Privacy Policy

nusa98 ("we", "us", "our", or "the Platform") operates the online betting and live casino platform accessible at nusa98.cam and is committed to protecting the privacy and personal data of all registered Members and website visitors ("you", "your").

This Privacy Policy ("Policy") describes how nusa98 collects, receives, uses, stores, processes, discloses, transfers, and otherwise handles personal data in connection with your use of the nusa98 website, mobile interfaces, and all related services (collectively, the "Services"). It applies to all individuals who register an account, visit the website, or otherwise interact with nusa98 — including residents of Jakarta, Surabaya, Bandung, Medan, Bali, Yogyakarta, and all other regions of Indonesia.

This Policy should be read in conjunction with our Terms & Conditions and Responsible Gaming Policy. By registering an account or using the Services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you should discontinue use of the Services.

The following definitions apply throughout this Privacy Policy:

• "Personal Data" means any information that identifies or can reasonably be used to identify a natural person, either directly (e.g., full name, email address) or indirectly (e.g., device fingerprint, IP address combined with other identifiers).
• "Processing" means any operation performed on Personal Data, including collection, recording, organization, storage, adaptation, retrieval, use, disclosure, transmission, erasure, or destruction.
• "Data Controller" means nusa98, which determines the purposes and means of processing Member Personal Data.
• "Data Processor" means any third party that processes Personal Data on behalf of nusa98 under a written agreement, such as payment processors, cloud infrastructure providers, and fraud detection services.
• "Consent" means a freely given, specific, informed, and unambiguous indication of your agreement to the processing of your Personal Data for a stated purpose.
• "KYC Data" means identity and verification documents submitted by a Member for the purpose of Know Your Customer verification, including copies of KTP (Indonesian National Identity Card), passport, and proof-of-address documents.
• "Cookie" means a small text file placed on your device by the nusa98 platform for the purposes of session management, functionality, and analytics.
• "Sensitive Data" means a subset of Personal Data that warrants heightened protection, including government-issued identity numbers, financial account details, and any data relating to health or wellbeing submitted in the context of responsible gaming requests.

nusa98 collects the following categories of personal data from Members and website visitors:

nusa98 collects personal data through the following channels:

• Direct submission: Information you actively provide when registering an account, completing KYC verification, submitting deposit or withdrawal requests, contacting our support team, or activating responsible gaming tools.
• Automated collection: Technical data collected automatically when you access the nusa98 website or platform — including IP addresses, browser identifiers, session cookies, and server-side access logs — using standard web server and analytics technologies.
• Payment providers: Confirmation data returned by payment processors (BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, LinkAja) when a deposit or withdrawal transaction is initiated or completed. nusa98 does not receive or store full bank account credentials; only tokenized or masked payment references are retained.
• Identity verification services: Where nusa98 uses a third-party KYC or identity verification service, that provider may return a verification result and risk score, which is stored alongside your KYC record.
• Fraud and security monitoring: Passive data signals including device fingerprint, geolocation data, and behavioral analytics generated during your use of the platform, used exclusively for fraud prevention and account security purposes.

nusa98 processes your personal data only where a valid lawful basis exists. The following table summarizes the primary purposes of processing and the corresponding lawful basis for each:

Where processing is based on consent — for example, for promotional email communications — you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal. To withdraw consent for marketing communications, contact our support team at [email protected] or adjust your Account notification preferences.

nusa98 does not sell your personal data. We share personal data only in the limited circumstances described below, and only to the extent necessary for the stated purpose:

• Payment Processors: We share relevant transaction data with Indonesian payment providers — including BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, and LinkAja — solely to facilitate the processing of deposits and withdrawals requested by the Member.
• KYC and Identity Verification Providers: Where we engage a third-party identity verification service, relevant KYC documents and identity data are shared with that provider under a strict data processing agreement. The provider is prohibited from using this data for any purpose other than performing the verification service on our behalf.
• Fraud Prevention and Security Services: Anonymized or pseudonymized technical data (device fingerprints, IP addresses, behavioral signals) may be shared with fraud prevention platforms to protect nusa98 and its Members against unauthorized access, account takeover, and financial crime.
• Cloud Infrastructure and Hosting Providers: Member data is stored on servers operated by reputable cloud infrastructure providers contracted by nusa98. These providers act as Data Processors under written agreements that prohibit independent use of Member data.
• Game Content Providers: Aggregated, non-personally-identifying session data may be shared with game studios (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, and Spribe) for the purpose of game performance analytics, RNG certification, and regulatory audits. No individually identifiable data is shared with game studios without your explicit consent.
• Law Enforcement and Regulatory Authorities: nusa98 may disclose personal data to competent governmental or regulatory authorities where required by applicable law, court order, or lawful regulatory demand — including AML-related reporting obligations. nusa98 will, where legally permitted, notify affected Members of such disclosures.
• Business Transfers: In the event of a merger, acquisition, restructuring, or sale of all or part of nusa98's business, Member personal data may be transferred to the acquiring or successor entity, subject to equivalent privacy protections. Affected Members will be notified of any such transfer in advance.

nusa98 uses cookies and similar technologies (including local storage, session tokens, and pixel tags) to operate the platform, maintain session integrity, and collect anonymized analytics data. The following cookie categories are used:

nusa98 does not deploy behavioral advertising cookies, cross-site tracking pixels, or third-party social media tracking tools. You may configure your browser to refuse all cookies or to alert you when cookies are being set; however, disabling Strictly Necessary cookies will prevent you from logging in to or using the nusa98 platform.

