At nusa89, your privacy is treated as a fundamental right, not an afterthought. This policy explains exactly what data we collect, why we collect it, how it is stored and used, and the rights you hold over your own information.
This Privacy Policy ("Policy") describes how nusa89 ("nusa89", "we", "us", "our"), the operator of the online betting platform at https://nusa89.cam and all associated subdomains and applications (collectively, "the Platform"), collects, processes, stores, shares, and protects the personal data of its users ("User", "you", "your").
This Policy applies to all individuals who visit, register on, or transact through the nusa89 Platform, including players residing in Jakarta, Surabaya, Bandung, Medan, Bali, Yogyakarta, Semarang, and across the Indonesian archipelago. By creating an Account or continuing to use the Platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.
This Policy should be read together with our Terms & Conditions and our Responsible Gaming policy, both of which are incorporated by reference into this document.
Scope Note: nusa89 primarily serves Indonesian players. While Indonesia's Personal Data Protection Law (UU PDP, Law No. 27 of 2022) provides the domestic framework we reference for Indonesian residents, nusa89 also aligns its practices with internationally recognized data-protection standards, including principles drawn from the EU General Data Protection Regulation (GDPR), to ensure the highest standard of user protection.
For the purposes of this Policy, the following terms are defined as follows:
nusa89 collects only the data that is genuinely necessary to provide and improve our services, verify user identity, comply with legal obligations, and maintain platform security. The categories of Personal Data we collect are as follows:
| Data Category | Specific Data Points | Mandatory? |
|---|---|---|
| Identity Data | Full legal name, date of birth, gender, nationality, national ID number (NIK / passport number) | Yes — for KYC |
| Contact Data | Email address, mobile phone number, WhatsApp / Telegram contact | Yes — for account |
| Residential Data | City of residence, province, postal code (full street address only if required for KYC) | Partial |
| Financial Data | Bank account name and number (BCA, BRI, BNI, Mandiri, CIMB Niaga), e-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja), transaction history, deposit and withdrawal amounts in IDR | Yes — for payments |
| Technical Data | IP address, device type, operating system, browser type and version, session tokens, login timestamps | Automatic |
| Behavioral Data | Pages visited, games played (including togel, sports betting, live casino), wager amounts, session duration, feature usage patterns | Automatic |
| Communications Data | Records of live chat, email, and support-ticket interactions with our customer service team | When initiated |
| Verification Documents | KTP / passport scans, selfie photographs with identity document, proof-of-address documents, bank statement screenshots | For KYC verification |
Sensitive Data Handling: National identity numbers, bank account details, and scanned identity documents are classified as Sensitive Personal Data and are stored in encrypted form with restricted access. No nusa89 employee has unencrypted access to your full NIK or bank account number unless required for compliance verification.
Personal Data is collected through multiple channels during your use of the nusa89 Platform:
nusa89 processes your Personal Data exclusively for the following legitimate purposes:
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Account Registration & Management | Identity, contact, residential data | Contract performance |
| KYC & Age Verification | Identity data, verification documents | Legal obligation (AML, age 21+) |
| Processing Deposits & Withdrawals | Financial data, transaction records | Contract performance |
| Game Provision & Bet Settlement | Behavioral data, wager records | Contract performance |
| Customer Support | Contact data, communications data | Contract performance, consent |
| Fraud Prevention & Security | Technical data, behavioral patterns, IP logs | Legitimate interest, legal obligation |
| Marketing & Promotions (opt-in) | Contact data, behavioral preferences | Consent |
| Responsible Gaming Enforcement | Behavioral data, self-exclusion records, deposit limits | Legal obligation, legitimate interest |
| Legal Compliance & Reporting | All categories as required by regulator or law enforcement | Legal obligation |
| Platform Analytics & Improvement | Technical data, aggregated behavioral data | Legitimate interest |
We do not use your Personal Data for purposes outside this list unless we obtain your explicit consent or are compelled by a valid court order. We do not sell or rent your Personal Data to unaffiliated third parties for their own marketing purposes.
