Privacy Policy — dy777

dy777 ("we", "us", "our", "the Platform") is committed to protecting the privacy and security of every individual who accesses or uses the dy777 online casino and sportsbook platform at dy777.club. This Privacy Policy has been prepared in accordance with internationally recognized data protection principles and is designed to give you clear, transparent information about how your personal data is handled.

This Privacy Policy applies to all Members registered on the dy777 platform, to visitors who browse dy777.club without registering an account, and to any individual who contacts our support team. It covers data collected through the dy777 website, any mobile-optimized interfaces, live chat sessions, and email correspondence.

By registering a dy777 account or continuing to use the Platform, you acknowledge that you have read, understood, and consented to the data practices described in this Privacy Policy. If you do not agree with any part of this Policy, you should discontinue use of the Platform and contact our support team to arrange account closure.

This Privacy Policy should be read alongside our Terms & Conditions and our Responsible Gaming policy, both of which are incorporated by reference.

dy777 operates as the data controller responsible for your personal information collected through the Platform. As data controller, dy777 determines the purposes for which and the means by which your personal data is processed. Our designated data protection contact can be reached via the support channels listed in Section 14 of this Policy.

The Platform is operated under an internationally recognized online gaming license. All data processing activities carried out by dy777 are conducted in compliance with the data protection requirements of our licensing jurisdiction, as well as applicable international data protection standards.

Where dy777 engages third-party service providers (such as KYC verification services, payment processors, and game studios) who process your data on our behalf, those providers act as data processors under written agreements that bind them to confidentiality and security obligations consistent with this Policy.

dy777 collects only the categories of personal data that are necessary for the purposes described in Section 5 of this Policy. The categories we collect include:

dy777 collects personal data through the following channels:

• Account Registration: When you create a dy777 account, you provide identity, contact, and login credential data directly through the registration form.
• KYC Verification: When you submit identity documents for account verification, we collect the data contained within those documents (name, date of birth, KTP number, photograph).
• Deposits and Withdrawals: When you initiate a deposit or withdrawal through your linked BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, OVO, DANA, GoPay, ShopeePay, or LinkAja account, financial data associated with that transaction is recorded.
• Platform Usage: As you browse, log in, and play on dy777, technical and gaming data is automatically collected through server logs, session cookies, and our platform analytics systems.
• Support Interactions: When you contact us via live chat or email, the content of that communication and any data you provide within it is collected and stored.
• Third-Party Verification Providers: Where dy777 uses a third-party identity verification or AML screening service to validate your identity documents, that provider may return additional verification data to dy777 as part of the KYC process.

dy777 does not purchase personal data from data brokers or third-party marketing lists. All data we hold about you has been collected directly from you or generated through your use of the Platform.

dy777 processes your personal data for the following clearly defined purposes:

• Account Operation: To create, maintain, and manage your dy777 Member account, including authentication, session management, and account settings.
• Transaction Processing: To process deposits and withdrawals in IDR through your nominated Indonesian bank or e-wallet, and to maintain an accurate transaction history for your account.
• Identity Verification (KYC): To verify your identity and age (21+) in compliance with our licensing obligations and anti-money laundering requirements.
• Fraud Prevention and Security: To detect, investigate, and prevent unauthorized account access, multi-accounting, bonus abuse, money laundering, and other prohibited conduct as described in our Terms & Conditions.
• Responsible Gaming Compliance: To monitor gaming activity for indicators of problem gambling behavior, to enforce self-imposed limits and self-exclusion requests, and to comply with responsible gaming obligations under our license.
• Customer Support: To respond to your inquiries, resolve disputes, process responsible gaming requests, and deliver assistance through our 24/7 live chat and email support channels.
• Bonus and Promotion Administration: To assess eligibility for, issue, and track the wagering progress of bonuses and promotional offers.
• Legal and Regulatory Compliance: To fulfill record-keeping obligations, respond to lawful requests from regulatory or law enforcement authorities, and comply with AML reporting requirements.
• Platform Improvement: To analyze aggregated, anonymized usage patterns in order to improve platform performance, game selection, and user experience. This analysis does not identify you as an individual.
• Service Communications: To send you transactional messages directly related to your account (deposit confirmations, withdrawal approvals, security alerts). dy777 does not send unsolicited marketing emails without your explicit opt-in consent.

