At nobu99, your personal data is treated with the same level of care and security we apply to your funds. This policy explains in plain terms what data we collect, why we collect it, and exactly how it is used, stored, and protected.
About This Policy: This Privacy Policy applies to all personal data collected and processed by nobu99 in connection with the operation of the gaming platform at https://nobu99.cam. By registering an Account on nobu99, you acknowledge that you have read and understood the practices described herein. This policy forms part of the nobu99 Terms & Conditions.
The following definitions apply throughout this Privacy Policy:
Any information that identifies or could reasonably be used to identify a natural person, including name, identification number, contact details, financial data, or online identifiers.
Any operation performed on Personal Data, including collection, recording, storage, adaptation, retrieval, use, disclosure, or deletion.
nobu99, the entity that determines the purposes and means of processing your Personal Data in connection with the Platform.
Any identified or identifiable natural person whose Personal Data is processed by nobu99 — in practice, any registered Player or Platform visitor.
An external entity engaged by nobu99 to process Personal Data on its behalf under a binding data-processing agreement, such as a payment processor, KYC verification provider, or cloud infrastructure supplier.
Know Your Customer — the identity verification procedure through which Players must submit documentary evidence of identity (e.g., Indonesian KTP) before certain Account functions are enabled.
nobu99 collects Personal Data in the following categories. Only data that is necessary for the specified purpose is collected — we do not gather data speculatively or beyond what our operational and compliance obligations require.
| Category | Examples | When Collected |
|---|---|---|
| Identity Data | Full name, date of birth, nationality, KTP number | Registration & KYC |
| Contact Data | Email address, mobile phone number, residential address | Registration |
| Financial Data | Bank account details (BCA, BRI, BNI, Mandiri), e-wallet identifiers (OVO, DANA, GoPay), deposit and withdrawal history | First deposit & KYC |
| Identity Documents | KTP photograph or scan, selfie with KTP | KYC verification |
| Transaction Data | Bet history, game session records, bonus usage, win/loss records | Ongoing Platform use |
| Technical Data | IP address, browser type, device ID, operating system, session logs | Every visit & login |
| Marketing & Communications Data | Promotional email opt-in status, notification preferences, live chat transcripts | Account settings & support interactions |
Sensitive Data Protection: Indonesian KTP numbers and financial account details are classified as sensitive data under our internal policies. Access to this data is restricted to authorised compliance and finance personnel only, and all sensitive records are encrypted at rest and in transit.
The majority of Personal Data is provided directly by you when you:
Technical and usage data is collected automatically through cookies, server logs, and analytics tools when you access the Platform. This includes IP address, browser fingerprint, session duration, pages visited, and game interactions. Automated data collection is essential for security monitoring, fraud detection, and Platform performance optimization.
In limited circumstances, we may obtain data from third parties:
nobu99 processes your Personal Data exclusively for the following legitimate purposes:
To create, maintain, and administer your Player Account, including authentication, password resets, and account-status management.
To process deposits via BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, and other supported payment methods, and to execute withdrawal requests to your verified bank account or e-wallet.
To comply with Know Your Customer (KYC), Anti-Money Laundering (AML), and Counter-Terrorism Financing (CTF) obligations under international gaming regulations. This includes verifying identity, monitoring transactions for suspicious activity, and retaining records as mandated by law.
To detect, prevent, and investigate fraudulent activity, multi-accounting, bonus abuse, collusion, and unauthorised access attempts. Security processing includes IP monitoring, device fingerprinting, and behavioural analysis.
To maintain fair-play standards, investigate betting irregularities, and resolve disputes over game outcomes or bet settlement.
To respond to your inquiries, troubleshoot technical issues, and provide assistance through live chat, email, and WhatsApp support channels.
To analyse aggregate usage patterns, identify technical bottlenecks, and improve Platform performance, game selection, and user experience. Analytics are conducted on anonymised or pseudonymised data wherever possible.
To send you promotional offers, bonus notifications, and Platform updates where you have opted in to receive marketing communications. You may withdraw consent at any time via Account settings or by contacting support.
nobu99 processes your Personal Data on the following legal grounds:
nobu99 engages carefully vetted third-party service providers to perform specific functions on our behalf. These processors are contractually bound to use your data only for the specified purpose and to implement equivalent security measures. Categories of third-party processors include:
nobu99 may disclose Personal Data where required by law, court order, or regulatory directive, including disclosure to gaming regulators, law-enforcement agencies, or financial-intelligence units investigating money laundering or fraud.
In the event of a merger, acquisition, or sale of nobu99's business assets, Personal Data may be transferred to the successor entity. Affected Players will be notified at least 30 days prior to any such transfer, with the option to close their Account and receive any outstanding balance.
nobu99 does not sell, rent, or trade your Personal Data to third parties for their independent marketing purposes. Any data shared with partners is governed by strict data-processing agreements and used solely to deliver Platform services.
