nex77 Privacy Policy

In this Privacy Policy, the following terms carry the meanings set out below unless the context requires otherwise:

• "Platform" means the nex77 website at nex77.bio, including all sub-pages, account portals, gaming interfaces, and any mobile-optimised versions thereof.
• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to name, email address, date of birth, mobile number, bank account details, IP address, and device identifiers.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, retrieval, use, disclosure, erasure, or destruction.
• "Data Controller" means nex77, the entity that determines the purposes and means of Processing Personal Data collected through the Platform.
• "Data Processor" means a third party that processes Personal Data on behalf of nex77 under a written data-processing agreement.
• "Account Holder" / "You" means any individual who registers an account on the Platform or otherwise provides Personal Data to nex77.
• "Cookies" means small text files placed on your device by the Platform to store session information, preferences, and analytical data.
• "KYC" means Know Your Customer — the identity and document verification process conducted prior to withdrawal processing or as required by compliance protocols.

This Privacy Policy applies to all Personal Data collected, processed, or stored by nex77 in connection with the operation of the Platform. It applies to all Account Holders, prospective registrants, and any other individuals who interact with the Platform, regardless of the device or method of access used.

This Policy does not apply to third-party websites, services, or applications that may be linked to or integrated with the Platform. nex77 is not responsible for the privacy practices of any third party, and we encourage you to review the relevant privacy policies before submitting Personal Data to any external service.

The primary audience for the nex77 Platform is adults aged 21 and over who are residents of Indonesia. Our data processing practices are designed with the privacy expectations of Indonesian players in mind, including the use of local payment infrastructure (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, and LinkAja) and local-language customer support channels.

nex77 collects the following categories of Personal Data, depending on how you interact with the Platform:

3.1 Identity & Contact Data

• Full legal name, date of birth, and nationality.
• Government-issued identification details (KTP number, SIM number, or passport number) collected during KYC verification.
• Email address and Indonesian mobile phone number.
• Residential address within Indonesia.

3.2 Financial & Transaction Data

• Bank account numbers and account holder names for BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, and Bank Permata transfers.
• E-wallet identifiers for OVO, DANA, GoPay, ShopeePay, and LinkAja.
• Deposit amounts, withdrawal requests, transaction timestamps, and running account balances (denominated in IDR).
• Bonus redemption history, wagering activity, and win/loss records.

3.3 Technical & Usage Data

• IP address, device type, operating system, browser type and version.
• Pages visited, features accessed, time spent on each page, and navigation paths within the Platform.
• Session start and end times, game sessions played, and betting history.
• Error logs and diagnostic data generated during Platform use.

3.4 Communications Data

• Records of all communications between you and nex77 customer support, including live chat transcripts and email correspondence.
• Survey responses, feedback submissions, and any voluntary information you provide when contacting us.

3.5 Responsible Gaming Data

• Self-exclusion requests, deposit limit settings, session reminders, and time-out elections made through the Responsible Gaming tools on the Platform.
• Records of any referrals to external support organisations provided by our customer support team.

nex77 collects Personal Data through the following channels:

• Direct submission: Information you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or participating in a promotion.
• Automated collection: Technical and usage data collected automatically when you access the Platform, through server logs, cookies, and similar tracking technologies (see Clause 8).
• Third-party sources: Identity verification data provided by KYC and anti-fraud service providers; transaction data provided by payment processors and e-wallet operators; fraud-risk signals from industry-shared databases.
• Publicly available sources: In limited circumstances, nex77 may cross-reference publicly available records to verify account information or investigate suspected fraud.

nex77 processes Personal Data on one or more of the following legal bases:

nex77 uses the Personal Data we collect for the following purposes:

6.1 Platform Operation

To create and manage your account, authenticate your identity at login, process deposits and withdrawals in IDR, administer bonus and promotional offers, and deliver the gaming services available through the Platform — including sports betting on BRI Liga 1, Timnas Indonesia matches, EPL, Champions League, and other major competitions, as well as slots, live casino, crash games, and poker tournaments.

6.2 Security & Fraud Prevention

To detect, investigate, and prevent fraudulent transactions, money laundering, multi-accounting, bonus abuse, and other forms of Prohibited Conduct as defined in our Terms & Conditions. This includes automated risk-scoring of transactions and the use of device-fingerprinting technology to identify patterns associated with account manipulation.

