Privacy Policy

1. Introduction and Scope

This Privacy Policy governs the collection, processing, storage, and protection of personal data by nasa4 ("we", "us", "our") in connection with the online casino and sports betting services we provide through our platform at https://nasa4.cam and any associated mobile applications. This policy applies to all users ("you", "your") who access, register for, or use nasa4's services, regardless of whether you are a registered member, a visitor browsing our website, or a prospective customer evaluating our offerings.

nasa4 operates in compliance with applicable data protection regulations, including principles derived from the General Data Protection Regulation (GDPR) where relevant, and Indonesian privacy law frameworks. We implement industry-standard security measures and follow best practices to ensure your personal information remains confidential and secure throughout its lifecycle within our systems. This Privacy Policy should be read in conjunction with our Terms & Conditions, which govern your use of nasa4's services and establish the contractual relationship between you and nasa4.

2. Information We Collect

nasa4 collects various categories of personal information necessary to provide our gaming services, comply with legal obligations, prevent fraud, and enhance user experience. The types of data we collect include:

2.1 Registration and Account Information

When you create an account with nasa4, we collect personal identification information including your full legal name, date of birth, residential address, email address, phone number, and preferred username. This information is essential for establishing your account, verifying your identity, ensuring you meet age requirements (21+ for Indonesian residents), and communicating with you regarding your account and our services.

2.2 Identity Verification and KYC Documentation

To comply with anti-money laundering (AML) regulations and Know Your Customer (KYC) requirements, nasa4 collects government-issued identification documents such as Indonesian national identity cards (KTP), passports, or driver's licenses. We also collect proof of address documents (utility bills, bank statements) and proof of payment method ownership. These documents may include sensitive information such as identification numbers, photographs, and financial account details. All KYC documentation is encrypted, stored securely, and accessed only by authorized personnel for verification purposes.

2.3 Financial and Transaction Data

nasa4 collects financial information necessary to process deposits and withdrawals, including bank account numbers, bank names (BCA, BRI, BNI, Mandiri), e-wallet identifiers (OVO, DANA, GoPay), payment card details (where applicable), and transaction histories. We maintain comprehensive records of all financial transactions including deposit amounts, withdrawal requests, payment methods used, transaction timestamps, and transaction statuses. This data is essential for processing payments, preventing fraud, complying with financial regulations, and resolving disputes.

2.4 Gameplay and Betting Activity

We automatically collect detailed records of your gaming activity on nasa4, including games played, bets placed, wagering amounts, game outcomes, winnings and losses, bonus usage, sports betting selections, live casino interactions, and timestamps of all gaming sessions. This data enables us to provide personalized gaming experiences, detect irregular betting patterns that may indicate problem gambling or fraud, calculate accurate statistics and leaderboards, process bonus wagering requirements, and comply with gaming regulations.

2.5 Technical and Device Information

When you access nasa4, we automatically collect technical data about your device and browsing session, including IP address, device type and model, operating system, browser type and version, screen resolution, device identifiers (UDID, IMEI), mobile network information, and geolocation data (where permitted). We also collect cookies, web beacons, and similar tracking technologies that record your navigation patterns, page views, session duration, referral sources, and interactions with our platform. This technical data helps us optimize platform performance, detect fraudulent activity, ensure security, and improve user experience.

2.6 Communications and Support Interactions

nasa4 retains records of all communications between you and our customer support team, including live chat transcripts, email correspondence, phone call recordings (where legally permitted and with notice), support ticket histories, and any feedback or complaints you submit. We collect this information to provide effective customer service, resolve disputes, improve our services, and maintain quality assurance standards.

2.7 Marketing Preferences and Consent Records

We maintain records of your marketing consent preferences, including whether you have opted in or out of promotional emails, SMS notifications, push notifications, and targeted advertising. We also track your interactions with our marketing campaigns, such as email open rates, click-through rates, and promotional code usage, to measure campaign effectiveness and deliver relevant offers.

3. How We Use Your Information

nasa4 processes your personal data for the following legitimate purposes, each grounded in contractual necessity, legal compliance, or our legitimate business interests:

3.1 Service Delivery and Account Management

We use your information to create and maintain your gaming account, authenticate your identity during login, process your deposits and withdrawals, enable you to place bets and play games, calculate and credit your winnings, apply bonus promotions and loyalty rewards, maintain accurate account balances, and provide customer support. This processing is necessary to fulfill our contractual obligations under our Terms & Conditions.

3.2 Legal and Regulatory Compliance

nasa4 processes personal data to comply with legal obligations including age verification (ensuring all players are 21+), KYC and AML requirements, tax reporting obligations, gaming license compliance, responsible gaming regulations, and responses to lawful requests from regulatory authorities or law enforcement agencies. We are legally required to maintain certain records for specified retention periods as mandated by gaming regulations and financial crime prevention laws.

3.3 Fraud Prevention and Security

We analyze your data to detect and prevent fraudulent activity, money laundering, bonus abuse, account hacking, payment fraud, identity theft, collusion between players, use of automated betting software, and other security threats. Our fraud detection systems use sophisticated algorithms and machine learning models to identify suspicious patterns and protect both nasa4 and our legitimate players from criminal activity.

