Privacy Policy

1. Introduction

This Privacy Policy ("Policy") is issued by nik77 ("nik77", "we", "us", "our"), the operator of the online betting and gaming platform accessible at nik77.pro. This Policy applies to all personal data we process in connection with the provision of our services to registered members and prospective users who access the platform from any device or location.

nik77 operates as an international online gaming platform serving players in Indonesia and other permitted jurisdictions. We are committed to handling personal data with integrity, transparency, and in compliance with applicable data protection laws and the requirements of our international gaming licence. This Policy governs the full lifecycle of your personal data from the moment you first interact with the nik77 platform.

This Policy is incorporated by reference into the nik77 Terms & Conditions, which form the primary agreement between you and nik77. By registering an account or using the platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.

2. Definitions

The following terms carry the meanings assigned below throughout this Policy:

"Personal Data" means any information relating to an identified or identifiable natural person. An identifiable person is one who can be identified, directly or indirectly, by reference to an identifier such as a name, identification number, location data, or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that person.

"Processing" means any operation or set of operations performed on personal data, including collection, recording, storage, adaptation, retrieval, use, disclosure, transmission, restriction, erasure, or destruction.

"Data Controller" refers to nik77 in its capacity as the entity that determines the purposes and means of processing your personal data.

"Data Processor" refers to a third-party organisation that processes personal data on behalf of nik77 pursuant to a written agreement containing data protection obligations.

"Member" means a natural person who has completed nik77's registration process and holds an active or suspended account on the platform.

"Sensitive Data" means a special category of personal data that warrants enhanced protection, including data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, genetic data, biometric data used for unique identification, health data, or data concerning an individual's sex life or sexual orientation.

"KYC Data" means the set of identity and verification documents and information collected by nik77 pursuant to its Know Your Customer obligations, including government-issued photo identification, proof of address, and payment method verification records.

3. Categories of Personal Data We Collect

nik77 collects and processes the following categories of personal data, organised by type:

nik77 does not intentionally collect Sensitive Data as defined in Section 2. If Sensitive Data is incidentally disclosed within a communication or document you submit, it will be handled with the same protections applied to KYC Data and will not be used for profiling or any other purpose beyond the immediate support context.

4. How We Collect Your Data

nik77 collects personal data through the following channels:

• Direct submission: Data you provide when registering your account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or participating in surveys or promotions.
• Automated technical collection: Data collected automatically when you access the nik77 platform, including IP address, device identifiers, browser characteristics, session activity, and cookie data (see Section 10).
• Payment processors: Confirmation data returned by our payment processing partners — including local Indonesian bank transfer gateways and e-wallet providers such as OVO, DANA, GoPay, ShopeePay, and LinkAja — following successful or attempted transactions.
• Identity verification partners: Where nik77 engages a third-party KYC or identity verification service, that provider may supply verification status information and document authenticity assessments. The underlying document images remain within nik77's controlled data environment.
• Fraud prevention and AML services: Risk scores, device fingerprint data, and watchlist screening results received from contracted third-party fraud detection and anti-money-laundering service providers.
• Publicly available sources: In limited circumstances relevant to AML or fraud investigations, nik77 may reference publicly available information such as sanctions lists, adverse media databases, or publicly filed court records.

5. Purposes of Processing

nik77 processes your personal data for the following specific purposes:

• Account creation and management: To register your account, authenticate your identity at login, manage your account settings, and provide access to platform features.
• KYC and age verification: To confirm that you are at least 21 years of age, verify your identity as required by our licensing obligations, and comply with applicable AML regulations. This is a mandatory requirement; accounts that fail KYC verification cannot be fully activated.
• Payment processing: To process deposits and withdrawals in IDR via your chosen payment method, reconcile transaction records, and investigate disputed or failed transactions.
• Service delivery: To provide access to nik77's sports betting markets — including BRI Liga 1, EPL, Champions League, and Timnas Indonesia fixtures — live casino tables, slots, and all other platform features.
• Responsible gaming compliance: To monitor betting and gaming patterns for signs of problem gambling, enforce self-imposed limits and exclusion requests, and deliver responsible gaming communications and support.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, money laundering, account takeover, and other security threats. This includes automated risk scoring of transactions and login events.
• Customer support: To respond to enquiries, resolve complaints, manage account disputes, and deliver after-sales assistance via live chat, email, or other supported channels.
• Legal and regulatory compliance: To fulfil obligations under our international gaming licence, respond to lawful requests from regulatory authorities, and maintain records required by applicable law.
• Marketing and promotions: To send promotional offers, bonus notifications, and information about nik77 events — including seasonal campaigns tied to Indonesian football, Idul Fitri, Ramadhan, or other culturally relevant periods — where you have provided consent or where permitted under applicable law. You may withdraw this consent at any time.
• Platform improvement: To analyse aggregated, anonymised usage data to improve the functionality, performance, and user experience of the nik77 platform.

