Privacy Policy

1. Introduction

n7bet ("the Company", "we", "us", "our") operates the online betting and gaming platform at https://n7bet.cam, which is designed for English-preference members across Indonesia. We recognise that the personal data you entrust to us is sensitive and that its protection is both a legal obligation and a fundamental responsibility to our members.

This Privacy Policy sets out a transparent, detailed account of our data practices. It covers the categories of personal data we collect, the purposes and legal grounds on which we process that data, with whom we share it, how long we retain it, and what rights you have as a data subject. We have written this policy in plain, accessible English to ensure that every member — regardless of technical background — can understand precisely how their information is handled.

This policy should be read alongside our Terms & Conditions, which govern the broader contractual relationship between you and n7bet. In the event of any conflict between the two documents on a privacy matter, this Privacy Policy governs.

2. Definitions

The following terms are used throughout this Privacy Policy with the specific meanings defined below:

• "Personal Data" means any information relating to an identified or identifiable natural person — including name, date of birth, national identity number, email address, bank account details, IP address, and device identifiers.
• "Processing" means any operation performed on personal data, including collection, storage, use, transmission, erasure, or destruction.
• "Data Subject" means you, the individual whose personal data is being processed.
• "Data Controller" means the entity that determines the purposes and means of processing personal data — in this case, the Company that operates n7bet.
• "Data Processor" means a third party that processes personal data on behalf of the Data Controller, under a binding data-processing agreement.
• "KYC" means Know Your Customer — the identity and address verification process required by the Company's compliance obligations.
• "Cookies" means small text files placed on your device by the Platform to support functionality, analytics, and session management.
• "Sensitive Personal Data" means a subset of personal data warranting heightened protection — including national identity numbers, biometric data, financial account details, and copies of government-issued identity documents.

3. Data Controller

The Data Controller responsible for the personal data collected through the n7bet Platform is the internationally incorporated entity that operates the Platform. As a platform serving members primarily in Indonesia, n7bet acknowledges its obligations under applicable data protection standards and treats all member data in accordance with internationally recognised privacy principles including purpose limitation, data minimisation, storage limitation, integrity, and confidentiality.

For all privacy-related enquiries, including requests to exercise your data rights, you may contact the n7bet Data Privacy team at the email address listed in Section 16 of this policy. Responses to verified data rights requests are provided within 30 calendar days of receipt.

4. Personal Data We Collect

n7bet collects personal data across several contexts. The categories of data collected, and the context in which each category is gathered, are set out in the table below:

4.1 Data We Do Not Collect

n7bet does not collect or store full payment card numbers (PAN), card CVV/CVC codes, or internet banking passwords. All bank transfer authentication occurs directly between the member and their respective bank. n7bet receives only transaction confirmation references, not full banking credentials.

5. How We Use Your Personal Data

n7bet uses your personal data for the following purposes, each of which is tied to a defined legal basis described in Section 6:

• Account creation and management: To register your account, verify your identity, and maintain your membership on the Platform.
• KYC compliance: To verify that you meet the eligibility requirements set out in our Terms & Conditions — including the minimum age of 21 and the Indonesian residency criterion — and to comply with anti-money-laundering (AML) obligations.
• Transaction processing: To process deposits and withdrawals via your registered Indonesian bank accounts or e-wallets, and to maintain accurate financial records of all transactions.
• Bet settlement and game delivery: To operate the sportsbook and casino platform, accept and settle bets, and deliver real-money game sessions.
• Fraud detection and platform security: To identify and investigate suspicious account activity, prevent multi-accounting, detect bonus abuse, and protect the Platform's integrity.
• Responsible gaming: To enforce deposit limits, session-time controls, and self-exclusion requests set by members, and to identify members who may be showing signs of problem gambling behaviour.
• Customer support: To respond to enquiries, resolve disputes, and improve the quality of our support service based on interaction history.
• Marketing communications: To send promotional offers, seasonal campaign notifications, and bonus alerts — only to members who have opted in to receive such communications. You may opt out at any time via your account settings.
• Platform improvement: To analyse aggregate usage data, identify technical issues, and improve the user experience across the Platform.
• Legal compliance: To retain records as required by applicable law and to respond to lawful requests from competent authorities.

