Summary: nos26 collects personal data only to the extent necessary to provide, secure, and improve our gaming services for Members across Indonesia. We do not sell your personal data to third parties. We apply industry-standard security controls to protect everything you share with us. This document sets out your full rights and our full obligations in plain, professional English.
1 Introduction
nos26 ("the Platform", "we", "us", "our") operates the online gaming and sports betting platform accessible at nos26.cam. This Privacy Policy describes our practices with respect to the collection, use, storage, disclosure, and protection of personal data submitted by or collected from individuals who register as Members or otherwise interact with the nos26 platform ("you", "your", "the Member").
By creating an account on nos26 or continuing to use our Services, you acknowledge that you have read, understood, and agreed to the data practices described in this Privacy Policy. This Policy should be read alongside our Terms & Conditions, which govern your use of the nos26 platform as a whole.
nos26 serves a primary membership base in Indonesia, including players in Jakarta, Surabaya, Medan, Bandung, Yogyakarta, Bali, Makassar, Semarang, and Palembang. All processing activities described herein apply equally to Members regardless of their specific location within Indonesia.
2 Definitions
For the purpose of this Privacy Policy, the following terms carry the meanings set out below:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information that directly or indirectly identifies a living individual, including name, date of birth, contact details, financial information, device identifiers, and behavioral data tied to an identifiable person. |
| "Processing" | Any operation performed on Personal Data, including collection, recording, storage, retrieval, use, disclosure, erasure, and destruction. |
| "Controller" | nos26, the entity that determines the purposes and means of processing Personal Data collected via the nos26 platform. |
| "Processor" | A third-party service provider that processes Personal Data on behalf of nos26 strictly under documented instructions and subject to data processing agreements. |
| "Consent" | A freely given, specific, informed, and unambiguous indication of a Member's agreement to the processing of their Personal Data for a stated purpose. |
| "KYC Data" | Identity and age verification documents provided by a Member as part of the Know Your Customer process, including government-issued ID cards and bank account documentation. |
| "Services" | All products and features offered by nos26, including sports betting, live casino, slot games, togel (Indonesia's traditional numbers lottery), and sabung ayam (traditional cockfighting betting). |
3 Data We Collect
nos26 collects the following categories of Personal Data from Members and platform visitors. We collect only what is necessary for the specific purpose described and do not retain data beyond the periods outlined in Section 9.
3.1 Registration and Account Data
- Full legal name (as it appears on a government-issued identity document)
- Date of birth (to verify that you meet the 21+ age requirement)
- Indonesian mobile phone number
- Email address
- Username and (hashed, never plain-text) password
- City or region of residence (e.g., Jakarta, Surabaya, Bali)
3.2 KYC Verification Data
- Photograph or scan of Indonesian National Identity Card (KTP) or valid passport
- Proof of bank account or e-wallet registration matching the Member's identity
- Selfie photograph for liveness verification (where required)
3.3 Financial and Transaction Data
- Bank account name, account number, and bank name (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, BSI, Bank Permata)
- E-wallet account identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja)
- Deposit and withdrawal history, amounts, and timestamps
- Bonus claim and wagering activity records
3.4 Technical and Device Data
- IP address and geolocation data (country and city level)
- Device type, operating system, and browser version
- Session timestamps, login history, and platform navigation data
- Cookies and similar tracking identifiers (see Section 10)
3.5 Communications Data
- Records of live chat, email, and any other support communications between the Member and nos26 customer service
- Feedback, complaint, and dispute records
3.6 Behavioral and Gaming Data
- Game and betting history, wager amounts, and win/loss records
- Responsible gaming tool usage (deposit limits set, self-exclusion activations, session timers)
- Promotional participation records
4 How We Collect Data
nos26 collects Personal Data through the following means:
- Directly from you — when you complete the registration form, submit KYC documents, make a deposit or withdrawal request, contact support, or participate in a promotion.
- Automatically — via cookies, server logs, and analytics tools when you browse or interact with the nos26 platform. This includes IP address capture, session tracking, and device fingerprinting for fraud prevention.
- From third-party payment processors — transaction confirmation data received from bank transfer intermediaries and e-wallet providers when you initiate a deposit or withdrawal.
