Privacy Policy — nex228

1 Introduction

nex228 operates an online gaming and sports betting platform specifically designed for adult players in Indonesia. In the course of providing our services, we necessarily collect and process certain personal data about our members. We take this responsibility seriously, and this Privacy Policy is our formal commitment to being transparent about every aspect of our data processing activities.

This Privacy Policy applies to all personal data collected through the nex228 website at https://nex228.cam, including through any associated mobile-optimized interfaces, support communication channels, and marketing communications where you have provided your consent. It does not apply to third-party websites or services that may be linked to or from our platform — those are governed by their own privacy policies.

nex228 processes personal data in accordance with applicable international data protection principles, including the principles of lawfulness, fairness, transparency, purpose limitation, data minimization, accuracy, storage limitation, integrity, and confidentiality. Where Indonesian regulatory requirements impose additional obligations, we comply with those requirements without exception.

2 Definitions

The following definitions apply throughout this Privacy Policy:

• "Personal Data" — any information that identifies, or could reasonably be used to identify, a natural person, directly or indirectly. This includes names, identity document numbers, email addresses, phone numbers, IP addresses, device identifiers, and transaction records.
• "Processing" — any operation performed on personal data, including collection, storage, retrieval, use, disclosure, modification, and deletion.
• "Data Controller" — nex228, which determines the purposes and means by which personal data is processed.
• "Data Processor" — a third-party entity that processes personal data on nex228's behalf, such as a payment gateway provider or cloud infrastructure provider, under a written data processing agreement.
• "Member" — an individual who has successfully registered a nex228 account in accordance with our Terms & Conditions.
• "KYC" — Know Your Customer; the identity verification process through which nex228 confirms a member's identity, age, and payment details.
• "Data Subject Request" — a formal request by a member to exercise their rights in relation to their personal data, such as access, correction, or deletion.

3 Data We Collect

nex228 collects and processes the following categories of personal data in connection with your membership and use of the platform:

4 How We Collect Data

4.1 Direct Collection

The majority of your personal data is collected directly from you when you voluntarily provide it through:

• Account registration forms;
• KYC document upload processes;
• Deposit and withdrawal requests;
• Support inquiries via email, live chat, or contact forms;
• Opt-in to promotional communications;
• Account settings and preferences adjustments.

4.2 Automatic Collection

Some data is collected automatically through your interaction with the platform, including:

• Technical data collected via cookies, server logs, and similar technologies when you access the platform;
• Usage data generated through your gameplay, bet placement, and navigation behavior;
• Device fingerprinting data collected for security and fraud prevention purposes.

4.3 Third-Party Sources

In limited circumstances, we may receive data from third parties, such as:

• Payment processors (confirming transaction success or failure);
• Identity verification services (confirming KTP authenticity);
• Fraud prevention databases (confirming an individual is not a known fraudster or on a regulatory exclusion list).

5 Legal Basis for Processing

nex228 processes your personal data only where we have a valid legal basis to do so. Our legal bases for processing include:

5.1 Contractual Necessity

We process your identity data, contact data, account data, financial data, and usage data because it is necessary to perform our contractual obligations to you under the Terms & Conditions — specifically, to provide access to the platform, process deposits and withdrawals, administer bonuses, and deliver customer support.

5.2 Legal Obligation

We process identity data and financial data to comply with our international gaming license requirements, anti-money laundering (AML) regulations, and responsible gaming obligations. This includes the mandatory age verification requirement (21+ only) and transaction monitoring for suspicious activity.

5.3 Legitimate Interests

We process technical data and usage data based on our legitimate interest in maintaining platform security, preventing fraud and bonus abuse, troubleshooting technical issues, and improving user experience. These interests are balanced against your privacy rights, and we employ safeguards to ensure proportionality.

5.4 Consent

Where we send you promotional communications by email or SMS, we do so only with your freely given, specific, informed consent. You may withdraw consent at any time by clicking the unsubscribe link in any marketing email or by contacting support.

6 How We Use Your Data

nex228 processes your personal data for the following specific purposes:

1. Account Management: Creating and maintaining your nex228 account, authenticating your identity, managing your login credentials, and allowing you to update your preferences.
2. Service Delivery: Providing access to our games, sports betting markets, live casino tables, togel draws, and all other platform features; processing your bets; calculating and crediting your winnings.
3. Financial Transactions: Processing deposits via BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, OVO, DANA, GoPay, ShopeePay, and LinkAja; processing withdrawal requests to your registered bank account or e-wallet; maintaining accurate balance records.
4. KYC and Age Verification: Verifying that you are at least 21 years of age and that the bank account or e-wallet used for deposits and withdrawals is registered in your name. This is a mandatory regulatory requirement.
5. Fraud Prevention and Security: Monitoring for duplicate accounts, collusion in card games, use of automated betting software, exploitation of software errors, and other prohibited conduct described in our Terms & Conditions. This includes IP address tracking, device fingerprinting, and behavioral analysis.
6. Responsible Gaming: Monitoring betting patterns to identify signs of problem gambling behavior; implementing deposit limits, time-out features, and self-exclusion tools; providing support resources when a member exhibits at-risk behavior.
7. Bonus Administration: Crediting promotional bonuses to eligible accounts; tracking wagering requirement progress; detecting bonus abuse; enforcing bonus terms and conditions.
8. Customer Support: Responding to your inquiries, resolving technical issues, investigating disputes, and providing general assistance. This includes maintaining records of all support interactions for quality assurance and dispute resolution purposes.
9. Marketing (with Consent): Sending promotional emails about new games, exclusive bonuses, seasonal campaigns (e.g., Idul Fitri specials, Independence Day promotions), and platform updates. Marketing communications are sent only to members who have opted in.
10. Platform Improvement: Analyzing aggregated usage data to improve game selection, optimize user interface design, identify popular betting markets (such as BRI Liga 1 matches or Champions League fixtures), and enhance overall user experience.
11. Legal Compliance: Responding to lawful requests from regulatory authorities, law enforcement, and courts; complying with AML reporting obligations; maintaining records as required by our gaming license.

7 Data Sharing and Disclosure

7.1 When We Share Your Data

nex228 does not sell, rent, or trade your personal data to third parties. However, we do share your data with carefully selected third-party service providers in the following circumstances:

• Payment Processors: To process deposits and withdrawals, we share your name and bank account or e-wallet details with our licensed payment gateway providers. These providers act as data processors under strict contractual obligations.
• Game Providers: When you play slots, live casino games, or virtual sports, certain technical data (session ID, stake amounts) is shared with the game provider (e.g., Pragmatic Play, Evolution Gaming, NetEnt, Microgaming) to enable gameplay. Game providers do not receive your identity or financial data.
• KYC Verification Services: We share your KTP details with third-party identity verification providers to confirm document authenticity and prevent identity fraud. These providers delete your data upon completion of verification.
• Cloud Infrastructure Providers: nex228 uses reputable cloud service providers to host our platform and store encrypted member data. These providers have no right to access or use your data except as necessary to provide infrastructure services to nex228.
• Customer Support Tools: Support ticket and live chat data is processed through third-party customer relationship management (CRM) software. Access to this data is restricted to authorized support personnel only.

All third-party service providers are bound by written data processing agreements that require them to protect your data with the same level of care as nex228, to process it only for the specified purpose, and to delete it when no longer needed.

7.2 Legal Disclosures

nex228 may disclose your personal data where required or permitted by law, including:

• To comply with a court order, subpoena, or other lawful request from a regulatory authority or law enforcement agency;
• To report suspicious transactions or activity to our gaming license regulator or to relevant financial crime authorities under our AML obligations;
• To protect the rights, property, or safety of nex228, our members, or the public, where we have a good-faith belief that disclosure is necessary.

7.3 No Marketing Data Sharing

nex228 will never share your personal data with third-party marketing companies, advertisers, or data brokers for their own marketing purposes. Any promotional communications you receive come directly from nex228, and you can unsubscribe at any time.

8 Cookies and Tracking Technologies

8.1 What Are Cookies

Cookies are small text files stored on your device when you access the nex228 platform. They enable the platform to remember your preferences, maintain your login session, and provide a personalized experience. We use both first-party cookies (set by nex228) and third-party cookies (set by our service providers).

8.2 Types of Cookies We Use

• Essential Cookies: Necessary for the platform to function. These enable core features like login authentication, session management, and secure transaction processing. Essential cookies cannot be disabled without preventing platform access.
• Performance Cookies: Collect anonymous data about how members use the platform, such as which pages are visited most frequently and where errors occur. This data is aggregated and does not identify individual users.
• Functional Cookies: Remember your preferences such as language selection, currency display format, and favorite games. These cookies enhance user experience but are not strictly necessary.
• Security Cookies: Detect fraud and abuse by analyzing device fingerprints, IP addresses, and behavioral patterns. These cookies help us identify duplicate accounts, automated betting software, and other prohibited conduct.

8.3 Managing Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to refuse all cookies or to accept cookies only from specific websites. However, disabling essential cookies will prevent you from logging in to or using the nex228 platform. Disabling functional cookies may result in a less personalized experience.

9 Data Security Measures

nex228 employs industry-standard technical and organizational measures to protect your personal data from unauthorized access, disclosure, alteration, and destruction. Our security framework includes:

• Encryption: All data transmitted between your device and our servers is encrypted using 256-bit SSL/TLS. Sensitive data at rest, including passwords and financial details, is encrypted using AES-256 encryption.
• Access Controls: Access to member personal data is restricted to authorized personnel on a need-to-know basis. All access is logged, monitored, and subject to periodic audit.
• Secure Infrastructure: Our platform is hosted on secure cloud infrastructure with multi-layered firewalls, intrusion detection systems, and DDoS protection.
• Password Security: Member passwords are hashed using bcrypt with unique salts. nex228 employees cannot view or retrieve your plaintext password.
• Regular Security Audits: We conduct periodic security assessments and penetration testing to identify and remediate vulnerabilities.
• Incident Response: In the event of a data breach, we maintain an incident response plan that includes member notification, regulatory reporting, and remediation within legally required timeframes.