6. Legal Basis for Processing

For each processing purpose described in Section 5, nik77 relies on one or more of the following legal bases:

• Contractual necessity: Processing required to perform the contract between you and nik77 — specifically the Terms & Conditions you accept upon registration — including account management, payment processing, service delivery, and customer support.
• Legal obligation: Processing necessary to comply with a legal or regulatory obligation, including KYC/AML compliance, age verification, licensing record-keeping requirements, and responding to lawful regulatory or law-enforcement requests.
• Legitimate interests: Processing necessary for the legitimate interests of nik77 or a third party, where those interests are not overridden by your privacy rights. This basis covers fraud detection, platform security, responsible gaming monitoring, and aggregated analytics for service improvement.
• Consent: Processing based on your freely given, specific, and informed consent. This basis applies to marketing communications and any optional data collection beyond what is strictly necessary. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

7. Sharing Your Personal Data

nik77 does not sell, rent, or trade your personal data. We share personal data only in the circumstances described below, and only to the minimum extent necessary for each purpose:

• Payment processors and banking partners: Your financial data is shared with the payment processing infrastructure necessary to execute transactions, including Indonesian bank transfer gateways and e-wallet platforms (OVO, DANA, GoPay, ShopeePay, LinkAja). These processors operate under strict contractual data protection obligations.
• Identity verification providers: KYC documents and identity data may be shared with contracted third-party identity verification services for the purpose of document authentication and fraud screening.
• Game content providers: Bet placement and game session data is shared with the relevant third-party game studio or live casino operator (e.g., Evolution Gaming, Pragmatic Play, Pocket Games Soft, Spribe) to the extent necessary to deliver the game service. These providers operate as independent data controllers for their own platform data under separate privacy frameworks.
• Fraud prevention and AML services: Technical data and transaction data may be shared with contracted fraud detection and AML screening services to support risk assessment and regulatory compliance.
• Customer support platform providers: Communication data may be processed by contracted live chat and helpdesk software providers operating as data processors on nik77's behalf.
• Legal and regulatory authorities: nik77 will disclose personal data to competent regulatory bodies, law enforcement agencies, courts, or licensing authorities where required to do so by applicable law, court order, or regulatory direction. Where legally permissible, nik77 will notify you of such a disclosure in advance.
• Business transfers: In the event of a merger, acquisition, asset sale, or restructuring of nik77's business, your personal data may be transferred to the acquiring entity as part of the transaction. You will be notified of any such transfer and any change in the data controller's identity before it takes effect.

All third-party data processors engaged by nik77 are required to implement appropriate technical and organisational security measures and are prohibited from processing your data for any purpose other than the specific service they provide to nik77.

8. International Data Transfers

nik77 operates as an international platform and, as a result, your personal data may be stored and processed in countries other than Indonesia. Some of nik77's third-party service providers — including game content studios, cloud infrastructure providers, and KYC verification services — may be located in jurisdictions outside Indonesia.

When personal data is transferred internationally, nik77 ensures that appropriate safeguards are in place to protect it to a standard at least equivalent to that required under applicable data protection law. These safeguards may include:

• Standard contractual clauses approved by relevant data protection authorities, incorporated into agreements with receiving third parties.
• Transfers to countries recognised as providing an adequate level of data protection by applicable regulatory frameworks.
• Binding corporate rules where transfers occur within a group of companies subject to a common data governance framework.

You may request further information about the specific safeguards applied to international transfers of your personal data by contacting the nik77 support team using the details in Section 17.

9. Data Retention Periods

nik77 retains personal data for the minimum period necessary to fulfil the purpose for which it was collected, subject to any longer retention periods required by law or regulation. The following retention schedule applies:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be associated with any identifiable individual. Anonymised aggregated data may be retained indefinitely for statistical and analytical purposes.

10. Cookies & Tracking Technologies

nik77 uses cookies and similar tracking technologies (including local storage and session identifiers) to operate the platform, maintain your session, personalise your experience, and analyse platform performance. The following categories of cookies are used:

• Strictly necessary cookies: Essential for platform operation, including session authentication, fraud prevention tokens, and load balancing. These cannot be disabled without impairing core platform functionality.
• Functional cookies: Enable personalisation features such as remembering your preferred language setting, sports market preferences, and display configurations.
• Analytics cookies: Collect aggregated, anonymised data about how members use the platform — pages visited, session duration, navigation paths — to help nik77 improve the product. No individual user is identified through analytics data.
• Security cookies: Used to detect and prevent automated abuse, bot traffic, and account takeover attempts. These include short-lived challenge tokens and device integrity signals.

Strictly necessary and security cookies are placed on the basis of legitimate interest and contractual necessity; they do not require your prior consent. Functional and analytics cookies are placed on the basis of your consent, which you may manage via the cookie preference settings accessible from the platform's footer.

Most browsers allow you to refuse or delete cookies through their settings. However, disabling strictly necessary cookies will impair your ability to log in and use the nik77 platform. nik77 does not use cookies for cross-site advertising or third-party retargeting campaigns.

