nagacc Privacy Policy

1. Introduction

nagacc ("we," "us," or "our") operates an online gaming platform accessible at nagacc.cam, providing casino games, sports betting, togel (lottery), and other gambling services to Users in Indonesia. We recognize the importance of privacy and are committed to transparency in how we collect, use, and protect your personal information.

This Privacy Policy applies to all Users of the nagacc platform, whether you are a registered account holder or a visitor browsing our website. This policy should be read in conjunction with our Terms & Conditions and Responsible Gaming policy, which together form the complete agreement between you and nagacc.

We comply with applicable international data protection regulations and maintain industry-standard security measures to protect your data. However, as an internationally licensed operator serving the Indonesian market, Users should be aware that data protection laws in Indonesia may differ from international standards. By using our platform, you acknowledge and consent to the data practices described herein.

2. Data Controller Information

For the purposes of applicable data protection laws, nagacc is the data controller responsible for your personal information. We determine the purposes and means of processing your personal data in accordance with this Privacy Policy.

Controller Details:

• Platform Name: nagacc
• Website: nagacc.cam
• Email Contact: [email protected] (displayed as plain text only)
• Privacy Officer Email: [email protected] (displayed as plain text only)

For privacy-specific inquiries, concerns about how your data is processed, or to exercise your data protection rights, please contact our Privacy Officer using the email address above or through our 24/7 Live Chat support marking your message "Privacy Inquiry."

3. Information We Collect

We collect several types of information from and about Users of our platform, including personal data that can be used to identify you. The categories of data we collect include:

3.1 Account Registration Data

When you create an account on nagacc, we collect the following information:

• Personal Identifiers: Full legal name, date of birth, gender
• Contact Information: Email address, mobile phone number, residential address
• Account Credentials: Username, password (stored in encrypted form)
• Preferred Currency: Indonesian Rupiah (IDR) selection and display preferences

3.2 Identity Verification (KYC) Data

To comply with legal requirements and prevent fraud, we collect identity verification documents:

• Government-Issued ID: Indonesian National Identity Card (KTP), passport, or driver's license
• Proof of Address: Utility bills, bank statements, or government correspondence showing your residential address
• Verification Photos: Selfie photographs holding your ID document for identity confirmation
• Biometric Data: Facial recognition data extracted from verification photos (processed and deleted after verification, not stored long-term)

3.3 Financial Transaction Data

When you deposit or withdraw funds, we collect:

• Payment Method Details: Bank account numbers (BCA, BRI, BNI, Mandiri, etc.), e-wallet IDs (OVO, DANA, GoPay, ShopeePay, LinkAja)
• Transaction History: Deposit amounts, withdrawal amounts, timestamps, transaction IDs, and payment status
• Account Name Verification: Name on bank account or e-wallet to match against your registered nagacc account name

Note: We do not store full credit card numbers, CVV codes, or card PINs. Payment card transactions are processed through PCI DSS Level 1 compliant third-party payment gateways.

3.4 Gaming Activity Data

We collect data about your gaming activity to provide services, detect fraud, and comply with licensing obligations:

• Wagering History: Games played, bet amounts, win/loss records, timestamps of gameplay
• Bonus Activity: Bonuses claimed, wagering requirement progress, bonus expiry dates
• Responsible Gaming Settings: Self-exclusion status, deposit limits, loss limits, session time limits
• Sports Betting Data: Bet slips, odds at time of bet placement, event outcomes, settlement status

3.5 Technical and Usage Data

We automatically collect technical information when you access our platform:

• Device Information: Device type, operating system, browser type and version, screen resolution
• Network Data: IP address, internet service provider, geographic location (country/city level, not precise GPS)
• Usage Analytics: Pages visited, time spent on pages, click patterns, navigation paths, session duration
• Performance Data: Load times, error logs, crash reports

3.6 Communication Data

When you contact our customer support or communicate with us:

• Support Tickets: Content of your messages, attachments, support ticket history
• Live Chat Logs: Transcripts of live chat conversations with our support team
• Email Correspondence: Emails sent to or received from nagacc support addresses
• WhatsApp Messages: Messages sent via our WhatsApp support channel

4. How We Use Your Information

nagacc processes your personal data for the following purposes, each with a lawful basis under applicable data protection regulations:

4.1 Account Management and Service Provision

Purpose: Creating and maintaining your account, processing deposits and withdrawals, enabling gameplay, and providing customer support.

Legal Basis: Performance of our contract with you (Terms & Conditions) and your consent.

