Our Privacy Commitments

Six core principles that define how ngo500 handles your information

Data Minimization

We collect only the information strictly necessary to operate your account, verify your identity, and process your transactions — nothing more.

Bank-Grade Encryption

All data transmitted to and from ngo500 is protected by 256-bit SSL/TLS encryption — the same standard used by major Indonesian banks such as BCA and Mandiri.

No Unauthorized Sharing

Your personal data is never sold or rented to third parties. Sharing occurs only with vetted payment processors and identity-verification partners under strict confidentiality agreements.

Transparent Processing

We clearly document every category of data we hold, why we hold it, and how long we retain it. You will never encounter hidden data practices at ngo500.

Your Right to Control

You may access, correct, or request deletion of your personal data at any time by contacting our support team, subject to legal retention obligations.

Defined Retention Periods

We retain your data only for as long as legally required or operationally necessary. Account data is purged within 5 years of account closure unless a legal hold applies.

  Last Updated: January 15, 2026
Notice to All Players

This Privacy Policy describes how ngo500 ("we," "us," or "our") collects, stores, uses, discloses, and protects personal information provided by individuals ("you" or "your") who access or use the ngo500 gaming platform at ngo500.cam. By creating an account or otherwise using our services, you acknowledge that you have read this policy and consent to the data practices described herein. If you do not agree, please do not use our services.

1. Definitions

The following terms carry specific meanings throughout this Privacy Policy:

  • "Personal Data" — any information that identifies or could reasonably identify a living individual, including names, email addresses, phone numbers, Indonesian National ID (KTP) numbers, IP addresses, and device identifiers.
  • "Processing" — any operation performed on Personal Data, including collection, storage, use, disclosure, transfer, or deletion.
  • "Data Subject" — the individual to whom Personal Data relates; in the context of ngo500, this is typically the registered player.
  • "Third Party" — any person or organization that is not ngo500 or the Data Subject.
  • "Services" — the full suite of gaming and account management features available at ngo500.cam.
  • "KYC" — Know Your Customer verification procedures mandated for identity confirmation and fraud prevention.

2. Data Controller

ngo500 acts as the Data Controller for all Personal Data collected through ngo500.cam. As Data Controller, we determine the purposes and means by which your Personal Data is processed.

For any privacy-related inquiries, complaints, or requests to exercise your rights, please contact our Data Protection team at:

Privacy Contact: [email protected]

Response Commitment: We aim to acknowledge all privacy requests within 2 business days and provide a substantive response within 30 calendar days.

3. Data We Collect

ngo500 collects Personal Data through several channels. The categories below outline exactly what we gather and why.

3.1 Registration and Account Data

When you create an account, we collect:

  • Full legal name (as per KTP)
  • Date of birth (to verify you are 21 or older)
  • Email address and mobile phone number (Indonesian +62 format)
  • Residential address in Indonesia (city, province, postal code)
  • Username and encrypted password

3.2 Identity Verification (KYC) Data

To comply with anti-money laundering (AML) obligations and confirm player identity, we collect:

  • Indonesian National ID (KTP) — number, image/scan
  • Selfie photograph for biometric comparison
  • Proof of address documents (recent utility bill, bank statement)
  • Source-of-funds documentation for large transactions (above Rp 50,000,000)

3.3 Financial Transaction Data

Every deposit and withdrawal is logged. We collect:

  • Bank account name and account number for linked accounts (BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata)
  • E-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja)
  • Transaction amounts in IDR, timestamps, and transaction reference numbers

ngo500 does not store full card numbers or PINs. Payment processing is handled by PCI-DSS-compliant third-party processors.

3.4 Gaming Activity Data

To operate our Services and resolve disputes, we log:

  • Game titles played, bet amounts, outcomes, and session durations
  • Sports bet selections, odds, and settlement results
  • Bonus claims, wagering progress, and promotion participation

3.5 Technical and Device Data

Automatically collected when you access ngo500.cam:

  • IP address (used for geolocation and fraud detection)
  • Browser type, version, and operating system
  • Device model and screen resolution
  • Pages visited, click paths, and session timestamps
  • Referral URL (where applicable)

3.6 Communications Data

When you contact our support team, we retain:

  • Email correspondence and live-chat transcripts
  • The nature of your inquiry and our responses
  • Any attachments you voluntarily provide (e.g., screenshots)

4. Cookies & Tracking Technologies

ngo500 uses cookies and similar technologies to enhance your experience, maintain session security, and analyze platform performance. The table below summarizes the cookie categories we deploy:

Category Purpose Duration Mandatory?
Strictly Necessary Session authentication, CSRF protection, load balancing Session Yes
Functional Language preferences, responsible gaming settings, last-visited lobby 1 year No
Analytical Page performance metrics, error tracking, game load times 13 months No
Security / Fraud Device fingerprinting, suspicious-activity detection 90 days Yes

You may disable non-essential cookies via your browser settings. Note that disabling strictly necessary cookies will prevent you from logging in. ngo500 does not use advertising or third-party retargeting cookies.

