Privacy Policy

1. Introduction

nagajp ("we," "us," or "our") operates the online gaming platform accessible at https://nagajp.cam and is committed to protecting the privacy and personal data of every user ("you," "your") who accesses our services. This Privacy Policy has been drafted to give you a clear, honest account of what personal information we collect, the specific purposes for which that information is used, the circumstances in which it may be shared with third parties, and the rights you hold over your own data.

We serve players primarily located in Indonesia — from the major cities of Jakarta, Surabaya, Bandung, Medan, and Semarang to players across all provinces — and we acknowledge that privacy is a fundamental concern for Indonesian internet users, particularly on platforms where financial transactions and personal identity information are involved. Our data practices are designed to respect that concern at every stage of your relationship with nagajp.

By registering an account, making a deposit, placing a bet, or otherwise using the nagajp platform, you confirm that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you do not agree with any part of this policy, please discontinue use of our services immediately and contact [email protected] to close your account.

2. Data We Collect

nagajp collects personal data through several channels — account registration forms, identity verification submissions, payment transactions, platform interactions, and automated technical systems. The categories of data we collect include:

2.1 Identity and Contact Information

• Full legal name (as displayed on your Indonesian national identity card / KTP)
• Date of birth (to verify the 21+ age requirement)
• Residential address (province, city, postal code)
• Email address
• Mobile phone number (including WhatsApp number if provided)
• Username and encrypted password

2.2 Identity Verification (KYC) Documents

• Scanned copy or photograph of your Indonesian national identity card (KTP / Kartu Tanda Penduduk)
• Selfie photograph holding your ID document (liveness verification)
• Proof of address document (utility bill, bank statement, or government letter dated within the last three months)
• Payment method verification (bank account statement or e-wallet screenshot confirming account holder name and number)

2.3 Financial and Transaction Data

• Bank account details (bank name, account number, account holder name) for Indonesian banks including BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, and Bank Permata
• E-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja account numbers or registered phone numbers)
• Deposit and withdrawal history (amounts, timestamps, payment method, transaction reference numbers)
• Account balance history and betting/wagering records
• Bonus claim records and VIP tier progression data

2.4 Technical and Device Data

• IP address and approximate geolocation (city-level, not GPS-precise)
• Device type, operating system, and browser information
• Session timestamps, login/logout times, and session duration
• Pages visited, features used, and clickstream behavior on the nagajp platform
• Cookie identifiers and similar tracking technologies (see Section 6)

2.5 Communications Data

• Records of live chat conversations with our customer support team
• Email correspondence sent to or received from [email protected]
• Feedback, complaints, and survey responses voluntarily submitted by you

3. How We Use Your Data

nagajp processes your personal data for specific, legitimate purposes. We do not use your data for any purpose that is incompatible with those stated below, nor do we sell your personal information to third-party advertisers or data brokers.

Purpose	Data Categories Used
Account registration and management	Identity & contact information
Identity verification (KYC compliance)	KYC documents, identity & contact information
Processing deposits and withdrawals	Financial & transaction data
Fraud prevention and security monitoring	All categories, especially technical & transaction data
Customer support and dispute resolution	Communications data, identity & transaction data
Platform personalization and UX improvement	Technical & device data, wagering history
Responsible gaming enforcement	Wagering history, session data, identity data
Sending promotional communications (with consent)	Identity & contact information
Legal compliance and regulatory reporting	All categories as required by applicable law

nagajp will send you promotional communications (bonus offers, VIP upgrade notifications, tournament announcements) only if you have expressly opted in during registration or subsequently through your account settings. You may opt out of marketing emails at any time by clicking the unsubscribe link in any promotional email, adjusting notification preferences in your account settings, or contacting our support team directly.