- From identity verification providers — where nos26 uses a third-party KYC solution to verify the authenticity of identity documents submitted by Members.
- From fraud and risk screening tools — automated signals used to detect multi-accounting, suspicious betting patterns, and potential mon ey laundering risks.
5 Purpose of Processing
nos26 processes your Personal Data for the following specific purposes only. We do not process data for purposes outside those listed unless we obtain your explicit consent or are legally required to do so.
5.1 Account Management and Service Delivery
To create, maintain, and administer your Member Account; to authenticate your login sessions; to enable you to place bets on sports markets and play casino, slot, togel, and sabung ayam games; to track your balance; and to manage bonuses and promotional eligibility.
5.2 Identity Verification and Age Compliance
To verify that you are at least 21 years of age; to confirm that the identity on your Account matches the identity on your financial accounts (anti-money laundering requirement); and to prevent fraudulent registrations or multi-accounting.
5.3 Payment Processing
To process deposits from BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, BSI, Bank Permata, and e-wallets (OVO, DANA, GoPay, ShopeePay, LinkAja); to process withdrawal requests to verified accounts; and to maintain transaction records for auditing and reconciliation purposes.
5.4 Fraud Prevention and Security
To detect and prevent unauthorized account access, payment fraud, collusion, bonus abuse, and suspicious wagering patterns; to block access from prohibited jurisdictions; and to maintain platform integrity.
5.5 Customer Support
To respond to inquiries submitted via live chat or email; to investigate and resolve complaints, disputes, and technical issues; and to improve support service quality through training and monitoring.
5.6 Responsible Gaming and Player Protection
To implement deposit limits, session time limits, reality checks, cooling-off periods, and self-exclusion requests; to identify Members exhibiting patterns of problem gambling behavior and to proactively offer support resources.
5.7 Legal and Regulatory Compliance
To comply with anti-money laundering legislation; to respond to valid legal process such as court orders, subpoenas, or government requests; to enforce our Terms & Conditions; and to protect the legal rights of nos26 and other Members.
5.8 Platform Improvement and Analytics
To analyze Member behavior in aggregate to improve platform functionality, optimize game selection, enhance user experience, and develop new features; to conduct A/B testing and performance monitoring.
6 Legal Basis for Processing
nos26 processes Personal Data only where we have a lawful basis to do so under applicable data protection principles:
- Contractual necessity — processing is essential to perform the contract between you and nos26 (i.e., to deliver the Services you requested when you registered an Account).
- Legal obligation — processing is required to comply with applicable anti-money laundering, age verification, or tax reporting legislation.
- Legitimate interest — processing is necessary for nos26's legitimate business interests (fraud prevention, platform security, service improvement) and does not override your fundamental rights and freedoms.
- Consent — where required, you have provided explicit, informed, and freely given consent to a specific processing activity (e.g., receiving promotional email communications).
7 Data Sharing and Disclosure
nos26 does not sell, rent, or trade your Personal Data to third parties for their own marketing purposes. We share data only in the limited circumstances described below, and only with parties bound by data protection obligations equivalent to those in this Policy.
7.1 Service Providers (Processors)
We share data with trusted third-party service providers who perform functions on our behalf under written data processing agreements:
- Payment processors and banking partners for deposit and withdrawal transactions
- KYC verification providers for identity and age checks
- Cloud hosting and server infrastructure providers
- Email delivery and SMS notification services
- Fraud detection and risk analysis platforms
- Customer support software and live chat tools
7.2 Game Content Providers
When you play casino, slot, or live dealer games from third-party studios (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Pocket Games Soft), limited session and outcome data may be shared with those providers solely for game delivery and fairness auditing purposes.
7.3 Legal and Regulatory Authorities
We may disclose Personal Data where required by law, in response to valid legal process (court orders, subpoenas, warrants), to protect nos26's legal rights or property, to prevent fraud, or to protect the safety of Members or the public.
7.4 Business Transfers
In the event of a merger, acquisition, or sale of all or part of nos26's assets, your Personal Data may be transferred to the acquiring entity as part of the transaction. You will be notified via email of any such change in control.
