At naga66, protecting your personal data is not a legal formality — it is a core operational commitment. This Privacy Policy explains precisely what data we collect, why we collect it, how it is used, and what rights you hold over that data. We encourage you to read it carefully.
Data is collected only for specific, stated purposes.
We collect only what is strictly necessary.
Privacy protection built into every system layer.
You retain clear rights over your personal data at all times.
For the purposes of this Privacy Policy, the following terms have the meanings set out below:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information that identifies or could reasonably identify a natural person, directly or indirectly, including name, identification number, location data, or online identifiers. |
| "Processing" | Any operation performed on Personal Data, including collection, recording, storage, modification, retrieval, use, disclosure, transmission, or deletion. |
| "Data Subject" | The individual whose Personal Data is being processed — in this context, you as a registered or prospective user of the naga66 platform. |
| "Data Controller" | The entity that determines the purposes and means of processing Personal Data — in this context, naga66. |
| "Data Processor" | A third party that processes Personal Data on behalf of the Data Controller under a binding contractual obligation. |
| "KYC" | Know Your Customer — the identity verification process requiring submission of government-issued identification documents before certain Account features are activated. |
| "Platform" | The naga66 website at https://naga66.cam, including all pages, features, APIs, and related digital services. |
naga66 acts as the Data Controller for all Personal Data collected through the Platform. As Data Controller, naga66 is responsible for determining the purposes for which your Personal Data is processed and for ensuring that all processing activities comply with applicable data-protection principles.
Where naga66 engages third-party service providers to process data on its behalf — such as payment processors, KYC verification services, and fraud-detection systems — those providers act as Data Processors under binding contractual agreements that impose obligations consistent with this policy.
For all data-related enquiries, please contact our dedicated data-protection team at the address provided in Section 15 (Contact Us).
naga66 collects the following categories of Personal Data in the course of operating the Platform:
| Category | Examples |
|---|---|
| Identity Data | Full legal name, date of birth, nationality, Indonesian National Identity Card (KTP) number, selfie photograph. |
| Contact Data | Email address, mobile telephone number, residential address in Indonesia. |
| Financial Data | Bank account details (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP), e-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja), transaction history, deposit and withdrawal records. |
| Account Data | Username, hashed password, Account preferences, session history, bonus and promotional records. |
| Technical Data | IP address, device type, operating system, browser type and version, screen resolution, time-zone setting (WIB / WITA / WIT), referral URL. |
| Usage Data | Pages visited, features accessed, game sessions played, wagers placed, bet history, session duration, click-stream data. |
| Communications Data | Records of support chat conversations, email correspondence, and any feedback or complaints submitted to naga66. |
| Marketing Data | Communication preferences, promotional opt-in or opt-out status, response to campaigns. |
naga66 collects Personal Data through the following channels:
naga66 processes your Personal Data on one or more of the following lawful bases:
| Legal Basis | Application |
|---|---|
| Contractual Necessity | Processing required to open and maintain your Account, execute deposits and withdrawals, settle bets, and deliver Platform services you have requested. |
| Legal Obligation | Processing required to comply with KYC, AML, counter-terrorism financing (CTF), and responsible-gaming regulatory requirements. |
| Legitimate Interests | Fraud prevention, platform security, abuse detection, internal analytics, and service improvement — where these interests are not overridden by your fundamental rights. |
| Consent | Direct marketing communications and optional personalisation features, where you have explicitly opted in. You may withdraw consent at any time without affecting prior processing. |
naga66 uses the Personal Data it collects for the following specific purposes:
7.1 Third-Party Service Providers. naga66 shares Personal Data with carefully selected Data Processors who assist in operating the Platform. These include:
All third-party Data Processors are bound by contractual data-processing agreements that prohibit them from using your data for any purpose beyond the specific service they provide to naga66.
7.2 Regulatory and Law Enforcement Disclosure. naga66 may disclose Personal Data to governmental authorities, regulatory bodies, or law-enforcement agencies where required to do so by applicable law, court order, or regulatory directive. We will notify you of any such disclosure where we are legally permitted to do so.
7.3 Business Transfers. In the event of a merger, acquisition, restructuring, or sale of all or part of naga66's business assets, your Personal Data may be transferred to the acquiring entity as part of that transaction. You will be notified in advance of any such transfer and of any resulting change to this Privacy Policy.
7.4 No Sale of Personal Data. naga66 does not sell, rent, or trade your Personal Data to third parties for their own marketing purposes under any circumstances.
naga66 retains Personal Data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention schedules apply:
| Data Category | Retention Period |
|---|---|
| Account & Identity Data | Duration of Account plus 5 years following Account closure, to satisfy AML regulatory requirements. |
| Financial Transaction Records | 7 years from the date of the transaction, in accordance with standard financial-record retention obligations. |
| KYC Documents | 5 years following Account closure or last transaction, whichever is later. |
| Support Communications | 3 years from the date of the last communication, or longer if relevant to an unresolved dispute. |
| Marketing Preferences | Until you withdraw consent or request deletion, after which opt-out records are retained for a minimum of 1 year to prevent accidental re-contact. |
| Technical & Usage Data | 13 months from collection, then anonymised or deleted. |
Upon expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymised so that it can no longer be associated with any individual.
