strictly necessary cookies will require you to log in again and may temporarily affect Platform functionality.

an777 does not sell, rent, or trade your Personal Data. We share your data with third parties only in the following limited and controlled circumstances:

• Payment Processors: Your financial account details are shared with the relevant Indonesian bank (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata) or e-wallet provider (OVO, DANA, GoPay, ShopeePay, LinkAja) solely to process your deposit or withdrawal transaction. These providers process your data under their own privacy policies in addition to any contractual obligations owed to an777.
• KYC and Identity Verification Providers: Where an777 uses a third-party KYC provider to assist with identity and age verification, your KYC documents and personal details are shared with that provider only to the extent necessary to complete the verification process.
• Game Studios and Software Providers: Game providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft may receive anonymised session and game-round data to support game performance, audit, and certification processes. These providers do not receive your personally identifiable information.
• Customer Support Tools: An777 may use third-party platforms to deliver live chat and email support. Support agents operating through such platforms access only the account and communication data necessary to respond to your query.
• Analytics and Platform Monitoring: Aggregated, anonymised usage data may be processed by analytics tools to help an777 measure Platform performance. No personally identifiable information is included in analytics reports.
• Legal Authorities: an777 may disclose Personal Data to law enforcement agencies, regulatory bodies, or courts where required to do so by applicable law, or where necessary to prevent or detect crime, fraud, or money laundering.
• Corporate Transactions: In the event of a merger, acquisition, or sale of an777's business, Personal Data held by an777 may be transferred to the successor entity, subject to the same data-protection obligations set out in this Policy. Members will be notified of any such transfer.

an777 operates infrastructure that may result in your Personal Data being stored or processed in countries outside of Indonesia. This can occur when an777 uses cloud hosting services, KYC verification providers, or game studio systems that operate data centres in other jurisdictions.

Where such transfers occur, an777 takes appropriate steps to ensure that your Personal Data continues to receive a level of protection consistent with internationally recognised data-protection principles. These steps may include:

• Entering into data transfer agreements with the receiving entity that impose binding privacy and security obligations equivalent to those described in this Policy.
• Transferring data only to providers located in jurisdictions recognised as offering an adequate level of data protection.
• Applying additional technical safeguards such as pseudonymisation and encryption during transfer.

If you wish to obtain further details about the specific safeguards applied to any international transfer of your Personal Data, please contact an777's support team at [email protected] (plain text — not a clickable link).

an777 retains your Personal Data only for as long as is necessary to fulfil the purposes described in this Privacy Policy or as required by applicable law. The following general retention periods apply:

Where an777 is required to retain data for a longer period to comply with a legal obligation, court order, or regulatory instruction, the data will be retained for the period specified by that obligation and then securely deleted. When Personal Data is no longer required, an777 uses secure deletion or anonymisation techniques to ensure that the data cannot be recovered or reconstructed.

As a Member of the an777 platform, you have the following rights in relation to the Personal Data that an777 holds about you. These rights may be subject to certain limitations where an777 has a legal obligation to retain or process data, or where exercising the right would adversely affect the rights of others.

1. Right of Access: You have the right to request a copy of the Personal Data that an777 holds about you, together with information about how it is used and shared. an777 will respond to access requests within 30 days of receipt.
2. Right to Rectification: If any of the Personal Data an777 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. For account registration details, you may also update certain information directly through your account settings.
3. Right to Erasure: You have the right to request deletion of your Personal Data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent (and no other legal basis applies), or where the data has been unlawfully processed. This right is subject to an777's legal obligation to retain certain data as described in Section 9.
4. Right to Restrict Processing: You may request that an777 suspend the active processing of your Personal Data — without deleting it — while a dispute about its accuracy or the lawfulness of its processing is being resolved.
5. Right to Data Portability: Where processing is based on your consent or on contractual necessity and is carried out by automated means, you have the right to receive a structured, machine-readable copy of the Personal Data you have provided to an777.
6. Right to Object: You have the right to object to the processing of your Personal Data where that processing is based on legitimate interests. You also have an unconditional right to object to the use of your data for direct marketing purposes at any time.
7. Right to Withdraw Consent: Where an777 processes your data on the basis of your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that took place before withdrawal.

