Privacy Policy

1. Introduction

vaf77 ("we", "us", "our", or "the Platform") operates the online gaming platform accessible at https://vaf77.cam. This Privacy Policy sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed. We are committed to safeguarding the privacy of our members and ensuring that your personal information is handled with the highest standards of care, transparency, and security.

This Policy applies to all personal data collected through your use of the vaf77 platform, including but not limited to account registration, deposits and withdrawals, gameplay activity, customer support interactions, promotional participation, and any other engagement with our Services.

vaf77 is the data controller responsible for your personal information. We take this responsibility seriously and have implemented comprehensive technical and organizational measures to protect your data against unauthorized access, misuse, alteration, or disclosure.

2. Definitions

For the purposes of this Privacy Policy, the following terms shall have the meanings ascribed to them below:

• "Personal Data" means any information relating to an identified or identifiable natural person, including name, identification number, location data, email address, financial information, and any other identifier specific to that person.
• "Processing" means any operation performed on personal data, including collection, storage, use, disclosure, erasure, or destruction.
• "Data Subject" means the individual to whom personal data relates — in this context, you as the vaf77 platform user.
• "Data Controller" means vaf77, the entity that determines the purposes and means of processing your personal data.
• "Third Party" means any natural or legal person other than you or vaf77 who is authorized by vaf77 to process your personal data for specific purposes.
• "Cookies" means small data files placed on your device by the vaf77 platform to enhance functionality, analyze usage patterns, and support personalized experiences.

3. Categories of Data We Collect

vaf77 collects personal data that is necessary and proportionate to the operation of our gaming platform. The categories of data we collect include:

3.1 Identity and Contact Information

• Full legal name as it appears on your government-issued identification document
• Date of birth (for age verification — vaf77 strictly enforces the 21+ minimum age requirement)
• Residential address (street, city, province, postal code — Indonesia or applicable jurisdiction)
• Email address and mobile phone number
• Username and encrypted password

3.2 Identity Verification (KYC) Documents

• Indonesian National Identity Card (KTP / Kartu Tanda Penduduk) number and image
• Passport or driver's license (where KTP is unavailable or additional verification is required)
• Selfie photographs for biometric verification
• Proof of address documentation (utility bills, bank statements dated within three months)

3.3 Financial and Transaction Data

• Bank account details (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, Bank Permata, BSI) including account holder name and account number
• E-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja) used for deposits and withdrawals
• Deposit history, withdrawal requests, and transaction amounts in Indonesian Rupiah (IDR)
• Bonus activation records, wagering history, and cashback processing data

3.4 Technical and Usage Data

• IP address and geolocation data at time of login and during active sessions
• Device type, operating system version, browser type and version
• Session duration, pages visited, features used, and click-path analytics
• Error logs, crash reports, and system performance data

3.5 Gaming and Behavioral Data

• Complete betting and gaming activity records including game type, stake amounts, outcomes, and session times
• VIP tier status and loyalty program participation data
• Responsible gaming settings, including deposit limits, session limits, and self-exclusion records
• Customer support interaction records and case history

4. How We Collect Your Data

vaf77 collects personal data through the following means:

• Direct Registration: Information you provide when creating your vaf77 account.
• KYC Verification Submissions: Documents uploaded during the identity verification process.
• Payment Processing: Financial data shared when making deposits or requesting withdrawals.
• Platform Interaction: Data generated automatically as you navigate, play, and interact with vaf77.
• Customer Support Channels: Information provided during live chat, email correspondence, or support ticket submissions.
• Cookies and Tracking Technologies: Automated collection of technical data as described in Section 11.
• Third-Party Sources: In limited circumstances, data may be received from fraud prevention services, identity verification partners, or affiliate marketing platforms.

5. Purposes of Data Processing

vaf77 processes your personal data only for specific, legitimate, and necessary purposes. The following table summarizes the primary processing activities:

Processing Purpose	Types of Data Used	Retention Period
Account registration and management	Identity, contact, login credentials	Duration of account + 5 years
Age and identity verification (KYC)	KYC documents, selfie, address proof	5 years post account closure
Deposit and withdrawal processing	Financial, bank account, e-wallet data	7 years (regulatory requirement)
Fraud prevention and security	Technical, behavioral, transactional	7 years
Anti-money laundering (AML) compliance	Financial, identity, transaction history	7 years
Responsible gaming monitoring	Gaming behavior, session data, limits	Duration of account + 5 years
Marketing and promotional communications	Contact, preferences, gaming history	Until consent withdrawn
Platform improvement and analytics	Technical, behavioral (anonymized)	2 years (aggregated)
Customer support	All relevant data per case	3 years post case resolution

6. Legal Basis for Processing

vaf77 processes your personal data on one or more of the following legal bases:

• Contractual Necessity: Processing required to perform the contract between you and vaf77 — including account creation, payment processing, and service delivery.
• Legal Obligation: Processing necessary to comply with applicable laws and regulations, including anti-money laundering (AML) obligations, Know Your Customer (KYC) requirements, and regulatory reporting duties.
• Legitimate Interests: Processing carried out in vaf77's legitimate interests, including fraud prevention, platform security, and service improvement, provided these interests are not overridden by your rights and freedoms.
• Consent: Where you have given explicit, freely given, and informed consent to specific processing activities, such as receiving marketing communications or the use of non-essential cookies.

