Privacy Policy

1. Introduction and Scope

Welcome to haya77's Privacy Policy. This document describes how haya77 ("we," "us," "our," or "the Company") collects, uses, stores, protects, and discloses personal information from users ("you," "your," or "Users") of our online gaming platform located at https://haya77.cam and all associated services.

haya77 is committed to protecting your privacy and ensuring the security of your personal information in accordance with international data protection standards and best practices. We recognize the trust you place in us when you provide your personal data, and we take that responsibility seriously.

This Privacy Policy applies to all Users of haya77 services, including visitors to our Website, registered account holders, and anyone who interacts with our platform. By accessing or using haya77, you acknowledge that you have read, understood, and agree to the collection, use, and disclosure of your personal information as described in this Privacy Policy.

This Privacy Policy should be read in conjunction with our Terms & Conditions and Responsible Gaming Policy. If you do not agree with the practices described in this Privacy Policy, please do not use haya77 services.

2. Information We Collect

haya77 collects various types of information to provide, maintain, improve, and protect our services. The information we collect falls into the following categories:

2.1 Information You Provide Directly

When you register for a haya77 account or use our services, you voluntarily provide us with the following personal information:

• Account Registration Information: Full legal name, date of birth, gender, residential address in Indonesia, email address, mobile phone number, username, and password.
• Identity Verification Information (KYC): Copies of government-issued identification documents (Indonesian KTP, passport, or driver's license), proof of address documents (utility bills, bank statements, or government correspondence), and selfie photographs for identity verification.
• Payment Information: Bank account details (bank name, account number, account holder name) for Indonesian banks including BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, BSI, and Bank Permata; e-wallet account information for OVO, DANA, GoPay, ShopeePay, and LinkAja; and transaction history including deposits, withdrawals, and payment method details.
• Communication Information: Content of messages, emails, live chat conversations, and other communications you send to haya77 customer support or through our platform.
• Voluntary Information: Any additional information you choose to provide, such as preferences, feedback, survey responses, or promotional preferences.

2.2 Information Collected Automatically

When you access and use haya77 services, we automatically collect certain technical and behavioral information:

• Device Information: Device type (smartphone, tablet, computer), operating system (Android, iOS, Windows, macOS), browser type and version, device identifiers (IMEI, device ID), screen resolution, and mobile network information.
• Connection Information: IP address, internet service provider (ISP), approximate geographic location (city and region based on IP address), connection type, and network status.
• Usage Information: Pages visited, games played, bets placed, features used, time spent on platform, click patterns, navigation paths, search queries, and interaction with promotional content.
• Gaming Activity: Bet history (stakes, outcomes, timestamps), game preferences, win/loss records, bonus usage, and gameplay patterns.
• Cookies and Tracking Technologies: Session cookies, persistent cookies, web beacons, pixels, and similar tracking technologies to recognize you, remember preferences, analyze usage patterns, and deliver personalized content.

2.3 Information From Third Parties

In limited circumstances, we may receive information about you from third-party sources:

• Payment Processors: Confirmation of payment transactions, verification of payment method ownership, and fraud prevention data from Indonesian banks and e-wallet providers.
• Identity Verification Services: Verification results from third-party KYC and anti-fraud service providers.
• Affiliate Partners: Referral information if you accessed haya77 through a marketing partner or affiliate link.
• Public Sources: Information available in public databases or government records for compliance and verification purposes.

3. How We Use Your Information

haya77 uses your personal information for the following legitimate business purposes:

3.1 Account Management and Service Delivery

• Create, maintain, and manage your haya77 user account
• Authenticate your identity and verify your eligibility to use our services
• Process deposits, withdrawals, and other financial transactions
• Provide access to casino games, sports betting, togel lottery, sabung ayam streams, and other gaming services
• Track your betting activity, game history, and account balance
• Manage bonuses, promotions, and loyalty rewards
• Process and fulfill your requests, inquiries, and customer support tickets

3.2 Legal and Regulatory Compliance

• Verify your age (21+ requirement) and compliance with eligibility criteria
• Comply with Know Your Customer (KYC) and anti-money laundering (AML) regulations
• Prevent fraud, money laundering, and other illegal activities
• Detect and prevent multiple account abuse, collusion, and cheating
• Respond to legal requests, court orders, and regulatory inquiries
• Maintain records as required by gaming licensing authorities
• Enforce our Terms & Conditions and other legal agreements

3.3 Communication and Customer Support

• Respond to your inquiries, questions, and customer support requests
• Send important account notifications, security alerts, and service updates
• Provide transaction confirmations for deposits, withdrawals, and bets
• Deliver promotional offers, bonus announcements, and marketing communications (with your consent)
• Conduct customer satisfaction surveys and gather feedback

3.4 Platform Improvement and Analytics

• Analyze usage patterns to improve website functionality and user experience
• Monitor platform performance, identify technical issues, and fix bugs
• Conduct research and analysis to develop new features and services
• Test and optimize game offerings, promotional campaigns, and payment methods
• Generate aggregated, anonymized statistics and reports for internal business purposes

