Privacy Policy

1. Introduction

nagagg ("we", "us", "our") operates the online sports betting and casino platform accessible at https://nagagg.lat (the "Platform"). We are committed to protecting the privacy and personal data of every user who registers, browses, or transacts on our Platform.

This Privacy Policy describes how nagagg collects, uses, stores, shares, and safeguards the personal information of users based primarily in Indonesia, in accordance with internationally recognized data protection principles. It applies to all data processing activities carried out by nagagg in connection with the Platform, including account registration, deposits and withdrawals, customer support interactions, and marketing communications.

By creating an Account on nagagg or by continuing to use the Platform after this policy has been published or updated, you acknowledge that you have read and understood the practices described herein. If you do not agree with any part of this policy, please discontinue use of the Platform and contact us to close your account.

2. Definitions

• "Personal Data" means any information that identifies or could reasonably be used to identify a natural person, directly or indirectly.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, transfer, or deletion.
• "Data Controller" means nagagg, the entity that determines the purposes and means of Processing your Personal Data.
• "Data Processor" means a third party that processes Personal Data on behalf of nagagg under a contractual arrangement.
• "User" means any individual who accesses, registers on, or uses the Platform, including prospective, active, and former account holders.
• "Cookies" means small text files placed on a User's device by a website to store browsing preferences, session state, and analytical information.
• "KYC" (Know Your Customer) means the identity and document verification process required before withdrawal processing.
• "AML" (Anti-Money Laundering) means the set of policies, procedures, and controls designed to detect and prevent money laundering activity on the Platform.

3. Data We Collect

nagagg collects the following categories of Personal Data, depending on how you interact with the Platform:

Category	Examples	When Collected
Identity Data	Full legal name, date of birth, gender, nationality, Indonesian National Identity Number (NIK), passport or driver's license number	Account registration & KYC verification
Contact Data	Email address, mobile phone number, residential address (city, province, postal code)	Account registration & profile updates
Financial Data	Bank account name and number (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon), e-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja), transaction amounts and timestamps	Deposit and withdrawal processing
Verification Documents	Scans or photographs of government-issued ID, proof of address (bank statement, utility bill)	KYC verification process
Technical Data	IP address, device type, browser type and version, operating system, screen resolution, session duration	Automatically upon Platform access
Usage Data	Pages visited, features used, bets placed (sport, market, odds, stake, outcome), games played, session frequency	Automatically during Platform use
Communications Data	Records of live chat conversations, email correspondence, and support ticket history with nagagg	When you contact customer support
Marketing Preferences	Opt-in or opt-out status for email, SMS, and push notification marketing	Registration and subsequent preference updates

We do not collect or store full payment card numbers. All payment processing is handled directly by our partner payment providers using their own secure environments.

4. How We Collect Your Data

nagagg collects Personal Data through the following means:

4.1 Direct Collection

Data you provide voluntarily when you register an account, complete the KYC verification process, make a deposit or withdrawal, participate in promotions, or contact our customer support team.

4.2 Automated Collection

Technical and Usage Data collected automatically when you access the Platform, including via cookies, web beacons, server logs, and similar tracking technologies. This data is collected regardless of whether you are logged in to your account.

4.3 Third-Party Sources

In certain circumstances, nagagg may receive data about you from third parties, including:

• Payment processors and Indonesian banking partners (BCA, BRI, BNI, Mandiri, and e-wallets) confirming transaction completion and account ownership.
• Identity verification service providers used during KYC processing.
• Fraud prevention and AML screening services that cross-reference information against sanctions lists or risk databases.
• Analytics providers supplying aggregated behavioral data to improve Platform performance.

5. Purpose of Processing

nagagg processes your Personal Data for the following specific purposes:

1. Account Management: Creating, maintaining, and securing your nagagg account, including verifying your identity and ensuring eligibility (21+ years of age, resident of Indonesia or an eligible jurisdiction).
2. Transaction Processing: Facilitating deposits and withdrawals via Indonesian banks and e-wallets, reconciling account balances, and maintaining accurate financial records.
3. Legal and Regulatory Compliance: Fulfilling obligations under applicable AML regulations, responding to lawful requests from authorities, and maintaining records as required by our international gaming license.
4. Fraud Prevention and Security: Detecting, investigating, and preventing fraudulent activity, unauthorized account access, bonus abuse, multi-accounting, and other policy violations.
5. Responsible Gaming: Monitoring usage patterns to identify signs of problem gambling behavior, enforcing self-exclusion and deposit limit settings, and proactively reaching out where concern thresholds are met.
6. Customer Support: Responding to inquiries, resolving disputes, processing complaints, and maintaining a record of support interactions for quality assurance.
7. Platform Improvement: Analyzing aggregate usage data to improve Platform performance, game selection, user interface design, and the overall player experience.
8. Marketing Communications: Sending promotional offers, bonus notifications, and sports betting alerts to users who have opted in to receive such communications. Marketing is always subject to your consent and can be withdrawn at any time.

