ngo500 Privacy Policy

ngo500 ("we", "us", "our") operates the online gaming and sports betting platform accessible at https://ngo500.club (the "Platform"). We are committed to protecting the privacy and personal data of everyone who uses our services — whether you are browsing the Platform as a guest, registering a new account, placing a bet, making a deposit or withdrawal, or contacting our support team.

This Privacy Policy sets out, in clear and accessible language, the categories of personal data we collect, the purposes for which we process that data, the parties with whom we may share it, how long we retain it, and the rights you are entitled to exercise over your own information.

By registering an account on the ngo500 platform, you acknowledge that you have read, understood, and accepted this Privacy Policy in its entirety. If you do not accept the terms of this Privacy Policy, you must not register an account or use the Platform.

This Privacy Policy should be read alongside ngo500's Terms & Conditions, which govern the contractual relationship between ngo500 and registered players.

• "Personal Data" means any information relating to an identified or identifiable natural person — including but not limited to name, email address, phone number, national identity number, device identifiers, and financial account details.
• "Processing" means any operation performed on Personal Data — including collection, storage, use, disclosure, transfer, and deletion.
• "Data Controller" means ngo500, which determines the purposes and means of processing your Personal Data.
• "Data Processor" means any third party that processes Personal Data on behalf of ngo500 under a written agreement and in accordance with ngo500's instructions.
• "User" / "Player" means any individual who accesses, registers on, or uses the ngo500 Platform.
• "Sensitive Data" means a special category of Personal Data that warrants heightened protection — including financial account details, identity document numbers, and, where applicable, health-related information submitted in connection with responsible gaming requests.
• "Consent" means a freely given, specific, informed, and unambiguous indication by the User agreeing to the processing of their Personal Data for a stated purpose.

ngo500 collects the following categories of Personal Data. We collect only what is necessary for the purposes described in this Policy — we do not collect data speculatively or beyond what our operations require.

ngo500 collects Personal Data through the following channels:

• Direct interactions: Data you provide actively when registering an account, completing KYC, making deposits or withdrawals, placing bets, using responsible gaming tools, or contacting support.
• Automated technologies: Technical and usage data collected automatically via cookies, web beacons, server logs, and similar tracking technologies each time you access the Platform. See Section 11 for full details on cookies.
• Payment providers: Transaction confirmation data received from BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, LinkAja, and other payment networks when you initiate a deposit or withdrawal.
• Identity verification partners: Where ngo500 uses a third-party KYC or anti-fraud service to verify your identity documents, that service may return structured verification data to ngo500.
• Third-party data sources: Publicly available information, fraud-prevention databases, and sanctions screening lists used to confirm eligibility and detect prohibited conduct.

ngo500 processes your Personal Data for the following purposes:

• Account management: Creating, maintaining, and administering your ngo500 account, verifying your identity, and managing your preferences.
• Service delivery: Enabling you to place bets, participate in casino games, access slots, play togel, Domino QQ, and Online Poker, and use all Platform features.
• Payment processing: Processing deposits and withdrawals in IDR via your chosen local bank or e-wallet, reconciling accounts, and managing chargebacks or disputes.
• KYC and compliance: Verifying your age (21+), identity, and eligibility; conducting anti-money-laundering (AML) checks; complying with international licensing requirements and applicable law.
• Fraud prevention and security: Detecting and preventing fraudulent activity, multi-accounting, bonus abuse, money laundering, and other prohibited conduct as defined in the Terms & Conditions.
• Responsible gaming: Administering self-exclusion requests, deposit limits, cooling-off periods, and session time controls; identifying patterns that may indicate problem gambling and taking appropriate protective action.
• Customer support: Responding to enquiries, resolving complaints, and maintaining records of support interactions for quality assurance and dispute resolution.
• Platform improvement: Analysing usage data to improve the performance, design, and content of the ngo500 Platform.
• Marketing (with consent): Sending you promotional offers, bonus notifications, and personalised recommendations — only where you have provided explicit consent and only via channels you have authorised.
• Legal obligations: Complying with court orders, regulatory requests, licensing conditions, and other legal obligations imposed on ngo500 by applicable law.