6. Legal Basis for Processing

n7bet processes your personal data on the following legal grounds, consistent with internationally recognised data protection principles:

• Contractual necessity: Processing required to fulfil our contractual obligations to you as a registered member — including account management, payment processing, and bet settlement.
• Legal obligation: Processing required to comply with applicable laws and regulations — including KYC identity verification, AML record-keeping, and responding to lawful authority requests.
• Legitimate interests: Processing carried out for n7bet's legitimate business interests where those interests are not overridden by your privacy rights — including fraud prevention, platform security, responsible gaming monitoring, and aggregate analytics.
• Consent: Processing based on your explicit, freely given consent — primarily for optional marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

7. Cookies & Tracking Technologies

7.1 What Are Cookies?

Cookies are small text files placed on your device when you visit the Platform. They allow the Platform to recognise your device across sessions, maintain your login state, remember your preferences, and collect anonymised usage analytics. n7bet uses cookies and similar technologies including web beacons and local storage objects.

7.2 Categories of Cookies We Use

• Strictly Necessary Cookies: Required for the Platform to function. These include session authentication cookies, security tokens, and load-balancing identifiers. These cookies cannot be disabled without rendering the Platform non-functional.
• Functional Cookies: Store your preferences such as language setting, last-used payment method, and responsible gaming tool configurations. Disabling these cookies will not prevent Platform access but may degrade your experience.
• Analytics Cookies: Collect anonymised data on how members navigate the Platform — including pages visited, time on page, and error events. This data is aggregated and used solely to improve Platform performance. No individual member is identifiable from analytics data.
• Session Integrity Cookies: Short-lived cookies that verify the integrity of your active session, help prevent cross-site request forgery (CSRF), and support secure in-play betting functionality.

7.3 Managing Cookies

You may manage cookie preferences through your browser settings. Most modern browsers allow you to block, delete, or receive notifications about cookies. Please note that blocking strictly necessary cookies will prevent you from logging in or using core Platform features. Detailed instructions for managing cookies are available in the help documentation for your specific browser.

8. Data Sharing & Disclosure

n7bet does not sell, rent, or trade your personal data. We share personal data only in the limited circumstances described below, and only to the extent strictly necessary for the stated purpose:

• Payment service providers: To process deposits and withdrawals, we share transaction details with your designated Indonesian bank (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, BSI, Bank Permata) or e-wallet provider (OVO, DANA, GoPay, ShopeePay, LinkAja). These providers act as independent data controllers for their own banking and payment services.
• KYC verification partners: Where automated identity verification technology is used, identity documents may be processed by a contracted third-party KYC technology provider. All such providers are bound by data-processing agreements that prohibit use of your data beyond the KYC verification purpose.
• Game content providers: Live casino and RNG game providers such as Evolution Gaming and Pragmatic Play may receive anonymised session identifiers necessary to deliver and certify game outcomes. These providers do not receive your full personal profile.
• Fraud prevention services: Anonymised technical data (IP addresses, device fingerprints) may be shared with contracted fraud-detection platforms to identify suspicious activity patterns. No personally identifiable financial data is included in these transfers.
• Legal and regulatory authorities: n7bet will disclose personal data to competent government authorities, courts, or law enforcement agencies where required to do so by a valid legal order, warrant, or regulatory obligation. We will notify affected members of such disclosures where legally permitted to do so.
• Business succession: In the event of a merger, acquisition, or asset sale involving the Company, member personal data may be transferred to the successor entity. Affected members will be notified of any change in Data Controller and their rights under this policy will be preserved.

9. International Data Transfers

As an internationally operated platform, n7bet may transfer and store your personal data on servers located outside Indonesia. Where such international transfers occur, n7bet ensures that appropriate safeguards are in place to protect your data, including:

• Binding contractual clauses (standard contractual clauses) with all data processors receiving data from Indonesian members.
• Transfer only to jurisdictions that maintain data protection standards consistent with those described in this policy.
• Regular review of third-party data processor compliance to confirm ongoing adherence to the agreed safeguards.

By registering an account on n7bet, you acknowledge that your personal data may be transferred to and processed in countries outside Indonesia as part of the Company's normal operations.

