Privacy Policy — How nona77 Protects Your Data

nona77 operates an online gaming platform serving customers throughout Indonesia. We recognize that your personal information is valuable and sensitive, and we are committed to protecting it with the highest standards of security, confidentiality, and regulatory compliance.

This Privacy Policy explains:

• What categories of personal data we collect about you;
• How and why we collect that data;
• What we do with the data once we have it;
• Who we may share it with and under what conditions;
• How long we keep it;
• What rights you have regarding your personal data;
• How we protect your data from unauthorized access or misuse.

This Policy applies to all personal data processed by nona77 in connection with your use of our platform, whether you access it via desktop browser, mobile browser, or any future dedicated application.

For the purposes of applicable data protection law, nona77 is the "data controller" of the personal information collected through the platform. This means nona77 determines the purposes for which and the manner in which your personal data is processed.

If you have any questions about this Privacy Policy, how we handle your data, or wish to exercise any of the rights described herein, you may contact our Data Protection team via the email address provided at the end of this document.

nona77 collects and processes the following categories of personal information:

nona77 collects personal data through the following channels:

• Direct provision by you: When you register an account, submit KYC documents, make deposits or withdrawals, place bets, contact customer support, or fill out forms on the platform.
• Automated collection: Technical data such as IP address, device identifiers, and browsing behavior are collected automatically via cookies and server logs when you access the platform.
• Third-party sources: In limited cases, we may obtain data from third-party identity verification services, payment processors (to confirm transaction validity), or fraud prevention databases as part of our compliance obligations.

nona77 processes your personal data for the following purposes, each of which is necessary for the operation of our platform and the services we provide:

Under data protection law, nona77 must have a valid legal basis to process your personal data. We rely on the following legal grounds:

• Contractual Necessity: Processing is necessary to perform the contract between you and nona77 (the Terms & Conditions). This covers account management, transaction processing, and service delivery.
• Legal Obligation: Processing is required to comply with legal obligations such as KYC, AML, age verification, tax reporting, and licensing requirements.
• Legitimate Interest: Processing is necessary for our legitimate interests in preventing fraud, improving platform security, analyzing service performance, and protecting the rights of nona77 and other members — provided those interests are not overridden by your privacy rights.
• Consent: For marketing communications and certain non-essential cookies, we rely on your explicit consent, which you may withdraw at any time via your account settings.

nona77 does not sell your personal information to third parties. However, we do share data with carefully selected service providers and regulatory bodies under the following circumstances:

nona77 retains personal data for as long as necessary to fulfill the purposes for which it was collected, or as required by law. Specific retention periods include:

• Active accounts: Data is retained for the duration of your account relationship with nona77 plus any applicable legal retention period.
• Closed accounts: Most personal data is deleted or anonymized within 90 days of voluntary account closure, except where we have a legal obligation to retain it longer.
• Financial records: Transaction data, KYC documents, and AML-related records are retained for a minimum of 7 years from the date of the last transaction or account closure, in accordance with international financial record-keeping standards.
• Self-excluded accounts: Self-exclusion records are retained indefinitely to prevent account re-opening and to honor your responsible gaming request.
• Marketing data: If you unsubscribe from marketing communications, your email address is retained in a suppression list to prevent future marketing contact.
• Technical logs: Server logs and IP address data are typically retained for 12 months for security and fraud detection purposes.

You have the following rights regarding your personal data. To exercise any of these rights, please contact our Data Protection team using the email address provided in Clause 15.

We will respond to all verified rights requests within 30 days. If we are unable to comply with a request, we will explain why. There is no fee for exercising these rights unless your request is manifestly unfounded or excessive.

nona77 employs a comprehensive range of technical and organizational measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• Encryption: All data transmitted between your device and our servers is encrypted using SSL/TLS 1.3 protocols. Passwords are hashed using bcrypt with per-user salts.
• Access Controls: Personal data is accessible only to authorized nona77 employees and service providers who require it to perform their duties. All access is logged and audited.
• Secure Data Centers: Data is stored in ISO 27001 certified data centers with physical security controls, redundant power supplies, and climate management systems.
• Intrusion Detection: We employ 24/7 network monitoring, firewall protection, and intrusion detection systems to identify and respond to security threats in real time.
• Regular Security Audits: Independent third-party security firms conduct annual penetration testing and vulnerability assessments of our platform.
• Incident Response: In the event of a data breach affecting your rights and freedoms, we will notify you and relevant authorities within 72 hours as required by law.

While we take every reasonable precaution to protect your data, no internet transmission or electronic storage system is 100% secure. You also play a role in protecting your account by choosing a strong password, not sharing it with others, and logging out after each session on shared devices.

nona77 uses cookies and similar technologies (web beacons, pixels, local storage) to enhance your experience, analyze platform usage, and deliver personalized content. A cookie is a small text file stored on your device that helps us recognize you on return visits.

You can manage cookie preferences through your browser settings. Note that disabling certain cookies may limit platform functionality. For detailed information about the specific cookies we use, please refer to our Cookie Policy (available via account settings once logged in).

nona77 is strictly an adults-only platform. We do not knowingly collect or process personal data from individuals under the age of 21. Our registration process includes mandatory age verification, and KYC documents are reviewed to confirm age eligibility.

If we discover that we have inadvertently collected data from a person under 21 years of age, we will:

• Immediately close the account;
• Delete or anonymize all associated personal data;
• Return any deposited funds (net of winnings) to the payment method used;
• Refer the matter to our compliance team for further investigation.

If you are a parent or guardian and believe your child has provided personal information to nona77, please contact us immediately using the details in Clause 15.

nona77 primarily serves customers in Indonesia, and we make every effort to store and process your data within secure data centers located in jurisdictions with robust data protection laws. However, some of our service providers (payment processors, cloud infrastructure, game studios) may be located outside Indonesia.

When personal data is transferred internationally, we ensure that:

• The destination country has been deemed to provide an adequate level of data protection;
• The recipient is bound by Standard Contractual Clauses (SCCs) approved by data protection authorities; or
• Other appropriate safeguards such as binding corporate rules or certification under recognized privacy frameworks are in place.

You may request further information about the safeguards we use for international data transfers by contacting our Data Protection team.

nona77 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. When material changes are made, we will notify you via the email address registered to your account at least 14 days before the changes take effect.

The "Effective Date" at the top of this page indicates when the current version was last updated. Continued use of the platform after the effective date of any changes constitutes your acceptance of the revised Privacy Policy.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your data.

If you have any questions, concerns, or requests regarding this Privacy Policy or how nona77 handles your personal data, please contact us:

You also have the right to lodge a complaint with a data protection supervisory authority if you believe nona77 has processed your personal data in violation of applicable law. However, we encourage you to contact us first so we may attempt to resolve your concern directly.