4.2 Identity Verification and Fraud Prevention

Purpose: Verifying your identity, age (21+ requirement), and residence to comply with licensing obligations and prevent fraud, money laundering, and underage gambling.

Legal Basis: Legal obligation and legitimate interest in preventing illegal activity.

4.3 Payment Processing

Purpose: Processing deposits to fund your account and processing withdrawals to transfer winnings back to you via BCA, BRI, BNI, Mandiri, and other supported Indonesian payment methods.

Legal Basis: Performance of our contract with you.

4.4 Responsible Gaming and Player Protection

Purpose: Monitoring gaming activity to identify potential problem gambling behavior, enforcing self-exclusion and limit settings, and providing intervention when necessary.

Legal Basis: Legal obligation and legitimate interest in promoting responsible gaming.

4.5 Marketing and Promotional Communications

Purpose: Sending promotional emails, SMS messages, or push notifications about bonuses, new games, tournaments, and special offers.

Legal Basis: Your explicit consent. You can opt out at any time via account settings or unsubscribe links in emails.

4.6 Platform Improvement and Analytics

Purpose: Analyzing usage patterns to improve website performance, user experience, game selection, and platform features.

Legal Basis: Legitimate interest in improving our services.

4.7 Legal Compliance and Dispute Resolution

Purpose: Complying with legal obligations, responding to law enforcement requests, resolving disputes, and enforcing our Terms & Conditions.

Legal Basis: Legal obligation and legitimate interest in enforcing our rights.

5. Data Sharing and Third Parties

nagacc does not sell your personal data to third parties. However, we share your data with selected third-party service providers and partners as necessary to operate our platform:

5.1 Payment Processors

We share financial data with payment gateways and Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Permata, BSI) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) to process deposits and withdrawals. These providers have access only to the information necessary to perform payment processing services and are contractually obligated to protect your data.

5.2 Game Providers

We share minimal User identification data (user ID, session token) with game providers such as Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Ezugi, and Spribe to enable gameplay and track your gaming activity. Game providers do not receive your personal identifiers (name, email, address).

5.3 Identity Verification Services

We use third-party KYC verification services to validate identity documents. These services process your ID scans and verification photos but do not store them long-term and are bound by strict confidentiality agreements.

5.4 Cloud Infrastructure Providers

Our platform is hosted on secure cloud infrastructure. These providers have access to data stored on their servers but are contractually prohibited from accessing or using your data for any purpose other than providing hosting services to nagacc.

5.5 Customer Support Tools

We use third-party customer support platforms to manage live chat, ticketing, and email support. Support staff can access your account information and communication history to assist with inquiries.

5.6 Analytics and Marketing Services

We use analytics tools (such as Google Analytics) to track website usage and marketing campaign performance. These services collect anonymized or pseudonymized data and do not receive personally identifiable information except as necessary for campaign attribution.

5.7 Legal and Regulatory Authorities

We may disclose your personal data to law enforcement, regulators, courts, or government authorities if required by law, to comply with legal process, to respond to lawful requests, or to protect the rights and safety of nagacc, our Users, or the public.

6. Data Security Measures

nagacc employs industry-standard technical and organizational measures to protect your personal data against unauthorized access, loss, misuse, alteration, or disclosure:

6.1 Encryption

All data transmitted between your device and our servers is encrypted using 256-bit SSL/TLS protocols. Sensitive data stored in our databases, including passwords and financial information, is encrypted at rest using AES-256 encryption.

6.2 Access Controls

Access to personal data is restricted to authorized nagacc employees and contractors who require access to perform their job functions. All personnel with data access sign confidentiality agreements and undergo security training.

6.3 Secure Data Centers

Our servers are hosted in secure, tier-3 certified data centers with 24/7 monitoring, biometric access controls, redundant power supplies, and disaster recovery systems.

6.4 Regular Security Audits

We conduct quarterly security audits and penetration testing by independent cybersecurity firms to identify and remediate vulnerabilities before they can be exploited.

6.5 Two-Factor Authentication

We offer optional two-factor authentication (2FA) for User accounts to provide an additional layer of security beyond password protection.

6.6 Incident Response

In the unlikely event of a data breach affecting your personal information, we will notify you promptly in accordance with applicable laws and take immediate steps to mitigate the breach and prevent future incidents.

