Privacy Policy

1. Information We Collect

1.1 Information You Provide Directly

When you register an account with naga12, we collect the following personal information that you provide directly to us:

• Identity Information: Full legal name, date of birth, gender, nationality, and Indonesian National Identity Card (KTP) number.
• Contact Information: Residential address, email address, mobile phone number, and preferred contact methods.
• Account Credentials: Username, password, and security questions/answers for account access.
• Financial Information: Bank account details (bank name, account number, account holder name), e-wallet information (OVO, DANA, GoPay account details), and payment transaction history.
• Verification Documents: Copies of your Indonesian National Identity Card (KTP), proof of address (utility bills, bank statements), selfie photographs holding your KTP, and any additional documents requested for enhanced due diligence.
• Communication Records: Content of your communications with our customer support team via live chat, email, WhatsApp, or other channels.

1.2 Information We Collect Automatically

When you access and use the naga12 Platform, we automatically collect certain technical and usage information:

• Device Information: Device type, operating system, browser type and version, screen resolution, device identifiers (IMEI, MAC address), and mobile network information.
• Usage Data: Pages viewed, features used, games played, bets placed, deposit and withdrawal transactions, time spent on the Platform, click patterns, and navigation paths.
• Location Information: IP address, general geographic location (city/region level based on IP), and time zone.
• Log Data: Access times, error logs, crash reports, and performance metrics.
• Gaming Activity: Game selections, bet amounts, win/loss records, bonus usage, wagering progress, and responsible gaming limit settings.

1.3 Information from Third Parties

We may receive information about you from third-party sources, including:

• Payment Processors: Transaction verification, payment success/failure status, and fraud detection alerts from Indonesian banks (BCA, BRI, BNI, Mandiri) and e-wallet providers (OVO, DANA, GoPay).
• Identity Verification Services: KYC verification results, document authenticity checks, and sanctions screening from third-party identity verification providers.
• Game Providers: Game outcome data, RNG certifications, and fair play monitoring from our licensed game provider partners.
• Fraud Prevention Services: Risk scoring, device fingerprinting, and suspicious activity alerts from specialized fraud detection platforms.

2. How We Use Your Information

naga12 collects and processes your personal information for the following specific purposes:

2.1 Account Management and Service Delivery

• Creating and maintaining your player account.
• Verifying your identity and age (21+ requirement) through KYC procedures.
• Processing deposits, withdrawals, and other financial transactions.
• Providing access to casino games, sports betting, togel (Indonesia's traditional numbers lottery), sabung ayam (cockfighting), and other gaming products.
• Managing your account balance, bonuses, and promotional credits.
• Tracking wagering requirements and bonus eligibility.

2.2 Legal and Regulatory Compliance

• Complying with Know Your Customer (KYC) and Anti-Money Laundering (AML) regulations.
• Verifying that players are residents of Indonesia and meet age requirements.
• Detecting and preventing fraud, money laundering, and other illegal activities.
• Maintaining records required by gaming licenses and regulatory authorities.
• Responding to legal requests, court orders, and law enforcement inquiries.
• Enforcing our Terms & Conditions and investigating terms violations.

2.3 Customer Support and Communication

• Responding to your inquiries, complaints, and support requests.
• Sending account-related notifications (deposit confirmations, withdrawal approvals, KYC status updates).
• Providing technical support and troubleshooting assistance.
• Notifying you of important changes to our services, policies, or terms.
• Conducting customer satisfaction surveys (with your consent).

2.4 Marketing and Promotions

• Sending promotional emails about bonuses, tournaments, and special offers (if you have opted in).
• Personalizing promotional content based on your gaming preferences and activity.
• Administering contests, tournaments, and promotional campaigns.
• Sending push notifications about time-sensitive offers (with your device permission).

Note: You can opt out of marketing communications at any time through your account settings or by contacting customer support. Opting out of marketing does not affect essential account-related communications.

2.5 Platform Improvement and Analytics

• Analyzing user behavior to improve Website functionality and user experience.
• Identifying popular games and features to optimize content offerings.
• Conducting A/B testing for new features and interface improvements.
• Monitoring Platform performance, uptime, and technical issues.
• Developing new games, features, and services based on user preferences.

2.6 Responsible Gaming and Player Protection

• Monitoring gaming behavior for signs of problem gambling.
• Implementing and enforcing deposit limits, loss limits, and session time limits.
• Facilitating self-exclusion requests and cooling-off periods.
• Providing reality check reminders and responsible gaming resources.
• Identifying players who may benefit from responsible gaming interventions.

