Privacy Policy

Definitions

In this Privacy Policy, the following terms carry the meanings set out below:

• "Platform" — the nk026 website at https://nk026.cam and any associated mobile-optimized interfaces.
• "We," "Us," "Our," "nk026" — the internationally operated entity that owns and operates the Platform.
• "You," "Player," "User" — any natural person who visits, registers on, or transacts through the Platform.
• "Personal Data" — any information that identifies or could reasonably be used to identify a living individual, including name, contact details, device identifiers, and financial account information.
• "Processing" — any operation performed on Personal Data, including collection, storage, use, disclosure, alteration, or deletion.
• "KYC" — Know Your Customer: the identity verification process required before withdrawals are processed.
• "AML" — Anti-Money Laundering: the regulatory framework that requires us to retain certain financial records and report suspicious activity.
• "Cookies" — small text files placed on your device by the Platform to maintain session state and collect analytics data.
• "Third-Party Processor" — any external service provider that processes Personal Data on our behalf under a written data processing agreement.

Data Controller

nk026 acts as the data controller for all Personal Data collected through the Platform. As data controller, nk026 determines the purposes for which Personal Data is processed and the means by which that processing takes place.

Where nk026 engages Third-Party Processors — such as payment gateway providers, KYC verification partners, or cloud infrastructure providers — those parties act as data processors under contractual terms that prohibit them from using your data for any purpose beyond the specific service they provide to nk026.

Data We Collect

nk026 collects Personal Data across the following categories, depending on how you interact with the Platform:

We do not collect special category data (such as health, religion, or biometric data) unless you voluntarily provide it in the context of a responsible gaming assessment, in which case it is processed solely for your protection and never shared with third parties for commercial purposes.

How We Collect Data

nk026 collects Personal Data through the following channels:

• Direct submission: Information you provide when completing the registration form, submitting KYC documents, making a deposit or withdrawal, or contacting our support team.
• Automated technical collection: Server logs, session cookies, and analytics tools automatically record Technical Data and Usage Data each time you access the Platform.
• Third-party verification services: Our KYC partners may return enriched identity data (such as document authenticity scores) that supplements the documents you submit directly.
• Payment providers: When you initiate a deposit or withdrawal via a local Indonesian bank or e-wallet, our payment gateway returns transaction confirmation data including masked account identifiers.

Purposes & Legal Basis for Processing

nk026 processes Personal Data only where a lawful basis exists. The table below sets out our primary processing purposes and the corresponding legal basis for each:

Data Sharing

nk026 does not sell, rent, or trade your Personal Data. We share data only in the following limited circumstances:

• Payment processors: Indonesian bank transfer facilitators and e-wallet gateway providers (including those supporting OVO, DANA, GoPay, ShopeePay, and LinkAja) receive the minimum financial data required to execute your transaction. These providers are contractually prohibited from using your data for any other purpose.
• KYC and identity verification partners: Specialist third-party verification services receive the identity documents you submit in order to confirm your identity and age. Verification partners operate under strict data processing agreements and applicable data protection law.
• Cloud infrastructure and hosting providers: Our platform is hosted on access-restricted cloud infrastructure. Server providers have physical and logical access to encrypted data only as necessary to maintain uptime and security.
• Regulatory and law enforcement authorities: Where required by law, court order, or regulatory directive, nk026 will disclose Personal Data to the relevant authorities. We will notify you of such a disclosure where we are legally permitted to do so.
• Professional advisors: Legal counsel, auditors, and accountants may access limited Personal Data under binding confidentiality obligations in the course of their professional engagements with nk026.

International Data Transfers

As an internationally operated platform serving players primarily in Indonesia, nk026 may process and store Personal Data on servers located outside Indonesia. Where such international transfers occur, nk026 ensures that an adequate level of data protection is maintained through one or more of the following safeguards:

• Standard contractual clauses or equivalent data transfer agreements with the recipient entity.
• Transfer to jurisdictions that maintain internationally recognized data protection standards equivalent to or exceeding those applicable in Indonesia.
• Binding corporate rules or equivalent governance frameworks where the recipient is an affiliate of nk026.

You may request further information about the specific safeguards applied to any international transfer of your data by contacting our support team.

Data Retention

nk026 retains Personal Data for as long as necessary to fulfill the purposes for which it was collected, subject to mandatory minimum retention periods imposed by AML regulations and other applicable law. The following general retention schedule applies:

• Active account data: Retained for the lifetime of your account.
• Financial transaction records and KYC documentation: Retained for a minimum of 5 years following account closure, in accordance with AML compliance requirements.
• Support communications: Retained for 3 years from the date of the last interaction, or longer if required for an ongoing dispute or investigation.
• Technical and usage logs: Retained for 12 months on a rolling basis, after which they are aggregated and anonymized.
• Marketing consent records: Retained for the duration of your account and for 3 years following account closure as evidence of your consent status.

On expiry of the applicable retention period, personal identifiers are securely purged or irreversibly anonymized. Aggregated, non-identifiable statistical data may be retained indefinitely for platform analytics purposes.

