Privacy Policy

1. Introduction

ns2121 ("we", "us", "our") operates the online gaming platform accessible at ns2121.cam and is committed to protecting the privacy and security of every Member's personal information. This Privacy Policy sets out, in transparent terms, what personal data we collect from Members and visitors, the purposes for which that data is processed, the legal bases on which we rely, how long we retain data, with whom we share it, and the rights available to you as a data subject.

ns2121 serves primarily the Indonesian market, and our data handling practices take into account the protections afforded to individuals under applicable Indonesian data protection legislation, including Law No. 27 of 2022 on Personal Data Protection (Undang-Undang Perlindungan Data Pribadi, or UU PDP), as well as internationally recognized privacy principles consistent with those set out in the European Union's General Data Protection Regulation (GDPR), which we adopt as a best-practice benchmark for cross-border data standards.

This Privacy Policy should be read alongside our Terms & Conditions, which govern your overall use of the ns2121 platform. Capitalized terms used but not defined here carry the meanings assigned to them in the Terms & Conditions.

2. Definitions

• "Personal Data" — any information that relates to an identified or identifiable natural person, including name, identification number, location data, online identifiers, or any combination of factors specific to that person's physical, economic, or digital identity.
• "Processing" — any operation performed on Personal Data, whether automated or manual, including collection, recording, storage, alteration, retrieval, use, disclosure, erasure, or destruction.
• "Data Controller" — the entity that determines the purposes and means of processing Personal Data; in this context, ns2121.
• "Data Processor" — a third-party entity that processes Personal Data on behalf of ns2121 under a contractual arrangement (e.g., payment processors, KYC verification providers).
• "Member" — a natural person who has registered a verified Account on ns2121.
• "Visitor" — any person who accesses ns2121.cam without registering or logging in to an Account.
• "Cookies" — small text files placed on a user's device by a website to store session state, preferences, and tracking information.
• "KYC" — Know Your Customer identity and age-verification process.
• "Special Category Data" — sensitive Personal Data including information relating to health, biometric data, racial or ethnic origin, or financial history, which warrants heightened protection.

3. Data We Collect

ns2121 collects the following categories of Personal Data from Members and, to a limited extent, from Visitors:

ns2121 does not intentionally collect Special Category Data. Where health-related information is disclosed voluntarily (for example, in the context of a responsible gaming self-exclusion request), it is processed solely for the purpose of delivering that protective service and is not shared or used for any commercial purpose.

4. How We Collect Your Data

4.1 Directly from You

The majority of Personal Data we hold is provided directly by you during account registration, the KYC verification process, deposit and withdrawal requests, completion of promotional opt-in forms, customer support interactions, and voluntary updates to your account profile.

4.2 Automatically Through Platform Use

When you access ns2121.cam, our servers automatically record certain Technical Data including your IP address, device identifiers, and browsing behaviour within the platform. This data is collected via server logs, cookies, and similar tracking technologies described in Section 11.

4.3 From Third-Party Service Providers

ns2121 may receive supplementary data from third-party service providers engaged to assist with identity verification, fraud detection, and payment processing. This includes identity-check scores from KYC providers and risk-flag notifications from payment gateway partners. All third-party providers are contractually required to handle data in compliance with applicable privacy law.

4.4 Publicly Available Sources

In limited circumstances, for the purpose of fraud prevention and AML compliance, ns2121 may cross-reference Personal Data against publicly available databases, government records, or industry watchlists.

5. Purpose of Processing

ns2121 processes Personal Data only for specific, explicit, and legitimate purposes. The primary purposes are:

• Account Administration: Creating, maintaining, and securing your Member Account, including password resets and account recovery.
• Identity & Age Verification: Confirming that all Members are natural persons aged 21 or over, in compliance with our licensing obligations and responsible gaming commitments.
• Payment Processing: Facilitating deposits via BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, and other approved methods, and processing withdrawal requests to verified accounts.
• Gaming Services Delivery: Providing access to casino games, sports betting markets, togel (Indonesia's traditional numbers lottery) products, and live dealer tables, including personalized game recommendations.
• Fraud Prevention & Security: Detecting and preventing unauthorized account access, duplicate account creation, bonus abuse, collusion, and other forms of platform misuse.
• AML & Regulatory Compliance: Meeting anti-money laundering, counter-terrorist financing, and reporting obligations imposed by our licensing authority.
• Responsible Gaming: Monitoring gameplay patterns to identify potential problem gambling behaviours, applying requested restrictions (deposit limits, self-exclusion), and providing support resources.
• Customer Support: Responding to inquiries, resolving disputes, and maintaining records of support interactions.
• Marketing & Promotions: Sending promotional communications, bonus offers, and platform updates to Members who have opted in to marketing. You may opt out at any time via account settings or by contacting support.
• Platform Improvement: Analysing aggregated, anonymized usage data to improve platform performance, game selection, and user experience.
• Legal Compliance: Complying with court orders, regulatory investigations, and lawful requests from competent authorities.

6. Legal Basis for Processing

ns2121 processes Personal Data on the following legal bases:

• Contractual Necessity: Processing required to perform the contract between ns2121 and the Member — including account registration, payment processing, and game delivery — is carried out on the basis that it is necessary for the performance of that contract.
• Legal Obligation: Processing necessary to comply with applicable legal requirements, including KYC verification, AML reporting, age verification, and responses to lawful authority requests.
• Legitimate Interests: Processing carried out in pursuit of ns2121's legitimate business interests, including fraud prevention, platform security, and analytics — provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: Where ns2121 relies on your consent — primarily for direct marketing communications — you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
• Vital Interests: In exceptional circumstances, ns2121 may process Personal Data where necessary to protect the vital interests of a Member, for example in the context of a serious responsible gaming intervention.

7. Data Sharing & Disclosure

ns2121 does not sell, rent, or trade your Personal Data to third parties for their own commercial purposes. We may share your data only in the following circumstances and only to the extent strictly necessary:

7.1 Payment Service Providers

To facilitate deposits and withdrawals, we share relevant financial and identity data with payment processors and banking partners including BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata, and e-wallet operators (OVO, DANA, GoPay, ShopeePay, LinkAja). These providers are authorized to use your data solely to execute the requested transaction.

7.2 KYC & Identity Verification Providers

Identity documents and biometric selfie data submitted during KYC verification are shared with our contracted third-party verification provider for the sole purpose of confirming identity and age. Verification providers are bound by strict data processing agreements and are not permitted to retain or repurpose your documents beyond the verification workflow.

7.3 Game Content Providers

Certain aggregated or session-level gameplay data may be shared with licensed game studios — including Pragmatic Play, Evolution Gaming, Microgaming, and NetEnt — to the extent required to deliver their games, resolve technical disputes, and maintain game integrity. Personal identity data is not shared with game studios beyond what is strictly required for session authentication.

7.4 Fraud Prevention & Security Partners

To protect the integrity of the platform, ns2121 may share Technical Data and transaction patterns with fraud-detection service providers. These partners analyze data to identify risk signals and return a risk score or flag; they do not receive unnecessary Personal Data and are contractually bound to strict confidentiality.

7.5 Regulatory & Law Enforcement Authorities

ns2121 will disclose Personal Data to competent regulatory authorities, law enforcement agencies, or courts where required to do so by applicable law, valid legal process, or a lawful order. We will notify affected Members of such disclosures where we are legally permitted to do so.

7.6 Corporate Transactions

In the event of a merger, acquisition, restructuring, or sale of all or substantially all of ns2121's assets, Personal Data may be transferred to the acquiring entity. You will be notified of any such transfer and any material change in privacy practices at least 30 days in advance, and you will retain the right to close your Account before the transfer takes effect.

8. International Data Transfers

ns2121's primary server infrastructure is located within data centres that meet internationally recognized security standards (ISO/IEC 27001 certified). Some of our third-party service providers — including KYC verification partners and fraud-detection vendors — may process Personal Data in jurisdictions outside Indonesia.

