Data Protection • Your Rights • Transparency

Privacy Policy — napi68

At napi68, protecting the personal data of our members is a foundational obligation, not an afterthought. This Privacy Policy explains precisely what data we collect, why we collect it, how it is stored and used, and what rights you hold as a napi68 account holder. Please read this document carefully before registering.

Last updated: 1 January 2026  •  Applies to all napi68 account holders
Data Collected Only for Legitimate Purposes

napi68 collects only the personal data that is necessary to operate your account, verify your identity, process transactions in Indonesian Rupiah, and comply with applicable regulatory obligations. We do not collect data speculatively.

256-bit Encryption on All Data

All personal data transmitted between your device and napi68 is protected with 256-bit TLS encryption. Stored credentials are salted and hashed. No plaintext passwords are ever retained on napi68 servers.

We Do Not Sell Your Data

napi68 does not sell, rent, or trade your personal data to third parties for commercial or marketing purposes. Data is shared only with service providers who require it to deliver a specific function on our platform.

Your Rights Over Your Data

You have the right to access, correct, or request deletion of your personal data at any time. Submit a request via live chat or email and the napi68 data team will respond within 5 business days.

Cookies Used Transparently

napi68 uses strictly necessary and functional cookies to maintain your session and preferences. Analytics cookies are used in aggregate, anonymised form only. No cross-site tracking cookies are deployed.

Marketing Is Opt-In Only

napi68 only sends promotional communications to players who have explicitly opted in. You may withdraw consent at any time via your account settings or by contacting support. Opting out does not affect your account status.

Section 1

Introduction

1.1  This Privacy Policy is published by napi68 (referred to in this document as "napi68", "we", "us", or "our"), the operator of the online casino and sports betting platform accessible at napi68.pro.

1.2  napi68 serves players primarily located in Indonesia. We recognise that Indonesian players entrust us with sensitive personal and financial information when they register and transact on our platform. We take that trust seriously and have designed our data practices to be transparent, proportionate, and secure.

1.3  This Privacy Policy applies to all personal data collected from you when you visit napi68.pro, register an account, make a deposit or withdrawal, participate in games, contact customer support, or interact with our platform in any other way. It applies regardless of the device you use — mobile browser, desktop browser, or any other access method.

1.4  By registering an account with napi68, you acknowledge that you have read and understood this Privacy Policy and you consent to the processing of your personal data as described herein. If you do not agree with any part of this policy, you must not register an account or continue to use the platform.

Section 2

Definitions

The following definitions apply throughout this Privacy Policy:

Term Meaning
"Personal Data" Any information relating to an identified or identifiable natural person, including name, phone number, date of birth, financial account details, device identifiers, and usage data.
"Processing" Any operation performed on personal data, including collection, storage, retrieval, use, disclosure, erasure, and destruction.
"Data Controller" napi68, in its capacity as the entity that determines the purposes and means by which personal data is processed.
"Data Processor" A third party that processes personal data on napi68's behalf, such as a KYC verification provider or payment processor.
"You" / "Player" Any natural person who registers or uses a napi68 account, or who visits napi68.pro.
"KYC" Know Your Customer — the identity and age verification process conducted before processing a player's first withdrawal.
"Consent" A freely given, specific, informed, and unambiguous indication of your agreement to the processing of your personal data for a stated purpose.
Section 3

Data We Collect

3.1  napi68 collects the following categories of personal data, depending on how you interact with the platform:

3.1.1  Registration Data

Full legal name, Indonesian mobile phone number, date of birth, preferred username, and account password (stored in hashed form only — never in plaintext).

3.1.2  Identity Verification (KYC) Data

A photograph or scan of your Indonesian National Identity Card (KTP), a liveness selfie where requested, and any additional documentation required to satisfy verification under napi68's KYC programme.

3.1.3  Financial Data

Bank account details or e-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja) associated with your napi68 account for the purpose of processing deposits and withdrawals in Indonesian Rupiah (IDR). Payment card numbers, if used, are processed by our licensed payment processor and are not stored on napi68 servers.

3.1.4  Transaction Data

A complete history of deposits, withdrawals, bonus credits, wagers placed, game results, and account balance movements associated with your account.

