nos79 Privacy Policy

In this Privacy Policy, the following terms carry the meanings defined below unless the context indicates otherwise:

• "nos79," "we," "us," "our" — the operator of the Platform at https://nos79.app and all associated sub-domains and services.
• "Platform" — the nos79 website, mobile web application, and all related digital services, games, and tools accessible via nos79.app.
• "Player," "you," "your" — any individual who visits, registers on, or uses the nos79 Platform.
• "Personal Data" — any information that identifies or could reasonably be used to identify a living individual, including name, email address, phone number, device identifiers, and financial account details.
• "Processing" — any operation performed on Personal Data, including collection, storage, use, disclosure, transfer, or deletion.
• "KYC" — Know Your Customer; the identity and age verification process nos79 uses to confirm player eligibility in accordance with responsible gaming and anti-money-laundering obligations.
• "Cookies" — small text files placed on your device by the Platform to support session management, functionality, and analytics.
• "IDR" — Indonesian Rupiah; the sole currency in which nos79 Account balances and transactions are denominated.
• "Third-Party Processor" — an external company engaged by nos79 to process Personal Data on our behalf under a data processing agreement, such as payment gateway providers and KYC verification services.

This Privacy Policy applies to all Personal Data collected by nos79 when you interact with the Platform in any capacity — whether as a registered Player, a visitor browsing the site, or an individual contacting our support team.

This Policy governs data collected through:

• The nos79 website at https://nos79.app and all pages within that domain;
• Live chat, email, and WhatsApp support interactions;
• Account registration, KYC submission, and financial transaction flows;
• Participation in games, sports betting markets, promotional campaigns, and loyalty programs;
• Cookies and analytics tools operating on the Platform.

This Privacy Policy does not apply to third-party websites, payment processors, or game studios that operate their own independent privacy policies. Where the nos79 Platform links to or integrates with third-party services, we encourage you to review those parties' privacy notices directly.

nos79 collects the following categories of Personal Data, depending on how you interact with the Platform:

nos79 does not knowingly collect sensitive categories of personal data (such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data beyond what is inherent in standard identity document review) unless specifically required for AML or legal compliance purposes.

nos79 collects your Personal Data through the following methods:

• Directly from you: when you register an Account, complete KYC, make a deposit or withdrawal, contact support, or participate in a promotion, you actively provide us with Personal Data.
• Automatically: when you visit or use the Platform, we automatically collect Technical Data and Usage Data via server logs, cookies, and similar tracking technologies. This data is collected regardless of whether you are logged into an Account.
• From third-party KYC partners: when you submit identity documents for verification, our approved KYC verification partner may return enriched data about your identity (e.g., confirmation of document authenticity).
• From payment processors: when you deposit or withdraw funds, our payment partners (including local bank transfer gateways and e-wallet providers) share transaction confirmation data with nos79 to reconcile your Account balance in IDR.
• From fraud-prevention services: nos79 may receive signals from third-party fraud intelligence providers indicating whether an IP address, device, or payment method is associated with known fraudulent activity.

nos79 processes your Personal Data only for specific, legitimate purposes. The table below sets out the main purposes for which we use each category of data:

nos79 does not process your Personal Data for purposes beyond those listed above without first obtaining your consent or identifying a new legitimate legal basis. We do not use automated decision-making (including profiling) in ways that produce legal or similarly significant effects on you without human oversight.

nos79 relies on the following legal grounds when processing your Personal Data:

• Contractual necessity: Processing that is necessary to perform our agreement with you as a registered Player — including account management, payment processing, and game delivery — is carried out on the basis that it is required to fulfill our contract with you.
• Legal obligation: Certain processing activities — in particular KYC verification, AML monitoring, and record-keeping — are required by applicable legal and regulatory frameworks. nos79 must carry out this processing regardless of your individual preferences.
• Legitimate interests: nos79 processes Technical Data, Usage Data, and Gaming Data for fraud prevention, platform security, and service improvement on the basis of our legitimate interest in operating a safe and high-quality platform, balanced against your privacy rights.
• Consent: Where nos79 sends you direct marketing communications or deploys non-essential analytics cookies, we rely on your freely given, informed consent. You may withdraw this consent at any time without affecting the lawfulness of processing carried out before withdrawal.

