ina777 Privacy Policy

1 Introduction

This Privacy Policy ("Policy") describes how ina777 ("we", "us", "our", "the Platform") collects, processes, stores, shares, and protects the personal data of all registered users ("you", "your", "the User") who access the ina777 platform at ina777.cam and any associated subdomains or mobile-optimized interfaces.

ina777 is an internationally operated online gaming platform that serves players primarily located in Indonesia, including major cities such as Jakarta, Surabaya, Bandung, Medan, Bali, Semarang, Makassar, and Yogyakarta. We recognize that Indonesian players entrust us with sensitive personal and financial information, and we take that responsibility seriously.

This Policy should be read alongside our Terms & Conditions, which govern the overall contractual relationship between you and ina777. In the event of any conflict between this Policy and the Terms & Conditions regarding data matters, this Privacy Policy shall prevail.

If you do not agree with any provision of this Policy, you must discontinue use of the platform and may request account closure by contacting our support team.

2 Definitions

For the purposes of this Policy, the following definitions apply:

• "Personal Data" — any information that identifies or can be used to identify a natural person, directly or indirectly, including name, email address, phone number, IP address, bank account details, and device identifiers.
• "Processing" — any operation performed on personal data, including collection, storage, use, transmission, alteration, restriction, archiving, or deletion.
• "Data Controller" — ina777, as the entity that determines the purposes and means of processing your personal data.
• "Data Processor" — any third-party service provider that processes personal data on behalf of ina777 under a contractual data processing agreement (e.g., payment processors, KYC verification providers).
• "Consent" — a freely given, specific, informed, and unambiguous indication of your agreement to the processing of your personal data for a stated purpose.
• "Data Subject" — the individual whose personal data is being processed; in the context of this platform, this means you, the registered User.
• "Sensitive Data" — a subset of personal data that warrants heightened protection, including government-issued ID numbers, financial account details, and any health-related information submitted in the context of responsible gaming tools.

3 Data We Collect

ina777 collects personal data across several categories depending on how you interact with the platform:

3.1 Registration & Identity Data

• Full legal name (as it appears on your government-issued ID)
• Date of birth (to verify you are aged 21 or over)
• Email address
• Indonesian mobile phone number
• Residential address in Indonesia (city, province, postal code)
• Preferred username and encrypted password

3.2 KYC & Verification Data

• Photographs or scans of government-issued photo ID (KTP, passport, or SIM)
• Proof of address documents (utility bills, bank statements)
• Bank account details for Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata, OCBC NISP, BSI) used for withdrawals
• E-wallet account details (OVO, DANA, GoPay, ShopeePay, LinkAja) where applicable
• Source-of-funds declaration documents for high-volume accounts

3.3 Financial & Transaction Data

• Deposit and withdrawal transaction records including amounts in Indonesian Rupiah (IDR / Rp), timestamps, and payment method references
• Wagering history including bet amounts, game titles, outcomes, and account balance movements
• Bonus and promotional activity records

3.4 Technical & Device Data

• IP address and approximate geolocation derived from IP
• Browser type, version, and language settings
• Device type, operating system, and screen resolution
• Session timestamps, page navigation paths, and click-stream data
• Cookies and similar tracking identifiers (see Section 10)

3.5 Communications Data

• Records of live chat, email, and any other written support in teractions between you and our customer support team
• Feedback, complaints, or dispute correspondence submitted through any support channel
• Records of responsible gaming tool requests, self-exclusion applications, and related communications

4 How Data Is Collected

ina777 collects personal data through the following means:

• Directly from you: When you complete the registration form, submit KYC documents, make a deposit or withdrawal request, contact customer support, or interact with any form or input on the platform.
• Automatically: When you browse or use the platform, our servers automatically record technical data including your IP address, device identifiers, session duration, and navigation behavior via server logs and cookies.
• From third-party verification partners: When we conduct identity verification or fraud screening, our licensed KYC partners may return enriched data about the documents you submit, which is then associated with your account record.
• From payment processors: When you initiate a deposit or withdrawal, our payment processing partners confirm transaction status and may return payment method metadata that we retain as part of your financial record.

