Legal
Privacy notice
What Ninja Saga EVO collects about you, why, how long it is kept, and the choices you have. Written to be read, not skimmed.
Draft: pending review by counsel
Version v1This notice reflects what the software does today. It has not been reviewed by a lawyer, the legal basis for each use is still to be confirmed, and the controller's legal identity and address will be added before public launch.
What we collect and why
Only what the portal, the game and the store need. There is no advertising, no tracking pixel and no third-party analytics on this site.
| Data | What it contains | Why |
|---|---|---|
| Account details | Username, email address, password (stored only as a hash), account type, the date you joined. | To create and secure your account, verify your email and let you sign in. |
| Consent records | Which version of the terms and of this notice you accepted, when, and the IP address of that request. | To prove acceptance and to ask you again when a document changes. |
| Game rules and penalties | Which version of the Game Rules you accepted, when, the language shown and the IP address; penalties given to your account with the rule, the evidence, the staff member and the reason. | To enforce the Code of Conduct, answer appeals and show you your own record on the Game Rules page. |
| Game data | Characters, levels, inventory, progress and in-game mail tied to your account. | To run the game and to deliver purchases to the right character. |
| Purchase records | Orders, the product version sold, the price paid in rupiah, delivery status, and for resellers the deposit and wallet ledger. We never see or store card numbers. | To deliver what you bought, to resolve disputes and to meet bookkeeping duties. |
| Technical logs | IP address, request time and the page or call made, kept for a limited period. | To keep the service secure, to rate-limit abuse and to diagnose faults. |
How penalties are given, how long a record counts and how to appeal is set out in the Game Rules (Code of Conduct).
Who else sees it
Payment provider
When direct checkout is enabled, the QRIS provider receives the order reference and the amount so it can generate the payment code and report that the payment arrived. It does not receive your name, email or game data.
Verified resellers
A reseller who delivers to your character can see the character name, level, rank, the year it was created and whether the account already has the Premium Emblem. They never see your email, username or account id.
Email delivery
Verification and password-reset messages go through the mail provider configured for the portal. Which provider that is will be named here once it is chosen for production.
Nobody else
We do not sell or rent your data. We disclose it only when the law requires it or to protect players and the service from abuse.
Cookies and browser storage
The portal sets a session cookie so you stay signed in and a token that protects forms against forgery. If you tick "keep me signed in", a second cookie remembers you on that device.
Your theme choice (dark or light) is kept in your browser's local storage and never leaves it. No cookie is used for tracking or advertising, so there is no cookie banner to click through.
How long we keep it
Account and game data stay while the account exists. Purchase, deposit and ledger records are kept for as long as bookkeeping rules require after the account closes. Technical logs are kept for a short, fixed period that will be stated here once set. Exact retention periods are part of the counsel review.
Your choices
You can change your password from the account page. You can ask us for a copy of your data, to correct it, or to delete your account; today these requests are handled by hand through the support page, and a self-service option is not built yet. Deleting an account removes its characters and cannot be undone; purchase records that we must keep are retained without the link to you where the law allows.
Children
The minimum age and how parental consent is collected are being settled with counsel. Until then registration asks you to confirm that you meet the age requirement or have a guardian's permission.
Contact
Privacy questions and data requests go through the support page, which lists the current contact address.
Draft v1, written 2026-11-09. Nothing in this draft has been reviewed by counsel.