noza78 Privacy Policy

Definitions

In this Privacy Policy, the following terms carry the meanings set out below unless context requires otherwise:

• "noza78" / "we" / "us" / "our" — the online gaming platform operated at https://noza78.pro, including its operators, technical infrastructure, and customer support teams.
• "Member" / "you" / "your" — any individual who has created a registered account on noza78 or who otherwise interacts with the Platform, including visitors who have not yet registered.
• "Personal Data" — any information that, alone or in combination with other data, can reasonably identify you as a specific individual, including your full name, date of birth, national identity number, contact details, payment account information, and device identifiers.
• "Processing" — any operation performed on Personal Data, whether by automated means or otherwise, including collection, recording, storage, alteration, retrieval, consultation, use, disclosure, restriction, erasure, or destruction.
• "KYC Data" — identity verification documents and related personal information submitted during the Know Your Customer verification process, including photographs of your Indonesian National Identity Card (KTP) and any supplementary proof of payment account ownership.
• "Cookies" — small text files placed on your device by the noza78 Platform that store session identifiers, preference data, and analytics markers to enable core platform functionality and improve your experience.
• "Third-Party Processor" — any external company or service provider engaged by noza78 under a data processing agreement to perform specific functions on our behalf, such as payment gateway operators, identity verification providers, and cloud hosting services.
• "Data Subject Rights" — the rights held by individuals with respect to their Personal Data under applicable data protection law, as described in Clause 10 of this Policy.

Data We Collect

noza78 collects Personal Data through several channels, depending on how you interact with the Platform. The categories of data we collect are as follows:

2.1 Registration Data

When you create a noza78 Account, we collect your full legal name (as it appears on your KTP), date of birth, Indonesian mobile number, email address, preferred username, and a securely hashed version of your chosen password. We do not store your password in plain text.

2.2 Identity Verification (KYC) Data

Before processing your first withdrawal, we collect a clear scan or photograph of your Indonesian National Identity Card (KTP), a selfie photograph holding your KTP, and in some cases a photograph of your registered bank passbook or e-wallet account screen confirming account ownership. This data is collected once and retained for the minimum period required by our compliance obligations.

2.3 Financial Transaction Data

We record details of all deposits and withdrawals conducted through your noza78 Account, including the transaction amount (in IDR), the payment method used (e.g., BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja), transaction timestamps, and the reference numbers issued by the relevant payment provider. We do not store full bank account numbers or e-wallet PINs on our servers.

2.4 Gameplay and Betting Data

We maintain records of all wagers placed, games played, bet amounts, outcomes, and bonus redemptions associated with your Account. This data is used for account integrity monitoring, responsible gaming analysis, and dispute resolution.

2.5 Device and Technical Data

When you access noza78, our servers automatically log your IP address, browser type and version, operating system, device type, screen resolution, referring URL, session duration, and pages visited. This data is collected through server logs and first-party cookies.

2.6 Communications Data

If you contact noza78 via live chat, email, or any other support channel, we retain a record of that correspondence, including the content of messages sent, timestamps, and the outcome of any support interaction. This allows us to provide consistent support and to resolve recurring issues efficiently.

How We Use Your Data

noza78 uses the Personal Data described in Clause 2 for the following specific purposes:

Legal Basis for Processing

noza78 processes your Personal Data only where we have a valid legal basis for doing so. The legal bases we rely on are:

• Contractual Necessity: Processing is required to perform the contract between you and noza78 — specifically, to maintain your Account, accept and settle wagers, process deposits and withdrawals, and deliver the gaming services you have requested.
• Legal Obligation: Processing is necessary for noza78 to comply with applicable legal requirements, including anti-money laundering (AML) regulations, age verification mandates, and record-keeping obligations imposed by our gaming license conditions.
• Legitimate Interests: Processing is necessary for purposes that are in noza78's legitimate interests and that do not override your fundamental privacy rights. This includes fraud prevention, platform security, internal analytics, and responsible gaming monitoring that protects members from harm.
• Consent: For processing activities that are not strictly necessary — in particular, sending you personalized marketing communications about promotions, bonuses, and new game releases — noza78 relies on your freely given, informed, and specific consent. You retain the right to withdraw this consent at any time without affecting the lawfulness of processing carried out before withdrawal.

