Privacy Policy

1. Introduction

Welcome to the nasa77 Privacy Policy. This document explains how nasa77 ("we," "us," or "our") collects, uses, discloses, and protects personal information from users ("you," "your," or "Players") of our online gaming platform located at https://nasa77.cam (the "Platform"). We are committed to protecting your privacy and handling your personal data with transparency and care in accordance with applicable data protection laws and international best practices.

This Privacy Policy applies to all information collected through our Platform, including our website, mobile applications, customer support channels, and any related services. By accessing or using the nasa77 platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and disclosure of your personal information as described herein.

We recognize that privacy is a fundamental right, and we are committed to maintaining the trust you place in us when you share your personal information. This policy outlines our data practices in clear, understandable language and explains the controls you have over your personal data.

2. Data Controller

For the purposes of applicable data protection legislation, nasa77 is the data controller responsible for your personal information. As the data controller, we determine the purposes and means of processing your personal data and are responsible for ensuring compliance with data protection laws.

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us using the information provided in Section 14 of this document.

3. Information We Collect

nasa77 collects various types of information to provide, maintain, and improve our Services, ensure platform security, and comply with legal obligations. The information we collect falls into the following categories:

3.1 Information You Provide Directly

When you register for an Account or use our Services, you voluntarily provide us with personal information, including:

• Identity Information: Full legal name, date of birth, gender, nationality, and government-issued identification numbers (e.g., KTP number for Indonesian residents)
• Contact Information: Email address, mobile phone number, residential address, and postal code
• Account Credentials: Username, password, and security questions/answers
• Financial Information: Bank account details (bank name, account number, account holder name), e-wallet information (OVO, DANA, GoPay, ShopeePay, LinkAja account identifiers), payment card information (for applicable payment methods), and transaction history
• Verification Documents: Copies of government-issued ID (KTP, passport, driver's license), proof of address documents (utility bills, bank statements), selfie photographs for identity verification, and source of funds documentation where required
• Communication Data: Content of messages, emails, and chat conversations with our customer support team, including any attachments or supporting documentation you provide

3.2 Information Collected Automatically

When you access and use the nasa77 platform, we automatically collect certain technical and usage information:

• Device Information: Device type, operating system, browser type and version, device identifiers, screen resolution, and mobile network information
• Connection Data: IP address, internet service provider (ISP), geographic location (country, region, city), time zone settings, and network connection type
• Usage Data: Pages visited, features accessed, games played, bets placed, time spent on the Platform, navigation paths, referral sources, and interaction patterns
• Gaming Activity: Game preferences, betting history, wagering patterns, win/loss records, bonus usage, and gameplay statistics
• Cookies and Tracking Technologies: Data collected through cookies, web beacons, pixels, and similar technologies (see Section 10 for detailed information)

3.3 Information from Third Parties

In certain circumstances, we may receive information about you from third-party sources:

• Payment Processors: Transaction confirmations, payment status, and fraud prevention data from Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, BSI, Bank Permata) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja)
• Identity Verification Services: Age verification, identity authentication, and document validation results from third-party verification providers
• Fraud Prevention Services: Risk assessment data, device fingerprinting information, and fraud alerts from specialized security providers
• Public Databases: Information from publicly available sources to verify identity or comply with regulatory requirements

4. How We Use Your Information

nasa77 processes your personal information for the following purposes:

4.1 Service Provision and Account Management

• Create and maintain your user Account
• Verify your identity and age (21+ requirement)
• Process registrations and account modifications
• Enable gameplay and betting functionality across casino games, sports betting, live dealer games, and lottery products
• Process deposits, withdrawals, and payment transactions
• Manage bonuses, promotions, and loyalty programs
• Calculate and distribute winnings
• Provide customer support and respond to your inquiries

4.2 Legal and Regulatory Compliance

• Comply with Know Your Customer (KYC) and Anti-Money Laundering (AML) regulations
• Verify legal eligibility to use gaming services (age, residency, legal capacity)
• Maintain records required by gaming authorities and financial regulators
• Respond to legal requests, court orders, and regulatory inquiries
• Report suspicious activity to relevant authorities when required by law
• Enforce our Terms & Conditions and detect Terms violations

4.3 Security and Fraud Prevention

• Detect and prevent fraudulent activity, money laundering, and financial crimes
• Identify and block multiple accounts, collusion, and bonus abuse
• Monitor gameplay for unfair practices, cheating, or exploitation
• Protect against unauthorized access, cyber attacks, and security breaches
• Verify payment authenticity and prevent chargebacks
• Maintain platform integrity and ensure fair gaming practices

