naga404 Casino & Sportsbook Data Care

This page describes what we collect when you use naga404 and how we keep that data protected. Our naga404 platform processes personal information — email, national ID, payment details, betting history, and device information — to deliver sportsbook and casino services. We handle all data subject to encryption, access controls, and periodic security audits. Our servers may sit outside your jurisdiction; data transfers comply with standard cross-border security practices.

We collect only data necessary to verify your identity, process deposits and withdrawals through QRIS, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, and e-wallet, and deliver Liga 1 sportsbook, live-dealer tables, and slot games. We do not sell your data to advertisers or marketing partners. Third-party processors (payment gateways, KYC vendors, hosting providers) access limited data under data-processing agreements that prohibit independent use.

We keep your data only as long as necessary to operate your naga404 account and comply with legal record-keeping requirements. You have rights to access, correct, and delete your data; contact our support team to exercise these rights.

What we collect when you use naga404

We collect information in three categories when you open and use your naga404 account. First, during registration and verification: email address, username, password (hashed), national ID number, full name, date of birth, address, phone number, and a photograph (selfie). Second, during payment: transaction dates, amounts, payment method (QRIS, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, e-wallet), and deposit/withdrawal confirmations from your bank or wallet. Third, during use: betting activity (wagers placed, amounts, fixtures, outcomes), login history, device information (IP address, browser type, operating system), and customer support interactions.

We collect device information automatically when you access naga404 via web browser or mobile (iOS via browser, Android via installer). This includes IP address, device type (smartphone, tablet, desktop), operating system version, browser identifier, and connection type. We do not install tracking software or spy code; your browser's standard cookies and session tokens capture basic session data.

We do not collect biometric data, health information, or any sensitive personal data beyond what is required for identity verification (national ID, selfie, address). We collect betting history and account activity only to settle bets, track your balance, prevent fraud, and maintain audit logs for regulatory compliance.

How we use your data on naga404

We use your email and password to authenticate your naga404 account and issue login recovery links if you forget your credentials. We use your national ID, selfie, and address to verify your identity (KYC compliance) and confirm you are the legitimate account holder. This verification typically completes within one to two hours on business days; we discard rejected documents after thirty days if re-submission is not requested.

We use your payment information to process deposits and withdrawals through mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, and local payment. We pass payment details to our payment processor under a data-processing agreement; they retain data only to settle transactions and comply with banking regulations. We do not store full payment card details; our payment processor tokenizes cards to minimize exposure.

We use your betting history to settle wagers, calculate your naga404 balance, detect fraud (e.g. multi-account collusion during Liga 1 derbies or Piala AFF tournaments), and generate transaction statements. We use your login history and device information to detect unauthorized access and enforce account security measures. We use support interaction data to respond to your inquiries and improve our naga404 support service.

Third-party processors and data sharing on naga404

We share limited data with third-party service providers who assist our naga404 operations. Payment processors (online payment, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, e-wallet integrators) receive email, amount, and account details to settle transactions. KYC verification vendors receive your national ID, selfie, and address to confirm identity against public registries; we retain no copy of documents after verification closes. Hosting providers (cloud infrastructure) receive encrypted account data and application logs to maintain naga404's uptime and security.

All third-party processors sign data-processing agreements (DPAs) that restrict their use of your data to the specific purpose we authorize. They cannot resell, profile, or market to you. They must implement encryption, access controls, and breach notification protocols. We audit these processors annually or after any security incident.

We do not share your data with advertisers, data brokers, or other platforms. We do not sell your email list or betting history. In rare cases, we may disclose data if required by court order, law enforcement request, or legal obligation (e.g., anti-money-laundering reporting). We notify you of such disclosures unless legally prohibited.

Cookies and tracking on our naga404 platform

We use cookies to maintain your naga404 session (login state, balance display, betting slip persistence). These are session cookies that expire when you close your browser. We do not use third-party cookies or tracking pixels for analytics; our naga404 analytics rely on server logs, not client-side tracking.

You may disable cookies in your browser settings; however, some naga404 features (login, placing wagers, withdrawal forms) require session cookies to function. If you disable all cookies, you may experience reduced functionality on naga404.

Data retention and your rights on naga404

We retain your naga404 account data (email, KYC documents, transaction history) for as long as your account remains open. Once you request account closure, we retain data for a legal minimum of five years (for anti-money-laundering and tax reporting compliance), then delete or anonymize it. Deleted data is removed from live naga404 systems but may persist in encrypted backups for up to one year.

You have the right to access all data we hold about you on naga404. Submit an access request via support email; we provide a data export within thirty days. You have the right to correct inaccurate data (e.g., misspelled address); contact support to update your naga404 profile. You have the right to delete your account and associated data by requesting account closure; we process this within five business days and honor GDPR right-to-be-forgotten requests where applicable.

Data security and encryption on naga404

We encrypt all data in transit (between your device and our naga404 servers) using TLS/HTTPS protocol. We encrypt sensitive data at rest (email, payment details, KYC documents) using AES-256 encryption. We maintain encrypted backups in geographically distributed data centres to prevent data loss from hardware failure or natural disaster.

We restrict access to naga404 data to authorized personnel only (engineers, compliance staff, support team). All access is logged and monitored; unauthorized access attempts trigger security alerts. We conduct annual penetration testing and vulnerability assessments; critical vulnerabilities are patched within twenty-four hours of discovery.

We do not guarantee absolute security; no system is immune to attack. If we detect a data breach affecting naga404 user accounts, we notify affected users within forty-eight hours of confirmation and describe the scope and remediation steps.

Data transfers and jurisdiction on naga404

Our naga404 servers are located outside Indonesia. By using naga404, you acknowledge that your data is transferred to and processed in our server jurisdiction. We maintain standard data-protection practices equivalent to Indonesian privacy standards; however, we cannot guarantee that foreign jurisdictions' laws will respect your data privacy to the same degree as Indonesian law.

If you are located in Jakarta, Surabaya, Bandung, or Medan and have concerns about international data transfer, contact our support team to discuss jurisdiction-specific options.

Contact and data requests on naga404

To request access to your naga404 data, submit a data subject access request (DSAR) via email to our support team. Include your registered email address and account ID. We respond within thirty days with a downloadable export of your personal data in CSV or JSON format.

To request deletion of your naga404 account and associated data, initiate account closure in your naga404 settings or contact support. We process deletion requests within five business days; your account is permanently closed and historical data is scheduled for deletion after legal retention periods expire.

For any questions about our naga404 privacy policy or data practices, contact our multilingual support team via email or chat during standard business hours across Jakarta, Surabaya, Bandung, and Medan timezones.