5 Purposes of Processing

ina777 processes your personal data exclusively for the following defined purposes:

• Account creation and management: To register your account, verify your identity, maintain your account profile, and provide you with access to all platform features.
• Age and eligibility verification: To confirm that you meet the minimum age requirement of 21 years and are eligible to use the platform under our Terms & Conditions.
• Payment processing: To facilitate deposits and withdrawals via Indonesian bank transfers (BCA, BRI, BNI, Mandiri, and others) and e-wallets (OVO, DANA, GoPay, ShopeePay, LinkAja), and to maintain accurate financial records.
• Fraud prevention and AML compliance: To detect, investigate, and prevent fraudulent activity, money laundering, and other forms of financial crime, including through automated transaction monitoring systems.
• Customer support: To respond to your inquiries, resolve disputes, process responsible gaming requests, and maintain a record of support interactions for quality assurance purposes.
• Platform security: To monitor for unauthorized access attempts, protect the integrity of the platform, and enforce our Terms & Conditions.
• Service improvement: To analyze aggregate, anonymized usage patterns that help us improve platform performance, game selection, and the overall user experience.
• Regulatory compliance: To meet any reporting or record-keeping obligations required by the jurisdiction in which ina777 holds its international operating license.
• Responsible gaming: To administer deposit limits, loss limits, self-exclusion requests, and other player protection tools you activate on your account.

ina777 does not process your personal data for purposes beyond those listed above without first obtaining your explicit consent or where required by law.

6 Legal Basis for Processing

ina777 relies on the following legal bases to process your personal data, in accordance with internationally recognized data protection principles:

• Contractual necessity: Processing your identity data, financial data, and KYC documents is necessary to perform the contract represented by our Terms & Conditions — without it, we cannot operate your account or process transactions.
• Legitimate interests: We process technical and device data, fraud-detection signals, and aggregate analytics data on the basis of our legitimate interest in maintaining a secure, functional, and commercially sustainable platform, provided such processing does not override your fundamental rights.
• Legal obligation: We process and retain certain transaction records and identity documents as required by the anti-money laundering and counter-terrorism financing obligations applicable in our licensing jurisdiction.
• Consent: Where we send promotional communications or deploy non-essential cookies, we rely on your explicit consent, which you may withdraw at any time without affecting the lawfulness of prior processing.

7 Data Sharing & Disclosure

ina777 does not sell your personal data. We share personal data with third parties only in the following strictly limited circumstances:

• Licensed payment processors: To process deposits and withdrawals via Indonesian banks and e-wallets, we share the minimum transaction data necessary with our payment processing partners. These partners operate under binding data processing agreements and are prohibited from using your data for any purpose other than payment facilitation.
• KYC and identity verification providers: When you submit identity documents for account verification, our licensed KYC partners process those documents on our behalf under strict confidentiality terms.
• Game content providers: Studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft may receive a session token or anonymized player identifier to authenticate your game session. These studios do not receive your full name, payment details, or contact information.
• Legal and regulatory authorities: We will disclose personal data to law enforcement, regulatory bodies, or courts where we are legally compelled to do so, or where disclosure is necessary to protect ina777's legal rights.
• Business restructuring: In the event of a merger, acquisition, or sale of ina777's business assets, personal data may be transferred to the acquiring entity as part of the transaction, subject to equivalent privacy protections being maintained.

8 Data Retention

ina777 retains personal data only for as long as is necessary to fulfill the purposes for which it was collected, and in compliance with applicable legal retention obligations. The following table summarizes our standard retention periods by data category:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized so that it can no longer be associated with any identifiable individual. Where data is anonymized rather than deleted, the resulting dataset may be retained indefinitely for aggregate statistical analysis.

9 Your Rights

As a data subject, you hold the following rights in relation to the personal data we hold about you. These rights may be exercised at any time by contacting our support team at [email protected] (plain text — not a clickable link):

• Right of Access: You may request a copy of all personal data we hold about you, together with information about how it is processed. We will respond within 30 days of a verified request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Account profile data may be updated directly through your account settings panel.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (and no other legal basis applies), or where processing is unlawful. Note that erasure requests may be declined where retention is required by law (e.g., AML-mandated transaction records).
• Right to Restriction: You may request that we restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data you have contested is being verified.
• Right to Data Portability: Where processing is based on consent or contractual necessity and carried out by automated means, you may request a machine-readable copy of your personal data in a commonly used format (e.g., JSON or CSV).
• Right to Object: You may object to processing carried out on the basis of our legitimate interests. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

All rights requests are processed within 30 calendar days of receipt. In complex or high-volume cases, this period may be extended by an additional 60 days, in which case you will be notified within the initial 30-day window.