10 Data Retention and Deletion

10.1 Retention Periods

nex228 retains your personal data only for as long as necessary to fulfill the purposes for which it was collected or as required by applicable law. Our standard retention periods are:

• Active Account Data: Retained for the duration of your active membership and for 12 months following your last login, to enable account reactivation if you return.
• Financial Transaction Records: Retained for 7 years following the transaction date, as required by international AML regulations and tax law.
• KYC Documents: Retained for 7 years following account closure, as required by our gaming license and AML obligations.
• Support Communications: Retained for 3 years following the last communication, to provide continuity in ongoing support cases and to defend against potential disputes.
• Marketing Preferences: Retained until you withdraw consent or request deletion, whichever occurs first.
• Technical Logs: Retained for 90 days for security monitoring and troubleshooting purposes, then automatically deleted.

10.2 Account Closure and Data Deletion

If you close your nex228 account voluntarily, we will delete or anonymize your personal data in accordance with the retention periods above. You may also submit a formal data deletion request at any time. However, we may be legally required to retain certain data (KYC records, financial transaction history) even after account closure. Where a legal retention obligation applies, we will inform you of the specific requirement and timeline.

11 Your Privacy Rights

As a nex228 member, you hold the following rights in relation to your personal data:

1. Right of Access: You have the right to request a copy of all personal data we hold about you. We will provide this data in a structured, commonly used, machine-readable format.
2. Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request correction. You can update most account details directly through your account settings.
3. Right to Deletion (Right to be Forgotten): You have the right to request deletion of your personal data where (a) the data is no longer necessary for the purpose for which it was collected; (b) you withdraw consent and there is no other legal basis for processing; (c) you object to processing and there are no overriding legitimate grounds; or (d) the data has been unlawfully processed. Note that deletion requests are subject to our legal retention obligations.
4. Right to Restriction of Processing: In certain circumstances, you have the right to request that we restrict how we process your personal data while a dispute or verification is resolved.
5. Right to Data Portability: Where technically feasible, you have the right to receive your personal data in a portable format and to request that we transfer it directly to another service provider.
6. Right to Object: You have the right to object to processing based on legitimate interests. If you object, we will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
7. Right to Withdraw Consent: Where processing is based on consent (e.g., marketing communications), you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing conducted prior to withdrawal.

How to Exercise Your Rights

To exercise any of these rights, submit a written request to our support team at [email protected] with the subject line "Data Subject Request". Include your full name, registered email address, and a clear description of your request. We will respond within 14 business days and may require additional identity verification before fulfilling your request.

12 Protection of Minors

nex228 is exclusively an adults-only platform. No person under the age of 21 may register an account, place a wager, or access any part of the platform. We do not knowingly collect personal data from individuals under 21 years of age.

If we become aware that a registered member is, or was at the time of registration, under the age of 21, we will immediately suspend the account, void all associated transactions, forfeit any winnings, and delete the member's personal data. If you are a parent or guardian and you believe your child has provided personal data to nex228, contact our support team immediately so we can take appropriate action.

13 International Data Transfers

nex228 primarily serves Indonesian residents and operates infrastructure located within secure, internationally recognized data centers. Some of our service providers (cloud hosting, payment processing, game providers) may be located outside Indonesia. Where we transfer your personal data to a jurisdiction that does not provide equivalent data protection standards, we implement appropriate safeguards, including:

• Standard contractual clauses approved for international data transfers;
• Encryption of data in transit and at rest;
• Strict data processing agreements requiring the recipient to apply equivalent security measures;
• Regular audits of third-party processors to ensure compliance.

By using the nex228 platform, you acknowledge and consent to the international transfer of your personal data under these safeguards.

14 Third-Party Websites and Services

The nex228 platform does not contain links to third-party websites or services beyond our essential service providers (payment gateways, game providers). If you follow a link from nex228 to an external site, that site is governed by its own privacy policy, and nex228 is not responsible for its data practices. We encourage you to review the privacy policy of any external site before providing personal data.

15 Changes to This Privacy Policy

nex228 reserves the right to update this Privacy Policy from time to time to reflect changes in our data processing practices, regulatory requirements, or platform features. Where a material change is made, we will provide reasonable prior notice via email to your registered address or through a prominent platform notification. The date of the most recent revision is displayed at the top of this page.

Your continued use of the nex228 platform following the publication of an updated Privacy Policy constitutes your acceptance of the changes. If you do not agree with any amendment, you must stop using the platform and may request account closure and data deletion in accordance with Section 10 above.

16 Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or our data processing practices, or if you wish to exercise any of your privacy rights, please contact our data protection team using the details below:

We take all privacy concerns seriously and will investigate and respond to your inquiry in a timely and thorough manner.