4. Legal Basis for Processing

We process your personal data on the following legal grounds:

• Contractual necessity: Processing required to provide our gaming services, process transactions, and fulfill our obligations under the Terms & Conditions you agreed to upon registration.
• Legal obligation: Processing necessary to comply with anti-money laundering (AML) requirements, Know Your Customer (KYC) regulations, and other applicable legal obligations.
• Legitimate interests: Processing carried out for fraud prevention, platform security, service improvement, and responsible gaming enforcement, where our interests do not override your fundamental privacy rights.
• Consent: Processing for marketing communications and optional personalization features, which you can withdraw at any time without affecting your ability to use core services.

5. Data Sharing and Disclosure

nagajp does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We share your data only in the following specific circumstances:

5.1 Game and Technology Providers

We share limited technical data (e.g., anonymized session tokens, game preferences) with licensed game providers such as Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, and Pocket Games Soft solely to deliver game content. These providers are contractually prohibited from using your data for any purpose other than providing their services to nagajp.

5.2 Payment Processing Partners

To process deposits and withdrawals, we share transaction-relevant data (account holder name, bank account or e-wallet number, transaction amount) with Indonesian banking partners (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja). This sharing is strictly limited to what is necessary to complete each transaction.

5.3 Identity Verification Services

Your KYC documents may be processed by third-party identity verification providers engaged by nagajp to authenticate your identity. These providers operate under strict data processing agreements and are not permitted to retain or use your documents beyond the verification purpose.

5.4 Legal and Regulatory Disclosure

We may disclose your personal data to law enforcement agencies, regulatory bodies, or courts if required by applicable law, a valid legal order, or if we believe in good faith that such disclosure is necessary to prevent fraud, protect the rights and safety of nagajp and its users, or comply with legal process.

5.5 Business Transfers

In the event of a merger, acquisition, reorganization, or sale of all or part of our business, your personal data may be transferred to the acquiring entity. We will notify you of any such change and any new privacy terms that may apply.

6. Cookies and Tracking Technologies

nagajp uses cookies and similar tracking technologies (such as web beacons and local storage) to operate and improve the platform. The types of cookies we deploy include:

• Essential cookies: Required for the platform to function. These maintain your logged-in session, remember your language preferences, and enable secure transactions. You cannot opt out of essential cookies while using nagajp.
• Analytics cookies: Help us understand how users navigate the platform — whi ch pages are most visited, where users encounter errors, and how features are used. This data is aggregated and anonymized.
• Functional cookies: Store your preferences such as deposit amount defaults, preferred game categories, and notification settings to enhance your experience on return visits.
• Security cookies: Detect suspicious login attempts, prevent cross-site request forgery (CSRF), and support two-factor authentication flows.

You may control non-essential cookies through your browser settings. Disabling certain cookies may limit the functionality of the nagajp platform. We do not use third-party advertising cookies or behavioral profiling cookies for external ad networks.

7. Data Retention

We retain your personal data for as long as your account remains active and for a reasonable period thereafter as required by our legal, regulatory, and operational obligations. Specific retention periods include:

• Account and identity data: Retained for the duration of your active account plus a minimum of five (5) years following account closure, in accordance with anti-money laundering record-keeping standards.
• Transaction and financial records: Retained for a minimum of five (5) years from the date of each transaction.
• KYC documents: Retained for the duration of your account plus five (5) years, or longer if required by applicable law.
• Customer support communications: Retained for three (3) years from the date of the interaction, unless a dispute or legal matter requires longer retention.
• Technical and session logs: Retained for up to twelve (12) months for security and fraud prevention analysis, then deleted or anonymized.
• Marketing consent records: Retained for as long as you remain opted in, plus two (2) years following any opt-out, to demonstrate compliance with consent requirements.

Once the applicable retention period expires, we securely delete or anonymize your personal data so it can no longer be associated with your identity.

