Privacy Policy

1. Introduction

naga11 ("we," "us," "our") operates the online gaming platform accessible at https://naga11.cam (the "Platform"). We are committed to protecting the privacy and personal data of all individuals who use our Services, including sports betting, live casino games, slot games, and togel (traditional Indonesian numbers lottery) draws.

This Privacy Policy explains how we collect, use, disclose, store, and protect your personal information in accordance with applicable data protection laws, including Indonesian data privacy regulations and international standards. By registering an account with naga11, accessing the Platform, or using our Services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and disclosure of your personal data as described herein.

We take your privacy seriously and implement industry-standard security measures to safeguard your personal information. This Privacy Policy should be read in conjunction with our Terms and Conditions, which govern your use of the Platform and Services. If you do not agree with any provision of this Privacy Policy, you must immediately cease using the Platform and close your account.

2. Definitions

For the purposes of this Privacy Policy, the following terms shall have the meanings set forth below:

• "Personal Data" or "Personal Information" means any information relating to an identified or identifiable individual, including but not limited to name, date of birth, residential address, email address, phone number, national identification number (Indonesian KTP), financial information, IP address, and gameplay data.
• "Data Subject" means the individual to whom Personal Data relates (i.e., you, the Platform user).
• "Processing" means any operation performed on Personal Data, including collection, recording, organization, storage, adaptation, retrieval, consultation, use, disclosure, transmission, erasure, or destruction.
• "Data Controller" means the entity that determines the purposes and means of Processing Personal Data (i.e., naga11).
• "Third Party Service Providers" means external entities that process Personal Data on behalf of naga11, including payment processors, identity verification services, cloud hosting providers, and game providers.
• "Cookies" means small text files stored on your device by your web browser that enable us to recognize your device, remember your preferences, and analyze Platform usage.
• "KYC" (Know Your Customer) refers to the identity verification process mandated by anti-money laundering (AML) and gaming regulations, requiring submission of government-issued identification documents.

3. Data Controller Information

naga11, operating under the domain https://naga11.cam, is the Data Controller responsible for the Processing of your Personal Data. For any privacy-related inquiries, data subject access requests, or complaints, you may contact our Data Protection Officer at:

• Email: [email protected] (displayed as plain text for security purposes)
• Subject Line: "Privacy Inquiry" or "Data Subject Access Request"
• Response Time: We aim to respond to all privacy inquiries within 7 business days

naga11 operates under international gaming licenses and complies with applicable data protection regulations in the jurisdictions where we are licensed. We adhere to principles of data minimization, purpose limitation, accuracy, storage limitation, integrity, and confidentiality in all data Processing activities.

4. Personal Data We Collect

naga11 collects various categories of Personal Data to provide our Services, ensure Platform security, comply with legal obligations, and enhance user experience. The types of data we collect include:

4.1 Account Registration Data

When you create an account with naga11, we collect the following information:

• Full legal name (as it appears on your Indonesian National ID/KTP)
• Date of birth (to verify you are at least 21 years of age)
• Email address (for account verification and communication)
• Phone number (for SMS verification and two-factor authentication)
• Residential address (city, province, postal code)
• Username and password (encrypted and stored securely)
• Preferred currency (Indonesian Rupiah/IDR)

4.2 Identity Verification (KYC) Documents

To comply with anti-money laundering (AML) regulations and verify your identity, we require the following documents:

• Government-issued identification: Indonesian National ID (Kartu Tanda Penduduk/KTP) or passport
• Proof of address: Utility bill, bank statement, or government correspondence dated within the last 3 months
• Selfie verification: A recent photograph of you holding your ID card next to your face
• Additional documentation may be requested for enhanced due diligence if your account activity triggers security or AML alerts

4.3 Financial and Transaction Data

When you make deposits or request withdrawals, we collect:

• Bank account details (bank name, account number, account holder name) for Indonesian banks including BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, and Bank Danamon
• E-wallet information (OVO, DANA, GoPay, ShopeePay, LinkAja account identifiers)
• Transaction history (deposit amounts, withdrawal amounts, transaction dates, payment method used)
• Source of funds documentation (for large deposits or withdrawals exceeding compliance thresholds)
• Note: naga11 does not store your complete bank account credentials or payment card details. All transactions are processed through secure, PCI-DSS compliant third-party payment gateways.