dy777 processes your personal data only where a valid legal basis exists. The legal bases we rely on are as follows:

• Contractual Necessity: Processing required to perform the contract between you and dy777 — specifically, to operate your account, process transactions, and deliver the services you have registered to receive. Without this processing, dy777 cannot provide you with access to the Platform.
• Legal Obligation: Processing required to comply with our legal and regulatory obligations, including KYC identity verification, AML transaction monitoring, age verification, and responding to lawful authority requests.
• Legitimate Interests: Processing necessary for dy777's legitimate business interests, including fraud detection, platform security, duplicate account identification, and anonymized analytics — provided these interests are not overridden by your fundamental rights and freedoms. We have assessed these interests and concluded they are proportionate and do not unduly infringe your privacy.
• Consent: Where dy777 relies on your consent as the legal basis for processing (e.g., for optional marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal. Withdrawal of consent does not affect your account access or service delivery.

dy777 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. Your data is shared only in the following limited circumstances:

• Payment Processors: Your financial data (bank account or e-wallet identifier, transaction amount in IDR) is shared with the relevant payment service provider (e.g., BCA, BRI, OVO, DANA) solely to execute your deposit or withdrawal instruction. These providers are independent data controllers for their own processing activities.
• KYC and Identity Verification Providers: Where dy777 uses a third-party KYC or AML screening service, your identity documents and personal details are transmitted to that provider under a data processing agreement for the sole purpose of verifying your identity and screening against sanctions and fraud lists.
• Game Studios and Software Providers: Game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft operate game servers that dy777 integrates into the Platform. These studios may receive your session token and bet data as part of normal game operation. They do not receive your full identity or financial data.
• Regulatory and Law Enforcement Authorities: dy777 will disclose personal data to competent regulatory, tax, or law enforcement authorities where legally required to do so, or where we believe in good faith that such disclosure is necessary to prevent fraud, money laundering, or other criminal activity.
• Professional Advisors: Lawyers, auditors, and other professional advisors engaged by dy777 may access your data on a strictly need-to-know basis and are bound by professional confidentiality obligations.
• Business Transfers: In the event of a merger, acquisition, restructuring, or sale of all or part of dy777's business, your personal data may be transferred to the successor entity. You will be notified of any such transfer and your rights with respect to your data will be preserved.

All third-party service providers who process data on dy777's behalf are required to implement appropriate technical and organizational security measures and to process data only on dy777's documented instructions.

dy777 retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply:

When the applicable retention period expires, personal data is either securely deleted, anonymized, or pseudonymized so that it can no longer be linked back to you as an individual. Anonymized or aggregated data derived from your account activity may be retained indefinitely for statistical and analytical purposes.

dy777 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. Our security infrastructure includes:

• 256-Bit SSL/TLS Encryption: All data transmitted between your browser or device and the dy777 servers is encrypted using industry-standard Transport Layer Security (TLS 1.2 or higher). This applies to login sessions, deposits, withdrawals, and all account management actions.
• Encryption at Rest: Personal data stored in dy777's databases — including identity documents, financial data, and account credentials — is encrypted at rest using AES-256 encryption.
• Password Security: Passwords are never stored in plain text. dy777 stores only a cryptographically hashed representation of your password using a strong one-way hashing algorithm with per-user salting.
• Access Controls: Access to production systems containing personal data is restricted to authorized dy777 personnel with a documented operational need. Access is governed by role-based access control (RBAC) and requires multi-factor authentication (MFA).
• Intrusion Detection and Monitoring: dy777's infrastructure is monitored continuously for anomalous access patterns, unauthorized login attempts, and indicators of data breach. Security events are logged and reviewed by our security team.
• Third-Party Security Audits: dy777 engages independent security professionals to conduct periodic penetration testing and vulnerability assessments of the Platform's infrastructure and application code.