11. Data Security

nik77 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. Key measures include:

• TLS/SSL encryption: All data transmitted between your device and nik77's servers is encrypted in transit using current TLS standards.
• Encrypted storage: Sensitive data at rest — including financial data and KYC documents — is stored using AES-256 encryption or equivalent.
• Password hashing: Member passwords are never stored in plaintext. Passwords are processed through a strong one-way hashing algorithm with per-user salts before storage.
• Access controls: Strict role-based access controls limit internal access to personal data to employees and contractors who require it to perform their specific job functions. All internal data access is logged and audited.
• Network security: nik77's infrastructure is protected by firewalls, intrusion detection systems, and regular third-party penetration testing.
• Incident response: nik77 maintains a documented data breach response procedure. In the event of a breach that poses a risk to your rights and freedoms, we will notify you and relevant supervisory authorities within the timeframes required by applicable law.

12. Your Privacy Rights

Subject to applicable law and nik77's legitimate processing grounds, you hold the following rights in relation to your personal data:

• Right of access: You may request a copy of the personal data nik77 holds about you, together with information about how it is processed.
• Right to rectification: You may request correction of inaccurate or incomplete personal data. For certain data fields, you can update information directly within your account settings.
• Right to erasure ("right to be forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you have withdrawn consent and no other legal basis applies. This right is subject to nik77's legal and regulatory retention obligations; data required to be retained by law cannot be erased on request.
• Right to restriction: You may request that nik77 restrict processing of your data in certain circumstances, such as while the accuracy of the data is being contested or while an objection to processing is being assessed.
• Right to object: You may object to processing carried out on the basis of legitimate interests or for direct marketing purposes. Where you object to direct marketing, processing for that purpose will cease immediately.
• Right to data portability: Where processing is based on consent or contractual necessity and is carried out by automated means, you may request receipt of your personal data in a structured, commonly used, machine-readable format.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

To exercise any of these rights, please contact the nik77 support team using the details in Section 17. We will respond to verified requests within 30 calendar days. We may request proof of identity before processing a rights request to protect against unauthorised access to your data.

13. Children's Privacy

nik77 operates a strict minimum age policy. Access to all real-money betting and gaming services is restricted to individuals aged 21 years or older. The platform does not knowingly collect personal data from persons under the age of 21.

If nik77 discovers or is notified that an account has been registered by a person under the age of 21, the account will be immediately suspended, all balances will be frozen, and the associated personal data will be reviewed. Any deposits made by the underage individual will be refunded to the original payment source net of any applicable processing costs, and the data will be deleted or anonymised as soon as the refund process is complete, subject to any regulatory obligations requiring short-term retention of the incident record.

If you have reason to believe that a minor has registered on the nik77 platform, please contact us immediately at the details provided in Section 17.

14. Marketing Communications

nik77 may send you promotional communications — including bonus offers, new game announcements, sports betting previews for upcoming BRI Liga 1 fixtures or Timnas Indonesia matches, and seasonal campaign notifications — where you have provided consent or where permitted under applicable law.

Marketing communications may be delivered via email, SMS to your registered Indonesian mobile number, or in-platform notification. You can manage your communication preferences at any time through your account settings or by contacting the support team. Requests to opt out of marketing will be processed within 5 business days; you may continue to receive transactional and account-related communications regardless of your marketing preference setting, as these are necessary for the operation of your account.

nik77 does not share your contact details with third parties for the purpose of those third parties sending you their own marketing materials.

15. Third-Party Links

The nik77 platform may contain references to third-party game providers and content partners. While nik77 takes care to work only with reputable partners, this Privacy Policy applies solely to personal data processed by nik77 in its capacity as data controller. Third-party platforms, game studios, and service providers operate under their own privacy policies, for which nik77 accepts no responsibility.

nik77 does not embed third-party advertising networks, social media pixels, or retargeting scripts on the platform. Any third-party code present on the platform is limited to contractually engaged service providers necessary for platform operation.

16. Changes to This Policy

nik77 reserves the right to update this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, our data processing practices, or the services we offer. Material changes — meaning changes that significantly affect how your personal data is used or your rights in relation to it — will be communicated to you via email to your registered address and via a prominent notice on the platform, with a minimum of 14 days' notice before the updated Policy takes effect.

Non-material updates (such as clarifications, grammatical corrections, or formatting improvements that do not change the substance of the Policy) will be reflected in the "Last Updated" date at the top of this page without a separate notification. We encourage you to review this Policy periodically. Continued use of the nik77 platform following the effective date of an amended Policy constitutes your acceptance of the revised version.

17. Contact & Data Protection Officer

For all privacy-related enquiries, rights requests, complaints, or questions about this Policy, please contact nik77 through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week, via the nik77 platform. Indonesian-speaking agents are available at all times (WIB, WITA, and WIT time zones served).
• Email: [email protected] — please include "Privacy Request" in the subject line for data rights enquiries. Responses are typically provided within 5 business days for privacy matters.

nik77 has designated a Data Protection Officer (DPO) responsible for overseeing compliance with this Policy and applicable data protection legislation. Privacy rights requests and formal complaints addressed to the DPO should be submitted via the email address above, marked for the attention of the Data Protection Officer.