5. Purposes of Processing

We process your Personal Data for the following clearly defined purposes:

  • Account Management: Creating and maintaining your player account, authenticating your identity on each login, and managing account preferences.
  • Service Delivery: Providing access to all gaming products including slots, live dealer tables, sports betting, and traditional games.
  • Payment Processing: Facilitating deposits and withdrawals via your chosen Indonesian payment method and reconciling transaction records.
  • KYC and AML Compliance: Verifying your identity and age (21+), detecting fraudulent accounts, and complying with anti-money laundering obligations.
  • Customer Support: Responding to inquiries, resolving disputes, and investigating reported issues.
  • Responsible Gaming: Monitoring for signs of problem gambling, enforcing deposit limits, and administering self-exclusion requests.
  • Security: Detecting unauthorized access attempts, preventing fraud, and maintaining platform integrity.
  • Legal Obligations: Retaining records as required by applicable law and responding to lawful regulatory requests.
  • Service Improvement: Analyzing aggregated, anonymized usage data to improve platform performance and user experience.
  • Marketing Communications: Sending promotional offers and updates if you have opted in. You may withdraw consent at any time by contacting [email protected].

7. Data Sharing and Disclosure

ngo500 does not sell, rent, or broker your Personal Data. We share data only in the following limited circumstances:

7.1 Service Providers and Partners

We engage vetted third-party processors to support our operations, including:

  • Payment Processors: Companies facilitating bank-transfer reconciliation and e-wallet integrations (OVO, DANA, GoPay, ShopeePay, LinkAja) — data shared is limited to what is necessary to complete transactions.
  • KYC and Identity Verification Providers: Licensed third-party services that compare submitted KTP images against national databases.
  • Game Providers: Licensed studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, and Spribe receive anonymized session tokens — they do not receive your name, financial details, or contact information.
  • Cloud Infrastructure: Secure, internationally certified data centers that host ngo500's platform under strict data-processing agreements.

All service providers are bound by contractual confidentiality obligations and are prohibited from using your data for any purpose beyond the scope of their engagement with ngo500.

7.2 Legal and Regulatory Disclosure

We may disclose Personal Data without your consent when required by:

  • A valid court order, subpoena, or other legal process
  • Requests from authorized regulatory or law-enforcement bodies
  • AML reporting obligations triggered by suspicious transaction activity

Where legally permitted, we will notify you of such disclosure.

7.3 Business Transfers

In the event of a merger, acquisition, or sale of all or part of ngo500's business assets, your Personal Data may be transferred to the acquiring entity as part of that transaction. We will notify you of any such transfer and ensure that your data continues to be protected by privacy standards equivalent to this policy.

Important: ngo500 will never transfer your data to advertisers, data brokers, or social media platforms for profiling or targeted advertising purposes.

8. Data Retention Periods

We retain Personal Data for as long as necessary to fulfill the purpose for which it was collected, comply with legal obligations, or resolve disputes. The following retention schedule applies:

Data Category Retention Period Basis
Account registration data Duration of account + 5 years post-closure Legal obligation / AML
KYC documents (KTP, selfie, address proof) Duration of account + 5 years post-closure AML compliance
Financial transaction records 7 years from transaction date Tax / legal obligation
Gaming activity logs 3 years from last activity Dispute resolution / legitimate interest
Support correspondence 3 years from last interaction Dispute resolution
Technical / server logs 13 months from collection Security / fraud prevention
Marketing consent records Until consent is withdrawn + 1 year Consent management

Upon expiry of the applicable retention period, data is securely deleted or irreversibly anonymized. Anonymized, aggregated data (from which no individual can be identified) may be retained indefinitely for statistical analysis.

