Privacy Policy

1. Definitions

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information that identifies or can reasonably be used to identify a living individual, either directly or in combination with other data. This includes name, email address, phone number, device identifiers, and IP address.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, use, disclosure, transmission, erasure, or destruction.
• "Data Subject" means the individual to whom Personal Data relates — in this context, you, the Player.
• "Data Controller" means the entity that determines the purposes and means of Processing Personal Data — in this context, naga69.
• "Data Processor" means a third party that processes Personal Data on behalf of the Data Controller under a contractual arrangement.
• "Cookies" means small text files placed on your device by the Platform to recognize returning visitors, maintain session state, and gather analytics data.
• "KYC" (Know Your Customer) means the identity verification process through which naga69 confirms a Player's identity and address prior to processing withdrawals or upon regulatory requirement.
• "Platform" means the naga69 website accessible at https://naga69.cam and all associated pages and services.

2. Data Controller

naga69 acts as the Data Controller in respect of all Personal Data collected through the Platform. As Data Controller, naga69 is responsible for ensuring that Personal Data is processed in accordance with this Policy and applicable data protection principles.

For all data-related inquiries, including requests to exercise your rights under Section 10 of this Policy, please contact the naga69 Data Protection team via the channels listed in Section 15.

3. Data We Collect

naga69 collects the following categories of Personal Data in the course of operating the Platform and providing Services to registered Players:

3.1 Identity Data

• Full legal name as it appears on your government-issued identification;
• Date of birth (for age verification — all Players must be 21 or older);
• Gender (optional, collected during KYC for identity matching purposes);
• Government ID details — KTP number (Indonesian National Identity Card), passport number, or driver's license number submitted during KYC.

3.2 Contact Data

• Email address (used for Account communications, security alerts, and promotional messages where consent is given);
• Mobile phone number (used for two-factor authentication, SMS notifications, and WhatsApp support);
• Residential address in Indonesia (required for KYC verification and fraud prevention).

3.3 Financial Data

• Bank account details for payment processing — including account holder name, bank name (BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata, OCBC NISP, BSI), and account number;
• E-wallet identifiers — OVO, DANA, GoPay, ShopeePay, or LinkAja account references linked to your Player Account;
• Transaction history — deposit amounts (in Rupiah / IDR), withdrawal requests, and associated timestamps;
• Bonus and promotional activity — wagering records relevant to the application of Bonus Funds.

3.4 Technical Data

• IP address and approximate geolocation derived from IP;
• Device type, operating system, browser version, and screen resolution;
• Session login and logout timestamps;
• Referring URLs and navigation paths within the Platform.

3.5 Usage Data

• Game play history — titles played, bet amounts, outcomes, and session durations across all product categories including slots, live casino, sports betting, togel (Indonesia's traditional numbers lottery), and sabung ayam (live cockfighting) markets;
• Responsible gaming tool usage — deposit limit settings, session time configurations, and self-exclusion requests;
• Customer support interaction records — live chat transcripts, email correspondence, and WhatsApp message logs.

3.6 KYC Documentation Data

• Photographs and scanned copies of identity documents submitted during verification;
• Selfie verification images;
• Proof of address documents — utility bills, bank statements, or official correspondence.

4. How Data Is Collected

naga69 collects Personal Data through the following methods:

• Direct Submission: Information you actively provide when registering an Account, completing KYC verification, making deposits or withdrawals, contacting customer support, or entering promotions;
• Automated Technologies: Cookies, web beacons, pixel tags, and server logs that automatically capture Technical Data and Usage Data when you access or navigate the Platform — see Section 7 for full cookie details;
• Payment Processors: Transaction confirmation data relayed to naga69 by integrated payment partners when you make a deposit or withdrawal;
• Identity Verification Services: Third-party KYC and fraud-screening providers may return enriched identity verification results to naga69 as part of the account verification workflow;
• Third-Party Referral Sources: Where you arrive at the Platform via an affiliate link, the affiliate's identifier is recorded for commission tracking purposes. No additional Personal Data is received from affiliates beyond the session tracking parameter.

