Privacy Policy – Ubin Naga

Last updated: 5 November 2026

This privacy policy explains what information Ubin Naga ("we", "us") collects when you use the website ubinnaga.site, the game Naga Emas at play.ubinnaga.site and any Ubin Naga app (together, the "Service"), why we collect it and what choices you have. The Service was built to work with as little personal data as possible: you can play without an account, a name or an email address.

1. Who is responsible

The Service is operated by Ubin Naga. For any privacy question or request, write to [email protected].

2. What we collect

When you open the game, our server sets a single session cookie. It holds a random identifier that links your browser to a game session on our server, where we keep your virtual coin balance and any free spins in progress. The cookie contains no name or contact details and is used only to make the game work. It is marked HTTP-only, so other scripts on the page cannot read it.

Settings on your device

The game stores a few small preferences in your browser's local storage, such as your chosen bet step and your sound volume. These stay on your device and are not sent to us.

Server logs

Like nearly every website, our servers and our security provider automatically record technical details when you visit: your IP address, the date and time, the page or file requested, your browser and device type and the referring page. We use these logs to keep the Service secure, to prevent abuse and to fix errors.

Emails you send us

When you contact us, we receive your email address, your message and anything you attach, such as screenshots of a coin seller. We use this only to reply to you and to handle your request or report.

Analytics and advertising

The Service currently uses no analytics or advertising trackers and shows no ads. If we ever add a privacy-friendly analytics tool, we will update this policy first and explain what it collects.

3. What we never collect

bank account, card or e-wallet details, because there are no payments, deposits or withdrawals
identity documents
your contacts, photos, location or other data from your device
passwords, because the Service has no accounts

4. Why we use data

We use the information described above to:

run the game and keep your coin balance during your session
protect the Service against attacks, cheating and abuse
find and fix technical problems
answer your messages and handle reports about fake coin sellers
meet our legal obligations

Our legal basis is either what is needed to provide the Service you asked for, our legitimate interest in keeping it safe and working, or a legal obligation. We do not sell personal data and we do not use it for advertising or profiling.

5. Service providers

We rely on a small number of trusted providers (processors) who handle data on our behalf and only for these purposes:

Hosting provider: runs our web and game servers, where session data and server logs are stored.
Cloudflare: a network and security service that delivers our pages quickly and protects them from attacks. It processes technical data such as IP addresses.
Google Play: once our Android app is available, Google handles downloads, updates and any app purchases under its own privacy policy. We receive only limited, mostly aggregated information from Google, such as install numbers and crash reports.
Email provider: receives and stores the messages sent to [email protected].

Some of these providers may process data on servers outside Indonesia. We choose providers that protect data with appropriate safeguards.

6. How long we keep data

Session data is deleted automatically after a period without activity, or when you clear your cookies.
Server logs are kept for no longer than 90 days, unless we need a specific log for longer to investigate an attack or abuse.
Emails are kept as long as needed to deal with your request, and are then deleted or kept only when the law requires it.

7. Your rights

Under Indonesia's Personal Data Protection Law (Law No. 27 of 2022) and other applicable rules, you may ask us to:

tell you what personal data we hold about you
correct data that is wrong
delete your data
limit or object to certain uses
withdraw consent where we rely on it

Send your request to [email protected]. Because we do not use accounts, we may ask for details that help us find the data, such as the email address you wrote from or the approximate time of a session. You can also delete the session cookie and local settings yourself at any time through your browser settings.

8. Not for under 18s

The Service is intended only for adults aged 18 and over. We do not knowingly collect data from anyone under 18. If you believe a child has sent us personal data, please contact us and we will delete it.

9. Security

We use HTTPS encryption, HTTP-only cookies, restricted server access and a security network to protect the Service. No system is completely secure, but we work to protect the small amount of data we hold and will act promptly if something goes wrong.

10. Changes to this policy

We may update this policy when the Service changes, for example when the Android app is released. The date at the top always shows the latest version. Significant changes will also be announced on the website.

11. Contact

Questions about privacy? Email [email protected] or use our contact page. Please also read our terms of use.

Last updated: 2026-11-05