Sharing Your Data

5.1 Third-Party Processors

noza78 shares Personal Data with a limited set of Third-Party Processors who are engaged under formal data processing agreements that require them to handle your data in a manner consistent with this Privacy Policy and applicable data protection law. These processors include:

• Payment Gateway Providers — to facilitate deposits and withdrawals via Indonesian bank transfer and e-wallet services including BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, and LinkAja.
• Identity Verification Services — to conduct automated or manual KYC checks on submitted identity documents.
• Cloud Infrastructure Providers — to host, store, and back up platform data in secure data centers with industry-standard physical and logical access controls.
• Game Studio Partners — game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft receive anonymized session data necessary to operate their games within the noza78 platform. These studios do not receive your personally identifiable registration data.
• Customer Support Tools — our live chat and ticketing infrastructure providers receive the content of your support communications solely for the purpose of enabling efficient customer service delivery.

5.2 Legal Disclosures

noza78 may disclose your Personal Data to regulatory bodies, law enforcement agencies, or courts of competent jurisdiction where we are legally required to do so, or where we reasonably determine that disclosure is necessary to prevent fraud, investigate a security incident, or protect the safety of our members or the public.

5.3 Business Transfers

In the event of a merger, acquisition, or sale of all or a substantial part of noza78's business assets, your Personal Data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and the identity of the acquiring entity via the email address registered on your Account before the transfer takes effect.

Cookies & Tracking Technologies

6.1 Types of Cookies Used

noza78 uses first-party cookies and similar tracking technologies to operate the Platform and improve your experience. The categories of cookies deployed are:

6.2 Managing Cookies

Strictly necessary cookies cannot be disabled as they are essential to Platform functionality. You may disable functional and analytics cookies through your browser settings; however, doing so may affect certain features of the Platform, including session persistence across visits. Detailed instructions for managing cookies are available in the help documentation of major browsers including Chrome, Firefox, Safari, and Samsung Internet.

Data Retention

noza78 retains Personal Data for the minimum period necessary to fulfill the purposes for which it was collected, subject to any longer retention period required by applicable legal, regulatory, or compliance obligations. The following retention periods apply:

Upon expiry of the applicable retention period, Personal Data is either permanently deleted from our systems or anonymized in a manner that makes re-identification impossible, so that the resulting data set can be retained for aggregate statistical purposes without identifying any individual.

Data Security

noza78 maintains a comprehensive information security program designed to protect your Personal Data against unauthorized access, accidental loss, alteration, and destruction. Our key security measures include:

• Transport Encryption: All communications between your device and noza78's servers are encrypted using TLS 1.2 or higher. Our SSL certificate is publicly verifiable in your browser's address bar.
• Encryption at Rest: All database fields containing Personal Data, KYC documents, and financial records are encrypted at rest using AES-256 encryption. Encryption keys are managed separately from the encrypted data and rotated on a scheduled basis.
• Access Controls: Access to Personal Data within noza78's systems is restricted to authorized personnel on a strict need-to-know basis. All internal access is logged, and privileged access events are subject to real-time alerting.
• Multi-Factor Authentication: Member accounts support multi-factor authentication (MFA) to provide an additional layer of protection beyond your password.
• Penetration Testing: noza78 commissions periodic independent security assessments, including penetration testing and vulnerability scanning, to identify and remediate potential weaknesses in our platform architecture.
• Incident Response: In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, noza78 will notify affected members via the email address on file as soon as reasonably practicable after discovering the breach, describing its nature, the categories of data affected, and the remediation steps taken.

International Data Transfers

noza78 is an internationally operated platform and may transfer your Personal Data to servers or Third-Party Processors located outside Indonesia. When such transfers occur, noza78 ensures that appropriate safeguards are in place to maintain a level of data protection equivalent to the standards described in this Privacy Policy. These safeguards include:

• Entering into data processing agreements with all Third-Party Processors that impose binding privacy and security obligations equivalent to those applicable under this Policy.
• Preferring cloud infrastructure providers that offer data residency options within the Asia-Pacific region, reducing unnecessary cross-border data flows where technically feasible.
• Applying contractual clauses to any data transfer that require the receiving party to implement technical and organizational measures adequate to protect your data.

