nobo99 Privacy Policy

nobo99 is an internationally licensed online betting and gaming platform operating at https://nobo99.net. Our platform provides sports betting, live casino games, slot titles, and card game products to adult Members in Indonesia and other eligible jurisdictions where access to such services is legally permissible.

For the purposes of this Privacy Policy, nobo99 acts as the data controller in respect of all personal information collected from Members and visitors through the platform. As data controller, nobo99 determines the purposes for which personal data is processed and the means by which that processing is carried out.

Our primary point of contact for all data-related inquiries is our Data Protection team, reachable at [email protected]. All written correspondence relating to data protection matters should be directed to this address with the subject line "Data Protection Request".

nobo99 collects personal data through a variety of means — directly from you during registration and account use, automatically through your interaction with the platform, and in limited cases from regulated third-party sources such as KYC verification partners. The categories of data we collect are described in the table below.

nobo99 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health information, except where health-related information is voluntarily provided in the context of a responsible gaming self-exclusion or problem gambling support request, in which case it is treated with the highest level of confidentiality and used solely to fulfil that support function.

nobo99 uses the personal data we collect for the following specific purposes. We process data only where we have a valid legal basis to do so (see Clause 4).

• Account Management: Creating, maintaining, and administering your nobo99 Member account, including verifying your identity at registration, processing deposits and withdrawals, and updating account preferences.
• KYC & Regulatory Compliance: Verifying your age (21+), identity, and payment method ownership in fulfilment of our anti-money-laundering (AML) and counter-terrorism financing (CTF) obligations. This includes cross-referencing information against sanction lists and politically exposed persons (PEP) databases operated by regulated third-party compliance partners.
• Fraud Prevention & Security: Detecting, investigating, and preventing fraudulent activity, collusion, bonus abuse, money laundering, and unauthorised access to your account. This includes automated monitoring of betting patterns, device fingerprinting, and IP analysis.
• Platform Delivery: Processing wagers, calculating and crediting winnings, applying bonuses, and providing access to all games and betting markets available on the nobo99 platform.
• Customer Support: Responding to your inquiries, resolving disputes, processing responsible gaming requests, and providing assistance via live chat, email, and WhatsApp in both English and Indonesian.
• Marketing & Promotions: Sending you promotional offers, bonus notifications, and product updates where you have consented to receive such communications. You may withdraw consent at any time by contacting support or using the opt-out link in any marketing email.
• Analytics & Platform Improvement: Analysing aggregated, anonymised usage data to understand how Members interact with the platform, identify areas for improvement, and optimise the overall user experience. Aggregated analytics data does not identify you personally.
• Legal Obligations: Complying with applicable legal requirements, responding to lawful requests from competent regulatory authorities, and enforcing our Terms & Conditions.

nobo99 processes your personal data under the following legal bases, depending on the specific processing activity involved:

• Contractual Necessity: Processing required to perform our contractual obligations to you as a Member — including account management, transaction processing, and game delivery. Without this processing, we cannot provide the service.
• Legal Obligation: Processing required to comply with applicable legal and regulatory requirements, including AML/CTF obligations, age verification, and record-keeping mandates applicable to internationally licensed gaming operators.
• Legitimate Interests: Processing carried out in furtherance of nobo99's legitimate business interests — specifically fraud prevention, platform security, IT system maintenance, and internal analytics — where those interests are not overridden by your data protection rights.
• Consent: Processing based on your explicit, freely given consent — specifically the sending of direct marketing communications and the use of non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of prior processing.

nobo99 uses cookies and similar technologies (including local storage, session tokens, and pixel tags) to operate core platform functions, maintain your authenticated session, and analyse aggregate usage patterns. We do not use third-party advertising cookies or serve retargeted advertising across the open web.

The following categories of cookies are deployed on the nobo99 platform:

You may manage or block cookies through your browser's privacy or security settings. Blocking strictly necessary cookies will prevent you from logging in to or using the nobo99 platform. Blocking functional or analytics cookies will not affect your ability to bet or play games but may reduce personalisation features.

nobo99 does not sell, rent, or trade your personal data. We share data with third parties only where strictly necessary and only under conditions that protect your privacy. The categories of recipients with whom we may share your data are as follows:

• Payment Processors: Indonesian local banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata, Bank Danamon) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) receive the minimum transaction data required to process your deposits and withdrawals. These providers operate under their own regulatory frameworks and privacy policies.
• KYC & Identity Verification Partners: Regulated third-party KYC service providers receive identity documents and personal details submitted during the verification process. These partners are contractually bound to use your data solely for KYC purposes and to maintain it securely.
• Fraud Detection & Security Providers: Automated fraud-monitoring systems and cybersecurity service providers may process Technical Data (IP addresses, device fingerprints, session patterns) to identify and prevent fraudulent activity. No full Identity or Financial Data is shared for this purpose beyond what is minimally required.
• Game Software Providers: When you play a game powered by a third-party studio (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Pocket Games Soft), limited session and wager data is transmitted to that provider's systems for game-delivery purposes. These providers are licensed gaming operators subject to their own regulatory data obligations.
• Regulatory & Law Enforcement Authorities: nobo99 may disclose personal data to competent regulatory, law enforcement, or judicial authorities where required to do so by a valid legal obligation, court order, or regulatory directive. We will, where permitted by law, notify you of any such request before disclosure.

All third-party processors engaged by nobo99 are required to enter into data processing agreements that contractually obligate them to process personal data only on nobo99's documented instructions, to implement appropriate technical and organisational security measures, and to refrain from sub-processing without prior authorisation from nobo99.

As an internationally operating gaming platform, nobo99 may process and store your personal data in countries outside of Indonesia, including in the jurisdiction in which our international gaming licence is held and in the data centre locations used by our infrastructure and service providers.