6. Legal Basis for Processing

nagagg processes your Personal Data under one or more of the following legal grounds:

• Contractual Necessity: Processing required to perform the contract between you and nagagg (i.e., operating your account, processing bets, and handling financial transactions).
• L egal Obligation: Processing required to comply with applicable laws and regulations, including AML obligations, tax reporting requirements, and responses to lawful authority requests.
• Legitimate Interests: Processing carried out to further nagagg's legitimate business interests — such as fraud prevention, platform security, and service improvement — where those interests are not overridden by your privacy rights.
• Consent: Processing based on your freely given, specific, and informed consent — principally for marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

7. Data Sharing & Disclosure

nagagg does not sell or rent your Personal Data to any third party. We may share your data only in the following limited circumstances:

7.1 Service Providers and Data Processors

We engage trusted third-party service providers who process data on our behalf under strict contractual obligations that prohibit them from using your data for any purpose other than providing their contracted service. These include:

• Payment processing partners: BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, OVO, DANA, GoPay, ShopeePay, and LinkAja — for transaction facilitation only.
• KYC and identity verification providers — for document authentication during account verification.
• IT infrastructure, cloud hosting, and cybersecurity providers — for secure platform operation and data storage.
• Customer support platform providers — for managing live chat and ticket-based support interactions.
• Analytics providers — for aggregated, anonymized platform usage analysis.

7.2 Legal and Regulatory Disclosure

nagagg may disclose your Personal Data to law enforcement agencies, regulators, courts, or other public authorities when required to do so by applicable law, court order, or when we believe in good faith that such disclosure is necessary to:

• Comply with a legal obligation or regulatory requirement.
• Protect the rights, property, or safety of nagagg, its users, or the public.
• Detect, investigate, or prevent fraud, AML violations, or other criminal activity.

7.3 Business Transfers

In the event that nagagg undergoes a merger, acquisition, restructuring, or sale of all or part of its assets, your Personal Data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and any resulting change to this Privacy Policy prior to the transfer taking effect.

7.4 With Your Consent

We may share your data with additional third parties where you have given us explicit consent to do so, for purposes clearly disclosed to you at the time of consent.

8. Cookies & Tracking Technologies

nagagg uses cookies and similar tracking technologies to enhance your experience on the Platform, maintain session integrity, and gather analytical insights. The following categories of cookies are used:

8.1 Strictly Necessary Cookies

These cookies are essential for the Platform to function and cannot be disabled. They include session management cookies that keep you logged in during your visit, security tokens that protect against cross-site request forgery, and cookies that remember your in-progress bet selections.

8.2 Performance and Analytics Cookies

These cookies collect anonymized information about how users interact with the Platform — such as which pages are visited most frequently, how long sessions last, and where users navigate from. This data is used exclusively to improve Platform performance and user experience. No personally identifiable information is contained in these cookies.

8.3 Functional Cookies

These cookies remember your preferences, such as your preferred sports league (e.g., BRI Liga 1, EPL), display language setting, and time zone (defaulting to WIB, UTC+7). They improve the personalization of your experience but are not essential to basic Platform operation.

8.4 Marketing Cookies

With your consent, nagagg may place marketing cookies that help us understand which promotions and content resonated with you. These cookies support our ability to serve relevant, non-repetitive promotional content. You can withdraw consent for marketing cookies at any time by adjusting your browser settings or contacting our support team.

9. Data Retention

nagagg retains your Personal Data for as long as is necessary to fulfill the purposes for which it was collected, including satisfying legal, regulatory, accounting, and reporting requirements. The following general retention periods apply:

• Account Data and Transaction Records: Retained for a minimum of 5 years following account closure, in accordance with AML recordkeeping obligations.
• KYC Verification Documents: Retained for 5 years from the date of verification or from the date of account closure, whichever is later.
• Customer Support Records: Retained for 3 years from the date of the last interaction, for quality assurance and dispute resolution purposes.
• Marketing Consent Records: Retained for the duration of your account and for 2 years following opt-out, as evidence of consent management.
• Technical and Usage Logs: Retained for up to 13 months for security monitoring and analytics purposes, then deleted or fully anonymized.