8. Security Measures

nagajp implements comprehensive technical and organizational safeguards to protect your personal data against unauthorized access, accidental loss, destruction, or disclosure. Our security infrastructure includes:

• Encryption at rest and in transit: All sensitive data — including KYC documents, bank account details, and password hashes — is encrypted using industry-standard algorithms both while stored on our servers and while being transmitted over networks.
• Access controls: Personal data is accessible only to nagajp staff and third-party processors who require it to perform their specific role. Access is governed by role-based permissions and logged for audit purposes.
• Two-factor authentication (2FA): All internal nagajp administrative accounts require 2FA. We also offer and strongly encourage 2FA for user accounts.
• Regular security audits: Our platform undergoes periodic penetration testing and vulnerability assessments conducted by independent security professionals.
• Incident response plan: In the event of a data breach, nagajp has a documented incident response procedure. Affected users will be notified promptly with details of the breach and guidance on protective steps.
• Staff training: All nagajp employees who handle personal data receive regular training on data protection best practices and are bound by confidentiality obligations.

While we take all reasonable precautions, no internet-based platform can guarantee absolute security. You are responsible for keeping your own account credentials confidential and for using a strong, unique password.

9. Your Rights

As a nagajp user, you have the following rights with respect to your personal data. To exercise any of these rights, contact us at [email protected] with the subject line "Data Rights Request" and we will respond within 30 days.

• Right of access: You may request a copy of the personal data we hold about you, along with information about how it is being processed.
• Right to rectification: You may request correction of any inaccurate or incomplete personal data. Some corrections (e.g., legal name changes) may require supporting documentation.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations. Note that we cannot delete data we are legally required to retain (e.g., transaction records under AML regulations).
• Right to restrict processing: You may ask us to suspend processing of your data in certain circumstances — for example, while the accuracy of your data is being verified.
• Right to data portability: You may request that we provide your personal data in a structured, machine-readable format so you can transfer it to another service provider.
• Right to object: You may object to processing of your personal data for direct marketing purposes at any time. You may also object to processing based on our legitimate interests, in which case we will cease processing unless we can demonstrate compelling legitimate grounds.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing emails), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

10. Minors and Age Verification

nagajp services are strictly intended for adults aged 21 years and older. We do not knowingly collect personal data from individuals under the age of 21. All registrants are required to confirm their age during sign-up, and identity verification (KYC) procedures are in place to detect and reject accounts opened by minors.

If nagajp becomes aware that personal data has been collected from a person under 21, that account will be immediately suspended, all associated funds will be frozen pending investigation, and the data will be deleted in accordance with applicable law. If you are a parent or guardian and believe your child has created a nagajp account, please contact [email protected] immediately so we can take appropriate action.

11. International Data Transfers

As an internationally operated gaming platform serving Indonesian players, nagajp may transfer your personal data to servers or processors located outside Indonesia. Where such transfers occur, we ensure that appropriate safeguards are in place to protect your data to a standard equivalent to the protections described in this Privacy Policy. These safeguards may include standard contractual clauses, data processing agreements, or transfers to jurisdictions that provide an adequate level of data protection as recognized by international standards.

Specifically, game data processed by third-party providers such as Evolution Gaming, Pragmatic Play, and Microgaming may be handled on infrastructure located in their respective countries of operation. In every case, these providers are bound by contractual data protection obligations imposed by nagajp.

12. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, new regulatory requirements, or platform updates. When we make material changes, we will post the revised policy on this page with an updated effective date and, where the changes are significant, notify you via the email address registered to your account.

Your continued use of nagajp services after any changes have been posted constitutes your acceptance of the revised Privacy Policy. We encourage you to review this page periodically to stay informed of how we protect your information.

13. Contact Us

If you have any questions, concerns, or complaints about this Privacy Policy or nagajp's data handling practices, please reach out to our dedicated privacy support team:

• Email: [email protected]
• Subject line: "Privacy Inquiry" or "Data Rights Request"
• Response time: We aim to acknowledge all privacy-related requests within 3 business days (WIB) and resolve them within 30 calendar days.
• Live chat: Available 24/7 on the nagajp platform for immediate support queries

Our Indonesian-speaking support agents are fully trained on privacy matters and can assist you in understanding your rights and how your data is managed, whether you contact us in English or Indonesian.