nusa98 retains personal data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable law. The following retention periods apply:

• Active Account Data (identity, contact, financial data): Retained for the full duration of account activity, and for a minimum of 5 years following account closure, to satisfy AML and regulatory record-keeping obligations.
• KYC Documents: Retained for a minimum of 5 years from the date of submission, or longer if required by applicable regulatory obligations in force at the time.
• Transaction Records: Deposit, withdrawal, and betting history records are retained for a minimum of 5 years following the date of each transaction.
• Customer Support Communications: Support tickets, live chat transcripts, and email correspondence are retained for 3 years from the date of last interaction in the relevant case.
• Technical and Analytics Data: Server logs and anonymized analytics data are retained for a maximum of 24 months, after which they are permanently deleted or fully anonymized.
• Marketing Consent Records: Records of your consent to (or withdrawal of consent from) promotional communications are retained for 3 years from the date of the most recent consent action.

Upon expiry of the applicable retention period, personal data is securely deleted or permanently anonymized in accordance with nusa98's internal data disposal procedures. Anonymized data (from which no individual can be identified) may be retained indefinitely for statistical and analytical purposes.

nusa98 implements a layered approach to data security, combining technical, organizational, and procedural controls to protect Member personal data against unauthorized access, disclosure, alteration, or destruction.

• Encryption in Transit: All data exchanged between your device and nusa98's servers is encrypted using 256-bit TLS (Transport Layer Security) — equivalent to the encryption standard applied by major Indonesian banks including BCA, BRI, BNI, and Mandiri.
• Encryption at Rest: Personal data and KYC documents stored on nusa98's servers are encrypted at rest using AES-256 encryption. Database access requires multi-factor authentication by authorized personnel only.
• Access Controls: Internal access to Member personal data is strictly limited on a need-to-know basis. All staff with data access undergo background screening and receive ongoing data protection training. Access events are logged and periodically audited.
• Penetration Testing: nusa98's platform undergoes regular third-party security assessments, including penetration testing, to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: In the event of a data security incident that affects Member personal data, nusa98 will notify affected Members by email within 72 hours of becoming aware of the breach, where technically and legally feasible. The notification will describe the nature of the incident, the data affected, the steps nusa98 has taken, and the recommended actions for Members.

As a nusa98 Member, you hold the following rights with respect to your personal data. To exercise any of these rights, submit a written request to [email protected]. nusa98 will acknowledge your request within 5 business days and fulfill it within 30 calendar days, subject to identity verification and any applicable legal limitations.

Please note that certain rights — in particular the right to erasure — may be limited where nusa98 is required to retain data to comply with applicable AML legislation, KYC regulatory requirements, or ongoing legal proceedings. Where a right cannot be fulfilled in full, nusa98 will provide a written explanation of the limitation and the legal basis for it.

nusa98 is strictly an adults-only platform. The Services are not directed at, and must not be used by, any individual under the age of 21. nusa98 does not knowingly collect personal data from individuals under the age of 21. Age verification is mandatory during the KYC process and is enforced before any withdrawal is processed.

If nusa98 discovers or is notified that personal data has been collected from an individual who is under 21 years of age, all such data will be promptly and permanently deleted, the associated Account will be closed without notice, and any remaining balance will be returned to the payment source after deducting any amounts wagered (which will be forfeited). Where applicable, nusa98 reserves the right to report suspected underage gambling to relevant authorities.

nusa98's platform infrastructure may involve the storage or processing of Member data in jurisdictions outside of Indonesia. Where personal data is transferred internationally, nusa98 ensures that appropriate safeguards are in place to protect that data to a standard at least equivalent to the protections described in this Policy. Safeguards used may include:

• Contractual data processing agreements incorporating standard data protection clauses with all third-party Data Processors.
• Transfers only to jurisdictions recognized as providing an adequate level of data protection by relevant international standards.
• Encryption of data in transit and at rest throughout all international transfer pathways.

By registering a nusa98 Account and using the Services, you acknowledge and consent to the transfer of your personal data to nusa98's cloud infrastructure and service provider locations, subject to the safeguards described above.

The nusa98 platform may contain references to or integrations with third-party services — such as game content providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Pocket Games Soft) — whose own privacy policies govern any data collected through their respective game interfaces or services. nusa98 is not responsible for the privacy practices of any third-party provider and encourages Members to review the privacy policies of any third-party service they interact with through the platform.

nusa98 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform operations. Where amendments are material — meaning they substantially affect how your personal data is collected or used — nusa98 will provide at least 7 calendar days' advance notice by email to your registered address and by posting a prominent notice on the nusa98 website.

The "Last Updated" date at the top of this page reflects the date of the most recent revision. Continued use of the Services following the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. If you do not accept the revised Policy, you must cease using the Services and may request account closure by contacting our support team.

For all privacy-related enquiries, data subject rights requests, or concerns regarding how nusa98 handles your personal data, please contact our dedicated support team using the details below. All privacy requests are handled with strict confidentiality.

If you are not satisfied with nusa98's response to a privacy concern, you have the right to escalate your complaint to the competent data protection authority in your jurisdiction. nusa98 will cooperate fully with any such regulatory enquiry in accordance with applicable law.