10. Data Security

n7bet implements technical and organisational security measures proportionate to the sensitivity of the personal data we hold. Our current security infrastructure includes:

• Transport encryption: TLS 1.3 is enforced on all connections between member devices and n7bet servers. HTTP connections are automatically redirected to HTTPS.
• Data-at-rest encryption: All databases holding personal data — including KYC documents, financial records, and account credentials — are encrypted using AES-256.
• Access controls: Access to personal data is restricted to authorised personnel on a strict need-to-know basis. All internal access is logged and subject to regular audit review.
• Credential hashing: Member passwords are stored using a one-way cryptographic hashing algorithm with per-account salting. Plaintext passwords are never stored or transmitted internally.
• Intrusion detection: The Platform's infrastructure is monitored 24/7 for unusual access patterns, unauthorised login attempts, and anomalous data transfer activity.
• Penetration testing: n7bet's systems undergo periodic third-party security assessments to identify and remediate vulnerabilities before they can be exploited.

Despite these measures, no internet-based system is entirely immune from security risk. In the event of a data breach that is likely to result in a risk to your rights and freedoms, n7bet will notify affected members without undue delay and will take immediate remediation steps.

11. Data Retention

n7bet retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply:

On expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to an identifiable individual. Anonymised aggregate data may be retained indefinitely for statistical and product analytics purposes.

12. Your Data Rights

As a data subject, you hold the following rights over your personal data held by n7bet. To exercise any of these rights, submit a written request to our Data Privacy team at the contact address in Section 16. We will verify your identity before processing any request and will respond within 30 calendar days.

• Right of Access: You may request a copy of all personal data n7bet holds about you, together with information on how it is processed and with whom it is shared.
• Right of Rectification: If any personal data we hold about you is inaccurate or incomplete, you may request that it be corrected. You may also update certain data fields directly via your account settings.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where we have no overriding legitimate interest to retain it. This right is subject to legal retention obligations — for example, AML-required transaction records cannot be erased during their mandatory retention period.
• Right to Restriction of Processing: You may request that processing of your personal data be restricted while a rectification request or objection is under review.
• Right to Data Portability: You may request a copy of personal data you have provided to n7bet in a structured, commonly used, machine-readable format (e.g., JSON or CSV), for the purpose of transferring it to another service provider.
• Right to Object: You may object to processing based on legitimate interests at any time. You also have an unconditional right to object to processing for direct marketing purposes, which will take effect immediately on receipt of your objection.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time via your account settings or by contacting support. Withdrawal does not affect the lawfulness of prior processing.

13. Age Restriction & Minors

The n7bet Platform is strictly intended for adults aged 21 years and over. n7bet does not knowingly collect, store, or process personal data relating to individuals under the age of 21. Account registration requires the submission of date of birth, and all accounts are subject to KYC verification which confirms age eligibility.

If n7bet becomes aware that personal data has been collected from a person under the age of 21, the account will be immediately suspended, all data will be deleted to the extent not required to be retained by law, and any funds held will be dealt with in accordance with our Terms & Conditions and applicable regulatory guidance.

If you believe that a person under 21 has registered an account on n7bet, please contact our support team immediately at the address listed in Section 16.

14. Third-Party Services & External Links

The n7bet Platform does not contain links to external third-party websites. However, the Platform integrates third-party services — including game content providers (such as Pragmatic Play and Evolution Gaming) and payment processors (such as OVO, DANA, and GoPay) — which operate under their own independent privacy policies.

n7bet is not responsible for the privacy practices of these independent third-party providers. When you interact with a live game hosted by a third-party studio or initiate a payment through an e-wallet provider, that provider's privacy policy governs the handling of any data processed directly by them. n7bet recommends reviewing the privacy policies of all third-party services you use in connection with the Platform.

15. Amendments to This Policy

n7bet reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the range of services offered on the Platform. Where amendments are material — including changes to data sharing arrangements, the categories of data collected, or member rights — n7bet will notify active members via their registered email address at least seven (7) calendar days before the changes take effect.

The effective date of the current version of this policy is displayed at the top of this page. Your continued use of the Platform after the effective date of any revision constitutes your acknowledgment of the updated policy. If you do not accept the revised policy, you must discontinue use of the Platform and may request account closure in accordance with our Terms & Conditions.

The most current version of this Privacy Policy is always available at https://n7bet.cam/privacy-policy.

16. Contact & Data Enquiries

For all privacy-related enquiries — including data rights requests, questions about this policy, or concerns about how your personal data has been handled — please contact the n7bet Data Privacy team:

When submitting a data rights request, please include your full name as registered on your n7bet account, your registered email address, and a clear description of the right you wish to exercise. Identity verification will be required before any data is disclosed or deleted. n7bet will not action data rights requests received from unverified third parties purporting to act on a member's behalf without a signed, dated letter of authority from the member.