Privacy Policy

1. Definitions

Throughout this Privacy Policy, the following defined terms apply:

• "nagarp," "we," "us," or "our" — the nagarp online gaming platform operated at https://nagarp.cam.
• "Platform" — the nagarp website, any associated mobile-optimized interface, and all digital services accessible through https://nagarp.cam.
• "Personal Data" — any information that identifies or could reasonably be used to identify you as an individual, whether directly (e.g., your full name, email address) or indirectly (e.g., device identifiers, IP address combined with other data).
• "Processing" — any operation performed on Personal Data, including collection, storage, use, transmission, alteration, disclosure, and deletion.
• "Member" or "you" — any registered account holder or visitor to the Platform.
• "KYC Data" — identity verification documents and supporting materials submitted as part of our Know Your Customer process, including government-issued identification (e.g., Indonesian KTP), proof of address, and payment-method documentation.
• "Third-Party Processors" — external service providers engaged by nagarp who may process Personal Data on our behalf under strict contractual obligations.
• "Cookies" — small text files placed on your device by the Platform for functionality, security, analytics, and personalization purposes.

2. Scope and Controller Identity

This Privacy Policy applies to all Personal Data processed by nagarp in connection with your use of the Platform and any related customer-support interactions, whether conducted via live chat, email, or telephone. It covers data collected from Members who are residents of Indonesia and any other jurisdictions in which the nagarp Platform operates.

nagarp acts as the data controller in respect of the Personal Data described in this Policy. This means we determine the purposes and means of processing your data. Where we engage Third-Party Processors—such as payment-processing partners, game providers (e.g., Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Ezugi, Playtech, Spribe, Pocket Games Soft), or analytics providers—those parties act as data processors and are bound by contractual data-protection obligations consistent with this Policy.

This Policy does not govern the privacy practices of third-party websites that may be linked from our Platform. nagarp is not responsible for the data practices of any external site or service.

3. Personal Data We Collect

The categories of Personal Data we collect depend on how you interact with the nagarp Platform. The table below summarizes the main data categories, with examples and the primary purpose for which each is collected.

4. How We Collect Your Data

nagarp collects Personal Data through the following mechanisms:

4.1 Directly From You

The majority of the data we hold about you is provided directly by you during the account registration process, subsequent profile updates, KYC document submissions, deposit and withdrawal requests, customer support interactions, and participation in promotions. You control what information you share voluntarily.

4.2 Automatically Through Technology

When you access the Platform, our servers and client-side scripts automatically collect Technical and Usage Data. This includes your IP address (used to implement geographic access controls and detect fraud), device fingerprint information, browser characteristics, and detailed activity logs recorded in our platform infrastructure. Cookies and similar tracking technologies supplement this automated collection—see Section 8 for full details.

4.3 From Third Parties

We may receive Personal Data from third-party sources in limited circumstances:

• Payment Processors: Indonesian banks (BCA, BRI, BNI, Mandiri, etc.) and e-wallet provider s (OVO, DANA, GoPay, ShopeePay, LinkAja) provide transaction confirmation data to facilitate deposit crediting and withdrawal processing.
• Identity Verification Partners: Where we use automated KYC verification services, those providers may return verification status and document-authenticity signals to us.
• Fraud Prevention Networks: Industry fraud-intelligence databases may flag IP addresses, device identifiers, or payment methods associated with known fraudulent activity.
• Game Providers: Partners such as Pragmatic Play, Evolution Gaming, and Microgaming may share game-session metadata with nagarp for settlement, dispute resolution, and responsible gaming monitoring purposes.