3.5 Security and Fraud Prevention

• Monitor for suspicious activity, unauthorized access, and security threats
• Implement and maintain security measures to protect your account and data
• Detect and prevent fraudulent transactions, payment disputes, and chargebacks
• Identify and block bots, automated tools, and other prohibited software
• Investigate suspected violations of our Terms & Conditions

3.6 Responsible Gaming

• Monitor for signs of problem gambling behavior
• Implement and enforce deposit limits, loss limits, and self-exclusion requests
• Provide responsible gaming tools and resources
• Comply with responsible gaming regulations and best practices

4. Legal Basis for Processing (GDPR Compliance)

For Users in jurisdictions subject to the European Union General Data Protection Regulation (GDPR) or similar data protection laws, haya77 processes your personal information based on the following legal grounds:

• Contractual Necessity: Processing is necessary to perform our contract with you (providing gaming services, processing transactions, managing your account).
• Legal Obligation: Processing is required to comply with legal and regulatory obligations (KYC/AML compliance, age verification, tax reporting, responding to lawful requests).
• Legitimate Interests: Processing serves our legitimate business interests (fraud prevention, security, platform improvement, analytics) without overriding your fundamental rights and freedoms.
• Consent: Processing is based on your explicit consent (marketing communications, optional data collection). You may withdraw consent at any time.

5. How We Share Your Information

haya77 does not sell, rent, or trade your personal information to third parties for their marketing purposes. We only share your information in the following limited circumstances:

5.1 Service Providers and Business Partners

We share information with trusted third-party service providers who assist us in operating our platform:

• Payment Processors: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, BSI, Bank Permata) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) to process deposits and withdrawals.
• Game Providers: Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Ezugi, Spribe, Pocket Games Soft, and other game suppliers to deliver gaming content. These providers may collect limited gameplay data to operate their games.
• Identity Verification Services: KYC and anti-fraud service providers to verify your identity and prevent fraudulent activity.
• Technology Infrastructure: Cloud hosting providers, content delivery networks (CDNs), and IT security firms to maintain and secure our platform.
• Customer Support Tools: Live chat platforms, email service providers, and communication tools to provide customer support.
• Analytics Services: Website analytics and performance monitoring tools to analyze usage and improve our services.

All service providers are bound by strict confidentiality obligations and are prohibited from using your personal information for purposes other than providing services to haya77.

5.2 Legal and Regulatory Authorities

We may disclose your information to government authorities, regulatory bodies, law enforcement agencies, or other third parties when:

• Required by law, court order, subpoena, or other legal process
• Necessary to comply with gaming licensing requirements or regulatory inquiries
• Required to report suspicious transactions under AML regulations
• Needed to protect the rights, property, or safety of haya77, our Users, or the public
• Necessary to prevent fraud, detect crime, or enforce our Terms & Conditions

5.3 Business Transfers

In the event of a merger, acquisition, sale of assets, bankruptcy, or other business transaction, your personal information may be transferred to the successor entity. We will notify you before your information is transferred and becomes subject to a different Privacy Policy.

5.4 With Your Consent

We may share your information with third parties when you explicitly consent to such sharing, for example, when you participate in third-party promotions or integrations.

6. Data Security and Protection

haya77 implements comprehensive security measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction:

6.1 Technical Security Measures

• SSL/TLS Encryption: All data transmitted between your device and our servers is encrypted using 256-bit Secure Socket Layer (SSL) or Transport Layer Security (TLS) technology—the same standard used by major banks.
• Data Encryption: Sensitive data stored in our databases is encrypted at rest using industry-standard encryption algorithms.
• Firewall Protection: Network firewalls protect our servers from unauthorized external access.
• Intrusion Detection: Advanced intrusion detection and prevention systems monitor for suspicious activity and security threats.
• Secure Data Centers: Our servers are hosted in secure, professionally managed data centers with physical security controls, redundant power and cooling, and 24/7 monitoring.
• Regular Security Audits: Independent security experts conduct periodic audits and penetration testing to identify and address vulnerabilities.

6.2 Organizational Security Measures

• Access Controls: Access to personal information is restricted to authorized haya77 employees and service providers who need the data to perform their duties. All personnel sign confidentiality agreements.
• Employee Training: Staff members receive regular training on data protection, privacy best practices, and security protocols.
• Password Protection: Passwords are stored using secure one-way hashing algorithms and cannot be retrieved by haya77 staff.
• Incident Response Plan: We maintain a documented plan to detect, respond to, and recover from data security incidents.

6.3 User Security Responsibilities

While haya77 implements strong security measures, you also play a critical role in protecting your information:

• Choose a strong, unique password and never share it with anyone
• Enable two-factor authentication (if available) for additional account security
• Log out of your account when using shared or public devices
• Keep your registered email address and phone number secure and up-to-date
• Immediately notify haya77 if you suspect unauthorized account access
• Beware of phishing emails or messages claiming to be from haya77—we will never ask for your password via email or chat

7. Data Retention

haya77 retains your personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.

