Privacy Policy

1. Definitions

Throughout this Privacy Policy, the following terms carry the meanings set out below.

• "mana77," "We," "Us," "Our" — the online gaming platform operating at https://mana77.cam and all associated services and systems.
• "Player," "User," "You," "Your" — any individual who creates an account, browses, or otherwise interacts with the mana77 platform.
• "Personal Data" — any information that identifies or could reasonably identify you as an individual, including your name, email address, phone number, payment details, and device identifiers.
• "Processing" — any operation performed on Personal Data, including collection, storage, use, disclosure, or deletion.
• "Third Party" — any entity other than you and mana77, including game providers (Pragmatic Play, Evolution Gaming, Microgaming, etc.), payment processors, analytics providers, and regulatory bodies.
• "Services" — all gaming, betting, and ancillary services provided by mana77, including sports betting, live casino, slot games, togel (Indonesian lottery), sabung ayam (cockfighting), and customer support.
• "KYC" — Know Your Customer; the identity and age-verification process required before certain account features are activated.

---

2. Personal Data We Collect

mana77 collects the minimum amount of Personal Data necessary to deliver our Services, comply with regulatory obligations, and maintain platform security. The categories of data we may hold about you include:

2.1 Registration and Identity Data

• Full legal name (as it appears on your government-issued identification)
• Date of birth (to verify you are at least 21 years of age)
• Indonesian national identity number (NIK from your KTP), passport number, or other government-issued ID number
• Residential address in Indonesia (province, city/regency, full street address)
• Email address
• Mobile phone number (Indonesian number, used for OTP verification and support)
• Account username and encrypted password (we never store passwords in plaintext)

2.2 Financial and Transaction Data

• Bank account details for deposits and withdrawals (bank name, account number, account holder name — supporting BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, BSI, and others)
• E-wallet identifiers (OVO, DANA, GoPay, ShopeePay phone number or account ID)
• Transaction history (deposit amounts, withdrawal amounts, dates, reference numbers)
• Betting and wagering history (bets placed, stakes, outcomes, winnings)
• Bonus and promotion records

2.3 Technical and Device Data

• IP address and approximate geolocation derived from IP
• Device type, operating system, and browser/app version
• Session data including login timestamps and duration
• Cookies and similar tracking technologies (see Section 8)
• Referral source (how you arrived at our platform)

2.4 Communications Data

• Records of live chat, email, and WhatsApp conversations with our customer support team
• Survey responses and feedback submitted through the platform
• Marketing communication preferences (opt-in/opt-out status)

2.5 KYC Verification Documents

• Copies of government-issued photo ID (KTP, passport, SIM)
• Proof of address documents (utility bill, bank statement not older than three months)
• Proof of payment method ownership (screenshot of bank account or e-wallet registered in your name)
• Selfie with ID (if requested for enhanced verification)

---

3. How We Collect Your Data

We collect Personal Data through the following means:

• Directly from you — when you register an account, complete KYC verification, make deposits or withdrawals, place bets, contact customer support, or participate in promotions.
• Automatically — when you use our platform, our servers and analytics tools collect technical data such as IP addresses, device fingerprints, and session behaviour. This happens whether you are logged in or browsing as a guest.
• From third parties — payment processors and banks may share transaction confirmation data with us; identity verification services may share the result of document checks; fraud-detection partners may provide risk signals related to your account activity.
• From cookies and tracking technologies — see Section 8 for a full explanation.

---

4. How We Use Your Personal Data

mana77 uses your Personal Data only for lawful, specified purposes. The legal basis and purpose for each category of processing is set out below.

4.1 Contractual Necessity

To deliver the Services you have requested — including account creation, processing deposits and withdrawals through Indonesian banks and e-wallets, settling bets, awarding bonuses, and providing customer support. Without this data, we cannot provide our Services.

4.2 Legal and Regulatory Compliance

To verify your identity and age (KYC), detect and prevent fraud and money laundering, comply with anti-money laundering (AML) obligations, respond to lawful requests from regulatory or law-enforcement authorities, and enforce our Terms & Conditions.