4.4 Gameplay and Betting Data

To operate our gaming Services and detect fraudulent activity, we collect:

• Betting history (sports bets, casino wagers, togel lottery bets placed)
• Game play records (slots played, live casino sessions, tournament participation)
• Winnings and losses (for tax reporting, responsible gaming monitoring, and bonus eligibility)
• Bonus usage (bonuses claimed, wagering progress, bonus expiry)
• Session duration and frequency (to identify potential problem gambling patterns)

4.5 Technical and Device Data

When you access naga11, we automatically collect:

• IP address (for geolocation verification, fraud detection, and compliance with licensing restrictions)
• Device information (operating system, browser type and version, screen resolution, device identifier)
• Cookies and similar tracking technologies (see Section 9 for details)
• Access logs (pages visited, time stamps, referral URLs)
• Network information (internet service provider, connection type)

4.6 Communication Data

When you contact naga11 customer support or participate in surveys, we collect:

• Content of customer support inquiries (live chat transcripts, email correspondence, WhatsApp messages)
• Feedback and survey responses (satisfaction ratings, feature requests, complaint details)
• Phone call recordings (when you contact us by phone, calls may be recorded for quality assurance and training purposes)

4.7 Marketing and Preferences Data

With your consent, we collect:

• Marketing preferences (opt-in status for promotional emails, SMS notifications, push notifications)
• Communication preferences (preferred language, notification frequency)
• Interests and favorites (preferred sports leagues, favorite casino games, bookmarked togel markets)

5. How We Use Your Personal Data

naga11 processes your Personal Data for the following purposes, based on the legal grounds specified:

5.1 Service Provision (Contractual Necessity)

• Creating and managing your naga11 account
• Processing deposits and withdrawals via Indonesian banks (BCA, BRI, BNI, Mandiri) and e-wallets (OVO, DANA, GoPay)
• Facilitating sports betting, casino gaming, and togel lottery participation
• Crediting bonuses, processing wagering requirements, and awarding loyalty rewards
• Providing customer support via live chat, email, WhatsApp, and in-app messaging
• Delivering personalized Platform experience based on your preferences and gaming history

5.2 Legal and Regulatory Compliance (Legal Obligation)

• Verifying your identity and age (21+ requirement) through KYC procedures
• Preventing money laundering, terrorist financing, and other financial crimes (AML/CFT compliance)
• Detecting and preventing fraud, collusion, bonus abuse, and account manipulation
• Complying with Indonesian gaming regulations and international licensing requirements
• Responding to legal requests from law enforcement, regulatory authorities, or courts
• Maintaining transaction records for audit and tax reporting purposes

5.3 Security and Fraud Prevention (Legitimate Interest)

• Monitoring account activity for suspicious behavior, unauthorized access, or security breaches
• Implementing IP geolocation checks to ensure you are accessing the Platform from permitted jurisdictions
• Detecting multiple accounts, syndicate betting, or coordinated fraudulent activity
• Protecting naga11, our employees, and other users from harm, fraud, or illegal activity
• Enforcing our Terms and Conditions and investigating Terms violations

5.4 Responsible Gaming (Legitimate Interest & Legal Obligation)

• Monitoring your gaming patterns to identify signs of problem gambling
• Implementing self-limit tools (deposit limits, loss limits, session time reminders)
• Processing self-exclusion requests and maintaining exclusion databases
• Providing access to responsible gaming resources and support organizations
• Preventing underage gambling by verifying age through KYC documents

5.5 Marketing and Communications (Consent & Legitimate Interest)

• Sending promotional emails about bonuses, tournaments, and new game releases (only with your consent)
• Delivering SMS notifications about deposit confirmations, withdrawal approvals, and account security alerts
• Providing personalized game recommendations based on your gameplay history
• Sending transactional communications (account verification, password resets, terms updates) which are necessary for Service provision