3. Legal Basis for Processing

naga12 processes your personal information based on the following legal grounds:

• Contractual Necessity: Processing is necessary to fulfill our contractual obligations under the Terms & Conditions when you create an account and use our gaming services.
• Legal Compliance: Processing is required to comply with Indonesian and international laws, including KYC/AML regulations, gaming license requirements, and tax obligations.
• Legitimate Interests: Processing is necessary for our legitimate business interests in preventing fraud, improving our services, ensuring platform security, and maintaining accurate business records, provided these interests do not override your fundamental rights.
• Consent: For marketing communications, cookies, and other non-essential processing, we rely on your explicit consent, which you can withdraw at any time.
• Vital Interests: In rare cases, processing may be necessary to protect your vital interests or those of another person (e.g., responding to emergencies).

4. Information Sharing and Disclosure

4.1 When We Share Your Information

naga12 does not sell your personal information to third parties for marketing purposes. However, we may share your information in the following limited circumstances:

4.1.1 Service Providers and Business Partners

We share information with trusted third-party service providers who assist us in operating the naga12 Platform:

• Payment Processors: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) process your financial transactions securely.
• KYC Verification Providers: Third-party identity verification services verify your documents, perform sanctions screening, and conduct fraud checks.
• Game Providers: Licensed casino and sports betting providers (who supply slots, live dealer games, sports odds) receive limited information necessary to deliver gaming services.
• Cloud Hosting Services: Secure cloud infrastructure providers host our servers and databases.
• Customer Support Tools: Live chat, email, and ticketing systems help us manage customer communications.
• Analytics Platforms: Web analytics services help us understand Platform usage and improve user experience.

All third-party service providers are contractually bound to maintain confidentiality, use your information only for specified purposes, and implement appropriate security measures.

4.1.2 Legal Requirements and Law Enforcement

We may disclose your information when required by law or in response to valid legal processes:

• Complying with court orders, subpoenas, or other legal requests.
• Responding to requests from Indonesian law enforcement, tax authorities, or regulatory bodies.
• Reporting suspicious transactions to financial intelligence units as required by AML laws.
• Cooperating with fraud investigations or criminal proceedings.
• Enforcing our legal rights and defending against legal claims.

4.1.3 Business Transfers

If naga12 undergoes a merger, acquisition, reorganization, asset sale, or bankruptcy, your personal information may be transferred to the successor entity as part of the transaction. We will notify you via email and prominent Website notice before your information is transferred and becomes subject to a different privacy policy.

4.1.4 With Your Consent

We may share your information with other third parties when you provide explicit consent for specific purposes not covered by this Privacy Policy.

4.2 When We Do NOT Share Your Information

• We never sell, rent, or trade your personal information to third parties for their own marketing purposes.
• We do not share your gaming activity or financial information with social media platforms without your permission.
• We do not disclose your identity to other players (usernames visible during gameplay are separate from your real identity).

5. Data Security Measures

naga12 implements industry-standard technical and organizational security measures to protect your personal information from unauthorized access, disclosure, alteration, and destruction:

5.1 Technical Security Measures

• Encryption: All data transmitted between your device and our servers is protected by 256-bit SSL/TLS encryption, the same technology used by major banks worldwide.
• Secure Password Storage: Passwords are hashed using strong cryptographic algorithms (bcrypt, Argon2) and never stored in plain text.
• Firewalls and Intrusion Detection: Multi-layered firewalls and intrusion detection systems monitor and block unauthorized access attempts.
• Data Segregation: Personal information, financial data, and gaming records are stored in separate, access-controlled database systems.
• Regular Security Audits: Independent third-party security firms conduct penetration testing and vulnerability assessments quarterly.
• Automated Threat Detection: AI-powered systems monitor for suspicious login attempts, unusual transaction patterns, and potential data breaches.

5.2 Organizational Security Measures

• Access Controls: Only authorized naga12 personnel with legitimate business needs can access your personal information, following the principle of least privilege.
• Employee Training: All staff members receive mandatory data protection and security awareness training.
• Confidentiality Agreements: Employees and contractors sign strict confidentiality agreements prohibiting unauthorized disclosure.
• Incident Response Plan: We maintain a comprehensive data breach response plan with procedures for detection, containment, notification, and remediation.
• Vendor Management: Third-party service providers undergo security assessments and must meet our data protection standards.

5.3 Your Security Responsibilities

While naga12 implements robust security measures, you also play a crucial role in protecting your account:

• Choose a strong, unique password and never share it with anyone.
• Enable two-factor authentication (2FA) for enhanced account security.
• Log out of your account after each session, especially on shared or public devices.
• Keep your registered email address and mobile number secure and up to date.
• Avoid accessing your account over public WiFi networks without a VPN.
• Report any suspicious account activity or unauthorized access immediately.

