Data Protection

Privacy Policy — How na2121 Protects Your Data

na2121 is committed to protecting the privacy and security of your personal information. This Privacy Policy explains what data we collect, why we collect it, how we use it, and the rights you have over your information in accordance with international data protection standards.

Last Updated: 15 January 2026

Core Privacy Principles

na2121's approach to data protection is built on six foundational principles that guide every decision we make about your personal information.

Security First

All personal data is encrypted with 256-bit SSL during transmission and at rest. Multi-layer security architecture protects against unauthorized access.

Transparency

We clearly explain what data we collect, why we need it, and how we use it. No hidden data practices or undisclosed third-party sharing.

User Control

You have the right to access, correct, export, or delete your personal data at any time through your account settings or by contacting support.

Data Minimization

We only collect data that is necessary to provide our services, comply with legal obligations, and ensure platform security. No excessive data collection.

No Data Sale

na2121 does not sell, rent, or trade your personal information to third parties for marketing purposes. Your data stays with us.

Regulatory Compliance

We comply with international data protection regulations including GDPR principles, AML/KYC requirements, and responsible gaming standards.

1. Information We Collect

na2121 collects and processes several categories of personal information to provide, secure, and improve our services. The data we collect falls into the following categories:

1.1 Account Registration Data

When you create an account on na2121, we collect the following information:

  • Full Name: As it appears on your government-issued ID
  • Date of Birth: To verify you are at least 21 years of age
  • Email Address: For account notifications and customer support communications
  • Mobile Phone Number: For account verification, two-factor authentication, and withdrawal confirmations
  • Username and Password: Your chosen credentials for account access
  • Residential Address: City and province of residence in Indonesia

1.2 Identity Verification (KYC) Documents

To comply with anti-money-laundering (AML) regulations and responsible gaming standards, na2121 is required to verify the identity of all Players. We may collect:

  • Government-issued photo identification (KTP Indonesian national identity card, passport, or driver's license)
  • Proof of address documents (utility bills, bank statements, or government correspondence dated within the last three months)
  • Selfie photographs holding your ID document (for enhanced verification in high-risk cases)
  • Proof of payment method ownership (bank account statements, e-wallet screenshots showing account holder name)

All KYC documents are stored securely in encrypted format and are only accessed by authorized compliance personnel.

1.3 Financial Transaction Data

When you deposit or withdraw funds, we collect:

  • Bank account details (account number, account holder name, bank name) for BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, or Bank Danamon transfers
  • E-wallet account details for OVO, DANA, GoPay, ShopeePay, or LinkAja transactions
  • Transaction amounts, timestamps, and transaction IDs
  • Payment processor metadata (transaction reference numbers, payment gateway identifiers)

na2121 does not store full credit card numbers or CVV codes. Payment card transactions (where available) are processed through PCI-DSS compliant third-party payment gateways.

1.4 Gambling Activity Data

To provide our services, ensure fair play, and meet regulatory obligations, we collect data about your gambling activity:

  • Bet history (sports bets, casino wagers, togel entries)
  • Game session logs (games played, session durations, stake amounts, outcomes)
  • Bonus claims and wagering progress
  • Win/loss records and account balance history
  • Responsible gaming limits you have set (deposit limits, loss limits, session timers)

1.5 Technical and Usage Data

When you access the na2121 platform, we automatically collect certain technical information:

  • IP address and geographic location (country, city level)
  • Device information (device type, operating system, browser type and version)
  • Session data (login/logout times, pages visited, features used)
  • Cookies and similar tracking technologies (see Section 8 for details)
  • Error logs and crash reports (for troubleshooting technical issues)

1.6 Customer Support Communications

When you contact na2121 customer support via live chat, email, WhatsApp, or other channels, we collect and store:

  • The content of your messages and our responses
  • Attachments you provide (screenshots, documents)
  • Support ticket metadata (case numbers, timestamps, agent names, resolution status)

Support conversations are retained for quality assurance, training purposes, and dispute resolution.