5. Lawful Bases for Processing

nagarp processes your Personal Data only where a valid lawful basis exists. The primary bases we rely upon are:

• Contractual Necessity: Processing required to perform our contract with you—including operating your account, processing deposits and withdrawals, settling bets, and delivering customer support.
• Legal Obligation: Processing necessary to comply with applicable laws and regulations, including anti-money-laundering (AML) obligations, age-verification requirements, and financial record-keeping duties.
• Legitimate Interests: Processing carried out for nagarp's legitimate business interests—such as fraud prevention, platform security, product improvement, and responsible gaming monitoring—where those interests are not overridden by your privacy rights.
• Consent: Where we rely on your consent (e.g., for optional marketing communications), you may withdraw that consent at any time by contacting customer support or adjusting your account notification preferences. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

6. How We Use Your Personal Data

nagarp uses the Personal Data we collect for the following purposes:

6.1 Account Management and Service Delivery

We use your Identity, Contact, and Financial Data to create and maintain your nagarp account, authenticate your identity at login, process deposits through your nominated Indonesian bank or e-wallet, settle withdrawals promptly to your verified payment method, and provide access to all gaming products available on the Platform—including sports betting, live casino games, slot machines, and togel (lottery) markets.

6.2 Identity Verification and Compliance

KYC Data is used exclusively to verify your identity, confirm that you are at least 21 years of age as required by our Terms and Conditions, and satisfy our obligations under applicable anti-money-laundering and counter-terrorism-financing frameworks. This data is handled with the highest level of confidentiality and is accessible only to trained compliance personnel on a strictly need-to-know basis.

6.3 Fraud Prevention and Platform Security

Technical and Device Data, Financial Data, and Gaming Activity Data are analyzed by our fraud-detection systems to identify and prevent unauthorized account access, payment fraud, multi-accounting, bonus abuse, money laundering, and other prohibited activities as defined in our Terms and Conditions. Our AI-assisted fraud models evaluate behavioral patterns continuously, without making legally significant automated decisions without human review.

6.4 Responsible Gaming

Responsible Gaming Data and Gaming Activity Data are used to monitor your gaming behavior for signs of potential problem gambling, enforce the deposit limits, loss limits, session timers, and self-exclusion periods you set, send responsible gaming alerts and reality checks, and provide our support team with the context needed to assist members seeking help. Please visit our Responsible Gaming page for full details of the tools available to you.

6.5 Customer Support

Communications Data is used to resolve your support inquiries, investigate account disputes, process complaints, and maintain records of interactions for quality-assurance purposes. Support conversations may be reviewed by supervisors for training and service-improvement objectives.

6.6 Marketing and Personalization

With your consent, we use Contact Data and Usage Data to send promotional offers, bonus announcements, and seasonal campaigns relevant to your interests—for example, promotions tied to BRI Liga 1 match days, UEFA Champions League finals, or cultural events such as Idul Fitri and Chinese New Year (Imlek). Personalization algorithms use your gaming history to surface game recommendations and tailored offers. You may withdraw marketing consent at any time without affecting your access to the Platform.

6.7 Analytics and Product Development

Aggregated and pseudonymized Usage and Analytics Data help our product and engineering teams understand how members navigate the Platform, identify usability bottlenecks, prioritize feature development, and optimize Platform performance across the range of Indonesian internet connections and devices used by our members.

7. Data Sharing and Disclosure

nagarp does not sell your Personal Data to third parties. We share data only in the specific circumstances described below, and only to the minimum extent necessary:

7.1 Service Providers and Processors

We engage carefully vetted Third-Party Processors who act on our documented instructions. These include:

• Payment Infrastructure Partners: Indonesian banks, e-wallet operators, and payment-gateway providers required to process your financial transactions.
• Game Content Providers: Studios such as Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Ezugi, Playtech, Spribe, and Pocket Games Soft receive the minimum session data required to operate their respective games within the Platform.
• KYC and Identity Verification Vendors: Specialist providers who assist in verifying the authenticity of identity documents and cross-checking against sanctions and politically exposed persons (PEP) lists.
• Cloud Infrastructure and Hosting Providers: Providers of the server infrastructure on which the Platform operates and data is stored.
• Analytics and Security Providers: Tools used for platform performance monitoring, fraud detection, and cybersecurity operations.

Each Third-Party Processor is required by contract to process data only as instructed by nagarp, to implement appropriate technical and organizational security measures, and to delete or return data once the processing purpose is fulfilled.

7.2 Legal and Regulatory Disclosures

We may disclose Personal Data to law enforcement agencies, regulatory authorities, courts, or other government bodies where we are legally compelled to do so—for example, in response to a valid court order, subpoena, or regulatory investigation. Where legally permissible, we will notify you of such a request before complying.

