nostoto Privacy Policy

This page describes what we collect when you use nostoto and how we keep that data protected. We collect personal information to verify your account, process deposits and withdrawals, and comply with anti-money-laundering regulations. We encrypt your data, store it securely, and do not share it with third parties without your consent, except as required by law.

When you create an account on nostoto, you provide your email, phone number, and identity information. During verification, you upload identity documents. When you deposit via DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, or bank transfer through mobile banking, local payment, online payment, or e-wallet, we record transaction details. We use this information to operate our platform, prevent fraud, and comply with regulations.

We may update this privacy policy at any time. Material changes will be communicated to you. Your continued use of nostoto after updates are posted constitutes your acceptance of the updated policy. If you have questions about how we handle your data, contact our support team.

What data we collect on nostoto

We collect several categories of information when you use nostoto. Account information includes your email address, phone number, full name, date of birth, and residential address. Identity information includes copies of your passport, national ID, or driver's license, which you upload during verification. Payment information includes details of your deposits and withdrawals—the payment method used, the amount, the date, and transaction reference numbers.

We also collect activity data: your betting history, game play records, login times, and IP addresses. This information helps us detect fraud, investigate disputes, and improve our platform. We do not collect your payment card numbers or bank account numbers directly; payment processors handle this sensitive data and we receive only transaction confirmations.

We collect cookies and similar tracking technologies when you visit nostoto. Cookies store your login session, remember your preferences, and help us understand how you use our platform. You can disable cookies in your browser settings, though this may limit platform functionality.

Account information: Email, phone, name, date of birth, address. Required to create and verify your nostoto account.
Identity documents: Passport, national ID, or driver's license. Required for Know Your Customer (KYC) verification before deposits.
Payment records: Deposit and withdrawal details, payment method, amounts, dates. Used to process transactions and detect fraud.
Activity data: Betting history, game play, login times, IP addresses. Used to operate nostoto and investigate disputes.

How we use your data on nostoto

We use your data to operate nostoto and provide our services. We verify your identity to comply with anti-money-laundering regulations and prevent fraud. We process your deposits and withdrawals using your payment information. We track your betting and gaming activity to calculate winnings, manage your account balance, and detect suspicious patterns.

We use your email and phone number to send account notifications—login alerts, deposit confirmations, withdrawal status updates. We may also send promotional messages about new games or features, though you can opt out of marketing communications at any time.

We analyze activity data to improve nostoto. We review which games are popular, which payment methods users prefer, and where our platform experiences technical issues. This analysis helps us enhance the user experience and add features that matter to our users in Jakarta, Surabaya, Bandung, Medan, and other regions.

Note: We do not sell your personal data to third parties. We do not use your data for marketing purposes beyond nostoto without your explicit consent.

Data storage and third-party processors

We store your data on secure servers. Our servers may be located outside your jurisdiction, including outside Indonesia. By using nostoto, you consent to your data being transferred to and stored in other countries. We apply the same security standards to data stored anywhere.

We use third-party processors to help operate nostoto. Payment processors handle your deposit and withdrawal transactions. Email and SMS providers send you account notifications. Cloud storage providers host our servers. These processors are contractually obligated to protect your data and use it only for the purposes we specify.

We may disclose your data if required by law—for example, if a court orders us to provide information, or if we suspect illegal activity. We will notify you of such disclosures unless legally prohibited from doing so.

Your rights regarding your data on nostoto

You have the right to access your personal data. You can view your account information, transaction history, and activity logs by logging into nostoto. You can also request a complete copy of your data by contacting our support team.

You have the right to correct inaccurate information. If your name, address, or other details are incorrect, update them in your account settings or contact support.

You have the right to request deletion of your data, subject to legal retention requirements. We must retain some data for anti-money-laundering compliance and dispute resolution. We will delete data that is no longer necessary for these purposes.

You have the right to opt out of marketing communications. You can disable promotional emails and SMS messages from your account settings at any time.

1

Access your dataRight 1

Log into nostoto to view your account information and transaction history. Request a full data export from support.
2

Correct inaccurate dataRight 2

Update your name, address, or contact details in account settings. Contact support if you need assistance.
3

Request data deletionRight 3

Contact support to request deletion of your data. We retain data required by law for anti-money-laundering compliance.
4

Opt out of marketingRight 4

Disable promotional emails and SMS from your account settings. You will still receive transactional notifications.

Cookies and tracking on nostoto

We use cookies to store your login session, remember your preferences, and track your activity on nostoto. Cookies are small files stored on your device. When you visit nostoto, your browser sends cookies back to our servers, allowing us to recognize you and personalize your experience.

We use session cookies (which expire when you close your browser) and persistent cookies (which remain on your device). We also use third-party analytics cookies to understand how users interact with nostoto—which games are popular, which payment methods are used most, where users encounter issues.

You can disable cookies in your browser settings. However, disabling cookies may prevent nostoto from functioning properly. You may not be able to log in, access your account, or place bets if cookies are disabled.

Data security on nostoto

We protect your data through encryption, secure password storage, and access controls. Your password is encrypted using industry-standard algorithms and is never stored in plain text. When you log into nostoto, your login credentials are transmitted over an encrypted connection (HTTPS).

We restrict access to your data. Only nostoto staff who need your information to perform their jobs can access it. We conduct regular security audits and penetration testing to identify and fix vulnerabilities.

Despite our security measures, no system is completely secure. We cannot guarantee that your data will never be compromised. If we detect a data breach, we will notify you and take steps to mitigate harm.

Contact us about your data on nostoto

If you have questions about how we handle your data, want to exercise your rights, or suspect a data breach, contact our support team. Provide your account email and a description of your request. We will respond within a reasonable timeframe.

Our services on nostoto are available only where local law permits. Data protection laws vary by jurisdiction. If you are located in a jurisdiction with specific data protection requirements, we will comply with those requirements to the extent applicable.