Privacy Policy

1. Introduction and Scope

This Privacy Policy describes how nagwin ("we", "us", or "our") collects, uses, processes, stores, and protects personal information provided by users ("you" or "your") of our online gaming platform at nagwin.cam. By creating an account and using nagwin Services, you consent to the data practices described in this Privacy Policy.

nagwin operates as an internationally licensed online gaming platform serving players in Indonesia. We are committed to maintaining the highest standards of data protection and privacy, employing industry-leading security measures to safeguard your personal information.

This Privacy Policy should be read in conjunction with our Terms and Conditions and Responsible Gaming policy, which together govern your use of nagwin Services.

2. Information We Collect

nagwin collects various types of personal information to provide, maintain, and improve our Services, ensure regulatory compliance, prevent fraud, and deliver a secure gaming experience.

2.1 Information You Provide Directly

When you register for a nagwin account, you provide the following personal information:

• Identity Information: Full legal name, date of birth, gender, nationality, and government-issued identification number (Indonesian KTP number)
• Contact Information: Email address, mobile phone number, residential address including city and postal code
• Account Credentials: Username, password (stored in encrypted format), and security questions
• Financial Information: Bank account details (bank name, account number, account holder name), e-wallet account information, transaction history, deposit and withdrawal records
• Identity Verification Documents: Scanned copies or photographs of your Indonesian national ID (KTP), proof of address documents, selfie photographs for verification purposes
• Communication Records: Customer support chat transcripts, email correspondence, feedback submissions, and complaint records

2.2 Information Collected Automatically

When you access and use nagwin Services, we automatically collect technical and usage information:

• Device Information: Device type, operating system, browser type and version, screen resolution, device identifiers
• Connection Information: IP address, Internet Service Provider (ISP), geographic location (city/region level), time zone settings
• Usage Data: Pages visited, features accessed, time spent on platform, click patterns, navigation paths, referring URLs
• Gaming Activity: Games played, bet amounts, win/loss records, session duration, gameplay patterns, bonus usage, tournament participation
• Cookies and Tracking Technologies: Session cookies, preference cookies, authentication tokens, analytics data (see Section 10 for details)

2.3 Information from Third Parties

nagwin may receive information about you from third-party sources:

• Payment Processors: Transaction verification data from Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja)
• Identity Verification Services: Age verification, identity authentication, and fraud prevention data from third-party KYC providers
• Gaming Providers: Game outcome data, RNG results, and technical performance metrics from Evolution Gaming, Pragmatic Play, Microgaming, and NetEnt

3. How We Use Your Information

nagwin processes your personal information for the following legitimate business purposes:

3.1 Account Management and Service Delivery

• Create, maintain, and manage your gaming account
• Process deposits and withdrawals to/from your account
• Enable participation in sports betting, casino games, live dealer tables, togel lottery draws, and slot games
• Process bonus claims and track wagering requirement fulfillment
• Manage VIP tier status and deliver loyalty rewards
• Provide customer support and respond to inquiries

3.2 Legal and Regulatory Compliance

• Verify your identity, age (21+ requirement), and residential status
• Comply with Know Your Customer (KYC) and Anti-Money Laundering (AML) regulations
• Maintain transaction records as required by gaming licenses
• Respond to legal requests from regulatory authorities or law enforcement
• Enforce our Terms and Conditions and detect violations

3.3 Fraud Prevention and Security

• Detect and prevent fraudulent activity, money laundering, and underage gambling
• Monitor for duplicate accounts and bonus abuse patterns
• Identify collusion, match-fixing participation, and advantage play
• Protect platform integrity through security monitoring and threat detection
• Investigate disputes, chargebacks, and account compromises

3.4 Responsible Gaming

• Monitor gambling behavior for problem gambling indicators
• Enforce deposit limits, loss limits, and self-exclusion requests
• Deliver reality-check reminders and session time warnings
• Provide intervention when concerning gambling patterns are detected

3.5 Marketing and Communications (With Your Consent)

• Send promotional offers, bonus announcements, and VIP rewards (opt-in basis)
• Deliver personalized game recommendations based on play history
• Provide updates about new features, game releases, and platform improvements
• Send transactional emails regarding deposits, withdrawals, and account activity

3.6 Platform Improvement and Analytics

• Analyze user behavior to improve platform usability and performance
• Conduct A/B testing on features and interface designs
• Optimize game library based on player preferences
• Generate aggregated statistical reports (anonymized data only)

4. Legal Basis for Processing

nagwin processes your personal information based on the following legal grounds:

• Contractual Necessity: Processing required to fulfill our Terms and Conditions and deliver Services you requested
• Legal Obligation: Processing required to comply with gaming regulations, KYC/AML laws, and tax reporting requirements
• Legitimate Interests: Processing necessary for fraud prevention, security monitoring, and business operations (balanced against your privacy rights)
• Consent: Processing based on your explicit consent for marketing communications and optional data uses (withdrawable at any time)

5. Data Sharing and Disclosure

nagwin does not sell, rent, or trade your personal information to third parties for their marketing purposes. We share your data only in the following limited circumstances:

5.1 Service Providers

We share necessary information with trusted third-party service providers who assist in operating our platform:

• Payment Processors: Indonesian banks and e-wallet providers process your financial transactions
• Identity Verification Services: KYC/AML compliance providers verify your identity and age
• Gaming Content Providers: Evolution Gaming, Pragmatic Play, Microgaming, NetEnt receive anonymized gameplay data
• Customer Support Tools: Live chat platforms, email services, and CRM systems store support interactions
• Security Services: Fraud detection systems, DDoS protection providers, and cybersecurity monitoring tools

All service providers are contractually bound to protect your data and use it only for specified purposes.

