Privacy Policy

1 Definitions

For the purposes of this Privacy Policy, the following terms carry the meanings assigned to them below:

• "naga11", "Company", "We", or "Us" refers to naga11 International, the operator of the online betting platform at https://naga11.bio.
• "Member" or "You" means any individual who has registered an account on the naga11 platform or who accesses any part of the platform as a visitor.
• "Personal Data" means any information that identifies or could reasonably be used to identify a living individual, including name, date of birth, email address, phone number, payment details, IP address, and device identifiers.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, transfer, and deletion.
• "KYC" means Know Your Customer — the identity and age verification process conducted by naga11 in accordance with anti-money-laundering obligations and our minimum age requirement of 21 years.
• "Third-Party Service Provider" means any external company engaged by naga11 to provide services that support platform operations, such as payment processors, game studios, fraud detection providers, and hosting infrastructure providers.
• "Cookies" means small text files placed on your device by the naga11 platform to enable functionality, remember preferences, and support analytics.

2 Data We Collect

naga11 collects the following categories of personal data from Members and platform visitors:

2.1 Registration Data. When you create a naga11 account, we collect your full legal name, date of birth, Indonesian residential address, email address, and mobile phone number. This information is required to open your account and verify your eligibility.

2.2 Identity Verification (KYC) Data. To process withdrawals and comply with our anti-fraud obligations, naga11 requires Members to submit government-issued identity documents. This may include a scan or photograph of your KTP (Indonesian National Identity Card) or passport, and — where requested — proof of address and proof of ownership of your registered payment method.

2.3 Financial Data. naga11 records the details of deposit and withdrawal transactions, including the payment method used (e.g., BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, LinkAja), transaction amounts in Indonesian Rupiah (IDR), and transaction timestamps. naga11 does not store full bank account credentials or e-wallet passwords — these are handled directly by your bank or e-wallet provider via their secure interfaces.

2.4 Gameplay and Betting Data. We record all bets placed, games played, wager amounts, odds accepted, and outcomes on the naga11 platform. This data is used for account management, dispute resolution, bonus settlement, and responsible gaming monitoring.

2.5 Technical and Device Data. When you access naga11, we automatically collect your IP address, browser type and version, operating system, device type, screen resolution, referring URL, and session timestamps. This data is used for security monitoring, fraud prevention, and platform analytics.

2.6 Communications Data. If you contact naga11's support team via live chat or email, we retain records of those communications — including the content of your messages and any attachments — for quality assurance, training, and dispute resolution purposes.

2.7 Preference and Marketing Data. Where you have opted in to receive promotional communications from naga11, we maintain a record of your communication preferences and any marketing emails or SMS messages sent to you, together with engagement data (opens, clicks) where technically available.

3 How We Collect Your Data

naga11 collects personal data through the following channels:

• Directly from you: Registration forms, KYC submission uploads, deposit and withdrawal request forms, live chat and email communications, and preference settings within your account dashboard.
• Automatically: Server logs, browser cookies, session tracking technologies, and analytics tools that record your interactions with the naga11 platform during each visit.
• From payment providers: When you make a deposit or withdrawal, your bank or e-wallet provider (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja, and others) transmits transaction confirmation data to naga11's payment processing system.
• From identity verification services: naga11 may use third-party KYC verification services to cross-reference the identity documents you submit against authoritative databases for the purpose of fraud prevention and age verification.
• From fraud and risk management systems: naga11 employs automated risk-scoring tools that analyze behavioral patterns on the platform to detect suspicious activity. These systems may combine data points collected across multiple sessions.

4 Purposes of Processing

naga11 processes your personal data for the following specific purposes:

naga11 does not use your personal data for purposes beyond those listed above without first obtaining your explicit consent or as otherwise required by applicable law.