5. Purpose & Legal Basis for Processing

naga69 processes Personal Data only where a lawful basis exists. The table below summarizes each processing activity, its purpose, and the corresponding legal basis:

6. Data Sharing & Disclosure

naga69 does not sell, rent, or trade Personal Data to unaffiliated third parties for independent commercial purposes. Personal Data may, however, be disclosed to the following categories of recipients where strictly necessary:

6.1 Payment Service Providers

To process deposits and withdrawals, naga69 shares relevant financial data with integrated payment partners operating the BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata, OCBC NISP, and BSI bank transfer channels, as well as e-wallet providers OVO, DANA, GoPay, ShopeePay, and LinkAja. These providers receive only the minimum data necessary to complete the requested transaction.

6.2 Identity Verification Providers

KYC documentation submitted by Players is processed by certified third-party identity verification services contracted by naga69. These providers operate under strict data processing agreements and are prohibited from using Player data for any purpose other than fulfilling the identity verification service.

6.3 Game Content Providers

Game studios and platform providers — including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Pocket Games Soft — may receive anonymized or pseudonymized session data necessary for game delivery and RNG certification. These providers do not receive directly identifiable Personal Data beyond what is technically required to authenticate a valid game session.

6.4 Regulatory & Law Enforcement Authorities

naga69 may disclose Personal Data to competent regulatory bodies, law enforcement agencies, or courts where required to do so by applicable law, valid legal process, or to protect the rights, property, or safety of the Company, its Players, or the public. Such disclosures are made on a case-by-case basis and only to the extent required.

6.5 Corporate Transactions

In the event of a merger, acquisition, restructuring, or sale of assets involving naga69, Player Personal Data may be transferred to the successor entity as part of that transaction. Affected Players will be notified of any such transfer and any material change to this Policy that results from it.

7. Cookies & Tracking Technologies

naga69 uses cookies and similar tracking technologies to operate essential Platform functions, remember your preferences, measure performance, and deliver a consistent experience across visits. The categories of cookies used are as follows:

Strictly necessary cookies cannot be disabled as they are essential for the Platform to function correctly. You may control functional and analytics cookies through your browser settings; however, doing so may affect certain features of the Platform. Instructions for managing cookies in major browsers are available via each browser's help documentation.

8. Data Retention

naga69 retains Personal Data only for as long as necessary to fulfil the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce agreements. Specific retention periods are as follows:

• Account Data: Retained for the duration of the active Account relationship and for a minimum of five (5) years following Account closure, in compliance with anti-money-laundering record-keeping requirements;
• KYC Documentation: Retained for a minimum of five (5) years from the date of submission or Account closure, whichever is later;
• Transaction Records: Retained for a minimum of five (5) years from the date of each transaction;
• Customer Support Records: Retained for three (3) years from the date of the last interaction;
• Marketing Consent Records: Retained for as long as necessary to demonstrate consent was obtained, and for a reasonable period following withdrawal of consent;
• Analytics and Technical Logs: Aggregated analytics data is retained for up to 24 months; individual session logs are retained for up to 12 months.

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymized so that it can no longer be attributed to an identifiable individual.

9. Security Measures

naga69 implements a multi-layered information security framework designed to protect Personal Data against unauthorized access, disclosure, alteration, and destruction. Key security measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the Platform is encrypted using industry-standard TLS protocols, ensuring that payment details, login credentials, and KYC documents cannot be intercepted in transit;
• Data Encryption at Rest: Sensitive Personal Data and financial records stored on naga69 servers are encrypted at rest using AES-256 encryption;
• Access Controls: Internal access to Personal Data is governed by role-based access controls. Only personnel with a documented operational need may access identifiable Player data;
• Two-Factor Authentication: Players are encouraged to enable two-factor authentication (2FA) on their Accounts. Internal administrative systems require 2FA as mandatory;
• Regular Security Audits: The Platform undergoes periodic third-party penetration testing and vulnerability assessments to identify and remediate security weaknesses;
• Incident Response: naga69 maintains a documented data breach response procedure. In the event of a breach affecting Player Personal Data, affected individuals will be notified in accordance with applicable legal timeframes.