3.1.5  Device & Technical Data

IP address, browser type and version, operating system, device type, screen resolution, referring URL, session duration, and pages visited on napi68.pro. This data is collected automatically via server logs and, where applicable, analytics tools.

3.1.6  Communications Data

Records of your communications with napi68 customer support, including live chat transcripts, email correspondence, and any information you voluntarily provide in support requests or complaints.

3.1.7  Marketing Preferences

Your opt-in or opt-out status regarding promotional emails, push notifications, and personalised offers from napi68.

Section 4

How We Collect Your Data

4.1  Directly from you — when you complete the registration form, submit KYC documents, make a deposit or withdrawal, contact support, or update your account preferences.

4.2  Automatically — through server logs and session tracking technology when you visit or navigate napi68.pro. Device and technical data is collected whenever your browser connects to our servers.

4.3  Via cookies and similar technologies — as described in Section 11 of this policy. You can manage cookie preferences through your browser settings, though disabling certain cookies may affect platform functionality.

4.4  From third-party service providers — napi68 may receive verification data from licensed KYC partners confirming the authenticity of identity documents, and may receive transaction status updates from payment processors such as BCA, BRI, BNI, Mandiri, and integrated e-wallet providers.

napi68 does not purchase personal data from data brokers or list providers. All data we hold about you originates from your own interactions with the platform or from the service providers directly involved in delivering napi68's services to you.
Section 5

Purposes of Processing

5.1  napi68 processes your personal data for the following specific purposes:

Purpose Detail
Account management Creating, maintaining, and securing your napi68 account; authenticating your login sessions; managing account preferences.
Identity verification Verifying your age (21+) and residency (Indonesia) as required before processing withdrawals and to satisfy our obligations under applicable licensing conditions.
Payment processing Facilitating deposits and withdrawals in IDR via BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata, OCBC NISP, OVO, DANA, GoPay, ShopeePay, and LinkAja.
Fraud prevention Detecting and preventing fraudulent account activity, unauthorised transactions, money laundering, and collusion. Monitoring for anomalous behaviour patterns.
Responsible gaming Enforcing deposit limits, loss limits, and self-exclusion requests; identifying at-risk behaviour and triggering appropriate interventions.
Customer support Responding to your queries, resolving disputes, processing complaints, and providing technical assistance.
Marketing communications Sending promotional offers, bonus notifications, and platform updates to players who have opted in. Never sent to opted-out players.
Platform improvement Analysing aggregated, anonymised usage data to improve game selection, user interface design, payment flow efficiency, and support quality.
Legal compliance Meeting record-keeping obligations under napi68's operating licences; cooperating with lawful requests from regulatory authorities.
Section 6

Legal Basis for Processing

6.1  napi68 relies on one or more of the following legal bases when processing your personal data:

  • Contractual necessity: Processing your registration data, financial data, and KYC information is necessary to perform our contractual obligations to you as an account holder — including enabling you to deposit, play, and withdraw.
  • Legitimate interests: Processing device and technical data, fraud monitoring data, and aggregated analytics data is necessary to pursue napi68's legitimate interests in operating a secure, functional, and commercially viable platform. These interests are balanced against your privacy rights.
  • Consent: Sending personalised marketing communications and deploying non-essential cookies requires your prior consent. You may withdraw consent at any time without consequence to your account.
  • Legal obligation: Retaining transaction records and KYC documentation to satisfy the requirements of napi68's international operating licences and applicable financial compliance standards.
Section 7

Data Sharing & Disclosure

7.1  napi68 does not sell, rent, or trade your personal data. We share data only in the following circumstances and only to the extent necessary for the stated purpose:

7.1.1  Licensed Service Providers (Data Processors)

napi68 engages third-party providers to deliver specific platform functions: KYC verification partners, payment processors (including gateway partners facilitating BCA, BRI, BNI, Mandiri, OVO, and DANA integrations), cloud hosting providers, anti-fraud analytics vendors, and customer support tooling providers. Each processor is bound by a data processing agreement that prohibits use of your data beyond the specific services they deliver for napi68.

