Privacy Policy

Throughout this Privacy Policy the following terms carry the meanings defined below.

naga6d acts as the Data Controller for all Personal Data collected from Players using the Platform. As Data Controller, naga6d determines the purposes and means by which Personal Data is processed, in accordance with applicable data protection law.

If you have any questions about how naga6d processes your Personal Data, or if you wish to exercise any of your data rights, you may contact our Data Protection team using the details provided in Section 17 of this Policy.

naga6d collects the following categories of Personal Data from Players:

naga6d does not knowingly collect sensitive personal data (such as health information, political opinions, or biometric data) beyond what is strictly necessary for KYC age verification purposes.

naga6d collects Personal Data through the following channels:

• Direct provision: Data you supply directly when registering an Account, completing KYC, making a deposit or withdrawal request, contacting support, or submitting feedback.
• Automated technical collection: Technical and Usage Data collected automatically as you browse and use the Platform, via server logs, session tracking, and analytics tools.
• Cookies and similar technologies: Data collected via cookies, web beacons, and local storage as described in Section 10 of this Policy.
• Payment processors: Financial transaction confirmation data relayed by our payment processing partners (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, OVO, DANA, GoPay, ShopeePay) following a deposit or withdrawal instruction.
• KYC and identity-verification services: Identity Data confirmed or supplemented by licensed third-party KYC verification providers engaged by naga6d.
• Fraud prevention and security monitoring: Data collected or inferred by our fraud-detection and security-monitoring systems as part of continuous platform protection.

naga6d processes your Personal Data for the following purposes:

1. Account Management: Creating, maintaining, and securing your naga6d Account, including login authentication and session management.
2. KYC & Age Verification: Verifying that you meet the 21+ age requirement and confirming your identity in compliance with our licensing obligations.
3. Payment Processing: Processing deposits and withdrawals in Indonesian Rupiah via your chosen bank or e-wallet, including transaction verification and fraud screening.
4. Platform Operations: Delivering the gaming services you request, maintaining platform uptime and performance, and resolving technical issues.
5. Responsible Gaming: Monitoring gameplay patterns to identify potential problem-gambling behaviour and applying any voluntary limits or self-exclusion orders you have set.
6. Fraud Prevention & Security: Detecting, investigating, and preventing fraudulent activity, money laundering, duplicate accounts, and prohibited conduct as defined in our Terms & Conditions.
7. Legal & Regulatory Compliance: Fulfilling obligations under our gaming licence, responding to lawful requests from regulatory or law enforcement authorities, and maintaining required records.
8. Customer Support: Responding to your queries, resolving disputes, and improving the quality of our support interactions.
9. Analytics & Improvement: Analysing aggregated usage data to improve Platform features, game selection, payment options, and the overall player experience.
10. Marketing Communications: Sending you promotional offers, bonus notifications, and platform updates where you have given consent or where legitimate interest applies. See Section 14 for opt-out options.

naga6d relies on the following legal bases when processing your Personal Data:

• Contractual necessity: Processing required to deliver the services described in our Terms & Conditions — including Account management, payment processing, game delivery, and KYC. Without this processing, we cannot provide you with the naga6d service.
• Legal obligation: Processing required to comply with our gaming licence conditions, anti-money-laundering obligations, and lawful regulatory and law enforcement requests.
• Legitimate interests: Processing for fraud prevention, platform security, analytics, and responsible gaming monitoring, where these interests are not overridden by your data protection rights.
• Consent: Processing for marketing communications and non-essential cookies, where your freely given, specific, and informed consent has been obtained. You may withdraw consent at any time without affecting the lawfulness of prior processing.

naga6d may share your Personal Data with the following categories of recipients:

• Payment Processors: Banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP) and e-wallet providers (OVO, DANA, GoPay, ShopeePay) receive the transaction data required to execute your deposit or withdrawal instruction. These providers process data under their own privacy policies and applicable Indonesian financial regulations.
• Game Content Providers: Licensed studios such as Pragmatic Play, Evolution Gaming, PG Soft, NetEnt, Microgaming, and Spribe receive session identifiers and game-outcome data as required to deliver and audit their games. No directly identifying Personal Data (such as your full name or bank details) is shared with game studios.
• KYC & Identity Verification Services: Licensed third-party KYC providers receive Identity Data and KYC document images for the purpose of age and identity verification only. These providers are contractually bound to process data solely for this purpose.
• Fraud Prevention & Security Services: Specialist fraud-detection and cybersecurity providers receive Technical Data and Usage Data to identify and prevent fraudulent activity on the Platform.
• Regulatory & Law Enforcement Authorities: naga6d will disclose Personal Data to competent authorities where required to do so by law, by court order, or by the conditions of our gaming licence. We will notify you of such disclosure where legally permitted.
• Professional Advisers: Legal, financial, and audit advisers engaged by naga6d may access Personal Data on a strictly need-to-know basis and under binding confidentiality obligations.
• Corporate Transactions: In the event of a merger, acquisition, or sale of the naga6d business, Personal Data may be transferred to the acquiring entity as part of the transaction, subject to equivalent privacy protections being maintained.

naga6d's servers and data-processing infrastructure may be located outside Indonesia. Where Personal Data is transferred internationally, naga6d ensures that appropriate safeguards are in place, including:

• Contractual data-processing agreements with all recipient parties incorporating standard data-protection clauses.
• Transfers only to jurisdictions or entities that provide an adequate level of data protection relative to the international standard.
• Encryption of data in transit using 256-bit SSL/TLS protocols.

