ns212 Privacy Policy

ns212 ("we", "us", "the Company") is committed to protecting the privacy and personal data of every individual who interacts with our platform. This Privacy Policy sets out, in clear and accessible terms, the categories of personal data we collect, the purposes for which that data is processed, the conditions under which it may be shared with third parties, and the rights available to you as a data subject.

ns212 operates a premium online betting and casino platform serving Members primarily located in Indonesia. Our platform is accessible at https://ns212.cam and is intended solely for individuals aged 21 years and above. In delivering our services, we necessarily handle certain categories of personal and financial data. We do so with care, proportionality, and a genuine respect for your privacy.

This Policy should be read alongside our Terms & Conditions, which govern the contractual relationship between ns212 and its Members, and our Responsible Gaming policy, which describes how we use data to protect vulnerable players. Together, these three documents form the complete framework of obligations and commitments that underpin your membership.

The following terms are used throughout this Privacy Policy with the meanings assigned below.

ns212 collects the following categories of personal data across the different stages of your membership lifecycle.

3.1 — Registration Data

• Full legal name as it appears on your Indonesian National Identity Card (KTP) or passport.
• Date of birth (used to verify you are at least 21 years of age).
• Residential address in Indonesia, including city (e.g., Jakarta, Surabaya, Bandung, Medan, Bali) and postal code.
• Active email address and mobile phone number registered in Indonesia.
• Username and encrypted password.

3.2 — Identity Verification (KYC) Data

• Copy of government-issued photo identification (KTP or passport).
• Proof of address documentation (utility bill or bank statement dated within three months).
• Selfie or liveness-check image submitted during enhanced verification workflows.
• Bank account or e-wallet registration details confirming name-match to your ns212 account.

3.3 — Financial Transaction Data

• Deposit and withdrawal amounts, timestamps, and transaction reference numbers.
• Payment channel used (e.g., BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, OVO, DANA, GoPay, ShopeePay, LinkAja).
• Bank account numbers or e-wallet identifiers associated with transactions — stored in masked format wherever possible.
• Currency denomination (Indonesian Rupiah / IDR / Rp) and exchange-related metadata where applicable.

3.4 — Platform Usage & Behavioral Data

• Betting and gaming activity records, including game type, stake amounts, outcomes, and session duration.
• Login timestamps, IP address, device type, operating system, and browser version.
• Responsible gaming interactions — deposit limit settings, time-out activations, self-exclusion requests.
• Customer support correspondence including live chat transcripts and email exchanges.

3.5 — Marketing Preference Data

• Opt-in or opt-out status for promotional email and SMS communications.
• Promotion redemption history and bonus claim records.
• Survey responses and voluntary feedback submitted through the platform.

ns212 collects personal data through the following channels and mechanisms.

4.1 — Directly From You

The majority of personal data ns212 holds is provided directly by Members during account registration, KYC submission, transaction initiation, customer support contact, or completion of voluntary surveys and feedback forms.

4.2 — Automatically Through Platform Use

When you access and use the ns212 platform, certain technical data is collected automatically by our systems. This includes your IP address, device identifiers, browser type, session duration, and the sequence of pages or game products you interact with. This data is collected using server-side logging, cookies, and similar tracking technologies described further in Section 8.

4.3 — From Third-Party Service Providers

In the course of verifying your identity and processing payments, ns212 may receive supplementary personal data from third-party providers, including:

• KYC and identity verification vendors who confirm the authenticity of documents you submit.
• Payment processors who confirm the status of deposit and withdrawal transactions via Indonesian banking and e-wallet networks.
• Fraud detection and anti-money-laundering screening services that provide risk-scoring data based on publicly available and licensed databases.

Data received from third parties is handled in accordance with this Privacy Policy and the contractual data-processing agreements ns212 maintains with each provider.

ns212 processes your personal data only where a recognized legal basis exists. The legal bases applicable to each processing activity are summarized in the table below.

ns212 uses the personal data it collects for the following clearly defined purposes. We do not use your data for any purpose incompatible with those listed here without first obtaining your explicit consent or identifying a new legitimate legal basis.