Where personal data is transferred outside of Indonesia, nobo99 ensures that appropriate safeguards are in place to protect the data at a standard equivalent to or exceeding the protections applicable within Indonesia. These safeguards may include:

• Contractual clauses in data processing agreements with third-party processors that impose legally binding data protection obligations equivalent to those applicable in Indonesia.
• Transfers to jurisdictions that have been assessed as providing an adequate level of data protection by relevant international frameworks.
• Technical measures including end-to-end encryption of data in transit and at rest, ensuring that even where data is processed in a foreign jurisdiction, it remains inaccessible to unauthorised parties.

You may request details of the specific safeguards applicable to any international transfer of your personal data by submitting a written request to [email protected].

nobo99 retains personal data only for as long as necessary to fulfil the purpose for which it was collected and to meet applicable legal, regulatory, and contractual obligations. The following retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised in accordance with nobo99's data disposal procedures. Where anonymisation is not feasible due to the nature of the data, physical destruction of storage media is carried out.

nobo99 conducts periodic data audits to ensure that retention periods are being observed and that no personal data is held beyond its legitimate retention window.

As a Member of the nobo99 platform and as an individual whose personal data we process, you hold the following rights in respect of your personal information. These rights may be exercised by submitting a written request to [email protected] with the subject line "Data Subject Rights Request". We will acknowledge your request within 5 business days and fulfil it within 30 calendar days.

nobo99 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include but are not limited to:

• 256-Bit SSL/TLS Encryption: All data transmitted between your device and nobo99's servers is encrypted in transit using industry-standard TLS 1.2 or higher.
• Encryption at Rest: Sensitive personal data stored on nobo99's servers — including identity documents, financial records, and account credentials — is encrypted at rest using AES-256 encryption.
• Access Controls: Access to Member personal data within nobo99's internal systems is restricted on a strict need-to-know basis. Personnel with access to personal data are subject to confidentiality obligations and receive regular data protection training.
• Multi-Factor Authentication: Internal systems containing Member data are protected by multi-factor authentication for all staff accounts. We also offer and encourage Members to enable two-factor authentication (2FA) on their nobo99 accounts for an additional layer of security.
• Penetration Testing & Vulnerability Management: nobo99's platform infrastructure undergoes regular third-party penetration testing and automated vulnerability scanning. Identified vulnerabilities are triaged and remediated according to their severity rating.
• Incident Response: nobo99 maintains a documented data breach response procedure. In the event of a breach that poses a risk to your rights and freedoms, we will notify you and the relevant regulatory authority within 72 hours of becoming aware of the incident, where legally required.

While nobo99 employs robust security practices, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and for notifying us immediately if you suspect any unauthorised access to your account.

The nobo99 platform is strictly intended for adults aged 21 years and over. We do not knowingly collect personal data from any individual under the age of 21. Our registration process requires users to confirm their date of birth and age, and age verification checks are performed as part of our standard KYC procedure.

If nobo99 discovers at any point that an account has been registered by, or personal data has been collected from, a person under the age of 21, we will immediately:

• Suspend and close the relevant account.
• Return any Real Funds held in the account to the verified payment method of origin.
• Permanently delete all personal data associated with the underage account, except where retention is required by law to record the detection of the underage registration.

If you are a parent or guardian and believe that a minor under your care has registered an account on nobo99, please contact our support team immediately at [email protected] so we can take prompt action.

The nobo99 platform does not contain links to external third-party websites for general browsing purposes. However, payment processing and KYC flows may redirect you temporarily to the secure interfaces of third-party providers (for example, your bank's online portal or an e-wallet authorisation screen) in order to complete a transaction.

nobo99 does not control the privacy practices of third-party websites or services that you visit or interact with independently of the nobo99 platform. If you navigate to any external site — including the websites of payment providers such as BCA, BRI, OVO, or DANA — outside of a nobo99-initiated transaction flow, that site's own privacy policy governs the collection and use of your data, and nobo99 accepts no responsibility for such practices.

We recommend reviewing the privacy policy of any third-party service with which you share personal information.

nobo99 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory guidance. The effective date at the top of this page indicates when the current version entered into force.

Where amendments are material — meaning they substantially alter your rights as a data subject or the manner in which we process your personal data — we will provide advance notice of at least seven (7) calendar days via the email address registered to your account or via a prominent notice within the platform interface. Non-material amendments, such as clarifications or typographical corrections, may be published without advance notice.

Continued use of the nobo99 platform following the effective date of any amended Privacy Policy constitutes your acceptance of the revised version. If you do not accept the revised policy, you must discontinue use of the platform and may request account closure by contacting our support team.

We encourage you to review this Privacy Policy periodically to stay informed about how nobo99 is protecting your information. The current version will always be accessible at https://nobo99.net/privacy-policy.

If you have any questions about this Privacy Policy, wish to exercise any of your data subject rights, or wish to raise a concern about how nobo99 handles your personal information, please contact our Data Protection team through any of the following channels:

• Email: [email protected] — Subject line: "Data Protection Request" or "Privacy Complaint"
• WhatsApp: +62 811-9900-999 — Available 24/7, with Indonesian-speaking agents during WIB (UTC+7) business hours
• Live Chat: Available 24/7 via the nobo99 platform, staffed by agents trained to handle data protection inquiries

nobo99 will acknowledge all privacy-related correspondence within 2 business hours and aims to provide a substantive response within 5 business days. Complex data subject rights requests (such as full data access requests or erasure requests requiring legal assessment) will be fulfilled within 30 calendar days of receipt.

If you are not satisfied with nobo99's response to a privacy complaint, you have the right to escalate your complaint to the relevant data protection supervisory authority in the jurisdiction in which our international gaming licence is held. Details of the relevant supervisory authority will be provided upon request.