Where Personal Data is transferred internationally, ns2121 ensures that appropriate safeguards are in place, including:

• Data processing agreements incorporating standard contractual clauses that obligate the recipient to provide a level of data protection equivalent to Indonesian and international standards.
• Transfer only to jurisdictions assessed as providing an adequate level of data protection, or to providers who have adopted recognized certification frameworks.
• Technical safeguards including end-to-end encryption of data in transit and at rest.

You may request details of the specific safeguards applied to any international transfer of your Personal Data by contacting us at the address set out in Section 16.

9. Data Retention

ns2121 retains Personal Data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. Our standard retention periods are as follows:

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymized so that it can no longer be linked to any individual. Anonymized, aggregated data may be retained indefinitely for statistical and analytical purposes.

10. Data Security

ns2121 implements a multi-layered security architecture designed to protect Personal Data against unauthorized access, accidental loss, destruction, or disclosure. Our key security measures include:

• SSL/TLS Encryption: All data transmitted between your device and ns2121's servers is encrypted using industry-standard TLS 1.3 protocols. Our platform carries an extended-validation SSL certificate, visible as the padlock icon in your browser address bar.
• Encryption at Rest: Sensitive Personal Data stored in our databases — including identity documents and financial account details — is encrypted at rest using AES-256 encryption.
• Access Controls: Access to Personal Data is restricted on a strict need-to-know basis. All staff with data access privileges undergo background screening and are bound by confidentiality obligations. Access logs are audited regularly.
• Two-Factor Authentication (2FA): Members are strongly encouraged to enable 2FA on their Accounts. Our internal systems also require 2FA for all administrative access.
• Penetration Testing: ns2121 engages independent cybersecurity firms to conduct regular penetration tests and vulnerability assessments of our platform infrastructure.
• Incident Response: ns2121 maintains a documented data breach response plan. In the event of a breach affecting your Personal Data, we will notify you and relevant authorities within the timeframes required by applicable law — in no case later than 72 hours after becoming aware of the breach where legally required.

While ns2121 takes all reasonable precautions, no system is entirely immune to security risks. You are responsible for maintaining the security of your own Account credentials. Please report any suspected security incident to [email protected] immediately.

11. Cookies & Tracking Technologies

ns2121 uses cookies and similar tracking technologies to operate the platform efficiently, maintain session state, prevent fraud, and analyze usage patterns. The categories of cookies we deploy are as follows:

11.1 Strictly Necessary Cookies

These cookies are essential for the platform to function. They enable core features such as user authentication, session management, security token validation, and fraud detection. These cookies cannot be disabled without impairing platform functionality. No consent is required for strictly necessary cookies.

11.2 Performance & Analytics Cookies

These cookies collect anonymized information about how Visitors and Members interact with ns2121 — including pages visited, time spent on each page, error messages encountered, and navigation paths. This data helps us identify and fix usability issues. Analytics data is aggregated and does not identify individuals.

11.3 Functional Cookies

Functional cookies remember your preferences — such as your preferred game category, display language setting, and notification preferences — so that your experience is personalized across sessions. Disabling functional cookies may result in a less tailored experience.

11.4 Marketing & Targeting Cookies

Where you have consented, marketing cookies are used to deliver relevant promotional content and to measure the effectiveness of our campaigns. These cookies may be set by ns2121 or by third-party advertising partners. You may withdraw consent for marketing cookies at any time by updating your preferences in account settings.

11.5 Managing Cookies

Most web browsers allow you to control cookies through the browser settings. Disabling certain cookies may affect platform functionality. For detailed guidance on managing cookies in your specific browser, refer to your browser's official help documentation. Note that deleting cookies does not delete your Account or Personal Data held on our servers.

12. Your Data Rights

As a data subject, you have the following rights in relation to Personal Data that ns2121 holds about you. To exercise any of these rights, please submit a written request to [email protected] with the subject line "Data Rights Request". ns2121 will respond within 30 days of receiving a verifiable request.