7.1 Retention Periods

Data Type	Retention Period	Reason
Account Information	Duration of account + 7 years after closure	Legal and regulatory compliance (AML, tax, gaming licenses)
Transaction Records	7 years from transaction date	Financial record-keeping requirements, fraud prevention
Identity Documents (KYC)	7 years after account closure	AML/KYC regulatory requirements
Betting History	7 years from bet placement	Gaming license requirements, dispute resolution
Communication Logs	3 years from date of communication	Customer service quality, dispute resolution
Website Usage Data	2 years from collection	Analytics, platform improvement
Marketing Consent	Until consent is withdrawn	Marketing communication preferences

7.2 Data Deletion

After the applicable retention period expires, we securely delete or anonymize your personal information. Anonymized data (data that can no longer identify you) may be retained indefinitely for statistical and analytical purposes.

8. Your Privacy Rights

Depending on your location and applicable data protection laws, you may have the following rights regarding your personal information:

8.1 Right to Access

You have the right to request a copy of the personal information we hold about you. We will provide this information in a commonly used electronic format.

8.2 Right to Rectification

You have the right to request correction of inaccurate or incomplete personal information. You can update most information directly through your account settings.

8.3 Right to Erasure ("Right to be Forgotten")

You have the right to request deletion of your personal information in certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected. However, we may retain certain information when required by law (e.g., financial records for tax and AML compliance).

8.4 Right to Restrict Processing

You have the right to request restriction of processing of your personal information in certain situations, such as when you contest the accuracy of the data or object to processing.

8.5 Right to Data Portability

You have the right to receive your personal information in a structured, commonly used, machine-readable format and to transmit that data to another service provider.

8.6 Right to Object

You have the right to object to processing of your personal information based on our legitimate interests. You can also object to direct marketing at any time.

8.7 Right to Withdraw Consent

Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing before withdrawal.

8.8 How to Exercise Your Rights

To exercise any of these rights, please contact our Data Protection team at [email protected] with the subject line "Privacy Rights Request." We will respond to your request within thirty (30) days. We may require verification of your identity before processing your request to ensure we do not disclose information to unauthorized parties.

9. Cookies and Tracking Technologies

haya77 uses cookies and similar tracking technologies to provide, maintain, and improve our services. This section explains what these technologies are and how we use them.

9.1 What Are Cookies?

Cookies are small text files placed on your device by websites you visit. They are widely used to make websites work more efficiently and provide information to website owners.

9.2 Types of Cookies We Use

• Essential Cookies: Required for basic website functionality, user authentication, and security. These cannot be disabled without affecting core features.
• Functional Cookies: Remember your preferences (language, currency, display settings) to provide a personalized experience.
• Analytics Cookies: Collect information about how you use our website (pages visited, time spent, clicks) to help us improve performance and user experience.
• Advertising Cookies: Track your activity across websites to deliver relevant promotional content and measure campaign effectiveness.

9.3 Managing Cookies

Most web browsers automatically accept cookies, but you can modify your browser settings to decline cookies if you prefer. However, disabling cookies may limit your ability to use certain features of haya77. You can manage cookie preferences through your browser settings (Chrome, Firefox, Safari, Edge all provide cookie management tools).

10. Third-Party Links and Services

haya77 may contain links to third-party websites, games, or services operated by our game providers, payment processors, and other partners. This Privacy Policy does not apply to third-party websites or services. We are not responsible for the privacy practices of third parties. We encourage you to review the privacy policies of any third-party sites you visit.

11. Children's Privacy

haya77 services are strictly intended for individuals aged twenty-one (21) years or older. We do not knowingly collect personal information from individuals under the age of 21. If we become aware that a User is under 21, we will immediately close the account and delete all associated personal information. If you believe a minor has provided personal information to haya77, please contact us immediately at [email protected].

12. International Data Transfers

Your personal information may be transferred to and stored on servers located outside of Indonesia. While data protection laws may vary by jurisdiction, haya77 ensures that your information receives an adequate level of protection regardless of where it is processed. We implement appropriate safeguards such as standard contractual clauses, encryption, and security measures to protect data during international transfers.

13. Changes to This Privacy Policy

haya77 reserves the right to update, modify, or replace this Privacy Policy at any time to reflect changes in our practices, technology, legal requirements, or business operations. We will notify you of material changes by posting the updated Privacy Policy on our Website with a new "Last Updated" date. For significant changes, we may provide additional notice via email or account notification.

Your continued use of haya77 services after the effective date of any changes constitutes your acceptance of the revised Privacy Policy. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

14. Contact Information and Complaints

If you have questions, concerns, or complaints regarding this Privacy Policy or our data practices, please contact our Data Protection Officer:

• Email: [email protected]
• Subject Line: "Privacy Inquiry" or "Data Protection Complaint"
• Live Chat: Available 24/7 through your haya77 account
• Response Time: We will acknowledge your inquiry within 48 hours and provide a substantive response within 30 days.

If you are not satisfied with our response to a privacy complaint, you may have the right to lodge a complaint with your local data protection authority or supervisory body.