7. Data Retention and Deletion

nagacc retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, and resolve disputes:

Data Type	Retention Period	Reason
Account Registration Data	Duration of account + 7 years	Legal compliance (anti-money laundering)
KYC Verification Documents	Duration of account + 7 years	Regulatory requirement
Financial Transaction Records	10 years from last transaction	Tax law and AML compliance
Gaming Activity Logs	5 years from last activity	Dispute resolution and licensing
Customer Support Communications	3 years from last contact	Customer service improvement
Marketing Consent Records	Until consent withdrawn + 1 year	Proof of consent
Technical Logs (IP, device)	90 days	Security and fraud detection

After the retention period expires, we securely delete or anonymize your personal data so it can no longer be associated with you. If you close your account, we retain data necessary for legal compliance but anonymize or delete all other data within 90 days unless legally required to retain it longer.

8. Cookies and Tracking Technologies

nagacc uses cookies and similar tracking technologies to enhance your experience, analyze platform usage, and deliver personalized content:

8.1 What Are Cookies?

Cookies are small text files stored on your device by your web browser when you visit our website. They contain information that allows us to recognize your device and remember your preferences.

8.2 Types of Cookies We Use

• Essential Cookies: Required for core platform functionality such as login, account access, and payment processing. These cannot be disabled.
• Functional Cookies: Remember your preferences (language, currency, game favorites) to provide a personalized experience.
• Analytics Cookies: Collect anonymized data about how Users interact with our platform to help us improve performance and user experience.
• Marketing Cookies: Track your browsing behavior to deliver targeted advertising and measure campaign effectiveness. These require your consent.

8.3 Managing Cookies

You can control cookie settings through your web browser preferences. However, disabling essential cookies may prevent you from accessing certain features of the nagacc platform. Most browsers allow you to refuse cookies, delete existing cookies, or receive alerts when cookies are being set.

9. Your Privacy Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

9.1 Right of Access

You have the right to request a copy of the personal data we hold about you. You can access most of your data directly through your account dashboard, or contact our Privacy Officer to request a complete data export.

9.2 Right to Rectification

If your personal data is inaccurate or incomplete, you have the right to request correction. You can update most information through your account settings or contact support for assistance.

9.3 Right to Erasure (Right to be Forgotten)

You may request deletion of your personal data, subject to legal retention requirements. We will delete data not required for legal compliance, dispute resolution, or fraud prevention within 30 days of your request.

9.4 Right to Restrict Processing

You can request that we limit how we process your data in certain circumstances, such as while we verify accuracy of disputed data.

9.5 Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another data controller where technically feasible.

9.6 Right to Object

You can object to processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, in which case we will cease processing unless we have compelling legitimate grounds.

9.7 Right to Withdraw Consent

Where we process your data based on consent (e.g., marketing communications), you can withdraw consent at any time through account settings or by contacting support. Withdrawal does not affect the lawfulness of processing before withdrawal.

9.8 How to Exercise Your Rights

To exercise any privacy right, contact our Privacy Officer via email at [email protected] or through 24/7 Live Chat marking your request "Privacy Rights Request." We will respond within 30 days.

10. International Data Transfers

nagacc operates internationally and may transfer your personal data outside of Indonesia to jurisdictions where our servers, service providers, or partners are located. These jurisdictions may have different data protection laws than Indonesia.

When we transfer data internationally, we implement appropriate safeguards including:

• Standard contractual clauses approved by international data protection authorities
• Ensuring the receiving jurisdiction provides adequate data protection standards
• Requiring our service providers to implement equivalent security measures

By using nagacc, you consent to the transfer of your personal data outside Indonesia as described in this policy.

11. Children's Privacy

nagacc's services are strictly intended for individuals who are 21 years of age or older. We do not knowingly collect personal data from anyone under 21 years of age. If we discover that we have inadvertently collected data from an individual under 21, we will immediately delete that data and close the associated account.

If you believe we have collected data from someone under 21, please contact us immediately at [email protected] so we can take corrective action.

12. Changes to This Policy

nagacc reserves the right to modify this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. Material changes will be communicated to Users via email or prominent notice on the platform.

The "Effective Date" at the top of this document indicates when this policy was last updated. We encourage you to review this policy periodically. Your continued use of the nagacc platform after any changes constitutes acceptance of the updated Privacy Policy.

13. Contact Information

If you have questions, concerns, or complaints about this Privacy Policy or our data practices, please contact us:

• Privacy Officer Email: [email protected] (plain text only, not clickable)
• General Support Email: [email protected] (plain text only, not clickable)
• 24/7 Live Chat: Available through your account dashboard
• WhatsApp Support: +62 812 3456 7890 (text display only, not clickable)

For privacy-specific inquiries, please mark your communication "Privacy Inquiry" to ensure it is routed to our Privacy Officer for priority handling. We aim to respond to all privacy inquiries within 30 days.