nos79 does not sell your Personal Data. We share your data only in the following limited and controlled circumstances:

• Payment processors and banking partners: To facilitate deposits and withdrawals, nos79 shares necessary Financial Data and Identity Data with payment gateways, local Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata), and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja). These partners process data solely to execute the financial transaction.
• KYC verification providers: Identity documents and biographic data are shared with our approved KYC partner to carry out identity and age verification. This partner is contractually prohibited from using your data for any purpose other than verification on nos79's behalf.
• Game studio providers: When you play games hosted by third-party studios — including Pragmatic Play, Evolution Gaming, PG Soft, Microgaming, NetEnt, Pocket Games Soft, and Spribe — limited session and technical data is shared with those studios to deliver the game experience. Each studio operates under its own licensing and data obligations.
• Fraud and security services: nos79 may share Technical Data (IP address, device fingerprint) with fraud prevention services to protect the integrity of the Platform and all its users.
• Legal and regulatory authorities: nos79 may disclose Personal Data to law enforcement, regulatory bodies, or judicial authorities where required to do so by law, court order, or to protect the legal rights of nos79 or third parties.
• Business transfers: In the event that nos79 undergoes a merger, acquisition, or asset sale, your Personal Data may be transferred to the relevant successor entity, provided that the successor is bound by privacy obligations no less protective than this Policy.

nos79 retains your Personal Data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. The following retention periods apply as a general guide:

• Account and Identity Data: Retained for the duration of your Account and for a minimum of 5 years following permanent Account closure, in compliance with AML record-keeping obligations.
• KYC Documents: Retained for a minimum of 5 years following the completion of the verification process, or longer where required by applicable law.
• Financial Transaction Records: Retained for a minimum of 5 years following the date of each transaction, in line with international AML standards.
• Gaming Logs: Retained for a minimum of 3 years to support dispute resolution, responsible gaming monitoring, and platform integrity investigations.
• Support Communications: Retained for 2 years following closure of the relevant support ticket, unless the communication relates to an open dispute or legal matter.
• Marketing Consent Records: Retained for the duration of the consent and for 2 years after withdrawal, to demonstrate compliance.
• Cookie and Analytics Data: Retained in aggregated or anonymized form for up to 24 months.

When Personal Data is no longer required, nos79 securely deletes or anonymizes it. Where anonymization is applied, the resulting data is no longer Personal Data and may be retained indefinitely for statistical and analytical purposes.

nos79 takes the security of your Personal Data seriously and implements a range of technical and organizational measures to protect it against unauthorized access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and nos79 servers;
• Encryption at rest for databases containing sensitive Personal Data, including KYC documents and financial records;
• Role-based access controls ensuring that only authorized nos79 personnel with a documented operational need may access your data;
• Comprehensive access logging and audit trails for all interactions with systems holding Personal Data;
• Regular security assessments and penetration testing of the Platform infrastructure;
• Multi-factor authentication requirements for internal staff accessing sensitive data systems.

Despite these measures, no internet transmission or electronic storage system is entirely immune to risk. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, nos79 will notify affected Players promptly and take all reasonable steps to contain and remediate the incident.

nos79 uses cookies and similar technologies on the Platform to deliver core functionality, maintain your session, and analyze Platform usage. We do not use cookies for cross-site behavioral advertising or for sharing your data with third-party ad networks.

The following types of cookies are used on the nos79 Platform:

You may configure your browser to refuse or delete cookies. Disabling essential cookies will impair the functionality of the nos79 Platform — in particular, you will not be able to maintain a logged-in session. Disabling analytics cookies will not affect your ability to play or transact on the Platform.

nos79 does not use pixel tracking, web beacons, or fingerprinting technologies for purposes beyond fraud prevention and essential security monitoring.

