Privacy Policy

Throughout this Privacy Policy, the following terms carry the meanings set out below:

This Privacy Policy applies to all Personal Data collected by nakbon in connection with the operation of the platform at https://nakbon.cam, including data collected from registered Members, prospective members who begin but do not complete registration, and anonymous visitors who browse the platform without an account.

nakbon acts as the data controller for all Personal Data collected via the platform. This means nakbon determines the purposes and means of processing your Personal Data. Where nakbon engages Third-Party Processors to handle data on its behalf, those processors act under nakbon's instructions and are bound by written data-processing agreements that require them to maintain equivalent standards of data protection.

This policy covers Personal Data collected through the following channels:

• The nakbon website at https://nakbon.cam and any associated subdomains.
• Customer support interactions conducted via live chat or email at [email protected].
• KYC document submissions and identity verification workflows.
• Payment and transaction processing via BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, and LinkAja.

nakbon collects the following categories of Personal Data, depending on how you interact with the platform:

nakbon collects Personal Data through the following means:

• Direct submission: Information you provide when registering an account, completing KYC verification, making a deposit or withdrawal request, or contacting our support team.
• Automated technical collection: Data gathered automatically when you browse or use the platform, including IP address, device identifiers, browser fingerprint, and session cookies.
• Payment processors: Transaction confirmation data received from BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, and LinkAja when you initiate a deposit or withdrawal.
• KYC verification partners: Identity verification results and risk scores returned by our licensed third-party KYC providers following document submission.
• Fraud-detection services: Device reputation, IP risk scores, and behavioral signals provided by anti-fraud platforms integrated into the nakbon registration and login flow.
• Analytics tools: Aggregated, anonymized usage data collected via first-party analytics to understand platform performance and improve the member experience.

nakbon processes Personal Data under the following legal bases, depending on the specific purpose of each processing activity:

• Contractual necessity: Processing that is required to perform our contract with you — specifically, to operate your account, process deposits and withdrawals, settle bets, and deliver customer support.
• Legal obligation: Processing required to comply with our international gaming license conditions, anti-money-laundering (AML) obligations, and KYC requirements — including identity verification and the retention of transaction records.
• Legitimate interests: Processing conducted for nakbon's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and improving our services — where those interests are not overridden by your data protection rights.
• Consent: Processing for marketing communications and non-essential cookies, where nakbon has obtained your explicit opt-in consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

nakbon uses the Personal Data we collect for the following specific purposes:

• Account management: Creating, maintaining, and securing your nakbon account, including authentication and session management.
• Transaction processing: Facilitating deposits and withdrawals via Indonesian bank transfer (BCA, BRI, BNI, Mandiri, CIMB Niaga) and e-wallets (OVO, DANA, GoPay, ShopeePay, LinkAja), and maintaining accurate balance records in IDR.
• Identity verification (KYC): Verifying that you meet nakbon's eligibility requirements — including the 21+ age restriction — and confirming that your payment methods are registered in your name.
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent activity, unauthorized account access, duplicate account creation, money laundering, and misuse of promotional offers.
• Responsible gaming: Monitoring gaming activity patterns to identify potential problem gambling behaviors and, where appropriate, triggering responsible gaming interventions in accordance with our Responsible Gaming Policy.
• Customer support: Responding to your inquiries, resolving disputes, and providing assistance via live chat and email.
• Platform improvement: Analyzing aggregated usage data to identify technical issues, optimize platform performance, and develop new features that better serve our Indonesian member base.
• Marketing communications: Where you have opted in, sending you promotional offers, bonus announcements, and seasonal promotions — subject to your right to opt out at any time.
• Legal and regulatory compliance: Meeting our obligations under our international gaming license, including record-keeping, reporting, and responding to lawful requests from regulatory or law-enforcement authorities.

nakbon does not sell your Personal Data. We share data only in the following limited circumstances, and only to the extent necessary for the specific purpose:

• Payment processors: BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, and LinkAja receive the transaction data necessary to process your deposits and withdrawals. Each provider operates under its own privacy policy and applicable Indonesian financial regulations.
• KYC and identity verification providers: Licensed third-party providers receive copies of your identity documents and return a verification result. These providers are bound by contractual data-processing agreements and may not use your data for any purpose other than fulfilling the verification service.
• Fraud detection and anti-money-laundering services: Specialist platforms receive technical signals (such as IP address, device fingerprint, and transaction pattern data) to assess fraud risk. No unnecessary Personal Data is transmitted for this purpose.
• Game content providers: Studios including Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, and Pocket Games Soft may receive a pseudonymous player identifier to manage game session data. These providers do not receive your full identity or financial details.
• Regulatory and law enforcement authorities: nakbon will disclose Personal Data to competent authorities where required to do so by applicable law, a court order, or the conditions of our international gaming license — including disclosures related to AML investigations.
• Corporate transactions: In the event of a merger, acquisition, or sale of substantially all of nakbon's assets, Member data may be transferred to the acquiring entity, subject to equivalent data protection commitments.

nakbon uses cookies and similar tracking technologies to operate the platform effectively and improve the Member experience. The categories of cookies we deploy are as follows:

Most web browsers allow you to control cookie settings through the browser preferences menu. Please note that disabling strictly necessary cookies will prevent you from logging in or using core platform features. You may withdraw consent for non-essential cookies at any time by adjusting your browser settings or contacting [email protected].

nakbon implements a layered security architecture to protect your Personal Data against unauthorized access, disclosure, alteration, and destruction. Our security measures include, but are not limited to:

• Transport Layer Security (TLS 1.3): All data transmitted between your browser or device and nakbon's servers is encrypted using TLS 1.3, the current industry-leading protocol for data-in-transit security.
• AES-256 encryption at rest: Personal data and KYC documents stored on nakbon's servers are encrypted using AES-256, the same standard adopted by major international financial institutions.
• Access controls: Access to Personal Data within nakbon's systems is restricted on a strict need-to-know basis. Staff with legitimate access to member data are subject to background checks and confidentiality obligations.
• Two-factor authentication (2FA): nakbon's internal systems require multi-factor authentication for any staff access to member account data or financial records.
• Penetration testing: nakbon engages independent security specialists to conduct regular penetration tests and vulnerability assessments of our platform infrastructure.
• Incident response: In the event of a data security incident that poses a risk to your rights and freedoms, nakbon will notify affected Members without undue delay and take all reasonable steps to contain and remediate the breach.

nakbon retains Personal Data only for as long as is necessary to fulfill the purpose for which it was collected, or as required by applicable law and our licensing obligations. The following retention periods apply:

Upon expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymized. Where anonymization is applied, the resulting data no longer constitutes Personal Data and may be retained indefinitely for statistical analysis.

As a Member of the nakbon platform, you hold the following rights in respect of your Personal Data. To exercise any of these rights, please submit a written request to [email protected]. nakbon will respond within 30 days of receiving a complete and valid request:

• Right of Access: You have the right to request a copy of the Personal Data nakbon holds about you, together with information about how it is being used and with whom it has been shared.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete Personal Data held by nakbon. You may update basic contact details directly within your account settings without submitting a formal request.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your Personal Data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where the data has been unlawfully processed. This right is subject to legal retention obligations — for example, KYC records must be retained for a minimum of five years and cannot be deleted on request during that period.
• Right to Restriction of Processing: In certain circumstances — such as where you contest the accuracy of data or have objected to processing — you may request that nakbon restrict further processing of your Personal Data pending resolution.
• Right to Data Portability: Where processing is based on your consent or on contract performance, you have the right to receive the Personal Data you have provided to nakbon in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing based on nakbon's legitimate interests. nakbon will cease that processing unless we can demonstrate compelling legitimate grounds that override your rights, or unless the processing is necessary for the establishment, exercise, or defense of legal claims.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., for marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

The nakbon platform is strictly intended for adults aged 21 and over. We do not knowingly collect Personal Data from any individual under the age of 21. If nakbon becomes aware that a Member is under 21 years of age, their account will be immediately suspended, all associated data will be flagged for deletion, and any deposited funds will be returned to the original payment source.

If you are a parent or guardian and believe that a person under 21 in your care has registered an account on nakbon, please contact us immediately at [email protected] with details of the account. We will investigate and take appropriate action without undue delay.

The nakbon platform may contain references to third-party services — such as game content providers (Pragmatic Play, Evolution Gaming, Spribe) or payment processors (BCA, BRI, OVO, DANA) — in the context of describing available features. Where any interaction with a third-party service takes place, that service operates under its own privacy policy and data-processing practices, for which nakbon accepts no responsibility.

nakbon encourages Members to review the privacy policies of any third-party service they interact with in connection with their gaming activity, particularly the terms governing their chosen Indonesian bank or e-wallet provider.

nakbon operates as an internationally licensed platform. Some of the third-party processors we engage — including KYC verification providers, fraud-detection services, and game content studios — may process data in jurisdictions outside Indonesia. In all such cases, nakbon ensures that appropriate safeguards are in place before any cross-border transfer of Personal Data occurs.

Safeguards for international transfers include:

• Binding contractual clauses in all data-processing agreements with Third-Party Processors, requiring them to maintain data protection standards equivalent to those applied by nakbon.
• Transfers only to processors operating in jurisdictions that maintain adequate data protection frameworks, as assessed at the time of contracting.
• Regular review of processor compliance as part of nakbon's ongoing vendor management program.

nakbon reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or our licensing obligations. The "Last Updated" date at the top of this page will be revised accordingly whenever a material change is made.

Where changes are material — meaning they significantly affect how we collect, use, or share your Personal Data — nakbon will provide at least 7 days' advance notice by posting a prominent notice on the platform. For non-material amendments, the updated policy will be published with a revised date and takes effect immediately.

Your continued use of the nakbon platform after the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. If you do not agree to the updated policy, please cease using the platform and contact [email protected] to arrange account closure.

If you have any questions about this Privacy Policy, wish to exercise your data subject rights, or have a complaint about nakbon's data processing practices, please contact our support team:

If you are unsatisfied with nakbon's response to a privacy complaint, you have the right to escalate the matter to the supervisory authority of our licensing jurisdiction. nakbon will cooperate fully with any such regulatory inquiry.