5 Legal Basis for Processing

naga11 processes your personal data on one or more of the following legal bases:

• Contractual necessity: The majority of data processing described in this Policy is necessary for naga11 to perform its obligations under the Member account agreement — including account creation, payment processing, and provision of betting and gaming services.
• Legitimate interests: naga11 processes certain data — particularly technical and behavioral data — on the basis of its legitimate interest in preventing fraud, maintaining platform security, improving service quality, and protecting the rights and safety of its Members.
• Legal obligation: naga11 is required to collect and retain certain data to comply with anti-money-laundering obligations, age verification requirements, and other applicable legal duties.
• Consent: Where naga11 processes your data for marketing communications or optional analytics purposes, it does so only on the basis of your freely given, specific, informed, and unambiguous consent. You may withdraw this consent at any time by contacting support or updating your account preferences.

6 Sharing Your Data

naga11 does not sell or rent your personal data. We may share your data with the following categories of third parties strictly for the purposes described in this Policy:

• Payment processors and financial institutions: BCA, BRI, BNI, Mandiri, CIMB Niaga, and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) receive the minimum transaction data required to process your deposits and withdrawals. Each provider operates under its own privacy and security framework.
• KYC and identity verification providers: Third-party services engaged by naga11 to verify identity documents and cross-reference data against fraud prevention databases receive the specific KYC documents and personal data required for that verification task only.
• Game studio partners: Live casino and game content providers such as Evolution Gaming, Pragmatic Play, SA Gaming, Microgaming, and Spribe receive session tokens and anonymized player identifiers to operate their game environments. They do not receive your full name, contact details, or financial data.
• Infrastructure and hosting providers: Cloud hosting, content delivery, and security infrastructure providers that host or transmit naga11 platform data operate under strict data processing agreements that prohibit them from accessing or using Member data for any purpose other than providing the contracted services.
• Legal authorities: naga11 may disclose personal data to law enforcement agencies, regulatory bodies, or courts of competent jurisdiction where required to do so by applicable law, court order, or to protect naga11's legal rights.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of naga11's business assets, Member personal data may be transferred to the acquiring entity, subject to equivalent privacy protections being maintained. Members will be notified of any such transfer in advance.

7 Cookies & Tracking Technologies

naga11 uses cookies and similar tracking technologies to enable platform functionality, maintain session state, and support analytics. The following categories of cookies are in use:

• Strictly necessary cookies: These cookies are essential to the operation of the naga11 platform. They manage your login session, maintain your account security state, and enable the platform to remember your preferences within a single browsing session. These cookies cannot be disabled without impairing core functionality.
• Functional cookies: These cookies remember choices you have made — such as language preference and display settings — to provide a more personalized experience on subsequent visits.
• Analytics cookies: naga11 uses anonymized analytics data to understand how Members interact with the platform, which pages are most visited, and where technical issues arise. This data is aggregated and does not identify individual users.
• Security cookies: These cookies support naga11's fraud detection systems by recording behavioral signals such as typing patterns, mouse movement characteristics, and device fingerprints to identify anomalous activity that may indicate unauthorized access or automated bot behavior.

You can manage cookie settings through your browser's privacy controls. Please note that disabling strictly necessary cookies will prevent you from logging in to your naga11 account.

8 Data Retention

naga11 retains personal data for the periods set out below, after which data is securely deleted or anonymized:

Extended retention periods may apply where naga11 is required by law to retain data for a longer period, or where the data is subject to an ongoing legal dispute or regulatory investigation.

9 Data Security

naga11 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, loss, alteration, or disclosure. These measures include:

• TLS 1.3 encryption on all data transmitted between your browser or device and the naga11 platform.
• AES-256 encryption at rest for all personal data stored in naga11's databases.
• bcrypt password hashing — naga11 employees cannot view your password in plaintext under any circumstances.
• Role-based access controls ensuring that naga11 staff can only access the categories of Member data that are strictly necessary for their job function.
• Continuous intrusion detection and monitoring on all production infrastructure, with automated alerts for anomalous access patterns.
• Regular third-party security audits and penetration testing of the naga11 platform and its underlying infrastructure.
• SMS two-factor authentication available to all Members from the account security settings panel, providing an additional layer of protection against unauthorized account access.