7.1.2  Game Studios

When you play a game provided by a third-party studio (such as Pragmatic Play, Evolution Gaming, NetEnt, or Microgaming), limited technical session data (a pseudonymised session token and wager amounts) is transmitted to the studio's gaming servers in order to render and resolve game rounds. No directly identifying personal data such as your name, phone number, or bank details is shared with game studios.

7.1.3  Regulatory and Law Enforcement Authorities

napi68 will disclose personal data to competent regulatory authorities, law enforcement agencies, or courts where required to do so by a lawful order or where napi68 reasonably determines that disclosure is necessary to prevent fraud, money laundering, or other serious criminal activity.

7.1.4  Business Transfers

In the event of a merger, acquisition, or sale of napi68's business or assets, your personal data may be transferred to the acquiring entity as part of the transaction. You will be notified of any such transfer and the privacy practices of the new entity before the transfer takes effect.

napi68 will never share your KTP (Indonesian National Identity Card) image or other KYC documents with any party not directly involved in the identity verification process, except where compelled by a lawful regulatory order.
Section 8

International Data Transfers

8.1  napi68 operates internationally, and certain service providers (including cloud infrastructure providers and game studios) may process your data in jurisdictions outside Indonesia. Where such transfers occur, napi68 takes appropriate safeguards to ensure that your personal data continues to receive the same level of protection it would receive in Indonesia.

8.2  Safeguards for international transfers include contractual data protection clauses incorporated into agreements with all international service providers, and selection of providers who operate under internationally recognised security certification frameworks.

8.3  By registering a napi68 account, you acknowledge that your data may be transferred to and processed in countries outside Indonesia for the purposes described in this Privacy Policy.

Section 9

Data Retention

9.1  napi68 retains your personal data for as long as your account is active, and for a defined period after account closure. The specific retention periods applicable to each data category are as follows:

Data Category Retention Period Reason
Account registration data Duration of account + 5 years post-closure Licensing obligation, dispute resolution
KYC documentation Duration of account + 5 years post-closure Regulatory compliance, anti-money-laundering requirements
Transaction records Duration of account + 7 years post-closure Financial audit trail, licensing requirements
Support communications 3 years from date of communication Dispute resolution, quality assurance
Device & technical data 13 months on a rolling basis Fraud analysis, platform analytics
Marketing preferences Until opt-out or account closure Consent management

9.2  At the end of the applicable retention period, napi68 will securely delete or anonymise your personal data so that it can no longer be associated with you as an individual.

Section 10

Security Measures

10.1  napi68 implements a layered security architecture designed to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Key security measures include:

  • 256-bit TLS encryption on all data in transit between your device and napi68 servers.
  • Salted password hashing — passwords are never stored in plaintext. Even in the event of a data breach, your raw password cannot be recovered from stored data.
  • Access controls — access to personal data within napi68 is restricted on a need-to-know basis. Staff with access to player data are subject to confidentiality agreements and regular security training.
  • Anomalous login detection — napi68 monitors for unusual login patterns and may trigger an OTP (one-time password) challenge or temporarily lock an account where suspicious activity is detected.
  • Regular security assessments — napi68 conducts periodic vulnerability assessments of its platform infrastructure.
  • Incident response procedures — napi68 maintains a documented data breach response plan. In the event of a confirmed breach affecting your personal data, you will be notified promptly and provided with guidance on protective actions.
Despite these measures, no internet-based platform can guarantee absolute security. You are responsible for keeping your napi68 account credentials confidential and for notifying us immediately if you suspect any unauthorised access to your account.
Section 11

Cookies & Tracking Technologies

11.1  napi68 uses cookies and similar tracking technologies on napi68.pro. The following categories of cookies are deployed:

Cookie Type Purpose Consent Required?
Strictly Necessary Session management, authentication tokens, security tokens. Without these, core platform functions do not operate. No — essential to service
Functional Remembering your language and display preferences across sessions. No — legitimate interest
Analytics Aggregated, anonymised data on page views, navigation paths, and session duration used to improve platform design. No individual profiling. Yes — consent-based

11.2  napi68 does not deploy cross-site tracking cookies, third-party advertising cookies, or any cookie designed to track your behaviour across websites other than napi68.pro.

11.3  You can manage cookie preferences through your browser's cookie settings. Disabling strictly necessary cookies will prevent you from logging in and using core platform features. Disabling analytics cookies will not affect your ability to use the platform.