Processor Vetting: All third-party service providers with access to nos26 Member data are subject to strict contractual data protection clauses, regular security audits, and adherence to industry-standard encryption and access controls.
8 International Data Transfers
nos26 primarily stores Member data within secure data centers located in jurisdictions with strong data protection laws. However, some service providers (cloud infrastructure, fraud detection tools, game content providers) may process data on servers located outside Indonesia.
When Personal Data is transferred internationally, nos26 ensures that adequate safeguards are in place, including:
- Contractual data protection clauses meeting international standards
- Use of service providers certified under recognized data protection frameworks
- Encryption of data in transit and at rest
- Restricted access controls limiting processing to authorized personnel only
9 Data Retention
nos26 retains Personal Data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. Our standard retention periods are:
| Data Category | Retention Period |
|---|---|
| Account registration data | Duration of Account plus 7 years post-closure (legal requirement) |
| KYC verification documents | Duration of Account plus 7 years post-closure (AML compliance) |
| Transaction records | 7 years from transaction date (financial auditing and tax purposes) |
| Betting and gaming history | Duration of Account plus 5 years post-closure (dispute resolution) |
| Support communications | 3 years from last contact (service quality and dispute resolution) |
| Session logs and device data | 90 days (security and fraud detection; anonymized aggregates retained longer) |
| Marketing consent records | Duration of consent plus 2 years (compliance evidence) |
Data is securely deleted or anonymized at the end of the retention period using industry-standard data destruction methods. Anonymized, aggregated data (which cannot identify any individual) may be retained indefinitely for statistical analysis.
10 Cookies & Tracking Technologies
nos26 uses cookies, web beacons, and similar tracking technologies to enhance platform functionality, analyze usage patterns, and improve user experience. Cookies are small text files placed on your device that help us recognize you across sessions.
10.1 Types of Cookies We Use
- Essential cookies — strictly necessary for login authentication, session management, and security. These cannot be disabled without impairing platform functionality.
- Performance cookies — collect anonymous data on page load times, error rates, and navigation paths to help us optimize site performance.
- Functional cookies — remember your preferences (language, display settings) for a more personalized experience.
- Analytics cookies — used by third-party tools (e.g., Google Analytics) to track aggregate usage statistics.
10.2 Managing Cookies
You can control cookie preferences through your browser settings. Note that disabling essential cookies will prevent you from logging in to your Account. Disabling analytics or functional cookies will not block access but may reduce the quality of your experience.
11 Security Measures
nos26 employs industry-leading technical and organizational security measures to protect Personal Data from unauthorized access, disclosure, alteration, or destruction. Our security framework includes:
- 256-bit SSL/TLS encryption on all pages and data transmissions between your device and our servers
- Encrypted data storage — all Personal Data and KYC documents stored in databases are encrypted at rest using AES-256 encryption
- Access controls — role-based access restrictions ensure that only authorized personnel can view Member data, and all access is logged for audit purposes
- Firewall protection and intrusion detection systems monitor for malicious activity 24/7
- Regular security audits conducted by independent third-party cybersecurity firms
- Penetration testing performed quarterly to identify and remediate vulnerabilities
- Staff training — all nos26 employees with data access undergo mandatory data protection and security awareness training
- Incident response plan — documented procedures for detecting, containing, and reporting data breaches within legally required timeframes
Despite these measures, no system is 100% secure. nos26 cannot guarantee absolute security but commits to maintaining best-practice controls and to promptly notifying affected Members in the event of any data breach that poses a risk to their rights.
Your Role in Security: Protect your Account by choosing a strong, unique password; never sharing your login credentials; and logging out after each session on shared devices. Contact support immediately if you suspect unauthorized access.
12 Your Privacy Rights
Under applicable data protection laws, you hold the following rights with respect to your Personal Data. nos26 commits to honoring these rights promptly and free of charge:
Right to Access
You may request a copy of all Personal Data nos26 holds about you. We will provide this in a structured, commonly used, machine-readable format within 30 days of your request.
Right to Rectification
If any Personal Data we hold is inaccurate or incomplete, you have the right to request correction. Most profile information can be updated directly through your Account settings.