7.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of nagarp's business assets, your Personal Data may be transferred to the acquiring entity as part of that transaction. We will notify you of any such change via the email address registered to your account, and the acquiring entity will be required to honor the commitments set out in this Privacy Policy.

7.4 Protection of Rights

We may disclose data where we reasonably believe it is necessary to protect the rights, property, or safety of nagarp, its members, or third parties—for example, in cases of suspected fraud, unauthorized account access, or other criminal activity affecting the Platform.

8. Cookies and Tracking Technologies

The nagarp Platform uses cookies and similar technologies (including local storage objects and session tokens) to deliver a secure, functional, and personalized experience. Cookies are small data files stored on your device when you visit the Platform. They do not contain executable code and cannot access other files on your device.

8.1 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the Platform to function. These include session-authentication tokens, security identifiers, and load-balancing cookies. They cannot be disabled without impairing core Platform functionality.
• Functional Cookies: Remember your preferences such as language settings, currency display (IDR), and notification preferences, so you do not need to reconfigure these on each visit.
• Analytics Cookies: Collect pseudonymized information about how you navigate the Platform—pages visited, time spent, features used—to help us improve the user experience. Data collected by analytics cookies is aggregated and does not directly identify you.
• Security and Fraud-Detection Cookies: Used by our risk-management systems to assign a risk score to sessions based on device and behavioral characteristics, helping us protect your account from unauthorized access.

8.2 Managing Cookies

You may manage or disable non-essential cookies through your browser settings. Most modern browsers (Chrome, Firefox, Safari, Edge) allow you to view, block, or delete cookies via their privacy or settings menus. Please note that disabling certain cookies may affect the functionality of the Platform—for example, you may be required to log in more frequently, or game sessions may not retain your preferences.

nagarp does not use third-party advertising networks or behavioral tracking cookies for cross-site advertising. All tracking on the Platform is first-party and limited to the operational and security purposes described above.

9. Data Retention

nagarp retains Personal Data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. The following retention guidelines apply:

• Account and Identity Data: Retained for the duration of your active membership and for a minimum of five (5) years following account closure, to satisfy anti-money-laundering record-keeping obligations.
• KYC Documents: Retained for a minimum of five (5) years after account closure or the last transaction, as required by financial crime prevention standards.
• Financial Transaction Records: Retained for a minimum of five (5) years after the transaction date for audit, dispute resolution, and regulatory compliance purposes.
• Gaming Activity Logs: Retained for three (3) years from the date of each game session, primarily for dispute resolution and responsible gaming monitoring.
• Customer Support Communications: Retained for two (2) years from the date of the interaction, for quality assurance and dispute evidence purposes.
• Marketing Consent Records: Retained for the duration of your membership and for one (1) year after consent withdrawal, as evidence of your consent preference history.
• Technical and Analytics Data: Pseudonymized analytics data may be retained indefinitely in aggregated form; individually linked technical data is deleted after thirteen (13) months.

Upon expiry of the applicable retention period, data is either securely deleted or irreversibly anonymized so that it can no longer be associated with any individual.

10. Data Security

nagarp implements a layered security architecture designed to protect your Personal Data against unauthorized access, disclosure, alteration, and destruction. Our key security measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the nagarp Platform is encrypted in transit using industry-standard TLS 1.2 or higher protocols.
• Encryption at Rest: Sensitive data stored in our databases—including KYC documents, financial records, and passwords (stored as salted cryptographic hashes)—is encrypted at rest using AES-256 encryption.
• Two-Factor Authentication (2FA): Members are strongly encouraged to enable 2FA on their accounts. Our security team uses multi-factor authentication for all administrative access to production systems.
• Access Controls: Personnel access to Personal Data is strictly limited on a role-based, need-to-know basis. All internal access events are logged and subject to regular audit.
• Intrusion Detection and Prevention: Automated monitoring systems scan for unusual access patterns, potential brute-force attacks, and other security anomalies in real time.
• Regular Security Assessments: We conduct periodic penetration testing and vulnerability assessments carried out by independent security professionals.
• Data Breach Response: In the event of a confirmed personal data breach that is likely to result in risk to affected members, nagarp will notify affected individuals without undue delay and take immediate remediation steps.