ngo500 processes your Personal Data on the basis of one or more of the following legal grounds, depending on the specific processing activity:

• Contractual necessity: Processing required to perform the contract between you and ngo500 — including account registration, payment processing, and service delivery.
• Legal obligation: Processing required to comply with applicable law, including KYC, AML, and responsible gaming regulatory requirements associated with ngo500's international gaming licence.
• Legitimate interests: Processing carried out in the legitimate interests of ngo500, such as fraud prevention, platform security, and Platform improvement — provided these interests are not overridden by your rights and freedoms.
• Consent: Processing based on your explicit, freely given consent — specifically for marketing communications. You may withdraw this consent at any time without affecting the lawfulness of processing carried out before withdrawal.

ngo500 does not sell, rent, or commercially trade your Personal Data to any third party for their own marketing purposes. We share Personal Data only in the following limited circumstances:

• Payment service providers: Banks and e-wallet operators (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, OVO, DANA, GoPay, ShopeePay, LinkAja) to process your deposits and withdrawals. These providers act as independent data controllers for their own regulatory obligations.
• KYC and identity verification providers: Third-party identity verification services engaged by ngo500 to authenticate your identity documents and confirm your eligibility to use the Platform.
• Gaming software providers: Game studios including Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, PG Soft, and Spribe may receive anonymised or pseudonymised session data necessary to deliver their games through the ngo500 Platform. These studios do not receive your full identity profile.
• Fraud prevention and AML services: Specialist third-party services engaged to screen transactions and accounts against fraud databases, sanctions lists, and politically exposed persons (PEP) registries.
• IT infrastructure and hosting providers: Cloud hosting and data storage providers engaged to host the ngo500 Platform and its databases, operating under contractual data processing obligations.
• Legal and regulatory authorities: Where required by court order, regulatory direction, or other legal obligation, ngo500 may disclose Personal Data to law enforcement, gaming regulators, financial intelligence units, or other competent authorities.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of ngo500's business, your Personal Data may be transferred to the acquiring entity — subject to equivalent privacy protections being maintained.

ngo500 operates internationally, and your Personal Data may be transferred to, stored in, and processed in countries outside Indonesia. Where such international transfers occur, ngo500 takes appropriate safeguards to ensure that your Personal Data receives a level of protection consistent with the principles set out in this Privacy Policy and in accordance with ngo500's international licensing obligations.

Safeguards applied to international transfers include contractual clauses that impose equivalent privacy and security obligations on the receiving party, transfer only to jurisdictions that maintain adequate data protection standards, and ongoing monitoring of third-party compliance.

ngo500 retains Personal Data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law and our international gaming licence conditions. The following general retention guidelines apply:

• Active account data: Retained for the duration of the account's active period and for a minimum of five (5) years following account closure, to meet AML and licensing record-keeping requirements.
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction, in compliance with international anti-money-laundering standards.
• KYC documents: Retained for a minimum of five (5) years from the date of verification, or longer where required by applicable regulatory direction.
• Support and complaint records: Retained for three (3) years from the date of resolution, to support any subsequent dispute or regulatory enquiry.
• Technical and usage logs: Retained for up to twelve (12) months, after which they are aggregated or deleted.
• Marketing consent records: Retained for the duration of your consent and for a reasonable period thereafter as evidence of the consent given.