10 Your Rights

As a Member of naga11, you hold the following rights with respect to your personal data. To exercise any of these rights, contact us at [email protected]:

• Right of Access: You may request a copy of all personal data that naga11 holds about you. We will provide this within 30 days of a valid request, in a commonly used electronic format.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update many details directly from your account dashboard without needing to contact support.
• Right to Erasure: You may request that naga11 delete your personal data. This right is subject to limitations — we cannot erase data that we are legally required to retain (e.g., financial transaction records required for anti-money-laundering compliance) or data that is necessary to resolve an open dispute.
• Right to Restriction: You may request that naga11 restrict the processing of your data in certain circumstances — for example, while the accuracy of the data is being contested.
• Right to Data Portability: You may request that naga11 provide your personal data to you in a structured, machine-readable format so that you can transfer it to another service provider.
• Right to Object: You may object to naga11 processing your data on the basis of legitimate interests. Upon receiving a valid objection, naga11 will cease processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to the withdrawal.

naga11 will respond to all data rights requests within 30 calendar days. Where a request is complex or naga11 receives a high volume of requests, this period may be extended by a further 30 days, and you will be informed of the extension within the initial 30-day window.

11 Minors & the Under-21 Restriction

The naga11 platform is strictly for adults aged 21 years and over. naga11 does not knowingly collect personal data from individuals under the age of 21. Our registration process requires users to confirm their date of birth, and KYC verification is used to enforce this age restriction.

If naga11 discovers that it has inadvertently collected personal data from an individual who is under 21 years of age, it will immediately close the relevant account, forfeit any balance in accordance with our Terms & Conditions, and securely delete the personal data associated with that account as promptly as practicable.

If you believe that a person under 21 has registered an account on naga11, please notify us immediately at [email protected] so that we can investigate and take appropriate action without delay.

12 International Data Transfers

naga11 is an internationally operated platform. Some of the third-party service providers engaged by naga11 — including cloud infrastructure providers, game studios, and fraud detection services — may process personal data in jurisdictions outside Indonesia.

Where such transfers occur, naga11 takes the following steps to ensure that your personal data remains adequately protected:

• naga11 only engages third-party processors in jurisdictions that maintain data protection standards comparable to those applicable in Indonesia.
• All international data transfers are governed by contractual data processing agreements that impose binding data protection obligations on the receiving party equivalent to those applied by naga11 itself.
• naga11 does not transfer personal data to jurisdictions that are recognized as having inadequate data protection frameworks without first implementing additional safeguards, such as standard contractual clauses or binding corporate rules.

13 Policy Amendments

naga11 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform functionality. When material changes are made, naga11 will:

• Update the "Last updated" date at the top of this page.
• Notify existing Members via the email address registered to their account, providing at least 14 days' notice before the amended Policy takes effect.
• Display a prominent notice on the naga11 platform for a period of no less than 14 days prior to the effective date of the changes.

Your continued use of the naga11 platform after the effective date of any amended Privacy Policy constitutes your acknowledgment of and agreement to the updated terms. If you do not agree to the amended Policy, you must close your account before the effective date by contacting support at [email protected].

The most current version of this Privacy Policy is always available at https://naga11.bio/privacy-policy.

14 Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy, or if you wish to exercise any of the data rights described in Clause 10, please contact the naga11 Data Privacy team through the following channel:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 via the chat widget on the naga11 platform after logging in to your account.
• Response time: naga11 aims to acknowledge all privacy-related queries within 24 hours and to provide a substantive response within 30 calendar days of receiving a valid data rights request.
• Support hours: Indonesian-speaking support agents are available around the clock, covering WIB (UTC+7), WITA (UTC+8), and WIT (UTC+9) time zones.

When submitting a data rights request by email, please include your full name, registered email address, and a clear description of the right you wish to exercise. naga11 may request additional verification information to confirm your identity before processing the request, to ensure that personal data is not disclosed to an unauthorized party.