Under Indonesia's Personal Data Protection Law (UU PDP No. 27/2022) and international best practices, all processing of Personal Data must rest on a valid legal basis. nusa89 relies on the following legal grounds:
nusa89 does not sell your Personal Data. However, to provide our services and comply with legal obligations, we share limited data with the following categories of recipients:
We may disclose Personal Data to government agencies, law-enforcement bodies, financial regulators, or courts when legally required to do so — for example, in response to a subpoena, court order, anti-money laundering investigation, or tax audit. We verify the legitimacy of such requests before complying.
In the event that nusa89 is involved in a merger, acquisition, asset sale, or bankruptcy, your Personal Data may be transferred to the acquiring entity as part of the business assets. We will notify you via email and a prominent Platform notice before your data is transferred and becomes subject to a different privacy policy.
If we wish to share your data with a third party for a purpose not covered above, we will ask for your explicit consent first.
nusa89 operates internationally. While we serve Indonesian players, some of our service providers (payment processors, cloud infrastructure, game studios, analytics platforms) are based outside Indonesia. This means your Personal Data may be transferred to and processed in countries that do not have data-protection laws equivalent to Indonesia's UU PDP.
To protect your data during international transfers, we implement the following safeguards:
If you have concerns about international transfers or wish to know which specific countries your data is processed in, please contact our Data Protection Officer at [email protected] (plain text).
nusa89 retains your Personal Data only for as long as necessary to fulfill the purposes outlined in this Policy and to comply with legal, regulatory, tax, and accounting obligations. Our standard retention periods are as follows:
| Data Type | Retention Period | Reason |
|---|---|---|
| Account registration data | Duration of active account + 5 years | AML compliance, dispute resolution |
| KYC verification documents | Duration of active account + 7 years | Regulatory requirement (AML/CFT) |
| Financial transaction records | Duration of active account + 7 years | Tax compliance, audit trail |
| Betting and gameplay history | Duration of active account + 5 years | Dispute resolution, regulatory audit |
| Customer support communications | 3 years after last interaction | Service improvement, complaint handling |
| IP logs and technical data | 12 months | Security monitoring, fraud detection |
| Marketing consent records | Until consent is withdrawn + 1 year | Proof of consent for regulatory purposes |
| Self-exclusion records | Permanent (never deleted) | Legal obligation, player protection |
Once the retention period expires, Personal Data is either securely deleted or anonymized (rendered non-identifiable) such that it can no longer be linked back to you. Self-exclusion records are retained indefinitely to prevent excluded users from re-registering.
If you close your Account voluntarily, we retain your data for the same periods to comply with regulatory obligations. If you request data deletion (see Section 12), we will honor your request to the extent permitted by law.
nusa89 uses cookies, web beacons, and similar tracking technologies to enhance your Platform experience, maintain session security, and analyze usage patterns. A cookie is a small text file stored on your device by your web browser. Cookies enable the Platform to "remember" your preferences and keep you logged in across pages.
Some cookies are placed by third parties we partner with, such as analytics providers (to track aggregate traffic) and game studios (to deliver embedded game content). These third parties have their own privacy policies governing their use of cookies.
Most web browsers allow you to control cookies through their settings. You can set your browser to refuse all cookies or alert you when a cookie is being set. However, blocking all cookies will prevent you from logging into the Platform. To manage cookie preferences specifically for nusa89, use the cookie-consent banner that appears on your first visit.
For more information on cookies, visit www.allaboutcookies.org (external informational resource — not a clickable link per site rules).
nusa89 employs industry-standard technical and organizational measures to protect your Personal Data against unauthorized access, accidental loss, alteration, or disclosure. Our security framework includes but is not limited to:
While we implement robust security measures, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your Account password and for monitoring your Account for unauthorized activity. If you suspect your Account has been compromised, contact our support team immediately at [email protected].
Under Indonesia's Personal Data Protection Law (UU PDP No. 27/2022) and aligned international frameworks, you hold the following rights over your Personal Data:
Request a copy of all Personal Data we hold about you in a structured, commonly used format (e.g., PDF, CSV).
Correct any inaccurate or incomplete Personal Data. You can update most information directly in your Account settings.
Request deletion of your Personal Data, subject to legal retention obligations (AML, tax, dispute resolution).
Limit how we use your data while you dispute its accuracy or the lawfulness of processing.
Receive your Personal Data in a machine-readable format and transfer it to another service provider.