naga66 implements a comprehensive security framework to protect your Personal Data against unauthorised access, accidental loss, disclosure, alteration, or destruction. Our key security measures include:
While naga66 employs robust security measures, no digital system can guarantee absolute security. You are responsible for keeping your Account login credentials confidential and for using a strong, unique password.
naga66 uses cookies and similar tracking technologies to operate the Platform effectively and to improve your experience. The following categories of cookies are used:
| Cookie Type | Purpose |
|---|---|
| Strictly Necessary | Essential for core Platform functionality including session management, authentication, and security. These cannot be disabled without impairing Platform operation. |
| Performance / Analytics | Collect anonymised data on how users navigate the Platform — page visit frequency, load times, error rates — to guide technical improvements. |
| Functional | Remember your preferences such as language settings, time-zone display (WIB default), and odds format to personalise your experience. |
| Marketing / Targeting | Used — with your consent — to deliver relevant promotional content and to measure the effectiveness of marketing campaigns. You may opt out at any time. |
You can manage cookie preferences through your browser settings. Disabling strictly necessary cookies may prevent certain features of the Platform from functioning correctly. Third-party analytics tools used by naga66 are configured to anonymise IP addresses and do not permit those providers to use the data for their own purposes.
As a Data Subject, you hold the following rights in relation to the Personal Data that naga66 holds about you. To exercise any of these rights, please contact us at the address in Section 15. We will respond within 30 calendar days of receiving a verified request.
Request a copy of all Personal Data naga66 holds about you.
Request correction of inaccurate or incomplete Personal Data.
Request deletion of your data where no legal obligation requires retention.
Request that processing of your data be temporarily restricted.
Receive your data in a structured, machine-readable format.
Object to processing based on legitimate interests or for direct marketing.
Withdraw consent for marketing or optional processing at any time.
Object to decisions made solely by automated processing that significantly affect you.
The Platform is strictly intended for adults aged 21 and over (21+). naga66 does not knowingly collect or process Personal Data from individuals under the age of 21. Age verification is a mandatory step in the Account registration and KYC process.
If naga66 discovers that Personal Data has been collected from a minor without verifiable parental or guardian consent, that data will be deleted immediately and the associated Account will be permanently closed. Any winnings accrued by a minor are void and will not be paid out.
If you believe that a minor has registered an Account on the Platform, please contact our support team immediately at the address in Section 15 so that we can investigate and take appropriate action without delay.
naga66 operates globally and may transfer your Personal Data to Data Processors located outside of Indonesia. Where such transfers occur, naga66 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to or higher than the protections afforded under this Privacy Policy. These safeguards may include:
You may request details of the specific safeguards applied to any international transfer of your data by contacting us at the address provided in Section 15.
naga66 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, regulatory requirements, or Platform features. Where changes are material, we will notify you by email to your registered address and/or by displaying a prominent notice on the Platform at least 14 days before the revised policy takes effect.
The "Last Updated" date displayed at the top of this page reflects the date of the most recent revision. Your continued use of the Platform after the effective date of any amendment constitutes your acknowledgement of the revised Privacy Policy. We encourage you to review this page periodically to stay informed of how naga66 protects your data.
For any questions, requests, or complaints relating to this Privacy Policy or the processing of your Personal Data, please contact our data-protection team. We aim to acknowledge all written data-related requests within 5 business days and to resolve them fully within 30 calendar days.
Data Protection Contact Email: [email protected] (plain text — not a clickable link)
Support Hours: 24 hours a day, 7 days a week, including all Indonesian public holidays (WIB — Western Indonesia Time, UTC+7). Native Indonesian-speaking data-protection agents are available at all times to assist you in your preferred language.
For matters related to responsible gaming, account self-exclusion, or deposit limits, please visit our Responsible Gaming page for dedicated guidance and priority support.
Privacy at naga66 is built on concrete operational standards — not just policy language. Here is what that commitment looks like in practice.
Every sensitive data field — KTP numbers, bank account details, KYC documents — is stored using AES-256 encryption. Even in the unlikely event of a system breach, your raw data remains unreadable to any unauthorised party.
All communication between your device and naga66's servers is protected by TLS 1.2+ protocols. The padlock in your browser address bar confirms that your session data is never transmitted in plain text.
naga66 has a strict, unconditional policy against selling, renting, or trading your Personal Data to any third party for marketing purposes. Your data serves you — it is not a commercial asset to be monetised.
Marketing communications are strictly opt-in. You can update your communication preferences or withdraw marketing consent at any time from your Account settings — and your choice takes effect immediately.
naga66 does not hold data indefinitely. Each category of Personal Data is subject to a defined retention schedule, after which it is securely and permanently deleted or irreversibly anonymised.
In the event of a data breach that poses a risk to your rights, naga66 commits to notifying affected users within 72 hours of becoming aware of the incident — well within internationally recognised best-practice standards.
Explore our full Terms & Conditions for the complete rules governing your Account, or visit our FAQ for quick answers to the most common questions from naga66 users across Indonesia.