4.3 Legitimate Interests

To improve platform performance and user experience, maintain platform security, conduct analytics and business reporting, personalise content and promotions where permitted, and communicate service updates. We only rely on legitimate interests where your rights and freedoms do not override our interests.

4.4 Consent (Where Obtained)

To send you marketing communications (promotional offers, bonus notifications, event announcements) via email, SMS, or WhatsApp — but only if you have opted in. You may withdraw this consent at any time by contacting our support team or using the unsubscribe mechanism in any marketing message.

4.5 Responsible Gaming

We analyse your play patterns, deposit frequency, and session lengths to identify indicators of problem gambling. This analysis is used to trigger responsible gaming prompts, enforce self-imposed limits, and — in serious cases — to proactively reach out to offer support. This processing is conducted in the interest of player welfare and in accordance with our Responsible Gaming commitments.

---

5. Sharing Your Personal Data

mana77 does not sell your Personal Data to any third party. We share data only in the following circumstances and only to the extent necessary:

5.1 Service Providers and Technology Partners

We engage carefully vetted third-party vendors to support our operations, including:

• Payment processors — to facilitate deposits and withdrawals via BCA, BRI, BNI, Mandiri, and e-wallets. These processors receive only the financial data needed to complete your transaction.
• Game providers — Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Ezugi, Spribe, and others receive a pseudonymous player ID an d the minimum data required to render and settle games correctly. They do not receive your full identity or financial details.
• Identity verification providers — third-party KYC services receive copies of your identity documents solely to perform age and identity checks on our behalf.
• Analytics providers — aggregated, anonymized usage data may be shared with analytics platforms to help us improve platform performance and user experience.
• Fraud prevention services — risk signals derived from your account activity may be shared with fraud-detection partners to protect the platform and all its users.

5.2 Legal and Regulatory Authorities

We may disclose your Personal Data to law-enforcement agencies, regulatory bodies, or courts where we are legally required to do so — for example, in response to a valid court order, a law-enforcement request, or to comply with AML reporting obligations. We will notify you of any such disclosure where we are legally permitted to do so.

5.3 Business Transfers

In the event that mana77 undergoes a merger, acquisition, restructuring, or sale of assets, your Personal Data may be transferred to the acquiring entity as part of that transaction. We will notify you before your data is transferred and becomes subject to a different privacy policy. Any successor entity will be required to honor the commitments made in this Privacy Policy.

5.4 With Your Explicit Consent

We may share your data with other third parties where you have given us specific, informed consent to do so. You may withdraw such consent at any time by contacting our customer support team.

---

6. Data Retention

We retain your Personal Data for as long as your account remains active and for a reasonable period thereafter, in accordance with the following principles:

• Account and identity data — retained for the duration of your account and for a minimum of five (5) years following account closure, to comply with AML and record-keeping obligations.
• Transaction and betting history — retained for a minimum of five (5) years from the date of each transaction, in line with standard financial record-keeping requirements.
• KYC documents — retained for a minimum of five (5) years after account closure or the last transaction, whichever is later.
• Customer support communications — retained for three (3) years from the date of the interaction, to allow for dispute resolution and quality assurance.
• Marketing preferences and consent records — retained until you withdraw consent, and for a further period sufficient to demonstrate that consent was valid.
• Technical and device logs — retained for twelve (12) months, unless a specific security investigation requires longer retention.

When data is no longer required for any lawful purpose, we securely delete or anonymize it so that it can no longer be linked to you as an individual.

---

7. Data Security

mana77 applies industry-standard technical and organizational measures to protect your Personal Data against unauthorized access, accidental loss, destruction, or disclosure. Our security practices include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers
• Encryption at rest for sensitive data fields including passwords (stored as salted hashes), bank account numbers, and identity document copies
• Access controls — staff access to Personal Data is strictly role-based and granted on a need-to-know basis; all access is logged and audited
• Two-factor authentication (2FA) available for player accounts to add an additional layer of login security
• Regular penetration testing and vulnerability assessments conducted by independent security firms
• Intrusion detection systems that continuously monitor our infrastructure for anomalous activity
• Incident response procedures — in the event of a data breach that materially affects your rights, we will notify you without undue delay and take immediate remedial action

While we employ robust security measures, no online platform can guarantee absolute security. You are responsible for keeping your account credentials confidential and for notifying us immediately at [email protected] if you suspect unauthorized access to your account.