Personal Data is retained only for as long as necessary to fulfil the purposes for which it was collected or as required by law:
Data retained beyond active use is archived in secure, access-restricted storage and is not used for day-to-day operations or marketing purposes.
nobu99 implements industry-standard technical and organisational measures to protect Personal Data from unauthorised access, accidental loss, alteration, or disclosure:
Account Security Reminder: You are responsible for maintaining the confidentiality of your login credentials. Enable two-factor authentication (2FA) where available, never share your password, and log out from shared devices. Report any suspected unauthorised access immediately to our support team.
Cookies are small text files placed on your device when you visit the Platform. They allow nobu99 to recognise your browser across sessions, remember your login state, and collect usage data to improve Platform performance.
You can control cookie preferences through your browser settings. Note that disabling essential cookies will prevent you from logging in or placing bets. Most browsers allow you to block third-party cookies while permitting first-party (nobu99) cookies.
In addition to cookies, nobu99 uses device fingerprinting and session-replay technology for fraud prevention. These tools do not collect Personal Data beyond what is necessary to detect suspicious activity patterns.
As a Data Subject, you have the following rights with respect to your Personal Data:
Request a copy of all Personal Data we hold about you
Correct inaccurate or incomplete data in your Account
Request deletion of your data (subject to legal retention requirements)
Limit how we use your data while a complaint is under review
Receive your data in a structured, machine-readable format
Oppose processing based on legitimate interests or for marketing
To exercise any of the above rights, contact our Data Protection Officer via email at [email protected] (plain text — not a clickable link) with the subject line "Data Rights Request". Include your full name, Account email address, and a clear description of your request. We will respond within 30 days and may require identity verification before processing your request.
Note on Regulatory Retention: Your right to erasure is subject to nobu99's legal obligation to retain financial and transaction records for 5 years under AML regulations. Such data cannot be deleted until the retention period expires.
nobu99 does not knowingly collect Personal Data from individuals under 21 years of age. The Platform is strictly for adults aged 21 and above, in compliance with Indonesian market standards and international responsible-gaming best practices.
If we become aware that a minor has registered an Account or provided Personal Data, the Account will be immediately suspended, all associated data will be deleted, and any deposited funds will be returned to the source account. Parents or guardians who believe a minor has accessed the Platform should contact our support team immediately.
21+ Policy: Players must be at least 21 years of age to use nobu99. KYC verification using Indonesian KTP is mandatory before withdrawals are processed, ensuring age compliance.
While nobu99 primarily serves Indonesian players, certain third-party processors (cloud infrastructure providers, game-software studios, KYC vendors) may be located outside Indonesia. In such cases, Personal Data may be transferred to jurisdictions with different data-protection standards.
nobu99 ensures that all international data transfers are protected by:
You have the right to request further information about the safeguards applied to your data when transferred internationally.
nobu99 may update this Privacy Policy from time to time to reflect changes in our data-processing practices, new legal requirements, or service enhancements. Material changes will be communicated to registered Players via email at least 7 days before they take effect.
The current version of this Privacy Policy will always be available at https://nobu99.cam/privacy-policy. The "Effective Date" at the top of the policy indicates when the current version came into force. Continued use of the Platform after a policy update constitutes acceptance of the revised terms.
For questions, concerns, or complaints regarding this Privacy Policy or nobu99's data-processing practices, contact our Data Protection Officer:
If you believe nobu99 has processed your Personal Data unlawfully or in breach of this Privacy Policy, you have the right to lodge a complaint with your local data-protection supervisory authority. For Players in Indonesia, complaints may be directed to the relevant government ministry responsible for consumer protection and electronic information.
For non-privacy-related questions (account issues, deposits, game rules), contact our 24/7 customer support via live chat or email. Support is available in English and Indonesian with an average response time of 2–5 minutes.
Six core principles that govern how nobu99 handles every byte of your personal information.
We collect only what is necessary to operate your Account, process transactions, and meet regulatory obligations. No speculative data gathering, no unnecessary forms.
SSL 256-bit encryption protects all data in transit, while AES-256 encrypts sensitive KTP and banking data at rest. Your data is unreadable even if storage is compromised.
Role-based access control ensures only authorised personnel with a legitimate business need can view Personal Data. Every access is logged and audited monthly.
Data is retained only as long as necessary for the stated purpose or as required by AML regulations. After closure, non-regulated data is deleted within 6 months.
nobu99 will never sell, rent, or trade your Personal Data to third parties for marketing. Your data powers your gaming experience — nothing more.
In the unlikely event of a data breach affecting your information, we will notify you within 72 hours with full details and recommended protective actions.
Our Data Protection Officer is available to address any concerns about how your personal information is collected, used, or stored. You can also explore related policies or return to the homepage to get started.