6.3 Legal & Regulatory Compliance

To meet our obligations under applicable anti-money-laundering legislation, to respond to lawful requests from competent authorities, and to maintain records as required by any applicable regulatory framework. nex77 retains transaction records and KYC documentation for a minimum of five years from the date of the relevant transaction or the closure of the account, whichever is later.

6.4 Customer Support

To respond to your enquiries, resolve disputes, manage complaints through our formal complaints procedure, and provide you with information about your account or our services. Customer support is available 24/7 in both English and Bahasa Indonesia (WIB, UTC+7).

6.5 Responsible Gaming

To monitor account activity for indicators of problem gambling, to facilitate the application of responsible gaming tools (deposit limits, self-exclusion, session reminders), and to contact you proactively if our monitoring systems identify patterns suggesting that gambling may be causing you harm. See our Responsible Gaming page for full details.

6.6 Marketing & Personalisation

Where you have provided consent, to send you promotional offers, bonus notifications, and Platform updates by email or push notification. You may withdraw this consent at any time by contacting [email protected] or using the unsubscribe link in any marketing email. Withdrawal of consent does not affect the lawfulness of any processing carried out before the withdrawal.

nex77 does not sell your Personal Data. We share Personal Data only in the following limited circumstances, and only to the extent necessary for each stated purpose:

• Payment processors and e-wallet operators: BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata, OVO, DANA, GoPay, ShopeePay, and LinkAja receive the transaction data necessary to process your deposits and withdrawals. Each is bound by its own regulatory obligations regarding data security.
• KYC and identity verification providers: Third-party services that assist us in verifying your identity, checking against sanctions lists, and assessing fraud risk. These providers act as Data Processors under written agreements and are prohibited from using your data for any purpose other than the verification service they provide to nex77.
• Game content providers: Studios including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Pocket Games Soft may receive a session token and anonymised player identifier to deliver game content. They do not receive your full identity or financial data.
• Platform infrastructure providers: Cloud hosting, content delivery, and cybersecurity service providers who process data on our behalf solely to maintain the operation and security of the Platform.
• Legal and regulatory authorities: nex77 will disclose Personal Data to law enforcement agencies, courts, or regulatory bodies where required to do so by a valid legal order, court order, or applicable law, without prior notice to you where such notice is prohibited or would undermine the purpose of the disclosure.
• Business transfers: In the event of a merger, acquisition, or sale of all or substantially all of nex77's assets, Personal Data held by nex77 may be transferred to the acquiring entity, subject to equivalent privacy protections. Affected account holders will be notified in advance where reasonably practicable.

The nex77 Platform uses cookies and similar technologies to operate core functionality, enhance your experience, and analyse Platform usage. The following categories of cookies are used:

You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair or prevent access to the Platform. nex77 does not use cross-site tracking cookies or share cookie data with third-party advertising networks.

nex77 retains Personal Data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. Our principal retention periods are as follows:

• Account and identity data: Retained for the duration of the account relationship and for a minimum of five years following account closure, to satisfy anti-money-laundering record-keeping requirements.
• Transaction and financial records: Retained for a minimum of five years from the date of the relevant transaction.
• KYC documentation: Retained for a minimum of five years from the date of verification or account closure, whichever is later.
• Customer support communications: Retained for three years from the date of the communication, unless the communication relates to an ongoing dispute, complaint, or legal proceeding.
• Responsible gaming records: Retained for the duration of any active self-exclusion or limit period, plus three years thereafter, to enable enforcement of exclusion decisions across any future re-registration attempt.
• Marketing consent records: Retained for as long as the consent remains active plus two years thereafter, as evidence of the consent given.
• Technical and analytics data: Retained in anonymised or aggregated form indefinitely for product development purposes; identifiable technical logs are purged after 12 months.

When Personal Data is no longer required, nex77 will securely delete or anonymise it in a manner that prevents reconstruction of the original data.

nex77 implements a comprehensive set of technical and organisational security measures designed to protect Personal Data against unauthorised access, disclosure, alteration, and destruction. These measures include:

• Encryption: AES-256 encryption for all Personal Data at rest; TLS 1.3 for all data in transit between your browser and our servers. All financial data is encrypted end-to-end.
• Access controls: Role-based access control (RBAC) restricts access to Personal Data to only those employees and contractors who require it to perform their specific duties. All access is logged and audited.
• Two-factor authentication (2FA): Available for all account holders and mandatory for all nex77 administrative personnel accessing systems containing Personal Data.
• Penetration testing: The Platform undergoes independent security penetration testing on a regular basis to identify and remediate vulnerabilities before they can be exploited.
• Incident response: nex77 maintains a formal data breach incident response plan. In the event of a breach affecting your Personal Data, we will notify you within 72 hours of becoming aware of the incident.
• Vendor security assessments: All third-party Data Processors are assessed for security compliance before engagement and are subject to periodic re-assessment throughout the relationship.

