Your privacy matters to us. This Privacy Policy explains exactly what personal data dna777 collects from Indonesian players, why we collect it, how it is used and protected, and what rights you have over your own information.
Every data transmission between your device and the dna777 Platform is protected by industry-standard 256-bit SSL encryption. Your personal and financial information is never sent in plain text.
dna777 does not sell, rent, or trade your personal data to any third party for their own commercial or marketing purposes. Your information is used solely to deliver and improve the dna777 service.
We collect only the data that is strictly necessary to operate your account, verify your identity, process transactions, and comply with our legal obligations. We do not collect data beyond what is needed.
Access to your personal data within dna777 is restricted on a need-to-know basis. Staff members are granted access only to the specific data required to perform their role — not to your full profile.
You have the right to access, correct, and request deletion of your personal data at any time. Submit a request to our support team and we will respond within the timeframes set out in this policy.
Promotional communications from dna777 are entirely opt-in. You may withdraw consent for marketing at any time by updating your preferences in your account dashboard or by contacting our support team.
dna777 ("we", "us", "our") operates the online casino and sports betting platform accessible at dna777.app (the "Platform"). We are committed to protecting the privacy and personal data of our Members and visitors. This Privacy Policy sets out in clear, plain English how we collect, use, store, share, and protect your personal information when you use the dna777 Platform.
This policy applies to all registered Members, prospective Members who browse the Platform without registering, and any other individual whose personal data is processed by dna777 in connection with the Platform. By registering an account or continuing to use the Platform, you confirm that you have read and understood this Privacy Policy in full.
This Privacy Policy should be read alongside the dna777 Terms & Conditions, which govern your use of the Platform and incorporate this policy by reference. In the event of any conflict between this Privacy Policy and the Terms & Conditions with respect to data-handling matters, this Privacy Policy shall prevail.
The following terms are used throughout this Privacy Policy with the meanings set out below.
dna777 collects the following categories of personal data. We collect only what is necessary for the specific purpose identified — we do not gather data speculatively or in bulk beyond what is required to deliver our services.
dna777 collects personal data through the following channels and mechanisms:
dna777 processes your personal data only where a lawful basis for doing so exists. The table below summarises the primary purposes for which we process personal data, the categories of data involved, and the legal basis on which we rely.
| Purpose | Data Categories | Legal Basis |
|---|---|---|
| Account registration and management | Identity & Contact Data | Contract performance |
| KYC identity and age verification | KYC Data, Identity & Contact Data | Legal obligation; Contract performance |
| Processing deposits and withdrawals in IDR | Financial & Transaction Data | Contract performance |
| Delivering gaming and betting services | Gaming & Betting Activity Data | Contract performance |
| Responsible gaming monitoring and tools | Gaming Activity Data, Identity Data | Legal obligation; Legitimate interests |
| Fraud detection and prevention | Technical Data, Transaction Data, Gaming Data | Legitimate interests; Legal obligation |
| Anti-money laundering compliance | KYC Data, Transaction Data | Legal obligation |
| Customer support and dispute resolution | Communications Data, Identity Data | Contract performance; Legitimate interests |
| Platform analytics and improvement | Technical Data, Gaming Activity Data | Legitimate interests |
| Sending promotional communications | Identity & Contact Data | Consent (opt-in only) |
Where dna777 relies on legitimate interests as a lawful basis, we have assessed that our interests are not overridden by your rights and freedoms as a data subject. You may request further information about any specific legitimate-interests assessment by contacting [email protected].
dna777 does not sell, rent, or trade your personal data to any third party for their own independent commercial purposes. We share personal data only in the following limited circumstances:
We share personal data with carefully selected third-party service providers who process data on our behalf and under our documented instructions. These include:
dna777 may disclose personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by applicable law, valid legal process (such as a court order or subpoena), or where dna777 has a good-faith belief that disclosure is necessary to protect the rights, property, or safety of dna777, its Members, or the public.
In the event that dna777 undergoes a merger, acquisition, restructuring, or sale of all or substantially all of its assets, personal data held by dna777 may be transferred to the successor entity. Members will be notified of any such transfer via the email address registered to their account prior to the transfer taking effect.
As an internationally operating platform, dna777 may transfer certain personal data to countries outside of Indonesia for the purposes of hosting, processing, or providing services. Where such transfers take place, dna777 takes appropriate steps to ensure that your personal data continues to be protected to a standard consistent with this Privacy Policy, including through the use of contractual data-transfer safeguards with the relevant third-party recipients.
dna777's primary data-hosting infrastructure uses certified data centres with internationally recognised security standards (ISO/IEC 27001 or equivalent). Data processed by Indonesian payment providers such as BCA, BRI, BNI, Mandiri, OVO, DANA, and GoPay for transaction processing purposes remains subject to applicable Indonesian financial-services data-protection requirements.