5.6 Platform Improvement and Analytics (Legitimate Interest)

• Analyzing Platform usage to identify popular features, optimize user experience, and fix technical issues
• Conducting A/B testing to improve interface design and functionality
• Generating anonymized and aggregated statistics for business intelligence and product development
• Evaluating game provider performance and player preferences to inform content selection

6. Sharing Your Personal Data with Third Parties

naga11 does not sell, rent, or trade your Personal Data to third parties for their own marketing purposes. However, we may share your data with trusted third-party service providers and in specific circumstances as described below:

6.1 Third-Party Service Providers

We share Personal Data with service providers who assist us in operating the Platform and delivering Services:

• Payment Processors: Banks and payment gateway providers (for processing deposits and withdrawals via BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja)
• Identity Verification Services: KYC/AML compliance providers who verify your identity documents and perform background checks
• Cloud Hosting Providers: Secure data centers that host naga11's servers, databases, and customer data
• Game Providers: Software developers (Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Ezugi, Spribe, Habanero) who deliver casino games and slots
• Customer Support Tools: Live chat software, email service providers, and CRM systems used to manage customer inquiries
• Marketing and Analytics Platforms: Tools for email marketing (with your consent), website analytics, and user behavior tracking

All third-party service providers are contractually obligated to protect your Personal Data, use it only for the purposes specified by naga11, and comply with applicable data protection laws.

6.2 Legal and Regulatory Authorities

We may disclose your Personal Data to government agencies, law enforcement, regulatory bodies, or courts when:

• Required by law, court order, subpoena, or legal process
• Necessary to comply with gaming licensing requirements or anti-money laundering (AML) regulations
• Requested by Indonesian authorities investigating suspected illegal activity, tax evasion, or fraud
• Essential to protect the rights, property, or safety of naga11, our users, or the public

6.3 Business Transfers

In the event of a merger, acquisition, corporate reorganization, sale of assets, or bankruptcy involving naga11, your Personal Data may be transferred to the acquiring entity or successor organization. You will be notified via email or Platform notice of any such change in ownership or control of your Personal Data.

6.4 Affiliate and Partner Networks

naga11 may share aggregated, anonymized, and non-identifiable data with affiliate partners, advertisers, and sports data providers for statistical analysis and business development purposes. This data cannot be used to identify individual users.

7. Data Retention and Deletion

naga11 retains your Personal Data only for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements. Specific retention periods are as follows:

Retention Periods by Data Type

• Account Registration Data: Retained for the duration of your active account plus 5 years after account closure (for legal compliance and dispute resolution)
• KYC Documents: Retained for 5-7 years after account closure in accordance with Indonesian anti-money laundering (AML) regulations
• Financial Transaction Records: Retained for 7 years after the transaction date (for tax reporting, audit, and AML compliance)
• Gameplay and Betting Records: Retained for 5 years after the bet settlement date (for dispute resolution and regulatory reporting)
• Communication Records: Customer support chat transcripts, emails, and phone call recordings retained for 3 years (for quality assurance and complaint resolution)
• Marketing Data: Deleted immediately upon withdrawal of consent or account closure, unless retention is required for legal compliance
• Technical Logs and Cookies: IP address logs and access logs retained for 12 months; cookies expire according to individual cookie lifespans (see Section 9)

Deletion Process

When Personal Data is no longer required, naga11 securely deletes or anonymizes it to prevent unauthorized access or reconstruction. Deletion methods include:

• Permanent erasure from active databases and backup systems
• Anonymization or pseudonymization where legal retention requirements apply but individual identification is no longer necessary
• Physical destruction of printed documents containing Personal Data (via secure shredding)

8. Data Security Measures

naga11 implements comprehensive technical, physical, and organizational security measures to protect your Personal Data from unauthorized access, disclosure, alteration, and destruction. Our security framework includes:

8.1 Encryption and Secure Transmission

• 256-bit SSL Encryption: All data transmitted between your device and naga11's servers is encrypted using bank-level 256-bit Secure Socket Layer (SSL) technology
• Database Encryption: Personal Data stored in our databases is encrypted at rest using AES-256 encryption algorithms
• Password Hashing: User passwords are hashed using bcrypt with salt to prevent plain-text password storage
• Secure Payment Processing: All financial transactions are processed through PCI-DSS Level 1 certified payment gateways that meet the highest security standards

8.2 Access Controls and Authentication

• Role-Based Access Control (RBAC): naga11 employees have access only to Personal Data necessary for their job functions
• Two-Factor Authentication (2FA): Optional 2FA via SMS or authenticator app adds an extra layer of account security
• IP Whitelisting: Administrative access to naga11's systems is restricted to pre-approved IP addresses
• Regular Password Rotation: Employees with access to sensitive data must change passwords every 90 days

8.3 Network and Infrastructure Security

• Firewall Protection: Multi-layered firewall architecture protects naga11's network from external threats
• Intrusion Detection Systems (IDS): Real-time monitoring for suspicious network activity and unauthorized access attempts
• DDoS Protection: Distributed Denial of Service (DDoS) mitigation to ensure Platform availability
• Regular Security Audits: Independent third-party security audits conducted quarterly to identify and remediate vulnerabilities
• Penetration Testing: Annual penetration tests simulate cyber-attacks to evaluate our defenses

8.4 Physical Security

• Data centers hosting naga11's servers are equipped with 24/7 surveillance, biometric access controls, and redundant power supplies
• Physical media containing Personal Data (e.g., backup tapes, printed documents) are stored in secure, access-controlled facilities
• Visitors to data centers and naga11 offices are logged, escorted, and subject to security screening

8.5 Employee Training and Confidentiality

• All naga11 employees undergo mandatory data protection and security awareness training annually
• Employees with access to Personal Data sign confidentiality agreements (NDAs)
• Insider threat monitoring detects unusual employee access patterns or data exfiltration attempts

8.6 Data Breach Response

In the unlikely event of a data breach affecting your Personal Data, naga11 will:

• Investigate the breach promptly to determine its scope and impact
• Contain the breach and implement measures to prevent further unauthorized access
• Notify affected users via email within 72 hours of confirming the breach (as required by applicable data protection laws)
• Report the breach to relevant regulatory authorities in accordance with legal requirements
• Provide guidance on steps you can take to protect yourself (e.g., changing your password, monitoring financial accounts)

9. Cookies and Tracking Technologies

naga11 uses cookies and similar tracking technologies to enhance your Platform experience, analyze usage patterns, and deliver personalized content. This section explains what cookies are, how we use them, and how you can manage your cookie preferences.

What Are Cookies?

Cookies are small text files stored on your device (computer, smartphone, tablet) by your web browser when you visit a website. Cookies enable websites to remember your preferences, recognize your device on return visits, and collect information about your browsing behavior.

Types of Cookies We Use

Essential Cookies (Always Active)

These cookies are strictly necessary for the Platform to function and cannot be disabled:

• Session Cookies: Maintain your logged-in state, remember items in your betting slip, and enable navigation between pages
• Security Cookies: Detect authentication abuse, prevent fraudulent activity, and protect your account from unauthorized access
• Load Balancing Cookies: Distribute traffic across servers to ensure Platform availability and performance

Functional Cookies (Optional)

These cookies enhance functionality and personalization but are not essential:

• Preference Cookies: Remember your language, currency, odds display format, and other customization settings
• Game History Cookies: Store your recently played games and favorite sports markets for quick access

Analytics and Performance Cookies (Optional)

These cookies help us understand how users interact with the Platform:

• Google Analytics: Tracks page views, session duration, bounce rate, and user flow to identify areas for improvement
• Heatmap Tools: Visualize where users click, scroll, and focus their attention on the Platform
• Error Tracking: Captures JavaScript errors and performance issues to enhance Platform stability