• Account Administration: Creating and maintaining your Member profile, processing login authentication, and managing account settings and preferences.
• Service Delivery: Enabling you to place bets, participate in casino games, process deposit and withdrawal transactions, and access the full range of ns212 products.
• Identity Verification: Conducting KYC checks to confirm that you meet the eligibility requirements (21 years of age, Indonesian residency) and to comply with applicable AML obligations.
• Fraud Prevention & Security: Monitoring account activity for patterns consistent with fraud, collusion, bonus abuse, money laundering, or unauthorized access, and taking protective action where required.
• Responsible Gaming: Tracking behavioral indicators of problem gambling, delivering responsible gaming interventions such as deposit limit notifications and reality checks, and facilitating self-exclusion requests where a Member requests one.
• Customer Support: Responding to inquiries, resolving disputes, and maintaining records of support interactions for quality assurance and dispute-resolution purposes.
• Legal Compliance: Meeting regulatory reporting obligations, responding to lawful requests from law enforcement or competent authorities, and maintaining financial records in accordance with applicable retention requirements.
• Marketing Communications: Sending promotional offers, bonus announcements, and platform updates to Members who have opted in — with a clear, one-click unsubscribe mechanism included in every communication.
• Platform Improvement: Analyzing aggregated, anonymized usage data to identify platform performance issues, popular game categories, and areas where the Member experience can be enhanced.

ns212 does not sell, rent, or trade your personal data to third parties for commercial purposes. Personal data is shared externally only in the following circumstances and only to the extent necessary for the stated purpose.

7.1 — Service Providers (Data Processors)

ns212 engages a limited number of specialist third-party service providers who process personal data on our behalf under binding data-processing agreements. These include:

• Payment processing partners managing transactions via Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon) and e-wallets (OVO, DANA, GoPay, ShopeePay, LinkAja).
• KYC and identity verification vendors who authenticate identity documents and conduct liveness checks.
• Cloud infrastructure and hosting providers that store platform data in secure, access-controlled server environments.
• Fraud detection and AML screening services that assess transaction risk profiles.
• Live chat and customer support platform providers who facilitate Member communications.

All service providers are contractually prohibited from using Member data for any purpose other than delivering the specific service for which they are engaged.

7.2 — Legal and Regulatory Disclosure

ns212 may disclose personal data to law enforcement agencies, regulatory bodies, courts, or other competent public authorities where required to do so by applicable law, court order, or regulatory directive. In such cases, ns212 will disclose only the minimum data necessary to satisfy the legal requirement and will, where permitted by law, notify the affected Member of the disclosure.

7.3 — Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of ns212's assets, Member personal data may be transferred to the acquiring entity as part of that transaction. ns212 will notify affected Members via their registered email address prior to any such transfer and will ensure that the acquiring entity is bound by data protection obligations at least equivalent to those set out in this Policy.

ns212 uses cookies and similar client-side tracking technologies to operate the platform, maintain your session, and gather anonymized analytics data. The following categories of cookies are in use on the ns212 platform.

You may manage cookie preferences through your browser's built-in settings. Note that disabling strictly necessary cookies will impair or prevent access to the ns212 platform. ns212 does not deploy third-party advertising or retargeting cookies.

ns212 operates infrastructure across multiple geographic regions to ensure platform availability, redundancy, and performance for Members accessing the platform from Indonesia. As a result, personal data collected from Indonesian Members may be processed on servers located outside Indonesia.

Where personal data is transferred internationally, ns212 ensures that appropriate safeguards are in place to protect the data to a standard at least equivalent to that required under applicable Indonesian data protection law. These safeguards include:

• Contractual data-processing agreements incorporating internationally recognized standard contractual clauses.
• Transfer to jurisdictions that have been assessed as providing an adequate level of data protection.
• Binding corporate rules where data is transferred within a group of companies under common ownership.

