Privacy Policy Dayak77 – Our Commitment to Protecting Your Data

1. Introduction and Our Commitment

Dayak77 understands that entrusting your personal data to a platform is not a decision to be taken lightly. We do not take this trust for granted. This Privacy Policy transparently explains how we manage every piece of information you provide to us – from your first visit to the platform, account registration, transactions, through to your use of our support services.

This document applies to all services operated by Dayak77 through the dayak77.vu website, Android and iOS mobile apps, and other official communication channels. In the event of any conflict between a translated version of this policy and the Indonesian version, the Indonesian version shall prevail.

2. Personal Data We Collect

We collect only the data genuinely needed to provide the services you require — nothing more. Below are the categories of data we collect and the context in which they are collected:

Some data is collected directly from you – for example, when you fill out the registration form or submit KYC documents. Other data is collected automatically by our systems as part of normal platform operations, such as access logs and feature usage data. All data collection is carried out for legitimate and proportionate purposes.

3. How We Use Your Data

Every piece of data we collect is used for a specific, accountable purpose. dayak77 does not use your data for purposes that are irrelevant or that you have not authorized.

• Account Operations: Process registration, verify identity, and manage your account so you can access all platform services.
• Transaction Processing: Process deposits, withdrawals, and all financial activity on your account accurately and securely.
• Platform Security: Detect and prevent fraud, unauthorized access, system manipulation, and other illegal activities that could harm other users.
• Regulatory Compliance: Comply with applicable legal obligations including anti-money laundering (AML) requirements and Know Your Customer (KYC) provisions.
• Service Improvement: Analyze usage patterns to improve platform performance, personalize your experience, and develop relevant new features.
• Service Communications: Send important notifications regarding your account, policy updates, transaction confirmations, and relevant service information.
• User Support: Provide effective assistance when you contact our Support team by referencing relevant account history.

4. Legal Basis for Data Processing

The processing of your personal data by dayak77 is carried out on the basis of at least one of the following legal grounds:

• Contract Performance: Data processing is required to fulfill our contractual obligations to you as a registered platform user.
• Your Consent: For certain types of processing, such as marketing communications or the use of non-essential cookies, we will ask for your explicit consent beforehand.
• Legal Obligation: Some processing is required to fulfill applicable legal obligations, such as financial reporting and AML/KYC compliance.
• Legitimate Interests: For purposes such as fraud prevention and system security, where our legitimate interests do not override your fundamental rights.

5. Data Security and Encryption

Data protection is not just about good intentions — it is about real technical implementation. dayak77 applies comprehensive security layers to protect your personal data against evolving threats:

• All data transmitted between your device and dayak77 servers is encrypted using the TLS 1.3 with 256-bit keys, the highest encryption standard available today.
• Sensitive data such as identity information, account numbers, and KYC documents is stored in encrypted format in databases protected by a multi-layered access control system.
• Access to user data within the company is restricted to employees with a direct business need, with access logs monitored closely.
• Our systems undergo regular security audits by independent parties to identify and address potential security vulnerabilities.
• A data breach incident response procedure is in place and ready to be activated in the event of a data leak, including the obligation to notify affected users.

6. Sharing Data with Third Parties

Dayak77 does not sell, rent, or trade users' personal data to third parties for commercial purposes. This is a principle we never compromise on.

However, in day-to-day operations, there are situations where data must be shared with specific parties that play a direct role in delivering services to you:

• Payment Partners: Payment gateways, banks, and e-wallet providers that process deposit and withdrawal transactions receive only the minimum data required to complete each transaction.
• KYC Verification Providers: Third-party identity verification services that help us validate user identity documents in accordance with regulatory requirements.
• Legal Obligation: We may be legally required to disclose data to competent authorities upon receipt of a valid official request in accordance with applicable legal procedures.
• Technical Service Providers: Cloud infrastructure and technology vendors that support platform operations, bound by strict confidentiality agreements and permitted to use data only for specified purposes.

All third parties working with dayak77 are required to comply with data protection standards equal to or higher than those we apply ourselves.

7. Data Retention – How Long We Keep Your Data

Dayak77 retains your personal data for as long as necessary to fulfill the purposes described in this policy, or as required by applicable regulations. Some general guidelines:

• Active account data is retained for as long as your account remains active on the Dayak77 platform.
• Financial transaction history is retained for a minimum of 5 years in accordance with applicable anti-money laundering regulatory requirements.
• Support team communication data is retained for up to 2 years after the last interaction for reference and service improvement purposes.
• After an account is closed at the user's request, data not required to be retained by law will be deleted or anonymized within a reasonable timeframe.

8. Cookies and Tracking Technologies

The dayak77 platform uses cookies and similar technologies to ensure the platform runs smoothly and delivers a better experience. The following are the cookie categories in use:

• Essential Cookies: Strictly necessary for core platform functions such as keeping your login session active and storing security preferences. These cookies cannot be disabled.
• Analytics Cookies: Help us understand how users interact with the platform so we can continually improve the user experience. Data collected is aggregated and anonymized.
• Preference Cookies: Remember your preferences such as language and display settings so you do not need to reconfigure them on every visit.

You can manage your cookie preferences through your browser settings. Please note that disabling essential cookies may affect platform functionality.

9. Your Rights as a Data Owner

As a dayak77 user, you hold a number of important rights regarding your personal data. We are committed to respecting and facilitating the exercise of these rights:

• Access Rights: You have the right to know what personal data we hold about you and how it is used.
• Right to Correction: If any of your data is inaccurate or no longer relevant, you have the right to request that we correct it.
• Right to Erasure: Under certain conditions, you have the right to request the deletion of your personal data, taking into account any legal obligations that may require us to retain some data.
• Right to Restrict Processing: You have the right to request that we restrict how we process your data in certain circumstances.
• Right to Data Portability: You have the right to receive a copy of the data you have provided to us in a structured, machine-readable format.
• Right to Object: You have the right to opt out of your data being processed for direct marketing purposes at any time.

To exercise any of the rights above, please contact the dayak77 Support team via live chat or email at [email protected]. We will follow up on your request within a reasonable timeframe in accordance with our technical capabilities and applicable legal obligations.

10. Privacy Policy Changes

As the platform evolves and relevant regulations change, this Privacy Policy may need to be updated from time to time. Material changes will be communicated via an in-platform notification or an email to the address registered to your account. The effective date at the top of this page always reflects when the latest version of this policy came into effect.

Continued use of the platform after a policy change is published constitutes your acceptance of the updated version. If you do not agree with the changes made, you have the right to close your account and discontinue use of the service.