Sensitive Personal Data

na2121 does not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, biometric data (except facial recognition in KYC selfies), health information, or data concerning sexual orientation. If such data is inadvertently collected, it will be deleted immediately upon discovery.

2. How We Use Your Information

na2121 uses the personal information we collect for the following purposes:

2.1 Service Provision

  • Create and manage your na2121 account
  • Process deposits, withdrawals, and internal transfers
  • Enable you to place bets and play casino games
  • Deliver customer support and respond to your inquiries
  • Send transactional notifications (deposit confirmations, withdrawal approvals, bet settlements)

2.2 Legal and Regulatory Compliance

  • Verify your identity and age to prevent underage gambling (KYC/AML compliance)
  • Detect and prevent fraud, money laundering, and other illegal activity
  • Comply with legal obligations including tax reporting and regulatory audits
  • Enforce our Terms & Conditions and investigate rule violations
  • Respond to lawful requests from government authorities and law enforcement agencies

2.3 Platform Security and Fraud Prevention

  • Monitor for suspicious account activity, collusion, and bonus abuse
  • Detect and block automated bot traffic and scraping attempts
  • Identify duplicate accounts and self-excluded players attempting to re-register
  • Analyze betting patterns to identify match-fixing or insider knowledge exploitation

2.4 Responsible Gaming

  • Enforce age restrictions and self-exclusion requests
  • Apply deposit limits, loss limits, and session timers you have set
  • Identify players showing signs of problem gambling and offer assistance
  • Generate reports for responsible gaming audits

2.5 Service Improvement and Personalization

  • Analyze usage patterns to improve platform performance and user experience
  • Recommend games and betting markets based on your preferences (opt-in only)
  • Conduct internal research and analytics to develop new features
  • Test and optimize website layout, navigation, and functionality

2.6 Marketing Communications (Opt-In)

With your explicit consent, na2121 may send you promotional communications including:

  • Bonus offers and special promotions tailored to your activity
  • New game launches and feature announcements
  • Seasonal campaigns tied to major sporting events (World Cup, Champions League finals, BRI Liga 1 playoffs)
  • VIP program tier upgrades and exclusive event invitations

You can opt out of marketing communications at any time by adjusting your preferences in account settings or by clicking the unsubscribe link in any promotional email. Opting out of marketing does not affect essential transactional notifications.

3. Legal Basis for Processing (GDPR Principles)

Although Indonesia does not currently have a comprehensive data protection law equivalent to the EU's GDPR, na2121 voluntarily applies GDPR principles to protect all Players. We process your personal data under the following legal bases:

  • Contract Performance: Processing is necessary to provide the services you requested when you created an account (Article 6(1)(b) GDPR equivalent)
  • Legal Obligation: Processing is necessary to comply with AML/KYC regulations, tax laws, and licensing requirements (Article 6(1)(c) GDPR equivalent)
  • Legitimate Interests: Processing is necessary for fraud prevention, platform security, and service improvement, provided it does not override your fundamental rights (Article 6(1)(f) GDPR equivalent)
  • Consent: For marketing communications and optional features, we obtain your explicit opt-in consent (Article 6(1)(a) GDPR equivalent)

4. Data Sharing and Third-Party Disclosure

na2121 does not sell your personal information to third parties. However, we may share your data with the following categories of recipients under strict confidentiality agreements:

4.1 Payment Processors

To process deposits and withdrawals, we share necessary transaction data with:

  • Local Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon)
  • E-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja)
  • Payment gateway service providers

These processors are contractually obligated to use your data only for payment processing and to maintain equivalent security standards.

4.2 Game Providers and Software Partners

When you play games from third-party studios (Pragmatic Play, Evolution Gaming, NetEnt, PG Soft, Microgaming, etc.), limited session data (username, bet amounts, game outcomes) is shared with those providers to enable gameplay. Game providers are prohibited from using this data for any purpose other than delivering the gaming service.