4.4 Platform Improvement and Personalization

• Analyze usage patterns to improve Platform functionality and user experience
• Personalize content, game recommendations, and promotional offers based on your preferences
• Develop new features, games, and services
• Conduct research and analytics to understand Player behavior and preferences
• Optimize Platform performance, speed, and reliability

4.5 Marketing and Communications

• Send promotional offers, bonuses, and special campaigns (with your consent)
• Notify you of new games, features, and platform updates
• Communicate important account information and service announcements
• Conduct surveys and gather feedback to improve our Services
• Send responsible gaming reminders and notifications

4.6 Responsible Gaming

• Monitor gaming behavior for signs of problem gambling
• Implement deposit limits, loss limits, and session time restrictions
• Process self-exclusion requests and enforce cooling-off periods
• Provide reality check notifications and responsible gaming resources
• Intervene when patterns suggest harmful gambling behavior

5. Legal Basis for Processing

nasa77 processes your personal data based on the following legal grounds:

• Contractual Necessity: Processing is necessary to perform our contract with you (our Terms & Conditions), including providing gaming services, processing payments, and maintaining your Account
• Legal Obligation: Processing is required to comply with applicable laws, including KYC/AML regulations, age verification requirements, gaming licenses, tax obligations, and regulatory reporting
• Legitimate Interests: Processing is necessary for our legitimate business interests, such as fraud prevention, security maintenance, platform improvement, and direct marketing, provided these interests do not override your fundamental rights and freedoms
• Consent: For certain processing activities (such as marketing communications and optional cookies), we rely on your explicit consent, which you may withdraw at any time

6. Information Sharing and Disclosure

nasa77 does not sell your personal information to third parties. We may share your information in the following limited circumstances:

6.1 Service Providers

We engage trusted third-party service providers to perform functions on our behalf, including:

• Payment Processors: Indonesian banks and e-wallet providers to process deposits and withdrawals
• Identity Verification Services: Specialized providers for KYC verification and age validation
• Cloud Hosting Providers: Secure data storage and server infrastructure
• Customer Support Platforms: Tools to manage support tickets and live chat
• Analytics Services: Platforms for usage analytics and performance monitoring
• Security Providers: Fraud detection, DDoS protection, and cybersecurity services

All service providers are contractually bound to process your data only as instructed by nasa77 and to maintain appropriate security measures.

6.2 Legal Requirements

We may disclose your information when required by law or in response to:

• Court orders, subpoenas, or legal processes
• Requests from law enforcement or regulatory authorities
• Requirements under gaming licenses and financial regulations
• Investigations of suspected illegal activity or Terms violations

6.3 Business Transfers

In the event of a merger, acquisition, reorganization, or sale of assets, your personal information may be transferred to the acquiring entity, subject to the same privacy protections outlined in this Policy.

6.4 Aggregated and Anonymized Data

We may share aggregated, anonymized, or de-identified data that cannot reasonably be used to identify you for research, analytics, or business purposes.

7. Data Retention

nasa77 retains your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Specific retention periods include:

• Active Accounts: Personal data is retained for the duration of your Account's active status plus an additional period required for regulatory compliance
• Closed Accounts: Following Account closure, we retain identity information, transaction records, and compliance documentation for a minimum of 7 years to meet AML/KYC legal obligations
• Financial Records: Payment transaction data and tax-related information are retained for 7-10 years in accordance with Indonesian tax law and international financial regulations
• Marketing Data: If you opt out of marketing communications, we retain your contact information on a suppression list to ensure we do not contact you again
• Security Logs: Technical logs and security incident records are retained for 2 years for fraud prevention and security purposes

After the applicable retention period expires, we securely delete or anonymize your personal data using industry-standard data destruction methods.

8. Security Measures

nasa77 implements comprehensive technical, administrative, and physical security measures to protect your personal information against unauthorized access, loss, misuse, alteration, or destruction. Our security practices include:

Security Measure	Description
Encryption	256-bit SSL/TLS encryption for all data transmissions. AES-256 encryption for stored sensitive data including passwords and financial information.
Access Controls	Role-based access restrictions ensuring only authorized personnel can access personal data on a need-to-know basis.
Authentication	Multi-factor authentication (MFA) for staff accounts. Strong password requirements for Player accounts with regular rotation policies.
Network Security	Firewalls, intrusion detection systems (IDS), DDoS protection, and regular penetration testing to defend against cyber threats.
Data Segregation	Player funds held in segregated accounts separate from operational funds. Personal data stored in secure, geographically distributed data centers.
Monitoring	24/7 security monitoring, automated threat detection, and incident response protocols. Regular security audits and vulnerability assessments.
Staff Training	Mandatory data protection and security awareness training for all employees with access to personal information.