You may request further information about the specific transfer mechanisms applicable to your personal data by contacting our Data Privacy team at the address listed in Section 15.

ns212 retains personal data for the minimum period necessary to fulfill the purpose for which it was collected, unless a longer retention period is required or permitted by applicable law. The retention schedule for each major data category is as follows.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized so that it can no longer be linked to any identifiable individual. Where anonymization is not technically feasible, data is deleted using secure erasure methods.

As an ns212 Member whose personal data is processed under this Policy, you hold the following rights. Requests to exercise any of these rights should be directed to our Data Privacy team via the contact details in Section 15. ns212 will respond to all verifiable requests within 30 calendar days.

The ns212 platform is strictly for adults aged 21 years and above. ns212 does not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from a person under this age limit, we will take immediate steps to delete that data and close the associated account.

If you are a parent or guardian and believe that a minor in your care has registered an account or submitted personal data to ns212, please contact our support team immediately via live chat or at support@ns212.cam. We will investigate and act promptly to resolve the matter.

ns212 implements a layered, defense-in-depth approach to information security. The technical and organizational measures we have in place to protect your personal data include, but are not limited to, the following.

• Transport Layer Security: All data in transit between your device and ns212 servers is encrypted using TLS 1.2 or higher, with 256-bit SSL certificates issued by a trusted certificate authority.
• At-Rest Encryption: Sensitive data fields stored in ns212 databases — including identity document references, financial identifiers, and KYC records — are encrypted at rest using AES-256 or equivalent standards.
• Access Controls: Access to personal data is restricted on a strict need-to-know basis using role-based access control (RBAC). All staff with access to Member data are subject to background checks and mandatory data-protection training.
• Multi-Factor Authentication: Administrative access to ns212's backend infrastructure requires multi-factor authentication (MFA). Members are also encouraged to enable MFA on their own accounts.
• Penetration Testing: ns212 engages independent security specialists to conduct regular penetration tests and vulnerability assessments of the platform. Critical findings are remediated within defined SLA windows.
• Incident Response: ns212 maintains a documented security incident response plan. In the event of a confirmed data breach affecting Member personal data, affected Members and relevant authorities will be notified in accordance with applicable legal requirements.

While ns212 takes every reasonable precaution to protect your data, no method of electronic storage or transmission over the internet is 100% secure. Members should also take responsibility for their own account security by using a strong, unique password and not sharing login credentials with any third party.

ns212 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the services we offer. Where amendments are material — meaning they significantly affect how we collect, use, or share your personal data — we will provide advance notice of at least seven (7) days via the email address registered to your account and via a prominent notice on the platform.

The "Last Updated" date at the top of this page will be revised whenever a new version of the Policy takes effect. We encourage you to review this page periodically so that you remain informed of how ns212 handles your personal data. Continued use of the ns212 platform following the effective date of any revision constitutes your acceptance of the updated Policy.

Prior versions of the Privacy Policy are retained in our internal records and are available on request to Members who wish to compare versions.

If you have any questions, concerns, or requests relating to this Privacy Policy or ns212's handling of your personal data, please contact us through any of the following channels.

• Live Chat: Available 24 hours a day, 7 days a week directly through the ns212 platform. Indonesian-speaking agents are available at all times.
• Email: support@ns212.cam — for formal data subject requests, please use the subject line format described in Section 11.

ns212 will acknowledge receipt of your inquiry within 48 hours and will provide a substantive response within 30 calendar days. Where a request is particularly complex or where a high volume of requests has been received, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it.

If you are dissatisfied with how ns212 has handled your personal data or responded to a data subject request, you have the right to lodge a complaint with the relevant data protection authority in your jurisdiction. ns212 would, however, appreciate the opportunity to address your concerns directly before any formal complaint is made, and we encourage you to contact us first.