nagatoto Privacy Policy

This page describes what we collect when you use nagatoto and how we keep that data protected. When you sign up for an account, deposit via DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, or bank transfer, or play our live-dealer tables and sportsbook games, we gather information about you. We treat that information with care, encrypt it, and share it only when necessary to provide our service or comply with law.

We at nagatoto understand that privacy matters. You want to know what happens to your email, your identity documents, your transaction history, and your gameplay data. Our privacy policy is transparent about these practices. We don't sell your personal information to marketing companies. We don't use your data to profile you for purposes unrelated to nagatoto. We keep your data as long as you need your account to exist, and we delete it when you close your account and request deletion.

This policy applies to all users of nagatoto in supported jurisdictions. If you have questions about how we handle your data, you can contact our support team at any time.

What data we collect on nagatoto

We collect several categories of information when you use nagatoto. First, we gather account registration data: your email address, a secure password (hashed, never stored in plain text), your phone number, and your preferred language. We also collect identity verification documents: a copy of your ID (KTP, passport, or driver's license) and proof of residence (utility bill or rental agreement). These documents are mandatory before you can deposit or play real-money games on nagatoto.

Second, we collect payment information. When you deposit via DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, or direct bank transfer to mobile banking, local payment, online payment, or e-wallet, we record the deposit amount, the payment method, and the date. We do not store your e-wallet credentials or full bank account numbers—payment processors handle those securely. We keep payment records for accounting and compliance purposes.

Third, we collect gameplay data. Every bet you place, every hand of blackjack, every spin of the roulette wheel, and every slot session is logged. We record the game type, the stake, the outcome, and the timestamp. This data helps us detect fraud, resolve disputes, and improve our service. We also collect technical data: your device type (phone or computer), your internet service provider, your approximate location (by country or region, not exact address), and your browser type.

How we use your data on nagatoto

We use the data we collect for specific purposes. First, we use it to operate your nagatoto account: storing your balance, processing deposits and withdrawals, and letting you log in securely. Second, we use it for regulatory compliance. Indonesian anti-money-laundering laws require us to verify your identity and monitor for suspicious activity. When you play Liga 1 sportsbook markets, Piala AFF bets, or engage in any gaming activity on nagatoto, we track your activity to detect fraud and ensure fair play.

Third, we use gameplay data to improve nagatoto. We analyze which games are popular, which features work well, and where players encounter problems. This analysis helps us optimize the live-dealer table experience, fix bugs, and add new games. Fourth, we use your contact information (email and phone) to send you account notifications—deposit confirmations, withdrawal status, promotional updates (only if you opt in). You can disable promotional emails anytime in your account settings.

We do not use your data for purposes beyond these. We do not sell your information to third-party advertisers. We do not use your gameplay patterns to build a psychological profile for manipulative marketing. We do not share your data with data brokers or analytics companies outside our organization without your explicit consent.

Third-party processors and data sharing on nagatoto

We work with trusted third parties to deliver nagatoto. Our payment processors (the banks and e-wallet providers) receive your payment information to complete deposits and withdrawals. Our hosting provider stores our servers and databases. Our compliance software screens transactions for money laundering. These processors are bound by contracts that require them to protect your data and use it only for purposes we authorize.

We may share your data with law enforcement or regulators if required by law. For example, if a court order demands information about a specific user, we comply. We also share data within our own organization: our support team can view your account history to help resolve disputes; our compliance team can review your transactions to detect fraud; our game development team can access anonymized gameplay data (stripped of your name and contact details) to improve games.

Our servers may sit outside your jurisdiction. Data stored on nagatoto may be processed in countries other than Indonesia. By using nagatoto, you consent to this cross-border transfer, which is standard in global online services.

Cookies and tracking on nagatoto

Our website and mobile app use cookies to remember your login status, language preference, and game history. Cookies are small text files stored on your device. We use two types: session cookies (which expire when you close your browser) and persistent cookies (which last for months). Session cookies help you stay logged into nagatoto without re-entering your password. Persistent cookies remember your preferences so you don't have to reset them each visit.

We do not use cookies to track you across other websites. We do not share cookie data with advertisers. Our cookies serve only to improve your nagatoto experience. You can disable cookies in your browser settings, but doing so may limit your ability to use nagatoto fully.

Data retention and deletion on nagatoto

We keep your account data for as long as your nagatoto account exists. If you close your account, we begin a 30-day cooling-off period during which you can reactivate it. After 30 days, we delete your personal information (email, phone, identity documents) from our active systems. However, we retain anonymized gameplay data and transaction records for 7 years to comply with anti-money-laundering regulations and to settle any future disputes.

If you request deletion before the 30-day period ends, we will honor it immediately, but any pending withdrawals or active bets must be resolved first. Once deleted, your data cannot be recovered.

Children and age restrictions on nagatoto

nagatoto is available only to users aged 18 and older (or the legal age of majority in your jurisdiction, whichever is higher). We do not knowingly collect data from minors. If we discover that a user is underage, we will close their account and delete any associated data. Parents or guardians who believe a minor has registered for nagatoto should contact our support team immediately.

Changes to this privacy policy

We may update this privacy policy from time to time. If we make material changes—such as changing how we use your data or adding new categories of third-party processors—we will notify you by email at least 30 days before the changes take effect. Your continued use of nagatoto after the notification period constitutes acceptance of the updated policy.

Contact us about privacy on nagatoto

If you have questions about this privacy policy, want to access your data, or believe we've mishandled your information, contact our support team. You can also reach our data protection officer (DPO) if you have formal privacy complaints. We are based in a jurisdiction that permits online gaming, and we comply with applicable data protection laws in that jurisdiction. If nagatoto operates in Jakarta, Surabaya, Bandung, Medan, or Semarang, you have the right to file a complaint with the relevant local authority if you believe your privacy rights have been violated.