nagatop Platform Privacy Notice

This page describes what we collect when you use nagatop and how we keep that data protected. We gather information to verify your identity, process your deposits and withdrawals, settle your bets on Liga 1 or other football markets, and provide customer support. Our servers are encrypted, and your payment details are never shared with third parties beyond what's necessary for transaction settlement.

We operate across supported jurisdictions in Southeast Asia. Your data may be stored on servers located outside your jurisdiction, but we apply the same encryption and access controls regardless of physical location. We comply with standard anti-money-laundering (AML) and know-your-customer (KYC) protocols. If you have questions about how we use your information, contact our support team via live chat or email.

By creating an account on nagatop, you consent to this privacy policy. If you disagree with our data practices, do not create an account.

What data we collect on nagatop

We collect your account information when you register: full name, email address, phone number, residential address, and date of birth. We use your email and phone to send account notifications and support responses. We do not use these channels for marketing unless you opt in (and you can opt out anytime).

We collect your identity documents before your first withdrawal: a government-issued ID (national ID card, passport, or driver's license) and proof of address (utility bill, bank statement, or official correspondence). We store these securely in an access-restricted system separate from your gaming activity. These documents are mandatory under anti-money-laundering law; we cannot process withdrawals without them.

We collect activity data on nagatop: which markets you view (Liga 1, Piala Indonesia, Piala AFF, Champions League fixtures), which predictions you place, your betting and gaming activity, wins and losses, account balance history, and login times. This data helps us settle your bets accurately, detect fraud, and improve our platform.

We collect device and browser data: your IP address, device type (Android or iOS), operating system, and browser type. We use this to detect unusual access patterns (login from a new city or country) and protect your account from unauthorised use.

How we use your data

We use your data to operate the platform: confirm your identity, process deposits and withdrawals, settle your bets on football markets and casino games, and maintain your account balance. We use your contact details to provide customer support: respond to your queries via live chat, email, or phone. We use your activity logs to detect and prevent fraud: identify suspicious patterns like rapid account creation followed by large deposits, or unusual betting behaviour.

We use your data to comply with law: meet anti-money-laundering (AML) and know-your-customer (KYC) requirements, respond to legal requests from authorities, and prevent use of nagatop for illegal purposes. We do not use your data for marketing outside the channels you've agreed to (email or SMS opt-in).

We may use aggregated, anonymised data (not linked to you personally) for analytics: how many players in Jakarta, Surabaya, Bandung, or Medan access Liga 1 markets, which payment methods are most popular (mobile banking, local payment, online payment), and which games attract the most players. This helps us improve our platform but does not identify you.

Data sharing and third parties

We do not sell your personal data. We share your data only where necessary:

• Payment processors: e-wallet networks, mobile banking, local payment, online payment, e-wallet, mobile banking, and banks (local payment, online payment, e-wallet, mobile banking) see transaction amounts, user IDs, and payment method identifiers. They do not see your full identity details or betting history.
• Legal authorities: We comply with court orders and law-enforcement requests for data. We notify you of such requests unless prohibited by law.
• Service providers: Our hosting provider and compliance software provider may access encrypted data to maintain platform security and detect fraud. They are contractually bound not to use your data for any other purpose.

We do not share your data with marketing companies, advertisers, or unrelated third parties. We do not use cookies to track you across other websites.

Cookies and tracking

We use session cookies to keep you logged into nagatop and remember your preferences (e.g., which football league you last viewed). These cookies expire when you close your browser or log out. We do not use persistent cookies to track you across other sites. If you disable cookies, you will not be able to log into nagatop.

We do not use third-party analytics trackers (like Google Analytics) on nagatop. We use our own internal logs to count page views and detect errors; these logs are not shared with external platforms.

Your rights and data access

You have the right to request a copy of the personal data we hold about you. Contact our support team via email and we will provide a report within 30 days. You have the right to request correction if your data is inaccurate (e.g., if your registered address has changed). You can update your email, phone, and address in your Account Settings; for ID changes, contact support.

You have the right to request deletion of your account and associated data, subject to legal and regulatory constraints (e.g., we must retain transaction records for anti-money-laundering purposes). Contact support and we will discuss your options. You have the right to lodge a complaint with the data protection authority in your jurisdiction if you believe we have mishandled your data.

Data security and retention

We protect your data with SSL/TLS encryption on all connections to nagatop. Your data at rest is encrypted on our servers. Access is restricted to authorised nagatop staff only. We undergo regular security audits and maintain backup systems to prevent data loss. Despite these measures, no system is non-specific info secure; we cannot guarantee that data will never be compromised.

We retain your account data for as long as your account is active. After you close your account, we retain transaction records for seven years to comply with anti-money-laundering law. We delete non-essential data (e.g., login history, cookie files) within 12 months of account closure. If we suspect fraud or receive a legal request, we retain data longer than normal timelines.

International data transfers

Our servers may be located outside your jurisdiction. By creating an account on nagatop, you consent to your data being processed and stored on servers in jurisdictions that may have different data protection laws than your own. We apply the same encryption and access controls regardless of server location. If you do not consent to international data transfer, do not use nagatop.

Contact and policy updates

If you have questions about this privacy policy or want to exercise your data rights (access, correction, deletion), contact our support team via live chat (9 AM–10 PM Jakarta time, seven days a week) or email with a 24-hour response window. We may update this privacy policy at any time. Material changes will be announced via email or in-app notification at least 14 days before they take effect. Continued use of nagatop after the notice period indicates your acceptance of the updated policy.