• Right of Access: You may request a copy of all Personal Data that ns2121 holds about you, along with information about how it is being used.
• Right to Rectification: If any Personal Data we hold is inaccurate or incomplete, you have the right to request that we correct or complete it without undue delay.
• Right to Erasure ("Right to be Forgotten"): You may request the deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where processing was unlawful. Note that this right is subject to overriding legal obligations — for example, we are required to retain KYC and financial records for regulatory purposes even after account closure.
• Right to Restriction of Processing: You may request that we temporarily halt processing of your data while a rectification or objection request is under review.
• Right to Data Portability: Where processing is based on consent or contractual necessity, you may request a copy of your Personal Data in a structured, commonly used, machine-readable format (e.g., CSV or JSON) for transfer to another service provider.
• Right to Object: You have the right to object to processing carried out on the basis of legitimate interests or for direct marketing purposes. Objections to direct marketing will be honored immediately. Objections to legitimate-interest processing will be assessed on a case-by-case basis.
• Rights Related to Automated Decision-Making: ns2121 may use automated systems for fraud detection and responsible gaming monitoring. You have the right to request human review of any decision that significantly affects you and that was made solely by automated means.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

ns2121 will not charge a fee for processing a data rights request unless the request is manifestly unfounded or excessive, in which case we may charge a reasonable administrative fee or decline to act, with written reasons provided.

13. Minors & Age Restriction

ns2121 is strictly an adults-only platform. Persons under the age of 21 are prohibited from registering an Account or using any of our gaming services. ns2121 does not knowingly collect Personal Data from individuals under 21 years of age. All Members are required to complete KYC age verification before full Account functionality is unlocked.

If ns2121 discovers that Personal Data has been collected from an individual who is under 21, the Account will be immediately suspended, all transactions reviewed, and the data deleted or anonymized to the extent permitted by law. Where funds have been deposited by an underage individual, those funds will be returned to the source payment method after deducting any processing costs, without exception.

If you believe that a minor has registered an Account on ns2121, please notify us immediately at [email protected] with the subject line "Underage Account Report". We take all such reports seriously and will investigate promptly.

14. Third-Party Links & Services

The ns2121 platform may contain references to third-party game studios, payment providers, and service partners. This Privacy Policy applies solely to data processed by ns2121. Third-party services — such as game studios Pragmatic Play, Evolution Gaming, and Microgaming — operate under their own independent privacy policies, over which ns2121 has no control. We encourage you to review the privacy policies of any third-party service you interact with directly.

ns2121 is not responsible for the privacy practices or content of any third-party website or service, even where ns2121's platform embeds or interfaces with that service. Your interactions with third-party payment providers such as BCA, BRI, BNI, Mandiri, OVO, and DANA are governed by those providers' own terms and privacy notices.

15. Policy Amendments

ns2121 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory guidance. Material amendments will be communicated to registered Members via email notification at least seven (7) days before the revised policy takes effect.

The "Last Updated" date at the top of this page will always reflect the most recent revision. We encourage you to review this Privacy Policy periodically. Your continued use of the ns2121 platform following the effective date of any amendment constitutes your acceptance of the revised policy. If you do not agree to the amended terms, you should cease using the platform and may request Account closure in accordance with Section 13.1 of the Terms & Conditions.

The current version of this Privacy Policy is always accessible at ns2121.cam/privacy-policy.

16. Contact & Complaints

If you have any questions, concerns, or requests regarding this Privacy Policy or the way ns2121 handles your Personal Data, please contact our Data Protection team using the details below. All communications must be submitted in English or Indonesian to ensure accurate processing.

• General Privacy Enquiries: [email protected] (subject line: "Privacy Enquiry")
• Data Rights Requests: [email protected] (subject line: "Data Rights Request")
• Data Breach Reports: [email protected] (subject line: "Security / Data Breach")
• Underage Account Reports: [email protected] (subject line: "Underage Account Report")
• Response Time: ns2121 aims to acknowledge all privacy-related correspondence within 24 hours and to provide a substantive response within 30 calendar days.

If you are dissatisfied with our response to a privacy complaint, you have the right to escalate your complaint to the relevant data protection supervisory authority in your jurisdiction. For Members based in Indonesia, the competent authority is the Ministry of Communication and Digital Affairs (Kementerian Komunikasi dan Digital Republik Indonesia).