5.2 Legal Requirements

We may disclose your information when required by law or in response to:

• Valid legal process (subpoenas, court orders, regulatory requests)
• Gaming license authority audits and compliance investigations
• Law enforcement requests related to fraud, money laundering, or criminal activity
• Protection of nagwin's legal rights or defense of legal claims

5.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of assets, your personal information may be transferred to the acquiring entity. You will be notified of any such change via email and prominent notice on the Website.

6. Data Security Measures

nagwin employs comprehensive technical and organizational security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction:

• Encryption: All data transmission uses 256-bit SSL/TLS encryption (same standard as international banks)
• Password Security: Passwords are hashed using industry-standard algorithms (bcrypt with salt); we cannot retrieve your plain-text password
• Access Controls: Strict role-based access limits which employees can view sensitive data
• Secure Storage: Data stored on encrypted servers in secure, access-controlled data centers
• Network Security: Firewalls, intrusion detection systems, and DDoS protection safeguard infrastructure
• Regular Audits: Third-party security audits and penetration testing identify vulnerabilities
• Segregated Funds: Player funds held separately from operational accounts in licensed financial institutions
• Staff Training: All personnel undergo data protection and security awareness training

While we implement robust security measures, no system is entirely immune to breaches. In the unlikely event of a data breach affecting your personal information, we will notify you promptly via email and provide guidance on protective measures.

7. Data Retention

nagwin retains your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy and to comply with legal obligations:

• Active Accounts: Information retained for the duration your account remains active
• Closed Accounts: Information retained for 7 years after account closure to comply with gaming regulations, tax laws, and AML requirements
• Transaction Records: Financial transaction data retained for 7 years as mandated by Indonesian tax law and international gaming regulations
• Marketing Communications: Contact information for marketing retained until you withdraw consent (opt-out)
• Dispute Records: Information related to disputes or investigations retained until resolution plus applicable limitation period

After retention periods expire, personal information is securely deleted or anonymized so it can no longer identify you.

8. Your Privacy Rights

You have the following rights regarding your personal information held by nagwin:

8.1 Right of Access

You may request a copy of the personal information we hold about you. Contact our support team to submit a data access request. We will provide the information in a commonly used electronic format within 30 days.

8.2 Right to Rectification

You may request correction of inaccurate or incomplete personal information. You can update your contact details, address, and communication preferences directly in your account settings. For changes to identity information, contact customer support with supporting documentation.

8.3 Right to Erasure (Right to be Forgotten)

You may request deletion of your personal information in certain circumstances. However, this right is limited by our legal obligations to retain certain data for regulatory compliance (7-year retention for financial records). Upon account closure, we will delete or anonymize data not subject to mandatory retention periods.

8.4 Right to Restrict Processing

You may request that we limit processing of your personal information in specific situations, such as while a dispute about data accuracy is being resolved.

8.5 Right to Data Portability

You may request transfer of your personal information to another service provider in a structured, machine-readable format where technically feasible.

8.6 Right to Object

You may object to processing of your personal information for direct marketing purposes at any time. Use the unsubscribe link in promotional emails or update your communication preferences in account settings.

8.7 Right to Withdraw Consent

Where processing is based on your consent, you may withdraw that consent at any time. This does not affect the lawfulness of processing conducted before withdrawal.

To exercise any of these rights, contact nagwin customer support at [email protected]. We may request identity verification to prevent unauthorized access to your data.

9. International Data Transfers

nagwin operates under international gaming licenses and may transfer your personal information to servers located outside Indonesia. When we transfer data internationally, we ensure appropriate safeguards are in place:

• Data processing agreements with third-party providers requiring equivalent data protection standards
• Encryption during transmission and storage
• Compliance with applicable data protection regulations

By using nagwin Services, you consent to the transfer of your information to countries outside Indonesia that may have different data protection laws.

10. Cookies and Tracking Technologies

nagwin uses cookies and similar tracking technologies to enhance user experience, analyze platform usage, and deliver personalized content.

Types of Cookies We Use:

• Essential Cookies: Required for login authentication, session management, and security functions (cannot be disabled)
• Functional Cookies: Remember your preferences, language settings, and customization choices
• Analytics Cookies: Track usage patterns, popular games, and navigation flows to improve platform (anonymized data)
• Marketing Cookies: Deliver relevant promotional content based on browsing behavior (only with your consent)

You can manage cookie preferences through your browser settings. Disabling essential cookies may limit platform functionality. Most browsers allow you to reject third-party cookies while accepting first-party cookies.

11. Third-Party Links

The nagwin Website may contain links to third-party websites operated by payment providers, game studios, or partner services. This Privacy Policy applies only to nagwin. We are not responsible for the privacy practices of external websites. We encourage you to review the privacy policies of any third-party sites you visit.

12. Children's Privacy

nagwin Services are strictly prohibited for individuals under 21 years of age. We do not knowingly collect personal information from minors. If we become aware that an account holder is under 21, we will immediately suspend the account, forfeit all funds, and delete associated personal information. Parents or guardians who believe a minor has provided information to nagwin should contact us immediately.

13. Changes to This Privacy Policy

nagwin reserves the right to modify this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. We will notify you of material changes via email and prominent notice on the Website. The "Last Updated" date at the top of this policy indicates the most recent revision. Your continued use of nagwin Services after changes constitutes acceptance of the updated Privacy Policy.

14. Contact Information and Data Protection Officer

For questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact nagwin:

• Email: [email protected]
• Subject Line: "Privacy Inquiry" or "Data Subject Request"
• Live Chat: Available 24/7 on nagwin.cam (select "Privacy/Data Protection" topic)

We will respond to all privacy inquiries within 14 business days. For data access requests, we will provide the requested information within 30 days as required by applicable data protection regulations.