Right to Erasure
You may request deletion of your Personal Data where it is no longer necessary for the purposes collected, or where you withdraw consent. Note that legal retention obligations (Section 9) may prevent immediate deletion in some cases.
Right to Restriction
You may request that we temporarily suspend processing of your data while a dispute over accuracy or lawfulness is resolved.
Right to Data Portability
You may request that Personal Data you provided to nos26 be transferred to another service provider in a structured, machine-readable format where technically feasible.
Right to Object
You may object to processing based on legitimate interests or for direct marketing purposes. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
Right to Withdraw Consent
Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.
To exercise any of these rights, contact our Data Protection Team via email at [email protected] with the subject line "Privacy Rights Request" or via live chat. We will respond within 30 calendar days. You may also lodge a complaint with your local data protection authority if you believe nos26 has failed to comply with applicable data protection laws.
13 Protection of Minors
nos26 Services are available exclusively to individuals who are at least 21 years of age. We do not knowingly collect Personal Data from anyone under the age of 21. If we discover that a Member is underage, we will immediately suspend the Account, void all transactions, and securely delete the associated Personal Data.
If you are a parent or guardian and believe that your child has provided Personal Data to nos26, please contact us immediately so we can take appropriate action.
Age Verification: nos26 reserves the right to request proof of age at any time. Failure to provide valid age verification documentation within the specified timeframe will result in Account suspension until verification is completed.
14 Third-Party Links and Services
The nos26 platform may contain links to third-party websites, services, or content (such as payment processor portals or game studio sites). This Privacy Policy applies only to Personal Data collected by nos26 directly. We are not responsible for the privacy practices of third-party sites and encourage you to read their privacy policies before providing any Personal Data.
Third-party game providers integrated into the nos26 platform operate under their own privacy policies. While we require all partners to maintain data protection standards equivalent to ours, we cannot control or guarantee third-party practices.
15 Amendments to This Policy
nos26 reserves the right to amend, update, or replace this Privacy Policy at any time to reflect changes in our data practices, new Services, or legal requirements. Material changes will be communicated to Members via email and/or prominent notice on the platform at least 30 days prior to the changes taking effect.
The current version of this Privacy Policy is always accessible at nos26.cam/privacy-policy and is identified by the effective date shown at the top of this document. Continued use of the nos26 platform following publication of an updated Privacy Policy constitutes acceptance of the revised terms.
16 Contact & Data Protection Inquiries
If you have any questions, concerns, or complaints regarding this Privacy Policy, or if you wish to exercise any of the rights described in Section 12, please contact nos26's Data Protection Team using the details below:
- Live Chat: Available 24/7 directly on the nos26 platform — average response time 2–5 minutes
- Email: [email protected] (use subject line "Privacy Inquiry" or "Data Rights Request") — average response time 24 hours
For formal complaints or unresolved privacy concerns, you have the right to lodge a complaint with your local data protection supervisory authority. nos26 is committed to working cooperatively with data protection authorities to resolve any privacy-related disputes.
How We Protect Your Privacy
Industry-leading safeguards for Indonesian Members
256-Bit SSL Encryption
Every page on nos26 is protected by military-grade encryption. Your personal data, KYC documents, and financial transactions are encrypted both in transit and at rest.
Minimal Data Collection
We collect only what is strictly necessary to deliver our Services and comply with legal obligations. We never sell your data to advertisers or third-party marketers.
Secure KYC Storage
Identity documents submitted during verification are stored in encrypted vaults with restricted access. Only authorized compliance personnel can view KYC data, and all access is logged.
Transparent Retention
We retain data only as long as legally required or operationally necessary. When retention periods expire, data is securely deleted using industry-standard destruction protocols.
Full Member Rights
You have the right to access, correct, delete, or export your data at any time. Exercise your privacy rights easily through our support team with no hidden fees or delays.
Regular Security Audits
Independent third-party cybersecurity firms conduct quarterly audits and penetration tests. We proactively identify and remediate vulnerabilities before they can be exploited.
Questions About Your Privacy?
Our support team is available 24/7 to answer privacy questions, handle data rights requests, or address any concerns about how nos26 uses and protects your personal information.