Upon expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymised so that it can no longer be attributed to any individual.

ngo500 applies industry-standard technical and organisational security measures to protect your Personal Data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption applied to all data in transit between your device and the ngo500 Platform.
• Encrypted storage of sensitive data fields including passwords (stored as salted cryptographic hashes — never in plaintext), financial account identifiers, and identity document numbers.
• Access controls that restrict access to Personal Data to authorised ngo500 personnel on a strict need-to-know basis, enforced through role-based permissions and multi-factor authentication for administrative systems.
• Network-level protections including firewalls, intrusion detection systems, and DDoS mitigation infrastructure.
• Regular security audits conducted by qualified third-party security professionals, with findings acted upon according to risk-based prioritisation.
• Incident response procedures that ensure any personal data breach is identified, contained, and — where required by applicable law — reported to the relevant authority and to affected Users without undue delay.

ngo500 uses cookies and similar tracking technologies to operate and improve the Platform, personalise your experience, and support security and fraud prevention. The following cookie categories are used:

• Strictly Necessary Cookies: Essential to the operation of the Platform — including session management, login authentication, and load balancing. These cannot be disabled without impairing core Platform functionality.
• Performance & Analytics Cookies: Collect anonymised usage data to help ngo500 understand how players interact with the Platform, identify performance issues, and improve the user experience.
• Functionality Cookies: Remember your preferences (e.g., language settings, last visited game categories) to provide a more personalised experience on return visits.
• Security Cookies: Used to detect and prevent fraudulent activity, enforce session integrity, and support KYC and age-verification checks.

You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair the functionality of the ngo500 Platform and may prevent you from accessing certain features. Disabling performance or functionality cookies will not prevent access but may reduce personalisation.

ngo500 does not use cookies to track your activity across third-party websites for advertising purposes, and does not sell cookie-derived data to advertisers or data brokers.

As a User of the ngo500 Platform, you hold the following rights with respect to your Personal Data. To exercise any of these rights, please contact ngo500 via the details in Section 16.

ngo500 will respond to all verified rights requests within thirty (30) calendar days of receipt. In complex cases, this period may be extended by a further two months, with notification provided within the initial thirty-day window. Rights requests are free of charge unless manifestly unfounded or excessive, in which case a reasonable administrative fee may apply.

The ngo500 Platform is strictly for adults aged 21 and over. ngo500 does not knowingly collect Personal Data from any individual under the age of 21. Age verification is a mandatory step in the account registration and KYC process, and ngo500 reserves the right to request documentary proof of age at any time.

Where ngo500 discovers or has reasonable grounds to believe that Personal Data has been collected from a person under 21, that Account will be immediately suspended and all associated Personal Data will be deleted as promptly as applicable law and ongoing KYC obligations permit. Any funds deposited by an underage user will be returned to the payment source after verification.

If you are a parent or guardian and believe that a minor in your care has registered an account on ngo500, please contact us immediately at [email protected]. We will investigate and take appropriate action without delay.

The ngo500 Platform may contain references to third-party services — such as payment networks or game providers — which operate their own websites and privacy policies. ngo500 is not responsible for the privacy practices of any third party and this Privacy Policy does not apply to any third-party website or service. We encourage you to review the privacy policy of any third-party service before providing them with your Personal Data.

ngo500 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory requirements. Where changes are material, ngo500 will notify registered Users via email or an on-Platform notification prior to the updated Policy taking effect.

The current version of this Privacy Policy is always accessible at https://ngo500.club/privacy-policy and is identified by the version number and Last Updated date shown in the page header. Continued use of the Platform following the effective date of any update constitutes acceptance of the revised Privacy Policy.

For any questions, requests, or complaints relating to this Privacy Policy or the way ngo500 processes your Personal Data, please contact us using the details below:

• Email: [email protected]
• Subject line: Privacy Request — [Your Username]
• Response time: General privacy enquiries within 48 hours; formal rights requests within 30 calendar days (WIB)
• Support hours: 24 hours a day, 7 days a week, including Indonesian public holidays
• Languages: English and Indonesian (Bahasa Indonesia)

If you are dissatisfied with ngo500's response to a privacy complaint, you have the right to escalate the matter to the relevant data protection or gaming regulatory authority in the jurisdiction under which ngo500 is licensed. Details of the applicable supervisory authority are available on request.