Upon expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymized. Where anonymization is applied, the resulting dataset no longer constitutes Personal Data and may be retained indefinitely for statistical analysis.

10. Data Security

nagagg takes the security of your Personal Data seriously and has implemented a range of technical and organizational measures designed to protect it against unauthorized access, accidental loss, destruction, or disclosure:

• Encryption in Transit: All data transmitted between your browser or device and our servers is encrypted using TLS 1.2 or higher (256-bit SSL).
• Encryption at Rest: Sensitive Personal Data and financial records stored in our databases are encrypted at rest using AES-256 encryption.
• Access Controls: Access to Personal Data is restricted to nagagg personnel and authorized Data Processors who have a legitimate need to process it. Role-based access controls and audit logging are in place.
• Two-Factor Authentication: Internal systems containing user data are protected by mandatory two-factor authentication for all staff accounts.
• Penetration Testing: nagagg engages independent security specialists to conduct regular penetration tests and vulnerability assessments of the Platform and its underlying infrastructure.
• Incident Response: In the event of a data breach that poses a risk to your rights, nagagg will notify affected users and relevant authorities within the timeframes required by applicable data protection frameworks.

11. Your Data Rights

As a user of the nagagg Platform, you hold the following rights with respect to your Personal Data:

• Right of Access: You may request a copy of the Personal Data nagagg holds about you, along with information on how it is processed.
• Right to Rectification: You may request correction of inaccurate or incomplete Personal Data. For basic profile details, you can update information directly within your account settings.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations described in Clause 9.
• Right to Restriction of Processing: You may request that nagagg restrict processing of your data in certain circumstances — for example, while you contest the accuracy of data we hold about you.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity, you may request that we provide your Personal Data in a structured, commonly used, and machine-readable format.
• Right to Object: You may object to processing based on our legitimate interests, including profiling for marketing purposes. Where you object to marketing, we will cease processing your data for that purpose immediately.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, contact our Data Protection team at [email protected] with the subject line "Data Rights Request". We will acknowledge your request within 24 hours and aim to resolve it within 5 business days. In complex cases, resolution may take up to 30 days; we will inform you if this is the case.

12. Children's Privacy

The nagagg Platform is strictly intended for adults aged 21 years and over. We do not knowingly collect, process, or store Personal Data from any person under the age of 21. If we become aware that a user is under 21 years of age, we will immediately suspend their account, void any pending wagers, return deposited funds to their source, and delete all associated Personal Data without undue delay.

If you are a parent or guardian and believe that a person under 21 in your care has registered an account on nagagg, please contact us immediately at [email protected] so that we can take appropriate action.

13. Third-Party Links

The Platform may contain links to third-party websites, payment portals, or external content for informational or transactional purposes. nagagg is not responsible for the privacy practices or content of any third-party site. Once you navigate away from the nagagg Platform, this Privacy Policy no longer applies. We encourage you to review the privacy policy of any external site you visit before submitting any personal information.

Our payment processing partners — including Indonesian banks BCA, BRI, BNI, and Mandiri, and e-wallet providers OVO, DANA, GoPay, ShopeePay, and LinkAja — operate their own independent privacy frameworks. Transactions completed through those channels are subject to the respective provider's data practices.

14. Changes to This Policy

nagagg reserves the right to update or amend this Privacy Policy at any time. Material changes — those that significantly affect your rights or how we process your data — will be communicated via a prominent notice on the Platform and, where appropriate, by email to registered users, at least 7 days before the change takes effect.

The "Last Updated" date at the top of this page reflects when the current version entered into force. We encourage you to review this policy periodically to stay informed about how nagagg protects your information. Your continued use of the Platform after a revised policy takes effect constitutes acceptance of the updated terms.

Archived versions of previous Privacy Policy documents are available upon request by contacting our support team.

15. Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way nagagg handles your Personal Data, please contact our support and data protection team:

For questions about how your financial data is handled by our banking and e-wallet partners, please contact those providers directly using their official customer service channels.

For further information on your rights and how to use the Platform responsibly, visit our Responsible Gaming page or review our Terms & Conditions.