3.4 Platform Optimization and Analytics

nasa4 uses aggregated and anonymized data to analyze platform performance, identify technical issues, optimize game loading times, improve user interface design, understand player preferences and behaviors, measure conversion rates, and develop new features and services. This processing supports our legitimate interest in continuously improving our platform and delivering superior user experiences.

3.5 Marketing and Communications

With your consent, we use your contact information and gaming preferences to send promotional emails featuring bonuses and special offers, SMS notifications about time-sensitive promotions, push notifications through our mobile app, personalized game recommendations, and targeted advertising on third-party platforms. You may withdraw your marketing consent at any time through your account settings or by contacting customer support, without affecting your ability to use nasa4's core gaming services.

3.6 Responsible Gaming and Player Protection

We monitor gameplay patterns to identify potential signs of problem gambling, such as rapidly increasing bet sizes, excessive session durations, chasing losses, or frequent deposit attempts after balance depletion. When concerning patterns emerge, we may proactively reach out to offer responsible gaming resources, suggest deposit or loss limits, recommend cooling-off periods, or implement mandatory breaks. This processing serves our legitimate interest in promoting player welfare and complying with responsible gaming obligations.

4. Data Sharing and Disclosure

nasa4 does not sell, rent, or trade your personal information to third parties for their marketing purposes. However, we may share your data with the following categories of recipients under strict confidentiality obligations:

4.1 Payment Service Providers

We share necessary financial information with banks (BCA, BRI, BNI, Mandiri), e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja), payment gateways, and payment processors to facilitate deposits, process withdrawals, verify payment methods, and prevent payment fraud. These third parties access only the minimum data required to complete transactions and are contractually obligated to maintain strict data security standards.

4.2 Game Providers and Platform Partners

Your gameplay data is shared with our game providers (Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Playtech, Ezugi, Spribe, Habanero) to deliver game content, verify game outcomes, process bets, calculate RTP statistics, and investigate suspected cheating or technical malfunctions. Game providers operate under their own privacy policies and are independently responsible for protecting the data they process.

4.3 Identity Verification Services

We engage specialized third-party identity verification services to authenticate the KYC documents you submit, cross-reference your information against public databases and watchlists, verify that you are not underage or self-excluded, and detect forged or fraudulent identification documents. These verification partners process your data solely for verification purposes and do not retain it longer than necessary.

4.4 Regulatory Authorities and Legal Compliance

nasa4 may disclose your personal information to gaming regulators, financial crime enforcement agencies, tax authorities, and law enforcement bodies when required by law, in response to valid legal processes (subpoenas, court orders), to investigate suspected criminal activity, to enforce our Terms & Conditions, or to protect the rights, property, and safety of nasa4, our players, or the public. We will notify you of such disclosures where legally permitted.

4.5 Professional Advisors and Service Providers

We may share limited data with legal counsel, accountants, auditors, IT security consultants, cloud hosting providers, customer support platforms, email service providers, and analytics tools that assist us in operating nasa4's business. All service providers are contractually bound to confidentiality obligations and may only process your data according to our instructions and applicable data protection laws.

4.6 Business Transfers

In the event that nasa4 undergoes a merger, acquisition, asset sale, bankruptcy, or other business restructuring, your personal information may be transferred to the acquiring entity or successor organization. We will notify you via email and prominent website notice before your data becomes subject to a different privacy policy, and you will have the opportunity to delete your account if you do not wish to continue under the new ownership.

5. Data Security Measures

nasa4 employs comprehensive technical, organizational, and administrative safeguards to protect your personal information from unauthorized access, disclosure, alteration, or destruction:

• Encryption: All data transmissions between your device and our servers are protected using industry-standard 256-bit SSL/TLS encryption. Sensitive data stored in our databases, including passwords, financial information, and KYC documents, is encrypted at rest using AES-256 encryption algorithms.
• Access Controls: Personal data is accessible only to authorized nasa4 employees and contractors who require access to perform their job functions. We implement role-based access controls, multi-factor authentication for administrative systems, and regular access reviews to ensure the principle of least privilege.
• Network Security: Our infrastructure is protected by enterprise-grade firewalls, intrusion detection and prevention systems, DDoS mitigation services, and regular vulnerability scanning. We conduct penetration testing and security audits by independent third parties to identify and remediate potential weaknesses.
• Secure Development: Our development team follows secure coding practices, conducts code reviews, and implements input validation and output encoding to prevent common vulnerabilities such as SQL injection, cross-site scripting, and cross-site request forgery attacks.
• Data Segregation: Player funds are held in segregated bank accounts separate from nasa4's operational funds, ensuring your deposits remain protected even in the unlikely event of business insolvency. Financial data is stored in isolated database environments with additional security controls.
• Employee Training: All nasa4 staff members with access to personal data undergo mandatory data protection and security awareness training, including phishing prevention, password hygiene, social engineering recognition, and incident response procedures.
• Incident Response: We maintain a comprehensive data breach response plan, including procedures for rapid detection, containment, investigation, notification to affected individuals and regulators where required, and remediation to prevent recurrence.