dna777 retains personal data for as long as is necessary to fulfil the purpose for which it was collected, or for as long as required by applicable law or regulation. The following retention guidelines apply:
| Data Category | Standard Retention Period | Basis |
|---|---|---|
| Account registration data | Duration of account + 5 years post-closure | Legal / regulatory obligation |
| KYC documents (KTP, proof of address) | Duration of account + 5 years post-closure | AML legal obligation |
| Financial transaction records | Duration of account + 7 years post-closure | Financial record-keeping obligation |
| Game and betting history | Duration of account + 3 years post-closure | Dispute resolution; Regulatory audit |
| Customer support communications | 3 years from the date of the communication | Legitimate interests; Dispute resolution |
| Technical / device / log data | 13 months from collection | Fraud prevention; Platform analytics |
| Marketing preferences and consent records | Until consent is withdrawn + 3 years | Evidence of consent |
At the end of the applicable retention period, personal data is securely deleted or anonymised in accordance with dna777's internal data-lifecycle procedures. Anonymised or aggregated data that can no longer be linked to any individual may be retained indefinitely for analytical purposes.
dna777 uses cookies and similar tracking technologies (including pixel tags and local storage) to operate the Platform, remember your preferences, analyse usage patterns, and support fraud detection. The following categories of cookies are used:
These cookies are essential for the Platform to function correctly. They enable core features such as account login sessions, security token validation, and load-balancing across servers. These cookies cannot be disabled without impairing Platform functionality. No consent is required for their use as they are strictly necessary to deliver the service you have requested.
These cookies remember choices you make on the Platform — such as your preferred display settings or previously entered username — to provide a more personalised experience. They are not essential but meaningfully improve usability.
We use analytics tools to understand how Members navigate the Platform — including which pages are visited most frequently, how long sessions last, and where users exit. This data is used in aggregated, anonymised form to improve the dna777 experience for all users. Analytics cookies are activated only with your consent where required by applicable law.
Certain cookies support dna777's fraud-detection systems by generating device fingerprints and detecting anomalous session behaviour. These cookies do not serve advertising purposes and their data is not shared with advertising networks.
You may control cookie settings through your browser preferences. Most modern browsers allow you to view, block, or delete cookies. Please be aware that disabling strictly necessary cookies will affect your ability to log in and use core Platform features. Instructions for managing cookies in popular browsers (Chrome, Firefox, Safari, Edge) are available in each browser's help documentation.
dna777 employs a layered security architecture to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Our key technical and organisational measures include:
Subject to applicable law and certain limited exceptions (for example, where retaining data is required to comply with a legal obligation), you have the following rights in respect of your personal data held by dna777. To exercise any of these rights, contact us at [email protected] with the subject line "Privacy Rights Request" and include your registered username and email address to help us verify your identity.
The dna777 Platform is strictly restricted to individuals who are 21 years of age or older. dna777 does not knowingly collect personal data from any person under the age of 21. The 21+ age restriction is enforced through mandatory KYC verification, which requires submission of a valid Indonesian KTP confirming date of birth.
If dna777 becomes aware that personal data has been collected from a person under the age of 21 — whether through failed KYC, a parental notification, or any other means — the associated account will be immediately closed, all data will be securely deleted to the extent permitted by law, and any deposits made will be returned to the originating payment method following appropriate due-diligence checks.
Parents and guardians who believe that a minor has accessed the dna777 Platform or provided personal data to dna777 are strongly encouraged to contact us immediately at [email protected] so that we can take prompt action.
The dna777 Platform may contain references to game studios, payment providers, and other third-party services. Where the Platform displays content or integrates services from third parties such as Pragmatic Play, Evolution Gaming, or Indonesian payment partners, those third parties operate under their own independent privacy policies.
dna777 is not responsible for the privacy practices of any third-party operator, and this Privacy Policy does not extend to any third-party website, application, or service that you may access in connection with using the Platform. We encourage you to review the privacy policy of any third party before providing them with your personal information.
dna777 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or Platform features. Where changes are material — for example, where we introduce a new purpose for processing or a new category of data sharing — we will notify registered Members via email and/or via a prominent notice on the Platform at least 14 days before the change takes effect.
Minor updates (such as typographical corrections or clarifications that do not alter the substance of the policy) may take effect immediately upon publication. The "Last updated" date at the top of this page always reflects the date of the most recent revision. Your continued use of the Platform following any update constitutes your acknowledgment of the revised policy.
For any questions, concerns, or requests relating to this Privacy Policy or the way dna777 handles your personal data, please reach out to our support team using the contact details below. We take all privacy-related inquiries seriously and will respond promptly.
Our support team includes Indonesian-speaking agents available around the clock to assist players across Jakarta, Surabaya, Medan, Bandung, Bali, and across the archipelago. All formal privacy requests submitted in writing will receive a documented response within the timeframes set out in Section 11.
Now that you've read our Privacy Policy, you can play with confidence knowing your personal data is handled securely. Join millions of Indonesian players who trust dna777 for safe, fair, and transparent online gaming — with instant IDR deposits and 24/7 support.