Where processing is based on consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

7. Data Sharing and Disclosure

vaf77 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your data only in the following limited and controlled circumstances:

7.1 Service Providers and Technology Partners

We work with carefully selected third-party service providers who assist in delivering the vaf77 platform. These include payment processors, identity verification and KYC providers, game software suppliers (such as Pragmatic Play, Evolution Gaming, Microgaming, Spribe, and Pocket Games Soft), cloud hosting infrastructure providers, customer support platforms, and fraud detection services. All such partners are bound by contractual data processing agreements that restrict their use of your data to the specific services they provide on our behalf.

7.2 Financial Institutions

To process deposits and withdrawals, vaf77 necessarily shares relevant transaction data with Indonesian banking partners including BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, Bank Permata, and BSI, as well as e-wallet operators OVO, DANA, GoPay, ShopeePay, and LinkAja. This sharing is strictly limited to information required to execute the specific transaction requested.

7.3 Legal and Regulatory Disclosure

vaf77 may disclose personal data to government authorities, law enforcement agencies, or regulatory bodies where required by applicable law, court order, or regulatory mandate. Such disclosures are made only to the extent strictly required and with appropriate safeguards where permitted.

7.4 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of vaf77 assets, your personal data may be transferred to the acquiring entity as part of the transaction. You will be notified of any such change and your rights in relation to your personal data will remain protected.

8. International Data Transfers

vaf77 primarily processes and stores data within secure server infrastructure. In some cases, your data may be transferred to and processed in jurisdictions outside of Indonesia. When such transfers occur, vaf77 ensures that appropriate safeguards are in place to protect your personal data, including:

• Data processing agreements with standard contractual clauses ensuring equivalent levels of data protection.
• Transfers only to service providers who maintain internationally recognized data security certifications (such as ISO 27001 or equivalent).
• Regular assessment of third-country data protection standards to ensure ongoing adequacy.

By using the vaf77 platform, you acknowledge that your data may be transferred and processed outside your country of residence as described in this section.

9. Data Retention

vaf77 retains personal data only for as long as is necessary to fulfill the purposes for which it was collected, as set out in the table in Section 5. Key retention principles include:

• Active Accounts: Personal data is retained for the full duration of your account with vaf77, updated as necessary to remain accurate and current.
• Closed Accounts: Following voluntary or involuntary account closure, vaf77 retains your data for a minimum of five (5) years to comply with anti-money laundering obligations, regulatory audit requirements, and to resolve any outstanding disputes.
• Financial Records: Transaction and payment records are retained for a minimum of seven (7) years in accordance with financial regulatory standards.
• Marketing Data: Retained only while your marketing consent remains active. Withdrawn consent results in deletion of marketing preferences within thirty (30) days.
• Self-Exclusion Records: Maintained indefinitely to prevent re-registration in violation of self-exclusion commitments — this is a responsible gaming safeguard, not a punitive measure.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized so that it can no longer be linked to an identifiable individual.

10. Data Security Measures

vaf77 employs a comprehensive, multi-layered approach to data security designed to protect your personal information against unauthorized access, alteration, disclosure, or destruction. Our security measures include:

• SSL/TLS Encryption: All data transmitted between your device and the vaf77 platform is encrypted using 256-bit SSL/TLS protocols, ensuring that information cannot be intercepted in transit.
• Data Encryption at Rest: Sensitive personal data stored on vaf77 servers is encrypted using industry-standard algorithms to prevent unauthorized access to stored information.
• Access Controls: Strict role-based access controls ensure that only authorized personnel with a verified business need can access personal data. All access is logged and regularly audited.
• Two-Factor Authentication (2FA): vaf77 supports 2FA for member accounts and mandates it for all internal system access by staff.
• Regular Security Audits: We conduct periodic penetration testing, vulnerability assessments, and security audits to identify and remediate potential weaknesses in our infrastructure.
• Incident Response: In the unlikely event of a data breach affecting your personal information, vaf77 has an established incident response protocol and will notify affected users in a timely manner in accordance with applicable regulations.