Cookies & Tracking Technologies

nk026 uses the following categories of cookies and similar tracking technologies on the Platform:

• Strictly necessary cookies: Required for the Platform to function. These include session authentication tokens that keep you logged in and security cookies that prevent cross-site request forgery. These cannot be disabled without rendering the Platform non-functional.
• Analytics cookies: Used to understand aggregate user behavior — such as which pages are visited most frequently, how long sessions last, and what device types access the Platform. Analytics data is processed in aggregated, non-identifiable form. We use first-party analytics tooling; we do not send analytics data to third-party advertising networks.
• Preference cookies: Store your interface preferences (such as selected language or notification settings) across sessions to improve your experience.

nk026 does not use third-party advertising cookies, cross-site tracking pixels, or social media tracking widgets. You may manage or disable non-essential cookies through your browser settings; however, disabling strictly necessary cookies will prevent you from logging in to or using the Platform.

Security Measures

nk026 implements a multi-layered approach to data security. Our technical and organizational measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and our servers.
• Encryption at rest for databases containing Personal Data and financial records.
• Role-based access controls ensuring that only authorized personnel with a legitimate operational need can access Personal Data.
• Regular penetration testing and vulnerability assessments conducted by independent security specialists.
• Multi-factor authentication requirements for all internal system access by nk026 staff.
• Comprehensive audit logging of all access to and modifications of Personal Data, with logs retained for security review purposes.
• Incident response procedures designed to detect, contain, and notify relevant parties of any data breach within regulatory timeframes.

Children & Minors

The nk026 Platform is strictly for adults aged 21 years and over. We do not knowingly collect Personal Data from individuals under 21. If we become aware that a user under the age of 21 has provided us with Personal Data, we will immediately suspend the account, void any associated transactions in accordance with our Terms & Conditions, and securely delete the minor's Personal Data from our systems as promptly as regulatory obligations permit.

If you believe a minor has registered on the Platform, please notify us immediately at [email protected] so we can take immediate action.

Third-Party Links

The nk026 Platform does not include outbound links to external third-party websites as a matter of design policy. In the event that any informational content references an external resource, nk026 is not responsible for the privacy practices or content of those external sites. We encourage you to review the privacy policies of any third-party service you independently choose to access.

Your Rights

As a player on the nk026 Platform, you hold the following rights with respect to your Personal Data. To exercise any of these rights, submit a written request to [email protected] with the subject line "Privacy Rights Request" and your registered email address:

• Right of access: Obtain a copy of all Personal Data nk026 holds about you. Response target: 30 days.
• Right to rectification: Request correction of inaccurate or incomplete Personal Data. Response target: 14 business days.
• Right to erasure: Request deletion of Personal Data that is no longer required for the stated purpose, subject to mandatory AML retention obligations. Response target: 30 days.
• Right to restriction: Request that processing of your data be temporarily halted while a rectification or objection request is under review.
• Right to data portability: Receive your data in a structured, commonly used, machine-readable format (CSV or JSON).
• Right to object: Object to processing based on legitimate interests, including direct marketing. Marketing objections are actioned immediately.

nk026 will not charge a fee for handling privacy rights requests unless a request is manifestly unfounded or excessive, in which case a reasonable administrative fee may apply. We will notify you of any applicable fee before processing the request.

Marketing Preferences

nk026 sends promotional communications — including bonus offers, seasonal promotions, and platform updates — only to players who have opted in to marketing at the point of registration or subsequently updated their preferences to permit such communications.

You may withdraw your marketing consent and unsubscribe from all promotional communications at any time by:

• Updating your notification preferences in the Account Settings section of the Platform.
• Clicking the unsubscribe link included in any marketing email sent by nk026.
• Submitting a written unsubscribe request to [email protected].

Withdrawal of marketing consent does not affect transactional communications, which include deposit confirmations, withdrawal notifications, account security alerts, and KYC status updates. These are sent as a matter of platform operation and cannot be opted out of while your account remains active.

nk026 does not share your contact details with third-party marketers. All promotional communications originate exclusively from nk026 and relate solely to the nk026 platform and its features.

Policy Amendments

nk026 reserves the right to update this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, platform features, or our data processing practices. Material changes will be communicated to registered players via email to their registered address at least 14 days before the changes take effect, except where immediate amendments are required by law or to address an active security incident.

The "Last Updated" date at the top of this page will be revised on each update. Your continued use of the Platform after the effective date of any amendment constitutes your acknowledgment of the updated Privacy Policy. If you do not accept the amended policy, please close your account and request withdrawal of your real-money balance prior to the effective date.

Contact & Complaints

For any questions, concerns, or formal complaints relating to this Privacy Policy or nk026's data processing practices, please contact us through the following channel:

• Email: [email protected] — use the subject line "Privacy Complaint" or "Privacy Request" as appropriate.
• Live Chat: Available 24/7 via the chat widget on the Platform. For data-related matters, email is strongly preferred as it creates a written record.
• Response time: We target an initial response to all privacy-related correspondence within 5 business days and a final resolution within 30 days.

If you are not satisfied with our response to a privacy complaint, you have the right to escalate the matter to the relevant data protection supervisory authority in your jurisdiction or to pursue resolution through an independent dispute resolution body as described in our Terms & Conditions.