11. Your Rights and Choices

nagarp respects your rights over your Personal Data. Depending on applicable law and the specific circumstances of your request, you may exercise the following rights:

• Right of Access: You may request a copy of the Personal Data we hold about you, along with information about how it is processed.
• Right to Rectification: If any Personal Data we hold is inaccurate or incomplete, you may request that we correct or update it.
• Right to Erasure: In certain circumstances, you may request deletion of your Personal Data. This right is subject to our legal retention obligations—we cannot erase data that we are legally required to retain.
• Right to Restriction of Processing: You may request that we restrict how we process your data in certain situations, for example while the accuracy of data you have contested is being verified.
• Right to Data Portability: Where processing is based on your consent or on a contract, you may request a structured, machine-readable copy of the data you have provided to us.
• Right to Object: You may object to processing based on legitimate interests, including direct marketing. Where you object to marketing, we will cease all marketing communications immediately.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, please contact our Data Protection team using the contact details in Section 15. We will respond to valid requests within 30 days. We may need to verify your identity before processing a data rights request to prevent unauthorized disclosure. In some cases, the timeframe for response may be extended by a further 30 days where the request is complex or voluminous—we will inform you of any such extension.

12. International Data Transfers

nagarp's primary operations and data infrastructure are configured to prioritize data residency in the Asia-Pacific region. However, some of our Third-Party Processors—including certain game providers, cloud-infrastructure vendors, and security tools—may process data in servers located outside Indonesia or the Asia-Pacific region.

Where Personal Data is transferred internationally, nagarp ensures that appropriate safeguards are in place, which may include standard contractual clauses, binding corporate rules, or transfers to jurisdictions that provide an adequate level of data protection as recognized by international standards. We conduct due diligence on all international recipients of Personal Data to ensure their security standards are consistent with those described in Section 10.

By using the nagarp Platform, you acknowledge that your Personal Data may be processed in countries other than Indonesia. We will always process your data in accordance with the standards set out in this Privacy Policy regardless of where the processing takes place.

13. Minors and Age Verification

The nagarp Platform is strictly intended for adults aged 21 years and older. We do not knowingly collect Personal Data from individuals under the age of 21. Our registration process requires members to declare their date of birth, and our KYC verification procedures are designed to detect and reject attempts to register by individuals below the legal age.

If we become aware that Personal Data has been collected from a person under 21 years of age without verified parental or guardian consent, we will immediately suspend the associated account, delete the Personal Data concerned, and report the incident to our compliance team for further review.

If you believe that a minor may have created an account on the nagarp Platform, please notify us immediately at the contact details provided in Section 15. We take all such reports seriously and will investigate and act on every notification without delay.

14. Changes to This Privacy Policy

nagarp reserves the right to update or amend this Privacy Policy at any time. When we make material changes—those that significantly affect how we collect, use, or share your Personal Data—we will notify you by posting the revised Policy on this page with an updated effective date and, where appropriate, by sending a notification to the email address registered to your account.

We encourage you to review this Privacy Policy periodically to stay informed about how nagarp protects your information. Your continued use of the Platform after any changes to the Policy constitutes your acknowledgment of and agreement to the updated terms. If you do not accept a revised Privacy Policy, you should cease using the Platform and close your account.

All previous versions of this Privacy Policy are archived and available on request by contacting our Data Protection team.

15. Contact and Data Rights Requests

If you have any questions about this Privacy Policy, wish to exercise your data rights, or have a concern about how nagarp handles your Personal Data, please contact our Data Protection team through the following channels:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 through your account dashboard on the nagarp Platform
• WhatsApp Support: Available 24/7 with Indonesian-speaking agents

Our support and compliance teams are available in both English and Bahasa Indonesia. For formal data rights requests, please include your full name, registered email address, and a clear description of the right you wish to exercise. We will respond within 30 days of receiving a verifiable request.