By registering a noza78 Account and using our services, you acknowledge that your Personal Data may be transferred to and processed in jurisdictions outside Indonesia. Where such transfers are necessary for the provision of services you have requested — for example, for real-time payment processing via international payment networks — they are carried out on the basis of contractual necessity as described in Clause 4.

Your Data Subject Rights

As a registered member of noza78, you hold the following rights with respect to your Personal Data. To exercise any of these rights, contact our data privacy team using the details in Clause 14. We will respond within 30 calendar days of receiving your request.

• Right of Access: You may request a copy of the Personal Data noza78 holds about you, along with information about how it is processed, the categories held, the retention period applicable, and the recipients to whom it has been disclosed.
• Right to Rectification: If any Personal Data noza78 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. For basic Account details such as your mobile number or email address, you may update these directly through your Account dashboard.
• Right to Erasure: You may request the deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent and no other legal basis applies, or where the data has been processed unlawfully. This right is subject to overriding legal retention obligations described in Clause 7.
• Right to Restriction of Processing: You may request that noza78 restrict the processing of your Personal Data — meaning we store it but do not actively use it — while a dispute about its accuracy or the lawfulness of its processing is being resolved.
• Right to Data Portability: You may request a copy of the Personal Data you have provided to noza78 in a structured, commonly used, machine-readable format (such as CSV or JSON), so that you can transmit it to another service provider if you choose.
• Right to Object: You may object at any time to the processing of your Personal Data for direct marketing purposes. Upon receipt of such an objection, noza78 will immediately cease using your data for marketing and update your communication preferences accordingly.
• Right to Withdraw Consent: Where processing is based on your consent (as described in Clause 4), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that took place before the withdrawal.

Children's Privacy

noza78's services are strictly intended for adults aged 21 years and over. We do not knowingly collect Personal Data from individuals under the age of 21. Our registration process requires users to confirm their date of birth, and our KYC verification process is designed to detect and reject applications from minors.

If noza78 discovers or is notified that Personal Data has been collected from a person under the age of 21 — whether through a false declaration of age at registration or any other means — we will immediately close that Account, void all associated activity, return any legitimately deposited funds to the source payment method after applicable identity verification, and permanently delete all Personal Data associated with that Account from our systems without undue delay.

If you have reason to believe that a person under the age of 21 has registered a noza78 Account, please contact our support team immediately using the details in Clause 14 so that we can investigate and take appropriate action.

Third-Party Links

The noza78 Platform may, from time to time, contain references or links to third-party websites, game studio microsites, payment provider portals, or informational resources that are operated independently of noza78. This Privacy Policy applies exclusively to data collected by noza78 through the noza78 Platform. We are not responsible for the privacy practices, data collection policies, or content of any third-party websites or services.

We strongly encourage you to review the privacy policies of any third-party services you access in connection with your use of noza78, particularly payment provider portals and banking applications, as their data practices will govern your interaction with those services.

Policy Amendments

noza78 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or Platform functionality. When material changes are made to this Policy, we will notify registered members via the email address on file at least 14 days before the revised Policy takes effect, except where an immediate update is required by law or by a regulatory directive.

The "Last updated" date at the top of this document will always reflect the date on which the most recent revision was made. We encourage you to review this Policy periodically to stay informed about how noza78 handles your Personal Data.

Your continued use of the noza78 Platform following the effective date of any revised Privacy Policy constitutes your acknowledgment of the changes. If you do not agree with a revised Policy, you should cease using the Platform and close your Account in accordance with the procedures described in our Terms & Conditions.

Contact & Data Requests

If you have any questions about this Privacy Policy, wish to exercise any of your Data Subject Rights as described in Clause 10, or wish to raise a concern about the way in which noza78 handles your Personal Data, please contact our data privacy team using the details below:

• Email: [email protected] (plain text — not a clickable link)
• Subject line: Please include "Privacy Request — [Your Username]" in the subject line of your email to ensure your request is routed directly to our data privacy team.
• Response time: We aim to acknowledge all privacy-related requests within 3 business days (WIB, UTC+7) and to provide a substantive response within 30 calendar days of receipt.
• Identity verification: To protect your privacy, we may request that you verify your identity before we action any data subject rights request. This is to ensure that Personal Data is only disclosed to or deleted at the request of the Account holder.