4.3 Identity Verification Services

To comply with KYC requirements, we may use third-party identity verification services that match your provided information against government databases and watchlists. These services process your KYC documents solely for verification purposes and do not retain copies after verification is complete.

4.4 Customer Support Tools

na2121 uses third-party customer support platforms (live chat software, ticketing systems, CRM tools) to manage player inquiries. Support tool providers have access to conversation history and account details necessary to assist you, but are bound by strict data processing agreements.

4.5 Analytics and Performance Monitoring

We use third-party analytics tools (such as Google Analytics) to understand how players use the platform. These tools collect aggregated, anonymized usage data. Personal identifiers are removed before data is shared with analytics providers.

4.6 Legal and Regulatory Authorities

na2121 may disclose personal information to government authorities, law enforcement, regulators, or courts when:

  • Required by law or legal process (court orders, subpoenas, regulatory investigations)
  • Necessary to prevent fraud, money laundering, or other criminal activity
  • Needed to enforce our Terms & Conditions or protect the rights and safety of na2121, our players, or the public

4.7 Business Transfers

In the event that na2121 undergoes a merger, acquisition, bankruptcy, or sale of assets, your personal information may be transferred to the acquiring entity as part of the business transaction. You will be notified via email of any such change in ownership or control of your personal data.

No Marketing Data Sharing

na2121 does not share your personal information with third-party marketing companies, data brokers, or advertising networks. Your email address and phone number are never sold or rented to external parties for their marketing purposes.

5. Data Retention

na2121 retains your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal obligations, and resolve disputes.

5.1 Active Account Data

While your account is active, we retain all account data, transaction history, and gambling activity records to provide continuous service.

5.2 Closed Account Data

If you close your account, na2121 retains your data for a minimum of seven years to comply with AML/KYC record-keeping requirements and financial audit obligations. After the retention period expires, personal data is anonymized or securely deleted.

5.3 Marketing Consent

If you opt out of marketing communications, your marketing consent record is retained indefinitely to ensure we do not inadvertently contact you again in the future.

5.4 Legal Hold

If your account is subject to an ongoing investigation, legal dispute, or regulatory inquiry, data retention is extended until the matter is fully resolved.

6. Data Security Measures

na2121 employs industry-standard security measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction:

  • 256-bit SSL Encryption: All data transmitted between your device and na2121 servers is encrypted using Transport Layer Security (TLS) protocols
  • Data Encryption at Rest: Personal data stored in our databases is encrypted using AES-256 encryption
  • Access Controls: Personal data is accessible only to authorized employees who require it to perform their job functions. Access is logged and audited regularly
  • Two-Factor Authentication: Account holders can enable 2FA via SMS or authenticator apps for enhanced login security
  • Firewall Protection: na2121 infrastructure is protected by enterprise-grade firewalls and intrusion detection systems
  • Regular Security Audits: Independent third-party security firms conduct penetration testing and vulnerability assessments on an annual basis
  • Employee Training: All na2121 staff undergo mandatory data protection and information security training
  • Secure Data Centers: Physical servers are housed in geographically distributed, ISO 27001-certified data centers with 24/7 monitoring

Despite these measures, no method of transmission over the internet or electronic storage is 100% secure. na2121 cannot guarantee absolute security, but we continuously invest in security improvements to minimize risk.

7. Your Privacy Rights

Under international data protection principles, you have the following rights regarding your personal information:

7.1 Right to Access

You have the right to request a copy of all personal data na2121 holds about you. To exercise this right, contact customer support or email [email protected]. We will provide a comprehensive data export within 30 days.

7.2 Right to Rectification

If any of your personal information is inaccurate or incomplete, you have the right to request correction. Most account details can be updated directly through your account settings. For changes to verified information (name, date of birth), contact support with supporting documentation.

7.3 Right to Erasure ("Right to Be Forgotten")

You may request deletion of your personal data under certain circumstances. However, this right is not absolute. na2121 must retain data for legal compliance (AML/KYC records, financial transaction history) and may retain data for fraud prevention, dispute resolution, and enforcing our Terms. After the legal retention period expires, your data will be anonymized or deleted.