10 Cookies & Tracking Technologies

ina777 uses cookies and similar client-side technologies to support the operation of the platform. The following categories of cookies are in use:

• Strictly Necessary Cookies: These cookies are essential for the platform to function. They enable session management, authentication, and basic security features. They cannot be disabled without rendering the platform non-functional.
• Functional Cookies: These store your preferences such as language settings, preferred deposit method, and game filter selections to improve your experience on return visits. They do not track browsing activity outside the ina777 platform.
• Analytics Cookies: We use anonymized, aggregate analytics data to understand how players navigate the platform — which pages are visited most frequently, where sessions typically end, and how game categories perform. This data is never linked to your individual identity.

ina777 does not deploy third-party behavioral advertising cookies or cross-site tracking pixels. You may clear cookies at any time through your browser settings. Disabling functional or analytics cookies will not prevent you from using the platform but may reduce the quality of your experience.

11 Data Security

ina777 implements a multi-layered technical and organizational security framework to protect your personal data against unauthorized access, accidental loss, alteration, or destruction:

• Encryption in transit: All data exchanged between your device and our servers is protected by TLS 1.2 or higher encryption.
• Encryption at rest: Sensitive data fields — including passwords (stored as salted hashes), ID document images, and bank account details — are encrypted at rest using AES-256 or equivalent standards.
• Access controls: Access to production systems and personal data is restricted to authorized personnel only, operating under least-privilege principles and multi-factor authentication requirements.
• Security audits: Our systems undergo regular penetration testing and vulnerability assessments conducted by independent security specialists.
• Incident response: In the unlikely event of a personal data breach that poses a risk to your rights and freedoms, ina777 will notify affected users without undue delay and take all reasonable steps to contain and remediate the breach.

While ina777 takes all reasonable precautions, no digital system can guarantee absolute security. You also play a role in protecting your data — use a strong, unique password for your account and never share your login credentials with anyone.

12 International Data Transfers

As an internationally operated platform serving users primarily in Indonesia, ina777 may transfer your personal data to servers and service providers located outside of Indonesia. Such transfers may include data centers in jurisdictions that maintain robust data protection frameworks.

Where personal data is transferred internationally, ina777 ensures that appropriate safeguards are in place, including:

• Contractual data processing agreements incorporating standard data protection clauses with all data processors and sub-processors
• Transfer only to jurisdictions recognized as offering an adequate level of data protection, or to processors that have implemented equivalent protective measures
• Regular review of cross-border data flows to ensure ongoing compliance with evolving regulatory requirements

You may request further information about the international transfer mechanisms applicable to your personal data by contacting our support team.

13 Minors & Age Policy

The ina777 platform is strictly intended for adults aged 21 years or older. We do not knowingly collect, store, or process the personal data of any individual under the age of 21.

If we discover or are notified that personal data belonging to a person under 21 has been submitted through our registration or KYC processes, we will immediately close the associated account, securely delete the data, and — where legally required — report the matter to relevant authorities.

If you believe that a person under 21 has registered on the ina777 platform, please notify us immediately at [email protected] (plain text — not a clickable link). We take all such reports seriously and will act without delay.

14 Policy Amendments

ina777 reserves the right to revise this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the services we offer. When material changes are made, we will notify registered users via the email address associated with their account prior to the changes taking effect.

The date of the most recent revision is displayed at the top of this page. We encourage all users to review this Policy periodically. Your continued use of the platform following the publication of a revised Policy constitutes your acceptance of the updated terms. If you do not agree with any amendment, please discontinue use of the platform and contact our support team to arrange account closure.

Archived versions of previous Privacy Policies are available upon written request to our support team.

15 Contact & Complaints

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact the ina777 data team through the following channel:

• Email: [email protected] — please mark the subject line clearly as "Privacy / Data Request"
• Live Chat: Available 24 hours a day, 7 days a week, directly on the platform — our support agents can escalate data-related inquiries to the appropriate team

We aim to acknowledge all privacy-related communications within 48 hours and to resolve substantive requests within 30 calendar days. Our customer support agents are native Indonesian speakers and are available to assist with privacy inquiries in both English and Bahasa Indonesia.

If you are dissatisfied with our response to a privacy complaint, you have the right to escalate the matter to the data protection supervisory authority in the jurisdiction governing our license. Details of the relevant authority will be provided upon request.