11. Cookies and Tracking Technologies

vaf77 uses cookies and similar tracking technologies to enhance platform functionality, analyze user behavior, and support marketing activities. The types of cookies we use include:

11.1 Strictly Necessary Cookies

These cookies are essential for the vaf77 platform to function correctly. They enable core features such as session management, authentication, and security. You cannot opt out of strictly necessary cookies, as the platform cannot operate without them.

11.2 Performance and Analytics Cookies

These cookies collect aggregated, anonymized information about how users interact with vaf77 — including pages visited, features used, and error occurrences. This data helps us improve platform performance and user experience. Analytics cookies require your consent and can be disabled through your browser settings or our cookie preference center.

11.3 Functional Cookies

Functional cookies remember your preferences and personalization settings, such as language preferences, display settings, and previously selected game categories. These enhance your experience but are not strictly essential. They require consent and can be managed through your account settings.

11.4 Marketing and Targeting Cookies

Where you have consented, marketing cookies enable vaf77 to deliver personalized promotional content and offers relevant to your gaming preferences and activity patterns. These cookies may also support affiliate tracking. You can withdraw consent for marketing cookies at any time through your account preferences.

You can manage your cookie preferences through your browser settings or by contacting our support team. Please note that disabling certain cookies may affect the functionality and performance of the vaf77 platform.

12. Your Data Rights

As a vaf77 member and data subject, you hold the following rights in relation to your personal data:

• Right of Access: You have the right to request a copy of the personal data vaf77 holds about you, along with information about how it is processed.
• Right to Rectification: You have the right to request correction of inaccurate or incomplete personal data. You may update certain information directly through your Account Settings.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data in certain circumstances — for example, where data is no longer necessary for its original purpose or where you withdraw consent. This right is subject to vaf77's legal obligations, including regulatory retention requirements.
• Right to Restriction of Processing: You may request that vaf77 restrict the processing of your personal data in specific situations, such as while a dispute about accuracy is being resolved.
• Right to Data Portability: Where processing is based on consent or contractual necessity and carried out by automated means, you may request that your personal data be provided in a structured, commonly used, and machine-readable format.
• Right to Object: You have the right to object to processing based on legitimate interests, including profiling and direct marketing. Objection to direct marketing will always be honored immediately.
• Rights Related to Automated Decision-Making: vaf77 does not make decisions with significant legal or similarly significant effects on you using solely automated processing without human oversight. Where automated tools are used (e.g., fraud detection), human review is available upon request.

To exercise any of the above rights, please contact our Data Protection team at the email address provided in Section 15. vaf77 will respond to all valid requests within thirty (30) calendar days. We may request additional information to verify your identity before processing a data rights request, as a security measure to prevent unauthorized access to your personal information.

13. Minors and Age Restriction

The vaf77 platform is strictly intended for adults aged 21 years and older. We do not knowingly collect, process, or store personal data belonging to individuals under the age of 21. This age threshold applies to all users, including residents of Indonesia and users accessing the platform from any other jurisdiction.

vaf77 employs a mandatory KYC (Know Your Customer) verification process that requires submission of a government-issued identity document confirming date of birth prior to enabling full platform access, including deposits, gameplay, and withdrawals. Any account found to belong to a person under 21 years of age will be immediately suspended, all associated funds will be forfeited, and the matter may be escalated to relevant authorities in accordance with applicable child protection regulations.

If you have reason to believe that a minor has registered on the vaf77 platform, please contact our Customer Support team immediately at the contact details provided in Section 15 so that we can take prompt and appropriate action.

14. Changes to This Privacy Policy

vaf77 reserves the right to update, amend, or revise this Privacy Policy at any time. We will notify registered members of material changes via email to the address on file, through an in-platform notification upon your next login, or by posting a prominent notice on the vaf77 website. The "Last Updated" date at the top of this Policy reflects the most recent revision.

Your continued use of the vaf77 platform following notification of Privacy Policy changes constitutes acceptance of the revised Policy. If you disagree with any changes, you should discontinue using the platform and may request account closure in accordance with the process described in our Terms and Conditions.

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your personal data and managing our data practices.

15. Contact Information

For any questions, concerns, or requests relating to this Privacy Policy or vaf77's data processing practices, please contact us through the following channels:

• Data Protection Inquiries: [email protected]
• Live Support Chat: Available 24/7 through your vaf77 Account dashboard
• Response Time: vaf77 aims to respond to all privacy-related inquiries within five (5) business days and to formal data rights requests within thirty (30) calendar days.
• Support Hours: 24 hours a day, 7 days a week, including Indonesian public holidays (WIB timezone — UTC+7)