At 12naga, we treat the privacy of our players with the same seriousness we apply to platform security. This Privacy Policy explains exactly what personal data we collect, why we collect it, how it is used, who it may be shared with, and what rights you hold over your own information.
Last Updated: January 2026The following terms carry specific meanings throughout this Privacy Policy:
12naga collects Personal Data through several channels: directly from you during registration and account activity, automatically through your use of the platform, and in limited cases from trusted third-party sources. The categories of data we collect are described below.
When you create a 12naga account, we collect the following information:
To comply with anti-money-laundering (AML) obligations and confirm player identity before processing withdrawals, we collect:
We record all financial activity associated with your account, including deposit amounts and timestamps, withdrawal requests, payment method references (bank account endings, e-wallet identifiers), bonus credits and wagering activity, and net gaming results by session and product type. We do not store full bank account numbers or e-wallet credentials — only the minimum reference information necessary to process and reconcile transactions.
When you access the 12naga platform, our servers and analytics systems automatically collect:
When you contact our support team via live chat or email, we retain records of those communications — including the content of messages, the time and date of contact, and the resolution outcome — for quality assurance, compliance, and dispute resolution purposes.
If you voluntarily use our responsible gaming tools — including deposit limits, session time limits, reality checks, cool-off periods, or self-exclusion — we record your preferences and the history of any modifications. This data is retained to ensure your settings are honored and to prevent their circumvention.
12naga processes your Personal Data under one or more of the following lawful bases, depending on the specific purpose:
| Processing Purpose | Legal Basis |
|---|---|
| Account registration and management | Contractual necessity — required to fulfill our service agreement with you |
| Identity verification (KYC) | Legal obligation — required under internationally applicable AML and fraud prevention standards |
| Processing deposits and withdrawals | Contractual necessity — required to deliver the gaming services you have requested |
| Fraud detection and prevention | Legitimate interest — protecting the platform and other users from financial crime |
| Marketing communications (where opted in) | Consent — based on your explicit opt-in at registration or in account settings |
| Responsible gaming tools and monitoring | Legitimate interest and legal obligation — protecting player welfare |
| Platform analytics and improvement | Legitimate interest — improving service quality and user experience |
| Customer support communications | Contractual necessity and legitimate interest — resolving player queries and complaints |
12naga uses collected Personal Data exclusively for the purposes identified at the time of collection and for compatible purposes that a reasonable person would expect given the context. Specifically, we use your data to:
12naga does not disclose your Personal Data to third parties except in the specific circumstances described below. All third-party recipients are required to handle your data in accordance with applicable privacy standards and are prohibited from using it for purposes beyond those specified.
We engage trusted third-party service providers who process Personal Data on our behalf under written data processing agreements. These include:
12naga may disclose Personal Data to law enforcement agencies, regulatory authorities, courts, or other government bodies where we are legally compelled to do so, or where such disclosure is necessary to prevent or detect serious crime, protect national security, or comply with a valid legal process. We will notify affected users of such disclosures wherever legally permissible to do so.
In the event that 12naga undergoes a merger, acquisition, restructuring, or sale of all or substantially all of its assets, Personal Data held by 12naga may be transferred to the acquiring entity as part of that transaction. We will provide notice of any such transfer and ensure the acquiring entity is bound by privacy obligations at least equivalent to those in this policy before any transfer takes place.
12naga may share aggregated, anonymized statistical data — for example, total platform transaction volumes by payment method, or anonymized player demographic breakdowns — with business partners, research organizations, or industry bodies. Such data cannot be used to identify any individual user and does not constitute a disclosure of Personal Data.
The 12naga platform uses cookies and similar tracking technologies to deliver core functionality, enhance user experience, and gather analytics data. Cookies are small text files stored on your device by your browser when you visit the platform.
| Cookie Type | Purpose | Duration |
|---|---|---|
| Strictly Necessary | Session management, login authentication, CSRF protection, account security tokens | Session / up to 24 hours |
| Functional | Remembering your language preference, game lobby layout, and responsible gaming settings | Up to 12 months |
| Analytics | Measuring page traffic, user journey analysis, and platform performance monitoring (anonymized) | Up to 24 months |
| Marketing | Tracking campaign performance for 12naga's own promotional activity — only where you have consented | Up to 12 months |
You can control cookie settings through your browser's privacy preferences. Most modern browsers allow you to block or delete cookies, restrict third-party cookies, or receive notifications before a cookie is stored. Please note that disabling strictly necessary cookies will impair core platform functionality — including login sessions and responsible gaming tool enforcement — and we therefore recommend retaining these while adjusting other categories as you see fit. Detailed instructions for managing cookies in major browsers (Chrome, Firefox, Safari, Samsung Internet) are available through those browsers' support documentation.
12naga retains Personal Data only for as long as necessary to fulfill the purpose for which it was collected, or as required by applicable legal and regulatory obligations. Our standard retention periods are as follows:
Upon expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymized. Where deletion is not immediately technically feasible (for example, data held in backup archives), the data is isolated from active processing and scheduled for deletion at the earliest practicable opportunity.