---

8. Cookies and Tracking Technologies

mana77 uses cookies and similar technologies (such as web beacons and local storage) to operate the platform, remember your preferences, and collect analytics data. The types of cookies we use are:

8.1 Strictly Necessary Cookies

These cookies are essential for the platform to function. They manage your login session, maintain security tokens, and ensure that features like the bet slip and account balance display operate correctly. You cannot opt out of strictly necessary cookies without disabling core platform functionality.

8.2 Performance and Analytics Cookies

These cookies collect aggregated, anonymized data about how users interact with the platform — which pages are visited most, how long sessions last, and where errors occur. This information is used solely to improve platform performance and user experience.

8.3 Functional Cookies

These cookies remember your preferences — such as your preferred language, currency display (IDR / Rp), and notification settings — so you do not need to re-enter them on each visit.

8.4 Marketing Cookies

With your consent, we may use cookies to understand which promotions and game categories interest you, enabling us to show more relevant bonus offers. You may withdraw this consent at any time by adjusting your browser settings or by contacting our support team.

Most web browsers allow you to manage cookies through their settings. Disabling certain cookies may affect platform functionality. Continued use of the mana77 platform after being informed of our cookie practices constitutes acceptance of strictly necessary and functional cookies.

---

9. Your Data Rights

mana77 respects your right to control your Personal Data. Subject to applicable law and our legal obligations (including AML retention requirements), you have the following rights:

• Right of Access — you may request a copy of all Personal Data we hold about you, along with information about how it is used.
• Right to Rectification — if any of your Personal Data is inaccurate or incomplete, you may request that we correct it. For identity and KYC data, corrections may require resubmission of verification documents.
• Right to Erasure ("Right to Be Forgotten") — you may request deletion of your Personal Data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent, or where processing is unlawful. Note that we may be legally required to retain certain data (e.g., transaction records) even after an erasure request.
• Right to Restriction of Processing — in certain circumstances, you may request that we restrict how we use your data while a dispute is being resolved.
• Right to Data Portability — you may request that we provide your Personal Data in a structured, commonly used, machine-readable format so that you can transfer it to another service provider.
• Right to Object — you may object to processing based on legitimate interests, including the use of your data for direct marketing. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent — where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

To exercise any of these rights, please contact us at [email protected]. We will respond to all verifiable requests within 30 calendar days. We may need to verify your identity before processing certain requests to ensure your data is not disclosed to unauthorized parties.

---

10. Children and Minors

---

11. International Data Transfers

mana77 is operated by a team with infrastructure and service providers located in multiple countries. As a result, your Personal Data may be transferred to and processed in countries outside Indonesia. When we transfer data internationally, we take steps to ensure that appropriate safeguards are in place — including data processing agreements incorporating standard contractual clauses — so that your data receives a level of protection consistent with the principles outlined in this Privacy Policy.

Our game providers (such as Pragmatic Play, Evolution Gaming, and Microgaming) and infrastructure partners operate globally. In all cases, we conduct due diligence on these providers and contractually require them to implement appropriate security measures and to use your data only for the purposes we specify.

---

12. Changes to This Privacy Policy

mana77 may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or business operations. When we make material changes, we will update the "Last Updated" date at the bottom of this page and, where appropriate, notify you via email or an in-platform notification.

We encourage you to review this Privacy Policy periodically. Your continued use of the mana77 platform after changes have been posted constitutes your acceptance of the revised policy. If you do not agree with any update, you should stop using our Services and may request account closure in accordance with our Terms & Conditions.

---

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or the handling of your Personal Data, please reach out to our dedicated privacy support team:

• Email: [email protected]
• Live Chat: Available 24/7 directly on the mana77 platform
• WhatsApp Support: Available 24/7 (contact details provided on our website)

Our team is fluent in both Indonesian and English and will respond to all privacy-related inquiries within 5 business days. For complex data rights requests, we may require up to 30 calendar days to respond fully.