10. Your Rights

As a Data Subject, you hold the following rights with respect to your Personal Data held by naga69. To exercise any of these rights, please contact us using the details in Section 15. We will respond to all valid requests within a reasonable timeframe, typically within 30 days.

11. Minors & Age Restriction

The naga69 Platform and all associated Services are strictly intended for individuals who are 21 years of age or older. The Company does not knowingly collect Personal Data from individuals under the age of 21.

Age verification is a mandatory step in the Account registration and KYC process. Any Account found to belong to an individual under 21 will be immediately suspended, the Account Balance will be frozen pending investigation, and all Personal Data associated with the Account will be handled in accordance with our data minimization obligations.

If you are a parent or guardian and believe a minor in your care has created an Account on the Platform, please contact us immediately at [email protected] so that the Account can be closed and any Personal Data securely erased.

12. Third-Party Links & Services

The Platform may contain references to third-party services, game providers, or payment processors. While naga69 takes care in selecting reputable partners, this Policy applies only to Personal Data processed directly by naga69. Third-party services operate under their own independent privacy policies, and naga69 accepts no responsibility for their data practices.

Players are encouraged to review the privacy policies of any third-party service they interact with in connection with their use of the Platform, including the privacy policies of their chosen bank (BCA, BRI, BNI, Mandiri, etc.) and e-wallet provider (OVO, DANA, GoPay, ShopeePay, LinkAja).

13. International Data Transfers

Given the global nature of online gaming infrastructure, some Personal Data processed by naga69 may be transferred to, stored on, or accessed from servers located outside Indonesia. Where such transfers occur, naga69 ensures that appropriate safeguards are in place to protect the data, including:

• Contractual data processing agreements with all third-party processors that impose data protection obligations equivalent to those set out in this Policy;
• Transfer only to jurisdictions or service providers that maintain adequate data protection standards as assessed by the Company;
• Encryption of data in transit and at rest regardless of the server location.

Players who are residents of Indonesia should note that by using the Platform and accepting this Policy, they consent to the transfer and processing of their Personal Data in the manner described above.

14. Policy Amendments

naga69 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or Platform functionality. When material changes are made, we will notify registered Players by email or via a prominent notice on the Platform at least seven (7) days before the revised Policy takes effect.

The "Last Updated" date at the top of this page reflects the date of the most recent revision. We encourage you to review this Policy periodically to stay informed about how naga69 protects your Personal Data. Your continued use of the Platform after the effective date of any revised Policy constitutes your acceptance of the updated terms.

15. Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or would like to raise a privacy-related complaint, please contact the naga69 Data Protection team through the following channels:

• Live Chat: Available 24/7 directly on the Platform — our support agents can escalate data-related inquiries to the Data Protection team;
• WhatsApp Support: Available around the clock for account and privacy inquiries;
• Email: [email protected] — please include "Privacy Request" in the subject line and provide your registered Account username to allow efficient handling.

naga69 is committed to resolving all privacy inquiries and complaints promptly. We will acknowledge receipt of your request within two (2) business days and aim to provide a substantive response within thirty (30) calendar days. Where a request is complex or involves multiple data subjects, we will inform you of any extension to this timeframe.

Our support team includes native Indonesian-speaking agents available 24 hours a day, 7 days a week — including during Indonesian public holidays such as Idul Fitri, Idul Adha, and Nyepi — ensuring that Indonesian players can always access assistance in their preferred language regardless of time zone (WIB, WITA, or WIT).