Privacy Policy

1. Introduction

nona4d is committed to protecting the privacy and security of every individual who interacts with our Platform. Whether you are a registered Player placing a wager on a BRI Liga 1 fixture, browsing togel (Indonesia's traditional numbers lottery) draw results, or simply visiting our website as a guest, we treat your personal data with the same level of care and respect.

This Policy has been prepared in accordance with internationally recognized data protection principles and applicable regulations governing the handling of personal data in the jurisdictions in which we operate. We adopt a transparency-first approach: we will always tell you what data we hold about you, why we hold it, and how long we intend to keep it.

If you have any questions about this Policy or about how nona4d handles your personal data, please contact our Data Protection team using the details provided in Section 14.

2. Definitions

For the purposes of this Policy, the following terms carry the meanings set out below:

3. Data We Collect

nona4d collects personal data across several categories, depending on how you interact with the Platform. The categories of data we may collect include:

Identity & Contact Data

• Full legal name
• Date of birth
• Indonesian national identity number (NIK, as stated on your KTP)
• Email address
• Mobile phone number (Indonesian format)
• Residential address

Financial Data

• Bank account number and account holder name (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Permata, BSI, or other supported banks)
• E-wallet account details (OVO, DANA, GoPay, ShopeePay, LinkAja)
• Deposit and withdrawal transaction history
• Account balance and betting activity records

KYC Verification Data

• Copies of government-issued photo identification (KTP, passport, SIM)
• Proof of address documents
• Selfie or liveness verification images (where required)

Technical & Usage Data

• IP address and approximate geolocation
• Device type, operating system, and browser version
• Session timestamps, pages visited, and features used
• Clickstream data and search queries made within the Platform

Communication Data

• Records of live chat conversations with our support team
• Email correspondence sent to or received from nona4d
• Survey responses and feedback submissions

4. How Data Is Collected

We collect personal data through the following channels:

1. Direct Submission: Information you provide actively when registering an account, completing KYC verification, making a deposit or withdrawal request, contacting our support team, or participating in a promotion.
2. Automated Technologies: Data collected automatically as you navigate the Platform, including via cookies, web beacons, pixel tags, and server log files. See Section 9 for full details on our cookie practices.
3. Third-Party Sources: We may receive information about you from identity verification partners, payment processors, fraud-detection services, and publicly available sources (such as sanctions screening databases) where this is necessary to fulfil our legal obligations or protect the security of the Platform.
4. Partner Referrals: If you arrive at nona4d via an affiliate marketing partner, we may receive limited referral data (such as a click identifier) that allows us to attribute your registration to the correct partner. This does not include any personal data beyond what you subsequently provide to us directly.

5. Purpose & Legal Basis

nona4d processes your personal data only where we have a valid legal basis for doing so. The table below sets out the primary purposes for which we process your data and the corresponding legal basis in each case:

Where we rely on legitimate interests as our legal basis, we conduct a balancing assessment to confirm that our interests do not override your fundamental rights and freedoms. You may request a copy of any such assessment by contacting us at the details in Section 14.

6. Sharing Your Data

nona4d does not sell, rent, or trade your personal data to any third party for their own commercial purposes. We may share your data with the following categories of recipients strictly on a need-to-know basis and subject to appropriate contractual safeguards:

• Payment Processors: Banks and e-wallet providers (including BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, and LinkAja) require transaction data to process your deposits and withdrawals. These entities operate under their own privacy policies and applicable financial regulations.
• Identity Verification Partners: Third-party KYC and AML service providers that assist us in verifying your identity and screening for fraud or sanctions-list matches. These providers act as data processors under our documented instructions.
• Game Technology Providers: Software studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft may receive limited technical identifiers (such as a pseudonymous player ID) to deliver game content and record game-round outcomes. They do not receive your full personal profile.
• IT Infrastructure & Cloud Providers: Hosting, database, and security service providers that store and process data on our behalf under strict data-processing agreements.
• Legal & Regulatory Authorities: We will disclose your personal data to competent courts, regulatory bodies, law-enforcement agencies, or other public authorities where we are legally required to do so, or where disclosure is necessary to protect the rights, property, or safety of nona4d, our Players, or the public.
• Professional Advisers: Lawyers, auditors, and consultants who provide professional services to nona4d, subject to confidentiality obligations.
• Business Transfers: In the event of a merger, acquisition, restructuring, or sale of all or part of nona4d's business, your personal data may be transferred to the acquiring entity as part of that transaction, subject to equivalent data protection commitments.

7. Data Retention

nona4d retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, to comply with applicable legal and regulatory obligations, and to resolve any disputes or enforce our agreements. The following general retention periods apply:

Once a retention period expires, personal data is either securely deleted or irreversibly anonymized so that it can no longer be associated with any individual. Anonymized, aggregated data (for example, statistical reports on platform usage) may be retained indefinitely as it no longer constitutes personal data.