As a Player on the nos79 Platform, you have the following rights with respect to your Personal Data. To exercise any of these rights, please contact us at [email protected] or via live chat, providing your registered Account username and a clear description of your request.

• Right of Access: You have the right to request a copy of the Personal Data nos79 holds about you, along with information about how it is being processed. We will respond to access requests within 30 days.
• Right to Rectification: If any Personal Data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update certain data directly via your Account profile; other corrections require identity verification before they can be applied.
• Right to Erasure: You may request that nos79 delete your Personal Data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (and no other legal basis applies), or where it has been processed unlawfully. Note that nos79 may be required by law to retain certain data (e.g., KYC records and transaction histories) even following an erasure request.
• Right to Restrict Processing: You may request that nos79 temporarily limit the processing of your Personal Data while a correction or objection request is under review.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity, and is carried out by automated means, you may request that we provide your Personal Data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing based on nos79's legitimate interests, and to processing for direct marketing purposes. We will stop processing for marketing immediately upon receipt of an objection. For legitimate-interest processing, we will cease unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., for marketing communications or non-essential analytics cookies), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

The nos79 Platform is strictly for adults aged 21 and over. nos79 does not knowingly collect Personal Data from individuals under the age of 21, and we do not permit minors to register Accounts or participate in any gambling or gaming activity on the Platform.

If you are a parent or guardian and you believe that a minor under your care has provided Personal Data to nos79 or created an Account, please contact us immediately at [email protected]. Upon verification of the concern, nos79 will promptly suspend the Account, delete all associated Personal Data to the extent permitted by law, and refund any deposits made, minus any applicable processing fees.

nos79 employs KYC age verification to enforce the 21+ requirement. Players who cannot provide satisfactory proof of age will not be permitted to deposit, play, or withdraw funds. Any winnings accrued by a player subsequently found to be underage will be forfeited in line with our responsible gaming obligations.

For more information on nos79's responsible gaming commitment, please visit our dedicated Responsible Gaming page.

nos79 operates infrastructure that may involve the transfer of Personal Data to servers or service providers located outside of Indonesia. Such transfers are carried out only where necessary and subject to appropriate safeguards, including:

• Data processing agreements with Third-Party Processors that impose data protection obligations consistent with internationally recognized standards;
• Technical security measures (encryption in transit and at rest) that apply regardless of the geographic location of the processing;
• Strict contractual restrictions on the use of transferred data, limiting it to the specific purpose for which the transfer was made.

nos79 does not transfer Personal Data to any jurisdiction known to present a materially higher risk to data subjects without first implementing appropriate contractual or technical safeguards. If you have questions about the international transfer of your data, please contact us at [email protected].

nos79 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or Platform features. When material changes are made, we will update the effective date at the top of this document and, where reasonably practicable, notify registered Players via email or an in-platform notification prior to the change taking effect.

Your continued use of the nos79 Platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with the updated Policy, you should stop using the Platform and request Account closure by contacting our support team.

We encourage all Players to review this Privacy Policy periodically to stay informed about how nos79 is protecting their Personal Data. Archived versions of previous policies are available upon request by contacting [email protected].

If you have any questions, concerns, or requests relating to this Privacy Policy or nos79's handling of your Personal Data, please contact our Data Protection team through any of the following channels:

• Email: [email protected] — please include "Privacy Request" in the subject line and your registered Account username in the message body.
• Live Chat: Available 24/7 via the chat widget on the Platform (00:00–24:00 WIB).
• WhatsApp: +62 811 0000 7979 — available 08:00–22:00 WIB.

For data rights requests (access, correction, erasure, portability, or objection), please specify the type of request and provide sufficient information to verify your identity before we can action your request. We aim to acknowledge all privacy-related enquiries within 2 business days and to resolve them within 30 calendar days.

For responsible gaming concerns, including self-exclusion requests and deposit limit changes, please visit our Responsible Gaming page, where dedicated guidance and direct access to our compliance support team are available.