6. Data Retention and Storage

6.1 How Long We Retain Your Information

naga12 retains your personal information for different periods depending on the type of data and legal requirements:

• Active Account Data: Personal information, financial records, and gaming history are retained for the duration of your active account plus 7 years after account closure to comply with Indonesian financial record-keeping requirements.
• KYC Documents: Identity verification documents (KTP copies, proof of address, selfie photos) are retained for 7 years after account closure as required by AML regulations.
• Transaction Records: Deposit and withdrawal records are retained for 7 years to comply with tax and financial audit requirements.
• Communication Records: Customer support chat logs and email correspondence are retained for 3 years for quality assurance and dispute resolution.
• Marketing Consent Records: Records of your marketing preferences and consent are retained for 3 years after you withdraw consent or close your account.
• Legal Hold Data: If your information is subject to legal proceedings, investigations, or regulatory inquiries, we will retain it until the matter is resolved, even if this exceeds standard retention periods.

6.2 Data Storage Locations

Your personal information is stored on secure servers located in data centers that meet international security standards (ISO 27001, SOC 2). While our primary servers may be located outside Indonesia, we ensure that all data storage and processing complies with Indonesian data protection laws and our contractual obligations to you.

6.3 Data Deletion

After the applicable retention period expires, your personal information is securely deleted or anonymized in accordance with our data retention schedule. Deletion methods include secure overwriting, cryptographic erasure, and physical destruction of storage media for sensitive data.

7. Your Privacy Rights

As a naga12 user and Indonesian resident, you have the following rights regarding your personal information:

7.1 How to Exercise Your Rights

To exercise any of these privacy rights, contact naga12's Data Protection Officer:

• Email: [email protected] or [email protected]
• Subject Line: "Privacy Rights Request – [Your Account Username]"
• Include: Your full name, registered email address, account username, and specific request details

We will respond to your request within 30 days. For complex requests, we may extend this period by an additional 30 days and will notify you of the extension. Some requests may require identity verification to prevent unauthorized access to your information.

8. Cookies and Tracking Technologies

naga12 uses cookies and similar tracking technologies to enhance your browsing experience, analyze Platform usage, and deliver personalized content.

8.1 Types of Cookies We Use

• Essential Cookies: Required for basic Platform functionality, including session management, security features, and account authentication. These cookies cannot be disabled.
• Performance Cookies: Collect anonymous information about how you use the Platform to help us improve performance and user experience.
• Functionality Cookies: Remember your preferences (language, layout, game favorites) to provide a personalized experience.
• Analytics Cookies: Help us understand user behavior, popular games, and traffic patterns using services like Google Analytics.
• Marketing Cookies: Track your activity across websites to deliver relevant advertisements and measure campaign effectiveness (requires your consent).

8.2 Managing Cookie Preferences

You can manage your cookie preferences through your browser settings or our cookie consent banner. Note that disabling certain cookies may limit Platform functionality. Most browsers allow you to:

• View and delete existing cookies
• Block third-party cookies
• Block all cookies (not recommended as it may break essential features)
• Clear cookies when you close your browser

9. International Data Transfers

While naga12 primarily serves Indonesian players, some of our service providers and data processing facilities may be located outside Indonesia. When we transfer your personal information internationally, we ensure appropriate safeguards are in place:

• Standard Contractual Clauses approved by data protection authorities
• Service providers certified under recognized data protection frameworks
• Adequate level of data protection as determined by Indonesian authorities
• Your explicit consent when required for specific transfers

All international transfers comply with Indonesian data protection laws and maintain the same level of protection as data stored within Indonesia.

10. Children's Privacy

naga12 services are strictly intended for adults aged 21 years and older. We do not knowingly collect personal information from anyone under the age of 21. Our registration process includes age verification, and we implement technical measures to prevent underage access.

If we discover that we have inadvertently collected information from someone under 21, we will immediately:

• Delete all personal information and account data
• Permanently ban the account
• Refund any deposited funds to the source payment method
• Report the incident to appropriate authorities if required by law

Parents or guardians who believe their child has created an account should contact us immediately at [email protected].

11. Changes to Privacy Policy

naga12 reserves the right to modify this Privacy Policy at any time to reflect changes in our practices, legal requirements, or business operations. When we make material changes that significantly affect your rights, we will:

• Update the "Last Updated" date at the top of this Privacy Policy
• Send email notification to your registered email address
• Display a prominent notice on the Website homepage
• Provide a 30-day period to review changes before they take effect

Continued use of naga12 services after the effective date of changes constitutes your acceptance of the updated Privacy Policy. If you do not agree with the changes, you may close your account by contacting customer support before the changes take effect.

12. Contact Information

If you have questions, concerns, or complaints about this Privacy Policy or our data handling practices, please contact naga12's Data Protection Officer:

• Email: [email protected] or [email protected]
• Subject Line: "Privacy Policy Inquiry"
• Live Chat: Available 24/7 through the Website for general privacy questions
• Response Time: We aim to respond to all privacy inquiries within 7 business days

If you are not satisfied with our response to your privacy concern, you have the right to lodge a complaint with the Indonesian data protection authority or seek legal remedies through Indonesian courts.