While we implement robust security measures, no system can guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and should immediately notify us if you suspect any unauthorized access to your account.

6. Data Retention and Deletion

nasa4 retains your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements. Specific retention periods vary by data category:

Data Category	Retention Period	Legal Basis
Account Information	Duration of account + 7 years	Gaming license compliance, AML regulations
KYC Documents	Duration of account + 7 years	AML/KYC legal requirements
Transaction Records	Duration of account + 7 years	Financial regulations, tax compliance
Gameplay History	Duration of account + 5 years	Gaming regulations, dispute resolution
Support Communications	Duration of account + 3 years	Legal claims defense, service improvement
Marketing Consent Records	Duration of consent + 3 years	Consent documentation requirements

After the applicable retention period expires, we securely delete or anonymize your personal information using industry-standard data destruction methods. You may request deletion of your account at any time by contacting [email protected]; however, we may be legally required to retain certain data even after account closure.

7. Your Privacy Rights

Subject to applicable law, you have the following rights regarding your personal data:

• Right of Access: You may request a copy of the personal information we hold about you, including details about how we process it.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data. You can update most information directly through your account settings.
• Right to Erasure: You may request deletion of your personal data, subject to legal retention obligations and legitimate business needs.
• Right to Restrict Processing: You may request that we limit how we use your data in certain circumstances, such as during dispute resolution.
• Right to Data Portability: You may request a machine-readable copy of your data to transfer to another service provider.
• Right to Object: You may object to processing based on legitimate interests or direct marketing at any time.
• Right to Withdraw Consent: Where processing is based on consent (e.g., marketing), you may withdraw consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact our Data Protection Officer at [email protected]. We will respond to your request within 30 days and may require identity verification before processing your request. If you are dissatisfied with our response, you have the right to lodge a complaint with your local data protection authority.

8. Cookies and Tracking Technologies

nasa4 uses cookies, web beacons, pixel tags, and similar technologies to enhance user experience, analyze platform performance, and deliver personalized content. Cookies are small text files stored on your device that enable us to recognize your browser, remember your preferences, maintain your login session, and track your interactions with our platform. We use the following categories of cookies:

• Essential Cookies: Necessary for core platform functionality, including authentication, security, load balancing, and fraud prevention. These cannot be disabled without impairing platform functionality.
• Performance Cookies: Collect anonymous data about how users interact with nasa4, including page views, navigation paths, error messages, and load times, enabling us to optimize platform performance.
• Functionality Cookies: Remember your preferences such as language selection, display settings, and game favorites to provide a personalized experience.
• Advertising Cookies: Track your browsing behavior across nasa4 and third-party websites to deliver targeted advertising based on your interests (where consent is provided).

You can manage cookie preferences through your browser settings; however, disabling essential cookies may prevent you from using certain features of nasa4. For more information about cookies and how to control them, visit www.aboutcookies.org or www.allaboutcookies.org.

9. Third-Party Links and Services

nasa4's platform may contain links to third-party websites, services, or content not operated by us, including game provider websites, payment service landing pages, and social media platforms. This Privacy Policy does not apply to third-party sites, and we are not responsible for their privacy practices or content. We encourage you to review the privacy policies of any third-party services you access through nasa4. Our inclusion of third-party links does not imply endorsement of their privacy practices.

10. Children's Privacy

nasa4's services are strictly intended for adults aged 21 and older (or the legal gambling age in your jurisdiction, whichever is higher). We do not knowingly collect personal information from individuals under 21 years of age. If we discover that we have inadvertently collected data from a minor, we will immediately delete such information and close the associated account. Parents or guardians who believe their child has provided personal information to nasa4 should contact us immediately at [email protected] so we can take appropriate action.

11. International Data Transfers

nasa4 operates internationally, and your personal information may be transferred to, stored in, or processed in countries outside Indonesia where our servers, service providers, or business partners are located. These countries may have data protection laws different from those in Indonesia. When we transfer your data internationally, we implement appropriate safeguards such as standard contractual clauses, adequacy decisions, or binding corporate rules to ensure your data receives equivalent protection. By using nasa4's services, you consent to the international transfer of your data as described in this Privacy Policy.

12. Changes to This Privacy Policy

nasa4 reserves the right to modify, update, or replace this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. Material changes will be communicated through email notification to your registered email address and prominent display on our website. The "Last Updated" date at the top of this policy indicates when it was most recently revised. Your continued use of nasa4's services following notice of changes constitutes acceptance of the updated Privacy Policy. We encourage you to review this policy periodically to stay informed about how we protect your information.

13. Contact Information and Data Protection Officer

If you have questions, concerns, or complaints about this Privacy Policy or nasa4's data practices, please contact our Data Protection Officer:

• Email: [email protected]
• Customer Support: [email protected]
• Live Chat: Available 24/7 through our website

We will investigate your inquiry and respond within 30 days. If you are not satisfied with our response, you may escalate your concern to your local data protection supervisory authority.