8. Security Measures

nona4d takes the security of your personal data seriously and implements a layered set of technical and organizational safeguards designed to protect your information against unauthorized access, alteration, disclosure, or destruction. Our security measures include, but are not limited to:

• Transport Layer Encryption: All data in transit between your device and our servers is encrypted using TLS 1.2 or higher (256-bit SSL certificates), ensuring that your login credentials, payment details, and personal information cannot be intercepted by third parties.
• At-Rest Encryption: Sensitive data stored in our databases — including KYC documents and financial records — is encrypted at rest using AES-256 encryption standards.
• Access Controls: Strict role-based access controls ensure that only authorized nona4d personnel with a specific operational need can access personal data. All access events are logged and monitored.
• Two-Factor Authentication (2FA): We strongly recommend all Players enable 2FA on their accounts and offer this feature at no charge. Internal nona4d systems that process personal data require 2FA for all staff.
• Regular Security Audits: nona4d commissions independent penetration testing and security audits at least annually, with findings addressed according to a formal remediation schedule.
• Incident Response Plan: We maintain a documented data-breach response plan. In the event of a security incident that poses a risk to your rights and freedoms, we will notify affected individuals and relevant authorities within the timeframes required by applicable law.
• Staff Training: All nona4d employees who handle personal data receive mandatory data-protection training on joining the Company and at regular intervals thereafter.

9. Cookies & Tracking

nona4d uses cookies and similar tracking technologies to operate the Platform effectively, remember your preferences, and analyze how the Platform is used. The cookies we deploy fall into the following categories:

You can manage your cookie preferences at any time through your browser settings. Please note that disabling strictly necessary cookies will impair the functionality of the Platform, and you may not be able to log in or complete transactions. Disabling analytics or marketing cookies will not affect your ability to use the core features of nona4d.

We do not use cookies to build profiles of your activity across third-party websites, and we do not share cookie data with external advertising networks for the purpose of retargeting you on other platforms.

10. Your Rights

As a data subject, you hold a number of rights with respect to the personal data nona4d holds about you. These rights are set out below. To exercise any of them, please contact us using the details in Section 14, clearly identifying yourself and the right you wish to exercise. We will respond within 30 days of receiving a valid request.

• Right of Access: You have the right to request a copy of all personal data we hold about you, together with information about how it is being processed.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or supplemented without undue delay.
• Right to Erasure ("Right to be Forgotten"): You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent and no other legal basis applies, or where you believe the data has been processed unlawfully. Note that this right is subject to overriding legal obligations — for example, we are required to retain financial transaction records for a minimum of 7 years.
• Right to Restriction of Processing: You may ask us to temporarily pause the processing of your data while a dispute about its accuracy or the lawfulness of its processing is resolved.
• Right to Data Portability: Where processing is based on consent or contractual necessity and is carried out by automated means, you may request a copy of your data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing based on legitimate interests, including profiling for direct marketing purposes. Where you object to marketing processing, we will cease that specific processing immediately.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time by updating your account communication preferences or contacting our support team. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

11. Protection of Minors

nona4d operates a strict 21+ policy across the entire Platform. We do not knowingly collect personal data from any individual under the age of 21, and our Platform is not directed at or intended for use by minors. Age verification is a mandatory step in the account registration and KYC process, and we deploy additional monitoring tools to detect potential underage usage.

If we become aware or have reasonable grounds to suspect that a registered account is being used by a person under 21 years of age, we will immediately suspend the account, initiate an investigation, delete any personal data collected in connection with that account, and — where applicable — return any deposited funds to the payment source. We will not process any wagers placed by a verified underage user.

If you are a parent or guardian and believe that a minor has registered an account on nona4d, please contact us immediately at [email protected] so that we can take appropriate action without delay.

12. Third-Party Links

The nona4d Platform may, from time to time, contain references or links to third-party websites — for example, the official websites of BRI Liga 1, Persija Jakarta, Persib Bandung, Bali United, or international sports organizations. These links are provided for informational convenience only and do not constitute an endorsement of the linked site or its content.

nona4d has no control over the content, privacy practices, or data collection activities of any third-party website. Once you leave the nona4d Platform by following an external link, this Privacy Policy no longer applies. We strongly encourage you to review the privacy policy of any third-party website you visit before submitting any personal information to it.

13. Policy Amendments

nona4d reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, applicable legal requirements, or improvements to our platform. When material changes are made, we will post a prominent notice on the Platform and, where reasonably practicable, send a notification to your registered email address at least 14 days before the changes take effect.

The "Last Updated" date displayed at the top of this document reflects the date of the most recent revision. We encourage you to review this Policy periodically to stay informed about how we protect your data. Your continued use of the Platform after the effective date of any amendment constitutes your acceptance of the revised Policy.

14. Contact & Complaints

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way nona4d processes your personal data, please reach out to our Data Protection team through the following channels:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24 hours a day, 7 days a week via the chat widget on the Platform. Our Indonesian-speaking support agents are ready to assist.
• Response Time: We aim to acknowledge all data-related enquiries within 24 hours (WIB, UTC+7) and to provide a substantive response within 30 calendar days.

If you are not satisfied with our response to a privacy concern or data rights request, you have the right to escalate your complaint to the relevant data protection supervisory authority in your jurisdiction. Further guidance on how to do this is available from our support team on request.

nona4d is committed to resolving all privacy-related concerns promptly, transparently, and in good faith. We regard every data rights inquiry as an opportunity to demonstrate the sincerity of our commitment to protecting the privacy of every Player on our Platform.