Marketing and Advertising Cookies (Optional, Requires Consent)

These cookies are used for targeted marketing (only if you consent):

• Retargeting Cookies: Display relevant naga11 promotions when you visit other websites
• Conversion Tracking: Measure the effectiveness of marketing campaigns

Managing Your Cookie Preferences

You can control cookies through your browser settings:

• Block All Cookies: Configure your browser to reject all cookies (note: this may impair Platform functionality)
• Delete Cookies: Clear existing cookies stored on your device via browser settings
• Opt-Out of Analytics: Use browser extensions like Google Analytics Opt-out Add-on

To manage cookie preferences on popular browsers: Chrome (Settings > Privacy and Security > Cookies), Firefox (Settings > Privacy & Security > Cookies and Site Data), Safari (Preferences > Privacy > Cookies), Edge (Settings > Privacy, search, and services > Cookies).

Third-Party Cookies

Some cookies are set by third-party services integrated into naga11 (e.g., payment processors, game providers, analytics tools). These third parties have their own privacy policies governing cookie usage. naga11 is not responsible for third-party cookies, and we recommend reviewing their privacy policies.

10. Your Privacy Rights

Under Indonesian data protection laws and international privacy standards, you have the following rights regarding your Personal Data:

10.1 Right to Access

You have the right to request a copy of the Personal Data naga11 holds about you. To exercise this right, contact us at [email protected] with the subject line "Data Subject Access Request." We will provide a copy of your data in a commonly used electronic format within 30 days.

10.2 Right to Rectification

If your Personal Data is inaccurate or incomplete, you have the right to request correction. You can update most information directly via your account settings (name, email, phone, address). For changes to KYC documents, contact customer support.

10.3 Right to Erasure (Right to be Forgotten)

You may request deletion of your Personal Data if:

• The data is no longer necessary for the purposes for which it was collected
• You withdraw consent (for data processed based on consent)
• You object to Processing and there are no overriding legitimate grounds
• The data was unlawfully processed

However, naga11 may refuse erasure if retention is required for legal compliance (e.g., AML regulations mandate retaining transaction records for 7 years). In such cases, we will restrict Processing to the minimum necessary.

10.4 Right to Restriction of Processing

You may request that naga11 restrict Processing of your Personal Data if:

• You contest the accuracy of the data (restriction applies while we verify accuracy)
• Processing is unlawful but you prefer restriction over deletion
• We no longer need the data but you require it for legal claims
• You have objected to Processing pending verification of legitimate grounds

10.5 Right to Data Portability

You have the right to receive your Personal Data in a structured, commonly used, machine-readable format (e.g., CSV, JSON) and transmit it to another service provider. This right applies to data you provided to naga11 and data processed based on consent or contract.

10.6 Right to Object

You may object to Processing of your Personal Data for:

• Direct Marketing: You can opt out of promotional emails, SMS, and push notifications at any time by clicking "unsubscribe" or updating your communication preferences
• Legitimate Interest Processing: You may object to Processing based on our legitimate interests (e.g., analytics, fraud prevention). We will cease Processing unless we can demonstrate compelling legitimate grounds that override your interests

10.7 Right to Withdraw Consent

Where Processing is based on your consent (e.g., marketing emails, optional cookies), you may withdraw consent at any time without affecting the lawfulness of Processing before withdrawal. Withdrawing consent does not affect Processing based on other legal grounds (contract, legal obligation, legitimate interest).

10.8 Right to Lodge a Complaint

If you believe naga11 has violated your privacy rights or applicable data protection laws, you have the right to lodge a complaint with the relevant data protection authority in Indonesia or the jurisdiction where you reside.

11. Children's Privacy

naga11 is strictly an adult-only platform. Our Services are intended solely for individuals who are at least 21 years of age or older. We do not knowingly collect, use, or disclose Personal Data from individuals under 21 years of age.