7.4 Right to Restriction of Processing

You can request that na2121 limit how we use your data if you contest its accuracy, object to processing, or need us to retain data for legal claims.

7.5 Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, machine-readable format (CSV or JSON) and to transmit it to another service provider where technically feasible.

7.6 Right to Object

You can object to processing of your personal data for direct marketing purposes at any time by opting out via account settings. You may also object to processing based on legitimate interests by contacting [email protected] with your specific objection.

7.7 Right to Withdraw Consent

Where processing is based on your consent (e.g., marketing communications), you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing conducted prior to withdrawal.

To exercise any of these rights, contact na2121 customer support via live chat, email [email protected], or submit a written request through your account dashboard. We will respond to all requests within 30 days.

8. Cookies and Tracking Technologies

na2121 uses cookies and similar technologies to enhance your experience, analyze usage patterns, and ensure platform security.

8.1 What Are Cookies?

Cookies are small text files stored on your device by your web browser when you visit a website. They allow the website to remember your preferences, login state, and other session data.

8.2 Types of Cookies We Use

  • Strictly Necessary Cookies: Essential for login authentication, session management, and security. These cannot be disabled without affecting platform functionality.
  • Performance Cookies: Collect anonymized data about how you use the site (pages visited, time spent, errors encountered) to help us improve performance.
  • Functional Cookies: Remember your preferences (language selection, display settings, favorite games) to provide a personalized experience.
  • Analytics Cookies: Third-party cookies (e.g., Google Analytics) that track aggregate usage statistics. These help us understand user behavior and optimize the platform.

8.3 Managing Cookies

Most browsers allow you to control cookies through settings. You can block or delete cookies, but doing so may impair certain platform features (such as staying logged in or saving preferences). For more information on managing cookies, visit your browser's help documentation.

9. Third-Party Links

The na2121 platform may contain links to external websites operated by game providers, payment processors, or other third parties. This Privacy Policy applies only to na2121. We are not responsible for the privacy practices of external sites. We encourage you to review the privacy policies of any third-party sites you visit.

10. Children's Privacy

na2121 services are intended exclusively for individuals aged 21 and over. We do not knowingly collect personal information from anyone under the age of 21. If we discover that a minor has provided personal data, we will immediately delete that information and close the associated account. Parents or guardians who believe their child has provided information to na2121 should contact us immediately at [email protected].

11. International Data Transfers

na2121 operates internationally and may transfer your personal data to servers located outside Indonesia for processing and storage. All international transfers are conducted in compliance with applicable data protection laws and are protected by appropriate safeguards such as Standard Contractual Clauses (SCCs) or equivalent mechanisms to ensure your data receives adequate protection.

12. Changes to This Privacy Policy

na2121 reserves the right to update this Privacy Policy at any time to reflect changes in our practices, technology, legal requirements, or business operations. When we make material changes, we will notify you by email (to the address associated with your account) and by posting a prominent notice on the platform. The "Last Updated" date at the top of this page indicates the most recent revision. Continued use of na2121 services after changes are posted constitutes acceptance of the updated Privacy Policy.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or how na2121 handles your personal information, please contact us:

  • Email: [email protected] (plain text — not a clickable link)
  • Data Protection Officer: [email protected] (plain text — not a clickable link)
  • Live Chat: Available 24/7 via the na2121 platform
  • Mailing Address: na2121 Data Protection Department, Jakarta, Indonesia (plain text — not a clickable link)

We are committed to resolving privacy inquiries promptly and transparently. All requests will receive a response within 30 days.

This Privacy Policy works together with our Terms & Conditions to establish the legal framework for your use of na2121. We encourage you to review both documents to fully understand your rights and obligations.

Questions About Your Privacy?

If you need clarification on any aspect of this Privacy Policy or want to exercise your data rights, our customer support team and Data Protection Officer are here to help. You can also explore our FAQ for quick answers.