12naga implements a comprehensive, layered approach to data security designed to protect your Personal Data against unauthorized access, disclosure, alteration, or destruction. Our security measures include:
As a registered user of 12naga, you hold the following rights with respect to your Personal Data. To exercise any of these rights, please contact our Data Protection team at [email protected] with the subject line "Privacy Rights Request". We will acknowledge your request within 5 business days and aim to fulfill it within 30 calendar days.
Request a copy of all Personal Data we hold about you, along with information on how it is used.
Request correction of any inaccurate or incomplete Personal Data held in your account.
Request deletion of your Personal Data where it is no longer necessary for the purpose collected, subject to legal retention obligations.
Request that we restrict processing of your data while an accuracy dispute or objection is under review.
Receive a copy of data you have provided to us in a structured, machine-readable format for transfer to another service.
Object to processing based on legitimate interest, including direct marketing communications you no longer wish to receive.
Where processing is based on your consent, withdraw that consent at any time without affecting the lawfulness of prior processing.
Lodge a complaint with the relevant supervisory authority if you believe your privacy rights have been infringed.
Please note that certain rights are subject to exceptions — for example, we cannot erase data we are legally required to retain under AML obligations, and we cannot provide data portability for inferred or derived data. We will clearly explain any applicable limitations when responding to your request.
The 12naga platform is strictly intended for adults aged 21 and over. We do not knowingly collect, store, or process Personal Data relating to individuals under the age of 21. Age verification is a mandatory step in the account registration and KYC process, and accounts identified as belonging to minors will be immediately suspended and all associated data deleted, with the exception of records required to document and report the incident.
If you are a parent or guardian and believe that a minor has registered a 12naga account or that Personal Data of a minor has been collected without your knowledge, please contact us immediately at [email protected]. We will investigate and take prompt remedial action.
As an internationally operated platform serving players in Indonesia, some of the Personal Data we collect may be transferred to, stored in, or processed in countries outside Indonesia. This may occur, for example, when our cloud infrastructure provider hosts data on servers located in Singapore, Japan, or other Asia-Pacific jurisdictions, or when a game content provider such as Pragmatic Play or Evolution Gaming processes session data on servers in their country of incorporation.
When we transfer Personal Data internationally, we ensure that appropriate safeguards are in place to protect your data to a standard at least equivalent to the protections afforded under this Privacy Policy. Such safeguards include contractual data transfer agreements with all receiving entities, technical security measures applied consistently across all jurisdictions, and selection of third-party partners who maintain recognized international data security certifications.
By using the 12naga platform, you acknowledge and consent to the international transfer of your Personal Data as described in this section, subject to the safeguards described above.
The 12naga platform may contain references to third-party services — for example, payment method providers such as BCA mobile banking, OVO, or GoPay — that operate their own separate websites and privacy policies. 12naga is not responsible for the privacy practices of any third-party service, and this Privacy Policy does not extend to cover those services. We encourage you to review the privacy policies of any third-party service you use in connection with your 12naga account, particularly your chosen banking or e-wallet provider.
Similarly, game content delivered by providers such as Pragmatic Play, Evolution Gaming, Spribe, and Pocket Games Soft may be subject to those studios' own data handling practices in respect of in-game events. 12naga enters into contractual data protection agreements with all content providers to limit their use of any data to game functionality purposes only.
12naga reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, changes in applicable law, or improvements to our platform. When material changes are made, we will update the "Last Updated" date at the top of this page and, where practicable, notify registered users via the email address on file.
Your continued use of the 12naga platform after any amendment to this Privacy Policy constitutes your acceptance of the revised terms. If you do not agree to the amended policy, you should cease using the platform and may request account closure in accordance with Section 12.2 of our Terms & Conditions. We encourage you to review this page periodically to remain informed of how we handle your Personal Data.
For all privacy-related enquiries, Personal Data access requests, rectification or deletion requests, consent withdrawals, or complaints regarding 12naga's data handling practices, please contact our Data Protection team using the details below:
If you are not satisfied with our response to a privacy complaint, you have the right to escalate your concern to the relevant data protection supervisory authority in your jurisdiction. 12naga is committed to cooperating fully with all legitimate regulatory enquiries.
Every data exchange between your device and 12naga's servers is protected by the same TLS encryption standard used by Indonesia's major commercial banks — BCA, BRI, BNI, and Mandiri.
12naga does not sell, rent, or share your Personal Data with third-party advertisers or data brokers under any circumstances. Your information is used solely to deliver and improve our platform services.
You hold eight distinct rights over your Personal Data — including access, rectification, erasure, and portability. All requests are acknowledged within 5 business days and fulfilled within 30 calendar days.
We retain data only as long as required by law or operational necessity — typically five years for financial records. All data is securely deleted or anonymized at the end of its retention period.
Identity verification documents are handled by authorized compliance staff only, stored with AES-256 encryption at rest, and never shared beyond what is required by AML obligations.
Our 24/7 Indonesian-speaking support team is trained to handle privacy enquiries with care and confidentiality. Average live chat response time is under 2 minutes — in WIB and across all time zones.
Our FAQ covers common questions about account security and data handling in plain language. You can also review our full Terms & Conditions, explore our Responsible Gaming guidelines, or return to the homepage.
Data protection enquiries: [email protected] | 21+ Only | Play Responsibly