To exercise any of the above rights, contact the an777 support team via live chat (available 24/7, WIB) or by emailing [email protected] (plain text — not a clickable link). Please include your registered account username and a description of the right you wish to exercise. an777 may ask you to verify your identity before processing the request.

an777 implements a comprehensive set of technical and organisational security measures designed to protect your Personal Data against unauthorised access, accidental loss, destruction, or alteration. These measures include:

• Transport Encryption: All data exchanged between your browser or device and the an777 Platform is encrypted using 256-bit TLS. The Platform enforces HTTPS across all pages and API endpoints.
• At-Rest Encryption: Personal Data and KYC documents stored on an777 servers are encrypted at rest using industry-standard AES-256 encryption. Database backups are encrypted prior to storage.
• Access Controls: Access to Personal Data within an777's internal systems is governed by role-based access controls (RBAC). Only personnel who require access to specific data categories to perform their job functions are granted access. All internal access is logged and audited.
• Multi-Factor Authentication: an777 staff with access to production systems and Member data are required to authenticate using multi-factor authentication (MFA). an777 also offers MFA as an optional security feature for Member accounts.
• Penetration Testing: an777 conducts regular third-party penetration tests and vulnerability assessments of its Platform infrastructure to identify and remediate security weaknesses before they can be exploited.
• Incident Response: an777 maintains a documented data breach response plan. In the event of a security incident that is likely to result in a high risk to Members, an777 will notify affected Members promptly and take all reasonable steps to contain and remediate the incident.

While an777 takes all reasonable precautions to protect your data, no internet-based platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your account login credentials and for notifying an777 immediately if you suspect any unauthorised access to your account.

The an777 Platform is strictly restricted to individuals who are 21 years of age or older. 21+

an777 does not knowingly collect Personal Data from any individual under the age of 21. The registration process includes an age declaration requirement, and an777's KYC verification process is designed to detect and reject registrations by individuals who do not meet the minimum age requirement.

If an777 becomes aware that it has inadvertently collected Personal Data from an individual under the age of 21, it will take immediate steps to:

• Permanently close the relevant account.
• Void and return any deposits made to the account, less any amounts required to be retained for legal or regulatory reasons.
• Securely delete all Personal Data associated with the account, subject to any legal retention obligations.

If you are the parent or legal guardian of an individual under 21 who you believe has registered on the an777 Platform, please contact our support team immediately via live chat or by emailing [email protected] (plain text — not a clickable link). We will investigate and act promptly on all such reports.

an777 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data-processing practices, applicable law, or the services we offer. When material changes are made, an777 will notify registered Members by email and/or by displaying a prominent notice on the Platform for a period of not less than 7 days prior to the changes taking effect.

The date on which this Privacy Policy was most recently updated is displayed at the top of this page. We encourage you to review this Policy periodically to remain informed of how an777 handles your Personal Data. Your continued use of the Platform following the publication of an updated Policy constitutes acceptance of the revised terms.

If you have concerns about any changes to this Policy, please contact the an777 support team before continuing to use the Platform. If you do not agree with the updated Policy, you may close your account and request withdrawal of any eligible balance.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way in which an777 handles your Personal Data, please contact us through any of the following channels:

• Live Chat: Available 24 hours a day, 7 days a week, directly from the an777 Platform. Our Indonesian-speaking support agents operate across WIB, WITA, and WIT time zones.
• Email: [email protected] (plain text — not a clickable link). Our team aims to respond to all email enquiries within 24 hours (WIB business days).
• FAQ: Many common privacy-related questions are answered in our FAQ page. We recommend checking there first for a fast answer.

When contacting us about a data rights request (Section 10), please include your registered an777 username and a clear description of your request so we can process it as efficiently as possible. Identity verification will be required before any Personal Data is disclosed or deleted.