While nex77 takes all reasonable steps to protect your Personal Data, no security system is entirely impenetrable. You are responsible for maintaining the security of your own account credentials and for notifying us promptly at [email protected] if you suspect any unauthorised access to your account.

As an account holder on the nex77 Platform, you hold the following rights in relation to your Personal Data. To exercise any of these rights, please submit a written request to [email protected] with the subject line "Data Rights Request". nex77 will acknowledge your request within 5 business days and provide a substantive response within 30 calendar days.

• Right of Access: You may request a copy of the Personal Data nex77 holds about you, along with information about how it is being processed.
• Right to Rectification: You may request correction of any inaccurate or incomplete Personal Data. You may also update certain information directly through your account settings.
• Right to Erasure: You may request deletion of your Personal Data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where you object to processing based on legitimate interests and no overriding grounds exist. This right is subject to nex77's obligations to retain data under applicable law (see Clause 9).
• Right to Restrict Processing: You may request that nex77 restrict the processing of your Personal Data in certain circumstances — for example, while the accuracy of data is disputed or while an objection is being assessed.
• Right to Data Portability: Where processing is based on your consent or on the performance of a contract, you may request that nex77 provide your Personal Data in a structured, commonly used, machine-readable format, or transmit it directly to another controller where technically feasible.
• Right to Object: You may object to processing based on legitimate interests, including profiling. You may also withdraw consent for marketing communications at any time without providing a reason.
• Rights Related to Automated Decision-Making: Where nex77 makes decisions about you based solely on automated processing (including fraud scoring), you have the right to request human review of that decision and to contest the outcome.

nex77 will not charge a fee for handling data rights requests submitted in good faith. However, nex77 reserves the right to charge a reasonable administrative fee or to decline to respond to requests that are manifestly unfounded, excessive, or repetitive in nature.

The nex77 Platform is strictly intended for adults aged 21 and over. nex77 does not knowingly collect, process, or retain Personal Data from any individual under the age of 21. Age verification is a mandatory component of the account registration and KYC process.

If nex77 becomes aware — through its own monitoring, a report from a third party, or a disclosure during KYC — that an account has been registered by or on behalf of a person under the age of 21, nex77 will immediately suspend the account, void any pending transactions, and securely delete or anonymise all Personal Data associated with that account, except where retention is required by applicable law.

If you have reason to believe that a minor has registered an account on the Platform, please contact us immediately at [email protected] so that we may investigate and act promptly.

The nex77 Platform primarily processes and stores Personal Data on infrastructure located within or serving the Asia-Pacific region. In some cases, Personal Data may be transferred to, or accessed by, service providers operating in other jurisdictions — for example, cloud infrastructure providers or game studio technical support teams.

Where such transfers occur, nex77 ensures that appropriate safeguards are in place to protect the data to a standard at least equivalent to that required under applicable data protection principles. These safeguards may include contractual data protection clauses, binding corporate rules, or other mechanisms that provide an adequate level of protection for Personal Data transferred internationally.

If you would like further information about the specific safeguards in place for any particular international transfer, please contact us at [email protected].

nex77 may update this Privacy Policy from time to time to reflect changes in our data processing practices, the services we offer, applicable legal requirements, or feedback from account holders. Material changes — that is, changes that affect how we use your Personal Data or that materially reduce your rights — will be communicated to you via email to the address registered to your account no fewer than 14 days before the amendment takes effect.

Non-material updates (such as typographical corrections or structural reformatting with no change in substance) may be made without notice, though the "Last updated" date at the top of this page will always reflect the date of the most recent revision. Your continued use of the Platform after the effective date of any amendment constitutes your acceptance of the revised Privacy Policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way nex77 processes your Personal Data, please contact our privacy team using the details below. All privacy-related correspondence is handled by our dedicated Data Protection Officer (DPO).

• Email: [email protected] — please use the subject line "Privacy Enquiry" or "Data Rights Request" as appropriate.
• Response time: Privacy enquiries are acknowledged within 5 business days. Substantive responses to data rights requests are provided within 30 calendar days.
• Escalation: If you are not satisfied with nex77's response to a privacy concern, you have the right to escalate your complaint through applicable legal channels. nex77 is committed to resolving all privacy complaints fairly and transparently.