Section 12

Your Rights Over Your Personal Data

12.1  As a napi68 player, you hold the following rights in relation to your personal data. To exercise any of these rights, contact the napi68 data team via live chat or at the email address in Section 16.

  • Right of Access: You may request a copy of all personal data napi68 holds about you. We will provide this within 5 business days of a verified request.
  • Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected.
  • Right to Erasure ("Right to Be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected. Note that napi68 cannot delete data that it is required to retain under its licensing obligations (see Section 9).
  • Right to Restrict Processing: You may request that napi68 restrict its processing of your personal data in certain circumstances — for example, while a data accuracy dispute is being resolved.
  • Right to Data Portability: You may request a copy of your personal data in a structured, machine-readable format for transfer to another service provider.
  • Right to Object: You may object at any time to processing of your personal data for direct marketing purposes. You may also object to processing based on legitimate interests, though napi68 may continue processing where compelling legitimate grounds exist.
  • Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

12.2  napi68 will not charge a fee for handling data rights requests made in good faith. Requests that are manifestly unfounded, repetitive, or excessive may be declined or subject to a reasonable administrative fee.

Section 13

Children's Privacy

13.1  napi68 is strictly an adult platform. We do not knowingly collect personal data from any person under the age of 21. Registration by minors is prohibited, and age verification is conducted as part of the KYC process.

13.2  If napi68 becomes aware that personal data has been collected from a person under 21, that account will be suspended immediately, the data will be deleted to the extent permitted by applicable law, and the matter may be referred to the appropriate authorities.

13.3  If you are a parent or guardian and believe your child has registered an account on napi68, please contact us immediately at the address in Section 16.

Under-21 access to napi68 is prohibited. napi68 applies mandatory age verification via KYC documentation for all accounts prior to first withdrawal, and may conduct age verification checks at any point during the account lifecycle.
Section 14

Third-Party Links

14.1  napi68.pro does not contain links to external third-party websites. All navigation within napi68 remains within the napi68.pro domain. This policy applies exclusively to data collected by napi68 through its own platform.

14.2  Game studios that power games on napi68 may independently process technical session data (as described in Section 7.1.2), but they operate under their own privacy policies and are bound by their contractual obligations to napi68. napi68 is not responsible for the independent data practices of game studio servers during the processing of game rounds.

Section 15

Changes to This Privacy Policy

15.1  napi68 reserves the right to update this Privacy Policy at any time to reflect changes in applicable law, our data practices, or the services we provide. The "Last updated" date at the top of this document reflects the most recent revision.

15.2  Material changes — defined as changes that materially affect your rights or the way we use your personal data — will be communicated to you via in-platform notification or by email to the address associated with your account, where provided, at least 14 days before they take effect.

15.3  Your continued use of napi68 following the effective date of any update constitutes your acceptance of the revised Privacy Policy. If you do not accept the updated policy, please contact support to arrange closure of your account.

15.4  The current version of this Privacy Policy is always available at napi68.pro/privacy-policy.

Section 16

Contact & Data Rights Requests

16.1  For any questions, concerns, or requests relating to this Privacy Policy or your personal data held by napi68, please contact us through the following channels:

Data & Privacy Team Contact

Live Chat: Available 24/7 via the napi68 platform. Indonesian-speaking agents are on duty at all times. Reference "Data Rights Request" at the start of your chat.

Email: [email protected]
Please use the subject line "Privacy Policy Enquiry" or "Data Rights Request" so your message reaches the data team directly.

Response Time: Data rights requests are acknowledged within 1 business day and fully responded to within 5 business days.

16.2  When submitting a data rights request, please include your registered napi68 username and a clear description of your request. For erasure or access requests, we may need to verify your identity before processing.

16.3  napi68 is committed to resolving all privacy concerns promptly and fairly. If you are dissatisfied with our response to a data rights request, you may escalate the matter to the relevant supervisory authority under the licensing jurisdiction applicable to napi68's operations.

Your Data Is Protected — Now Let's Play

Browse the napi68 casino, check the latest sportsbook odds, or explore our FAQ for quick answers. 21+ only. Gambling involves financial risk. Play responsibly.