9. Security Measures

ngo500 employs a layered security architecture to protect your Personal Data from unauthorized access, alteration, disclosure, or destruction:

  • Transport Layer Security (TLS 1.3): All communication between your browser and ngo500 servers is encrypted using industry-standard TLS 1.3 protocols.
  • Data Encryption at Rest: Sensitive data fields including KTP numbers and bank account details are encrypted at the database level using AES-256.
  • Access Controls: Staff access to Personal Data is governed by role-based permissions and least-privilege principles. Access is logged and audited.
  • Two-Factor Authentication (2FA): ngo500 supports 2FA on player accounts and mandates it for all internal staff accessing production systems.
  • Penetration Testing: Our platform undergoes regular third-party security audits and vulnerability assessments.
  • Incident Response: We maintain a documented breach-response procedure. In the event of a data breach materially affecting your rights, we will notify you and relevant authorities within 72 hours of becoming aware of the incident.

Your responsibility: While ngo500 takes significant steps to protect your data, you also play a role. Use a strong, unique password for your account and never share your login credentials with anyone — including anyone claiming to be ngo500 staff.

10. Your Data Rights

As a player with an ngo500 account, you have the following rights regarding your Personal Data:

  • Right of Access: You may request a copy of the Personal Data we hold about you at any time.
  • Right to Rectification: If any information we hold is inaccurate or incomplete, you have the right to request correction. You may update basic profile details directly in your account dashboard.
  • Right to Erasure ("Right to be Forgotten"): You may request deletion of your Personal Data. Note that we may be unable to comply if we are required to retain the data by law (e.g., AML transaction records).
  • Right to Restriction of Processing: You may request that we limit how we use your data while a dispute or correction request is pending.
  • Right to Data Portability: You may request your Personal Data in a structured, machine-readable format (CSV or JSON) for transfer to another service provider.
  • Right to Object: You may object to processing based on legitimate interests, including profiling. You may also unsubscribe from marketing at any time.
  • Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

How to Exercise Your Rights

Submit your request to [email protected] with the subject line "Privacy Rights Request." Please include your registered username and describe the right you wish to exercise. We will verify your identity before processing the request and respond within 30 calendar days. Complex or high-volume requests may require a 30-day extension, of which you will be notified.

11. Protection of Minors

ngo500 is strictly an adult entertainment platform. Our services are available exclusively to individuals who are 21 years of age or older. We do not knowingly collect Personal Data from anyone under 21.

During registration and KYC, we verify each player's date of birth and require a valid Indonesian National ID (KTP). Accounts where the holder is discovered to be under 21 will be immediately suspended, all funds will be frozen pending investigation, and the relevant KYC data will be retained solely for the purpose of preventing future access by that individual.

If you believe a minor has created an account on ngo500, please notify us immediately at [email protected]. For more information on how we promote safe, age-appropriate gaming practices, visit our Responsible Gaming page.

12. International Data Transfers

ngo500 operates globally and may transfer your Personal Data to servers or service providers located outside Indonesia. When such transfers occur, we ensure an adequate level of protection through one or more of the following safeguards:

  • Contractual data-processing agreements incorporating standard contractual clauses
  • Transfers to jurisdictions recognized as providing an adequate level of data protection
  • Technical and organizational security measures equivalent to those applied within Indonesia

You may request details of the specific safeguards applied to any international transfer of your data by contacting [email protected].

13. Changes to This Privacy Policy

ngo500 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform functionality. The "Last Updated" date at the top of this page will be revised whenever changes are made.

For material changes — those that significantly affect your rights or how your data is used — we will provide advance notice via email to your registered address at least 14 days before the changes take effect. For minor editorial updates, continued use of our Services after the revision date constitutes acceptance of the updated policy.

We encourage you to review this policy periodically to stay informed about how ngo500 protects your information.

14. Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or ngo500's data practices, please reach out to our team:

Privacy & Data Protection: [email protected]

Subject Line: "Privacy Policy Inquiry" or "Privacy Rights Request"

Response Time: Within 2 business days for acknowledgment; full response within 30 calendar days

If you believe your data protection rights have been violated and our internal resolution process has not satisfactorily addressed your concern, you have the right to lodge a complaint with the appropriate data protection supervisory authority in your jurisdiction.

For questions about our gaming terms, please review our Terms & Conditions. For responsible gaming support, visit our Responsible Gaming page.

Our Commitment to Your Privacy

ngo500 treats the protection of your personal information as a fundamental obligation, not merely a legal checkbox. We are committed to transparency, data minimization, and giving you meaningful control over your information. Thank you for trusting ngo500 with your data.

Have Questions About Your Data?

Review our Terms & Conditions or visit the FAQ for quick answers

Terms & Conditions View FAQ