By using the naga6d Platform, you acknowledge that your Personal Data may be transferred to and processed in jurisdictions outside Indonesia. naga6d takes all reasonable steps to ensure that such transfers maintain the level of protection described in this Policy.

naga6d retains Personal Data only for as long as necessary to fulfil the purposes described in this Policy, or as required by applicable law. The following general retention periods apply:

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised. Where anonymisation is not technically feasible, data is pseudonymised and stored in a segregated, access-restricted environment.

naga6d uses cookies and similar tracking technologies to operate and improve the Platform. The following categories of cookies are used:

• Strictly Necessary Cookies: Required for core platform functions including login session management, Account security, and payment process integrity. These cookies cannot be disabled without rendering the Platform non-functional.
• Functional Cookies: Used to remember your preferences such as language settings, responsible gaming limits displayed, and game lobby layout preferences. These enhance your experience but are not essential.
• Analytics Cookies: Used to collect aggregated, anonymised data about how Players use the Platform — pages visited, time spent, errors encountered — to allow naga6d to improve platform performance. No individually identifying data is included in analytics reporting.
• Fraud Prevention & Security Cookies: Used by our security and fraud-detection systems to identify suspicious activity patterns and protect accounts from unauthorised access.

naga6d does not use third-party advertising or retargeting cookies. We do not share cookie data with advertising networks.

naga6d implements a multi-layered security programme to protect your Personal Data against unauthorised access, loss, alteration, or disclosure. Key security measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and naga6d servers is encrypted in transit using industry-standard 256-bit SSL/TLS protocols.
• Encryption at Rest: Sensitive data fields — including KYC document files, bank account numbers, and e-wallet identifiers — are encrypted in storage using AES-256.
• Access Controls: Access to Personal Data is restricted to naga6d staff and service providers who require it to perform their specific functions. Role-based access controls and audit logging are applied to all internal data systems.
• Real-Time Fraud Monitoring: Automated systems monitor login attempts, payment instructions, and in-game behaviour for indicators of fraudulent activity, and trigger alerts for manual review where anomalies are detected.
• Regular Security Audits: naga6d conducts periodic security assessments of its platform infrastructure and data-handling practices.
• Incident Response: naga6d maintains a documented data breach response procedure. In the event of a breach affecting your Personal Data, we will notify affected Players without undue delay, consistent with applicable legal obligations.

While naga6d takes all reasonable steps to protect your data, no internet-based platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your Account credentials and for notifying us immediately if you suspect unauthorised access to your Account.

You hold the following rights with respect to your Personal Data processed by naga6d. To exercise any of these rights, contact us at support [at] naga6d.club with your full name, registered email address, and a clear description of your request.

naga6d will respond to all valid data-rights requests within thirty (30) days of receipt. Where a request is complex or numerous, this period may be extended by a further sixty (60) days, with prior notice provided to you. Requests that are manifestly unfounded or excessive may be refused, with written reasons provided.

naga6d applies age verification controls at registration and KYC stages. If naga6d discovers that an Account has been created by or on behalf of a person under 21 years of age, the Account will be immediately suspended, all funds will be held pending investigation, and the relevant KYC documents will be reviewed. Confirmed underage accounts will be permanently closed and the matter referred to the appropriate authorities where required.

If you believe that a person under 21 has registered an Account on naga6d, please contact support [at] naga6d.club immediately.

naga6d may send you promotional emails, bonus notifications, and platform update communications where you have either explicitly consented to receive them during registration, or where naga6d has a legitimate interest in communicating offers relevant to your Account activity.

You may opt out of marketing communications at any time by:

• Clicking the unsubscribe link present in every marketing email naga6d sends you.
• Updating your communication preferences in your Account Settings.
• Contacting support at support [at] naga6d.club and requesting removal from all marketing lists.

Opting out of marketing communications does not affect your receipt of transactional communications — such as deposit confirmations, withdrawal receipts, KYC notifications, and security alerts — which are necessary for the operation of your Account.

The naga6d Platform may reference or integrate content from licensed third-party game studios including Pragmatic Play, Evolution Gaming, PG Soft, NetEnt, Microgaming, and Spribe. While naga6d screens all game content providers for compliance with our standards, each provider operates under its own privacy policy in respect of data processed within their game clients.

naga6d does not include external links to unaffiliated third-party websites. This Policy applies exclusively to data processed by naga6d in connection with the Platform. naga6d accepts no responsibility for the data-handling practices of game studios or payment processors operating under their own separate privacy policies.

naga6d may update this Privacy Policy from time to time to reflect changes in our data-processing practices, applicable law, or platform operations. When material changes are made, naga6d will:

• Update the Effective Date at the top of this Policy.
• Notify registered Players via email at least seven (7) days before the updated Policy takes effect.
• Display a prominent on-platform notification for at least fourteen (14) days following the update.

Your continued use of the Platform after the effective date of any updated Policy constitutes acceptance of the revised terms. If you do not accept the revised Policy, please cease using the Platform and contact support to request Account closure.

For all privacy-related queries, data-rights requests, or complaints regarding naga6d's handling of your Personal Data, please contact our Data Protection team:

Please include your registered email address, your Account username, and a clear description of your query or request. For data-rights requests, we may ask you to verify your identity before processing the request to protect your Account security.

If you are not satisfied with naga6d's response to a privacy complaint, you have the right to escalate the matter to the competent supervisory authority in your jurisdiction.