Age Verification

To prevent underage gambling, naga11 implements the following age verification measures:

• Mandatory date of birth entry during account registration (accounts indicating age under 21 are automatically rejected)
• KYC verification requiring submission of government-issued Indonesian National ID (KTP) displaying date of birth
• Automated age checks cross-referencing submitted IDs with birth date databases
• Manual review by compliance team for accounts flagged for potential age misrepresentation

Parental Notice

Parents and guardians should monitor their children's internet usage and use parental control software to prevent minors from accessing gambling websites. If you become aware that a minor has created a naga11 account or provided Personal Data to us, please contact us immediately at [email protected] with the subject line "Underage Account Report."

Response to Underage Account Discovery

If naga11 discovers that an individual under 21 has registered an account, we will:

• Immediately suspend and permanently close the account
• Void all bets placed and refund the initial deposit to the source payment method
• Delete all Personal Data associated with the minor's account (subject to legal retention requirements)
• Report the incident to relevant authorities if required by law

12. International Data Transfers

naga11 is an international online gaming platform serving Indonesian players. Your Personal Data may be transferred to, stored, and processed in countries outside Indonesia where our service providers, data centers, or business partners are located. These countries may have data protection laws that differ from Indonesian laws.

Safeguards for International Transfers

When transferring Personal Data internationally, naga11 ensures adequate protection through:

• Standard Contractual Clauses (SCCs): We use European Commission-approved SCCs with third-party processors to ensure data protection standards equivalent to those in Indonesia
• Adequacy Decisions: We transfer data to countries recognized by Indonesian or international authorities as providing adequate data protection (e.g., European Union member states under GDPR)
• Binding Corporate Rules: Large service providers (e.g., cloud hosting providers) operate under binding corporate rules approved by data protection authorities
• Encryption in Transit: All international data transfers are encrypted using TLS 1.3 or higher to prevent interception

Third-Party Processor Locations

Personal Data may be transferred to the following regions:

• European Union: Game providers (Evolution Gaming, NetEnt, Microgaming), payment processors, and cloud hosting providers headquartered in EU member states
• United States: Analytics tools (Google Analytics), cloud infrastructure (AWS, Google Cloud), and customer support platforms
• Singapore: Regional payment gateways and data center facilities serving Southeast Asia

By using naga11, you consent to the transfer of your Personal Data to these countries for the purposes described in this Privacy Policy. If you have concerns about international data transfers, contact our Data Protection Officer at [email protected].

13. Changes to This Privacy Policy

naga11 reserves the right to amend, modify, or update this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. Any changes will be effective immediately upon posting the revised Privacy Policy on the Platform.

Notification of Material Changes

If we make material changes that significantly affect how we collect, use, or disclose your Personal Data, we will provide notice through one or more of the following methods:

• Email notification to the address registered to your account
• Prominent notice on the Platform homepage or in your account dashboard
• Pop-up notification requiring acknowledgment before continued use of the Platform

We encourage you to review this Privacy Policy periodically to stay informed about how naga11 protects your Personal Data. The "Last Updated" date at the top of this policy indicates when the most recent changes were made.

Continued Use After Changes: Your continued use of the Platform after the effective date of Privacy Policy changes constitutes your acceptance of the revised policy. If you do not agree with the changes, you must cease using the Platform and close your account.

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or naga11's data protection practices, please contact our Data Protection Officer through the following channels:

• Email: [email protected] (displayed as plain text for security purposes; please copy and paste into your email client)
• Subject Line: "Privacy Inquiry," "Data Subject Access Request," or "Privacy Complaint"
• Live Chat: Available 24/7 through the Platform interface for general privacy questions
• WhatsApp: +62 821 1234 5678 (for privacy-related inquiries, state "Privacy" in your first message)

Response Time: We aim to respond to all privacy inquiries within 7 business days. For Data Subject Access Requests and other formal requests under data protection law, we will respond within 30 days as required by applicable regulations.

For additional information about responsible gaming, please visit our Responsible Gaming page. For general terms governing your use of naga11, please review our Terms and Conditions.