Despite these measures, no internet-connected system can guarantee absolute security. In the unlikely event of a data breach that materially affects your rights, dy777 will notify affected Members and relevant authorities in accordance with our legal obligations and as promptly as practicable.

dy777 uses cookies and similar tracking technologies to operate the Platform, maintain your login session, detect fraud, and analyze anonymized usage patterns. The types of cookies we use are as follows:

• Strictly Necessary Cookies: These cookies are essential for the Platform to function. They maintain your authenticated session after login, store your language and currency preferences, and enable security features such as CSRF protection. These cookies cannot be disabled without impairing your ability to use the Platform.
• Functional Cookies: These cookies remember your preferences and settings (such as game view preferences or responsible gaming reminder intervals) so you do not need to reconfigure them on each visit.
• Analytics Cookies: dy777 uses privacy-respecting, first-party analytics to understand how Members navigate the Platform — which pages are most visited, where sessions typically end, and how long Members spend in different game categories. This data is aggregated and anonymized; it does not identify you as an individual.
• Security and Fraud Detection Cookies: These cookies help dy777 identify unusual or suspicious activity, such as simultaneous logins from multiple geographic locations or device fingerprinting patterns associated with known fraudulent accounts.

dy777 does not use third-party advertising cookies, retargeting pixels, or behavioral tracking technologies that profile you for advertising purposes on external platforms.

You may control cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will prevent you from logging in and using the Platform. Disabling analytics or functional cookies will not impair core account functionality.

As a dy777 Member, you have the following rights with respect to your personal data. To exercise any of these rights, contact our support team via live chat or at the email address listed in Section 14. dy777 will respond to verified requests within 30 days.

dy777 is strictly an adult platform. No person under 21 years of age is permitted to register an account, place a bet, or access any real-money game on the dy777 Platform. This is an absolute requirement with no exceptions.

dy777 does not knowingly collect personal data from individuals under 21. If you are a parent or guardian and believe that a minor in your household has provided personal data to dy777 or accessed the Platform, please contact our support team immediately via live chat. We will investigate the matter, close the relevant account without delay, and permanently delete all personal data associated with that account.

dy777 actively employs age verification as part of the KYC process and may request government-issued photo identification (such as an Indonesian KTP) from any Member to confirm their date of birth at any time. Accounts found to belong to individuals under 21 will be suspended immediately and all balances forfeited.

dy777 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, operational requirements, or applicable law. When we make material changes to this Policy, we will notify active Members by posting a prominent notice on the Platform or sending a notification to your registered email address, with a minimum of 7 days' notice before the updated Policy takes effect.

The "Last Updated" date at the top of this page reflects the date of the most recent revision. We encourage you to review this Privacy Policy periodically to remain informed about how dy777 protects your personal data.

Your continued use of the dy777 Platform after the effective date of any revised Privacy Policy constitutes your acceptance of the changes. If you do not agree with any updated provisions, you should discontinue use of the Platform and contact support to arrange account closure.

If you have any questions, concerns, or requests relating to this Privacy Policy or to dy777's handling of your personal data, please reach out through the following channels:

• Live Chat: Available 24/7 via the chat widget on the dy777 Platform. This is the fastest channel for data subject requests and privacy inquiries. Native Indonesian-speaking agents are available at all hours.
• Email: [email protected] — please note this is displayed as plain text and is not a clickable link. Allow up to 24 hours for a response during high-volume periods.

When submitting a data subject request, please include your registered username or email address, a description of the request type (e.g., access, rectification, erasure), and any relevant details that will help our team locate your records promptly. All requests are acknowledged within 3 business days and actioned within 30 days.