Object to processing based on legitimate interest or for direct marketing purposes. We will cease unless we have compelling grounds.
Withdraw previously given consent at any time (e.g., unsubscribe from marketing emails). Does not affect prior processing.
File a complaint with Indonesia's Ministry of Communication and Informatics or relevant data-protection authority.
To exercise any of the above rights, submit a request via one of the following channels:
We will respond to your request within 14 calendar days as mandated by UU PDP. In complex cases, we may extend this to 30 days and will notify you of the extension. You will not be charged a fee for exercising your rights unless your request is manifestly unfounded, repetitive, or excessive, in which case we may charge a reasonable administrative fee or refuse the request.
Before processing your request, we will verify your identity to prevent unauthorized disclosure of Personal Data. You may be asked to provide proof of identity (e.g., KTP scan) and answer security questions about your Account.
The nusa89 Platform is strictly intended for adults aged 21 years or older. Indonesian law prohibits individuals under 21 from engaging in online gambling. We do not knowingly collect Personal Data from anyone under the age of 21.
During account registration and KYC verification, we verify your date of birth against your government-issued identity document. If we discover that a User is under 21, we will immediately suspend the Account, void any pending bets, return deposited funds (minus any winnings, which are forfeited), and permanently delete the Account and associated Personal Data.
Parents and guardians should monitor minors' internet usage. If you believe a minor has registered on nusa89 or provided us with Personal Data, please contact us immediately at [email protected] so we can take corrective action.
The nusa89 Platform may contain links to external websites operated by third parties, such as game studios, payment processors, or informational resources. These external sites have their own privacy policies that govern how they collect, use, and protect your data. nusa89 is not responsible for the privacy practices or content of third-party websites.
Before providing Personal Data to any third-party site, we encourage you to read their privacy policy and terms of service. Clicking on a third-party link does not imply endorsement by nusa89.
nusa89 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or Platform features. When we make material changes — such as introducing new data-collection methods or sharing data with new categories of third parties — we will notify you by:
Your continued use of the Platform after the effective date of a revised Privacy Policy constitutes your acceptance of the changes. If you do not agree to the revised Policy, you must cease using the Platform and may request Account closure and data deletion.
We encourage you to review this Policy periodically. Non-material changes (e.g., correcting typos, clarifying existing language) will be made without advance notice.
If you have any questions, concerns, or requests regarding this Privacy Policy or nusa89's data practices, please contact our Data Protection Officer through any of the following channels:
Our Indonesian-speaking Data Protection Officer is available around the clock and aims to respond to all privacy inquiries within 48 hours for general questions and within 14 days for formal rights requests as mandated by UU PDP.
Data Protection Officer Contact: For formal privacy-rights requests, data-breach notifications, or legal compliance inquiries, please direct your correspondence to our DPO at [email protected] with "ATTN: Data Protection Officer" in the subject line. Include your full name, Account username (if applicable), and a detailed description of your inquiry.
Beyond legal compliance, nusa89 implements proactive privacy safeguards as part of our commitment to treating player data as a fundamental right.
We collect only the data genuinely necessary to provide our services and comply with legal obligations. We do not harvest browsing history, social-media profiles, or contact lists unrelated to your Account.
Sensitive Personal Data (NIK, bank details, KYC documents) is stored separately from operational databases, with dedicated encryption keys and stricter access controls than standard Account data.
nusa89 has never sold player data to advertisers, data brokers, or marketing firms and never will. Your data is used exclusively for the purposes outlined in this Policy, period.
Platform analytics and usage reporting rely on aggregated, anonymized data that cannot be traced back to individual users. We use user IDs, not names, in internal dashboards and reports.
From the moment data leaves your device until it is archived for compliance, it travels and rests in encrypted form. We use TLS 1.3 in transit and AES-256 at rest — military-grade protection for civilian use.
Every new Platform feature undergoes a Privacy Impact Assessment before launch. If a feature requires new data collection, we evaluate whether the benefit justifies the privacy impact — and we often choose the more privacy-preserving path.
Our Data Protection Officer and customer support team are available 24/7 to clarify any aspect of this Privacy Policy, help you exercise your rights, or address privacy concerns. You can also explore our FAQ for quick answers, read our Terms & Conditions for full legal context, or return to the homepage.