While we employ industry-leading security measures, no system is completely invulnerable. You also play a critical role in protecting your Account by maintaining strong, unique passwords, enabling two-factor authentication where available, and immediately reporting any suspicious activity to our support team.

9. Your Privacy Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

9.1 Right of Access

You have the right to request confirmation of whether we process your personal data and to obtain a copy of that data. We will provide this information within 30 days of your request.

9.2 Right to Rectification

You may request correction of inaccurate or incomplete personal information. You can update most information directly through your Account settings.

9.3 Right to Erasure (Right to be Forgotten)

You may request deletion of your personal data in certain circumstances, subject to our legal obligations to retain certain records for regulatory compliance. Note that exercising this right may result in Account closure.

9.4 Right to Restriction of Processing

You may request that we limit how we use your data in specific situations, such as when you contest the accuracy of the data or object to processing.

9.5 Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit that data to another controller where technically feasible.

9.6 Right to Object

You may object to processing based on legitimate interests or for direct marketing purposes. We will cease processing unless we demonstrate compelling legitimate grounds that override your interests.

9.7 Right to Withdraw Consent

Where processing is based on your consent, you may withdraw that consent at any time. This does not affect the lawfulness of processing conducted prior to withdrawal.

9.8 Exercising Your Rights

To exercise any of these rights, please contact us using the information in Section 14. We will respond to your request within 30 days and may require verification of your identity before processing the request.

10. Cookies and Tracking Technologies

nasa77 uses cookies, web beacons, pixels, and similar tracking technologies to enhance your experience, analyze usage patterns, and personalize content. Cookies are small text files stored on your device that help us recognize you on subsequent visits.

10.1 Types of Cookies We Use

• Essential Cookies: Required for Platform functionality, including session management, authentication, and security. These cannot be disabled without impairing site functionality.
• Performance Cookies: Collect anonymous data about how visitors use the Platform, helping us improve performance and identify technical issues.
• Functional Cookies: Remember your preferences (language, currency, display settings) to provide a personalized experience.
• Marketing Cookies: Track your activity to deliver relevant advertising and promotional content. These require your consent and can be disabled in your browser settings.

10.2 Managing Cookies

You can control cookies through your browser settings. Most browsers allow you to refuse cookies or delete existing cookies. However, disabling essential cookies will impair Platform functionality and may prevent you from using certain features.

11. International Data Transfers

nasa77 primarily serves Indonesian players and stores data in secure data centers located in regions with robust data protection laws. In some cases, your personal information may be transferred to, stored, or processed in countries outside Indonesia, including countries that may have different data protection standards.

When we transfer data internationally, we ensure appropriate safeguards are in place, including:

• Standard contractual clauses approved by relevant data protection authorities
• Transfers to countries deemed to provide adequate data protection
• Binding corporate rules within our corporate group
• Your explicit consent for specific transfers

12. Children's Privacy

The nasa77 platform is strictly for adults aged 21 years and older. We do not knowingly collect personal information from individuals under 21 years of age. If we become aware that a person under 21 has provided us with personal information, we will immediately delete their Account and all associated data.

If you believe a person under 21 has created an Account on nasa77, please contact us immediately at [email protected] so we can take appropriate action.

13. Changes to This Privacy Policy

nasa77 reserves the right to modify this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. When we make material changes, we will:

• Update the "Last Updated" date at the top of this Policy
• Notify you via email (if you have provided a valid email address)
• Display a prominent notice on the Platform
• For material changes affecting your rights, request your renewed consent where required by law

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Your continued use of the Platform after changes are posted constitutes acceptance of the revised Privacy Policy.

14. Contact Information

If you have questions, concerns, complaints, or requests regarding this Privacy Policy or our data practices, please contact us through the following channels:

• Email: [email protected]
• Data Protection Officer Email: [email protected]
• Live Chat: Available 24/7 through the nasa77 platform
• Customer Support Hours: 24 hours a day, 7 days a week
• Language Support: English and Bahasa Indonesia

We aim to respond to all privacy inquiries within 30 days. For urgent matters, please indicate the nature of your concern in the subject line.

If you are not satisfied with our response to your privacy concern, you may have the right to lodge a complaint with a data protection supervisory authority in your jurisdiction.