Legal Document

Privacy Policy

At nobu88, protecting your personal data is a fundamental commitment — not a checkbox exercise. This Privacy Policy explains precisely what information we collect, why we collect it, how we use and safeguard it, and what rights you hold over your own data as a registered player on the nobu88 Platform.

Last Updated: 1 January 2026

This Privacy Policy applies to all personal data processed by nobu88 in connection with the operation of the nobu88 online betting Platform at nobu88.cam. It should be read in conjunction with our Terms & Conditions and Responsible Gaming Policy. By registering an Account or otherwise using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.

Table of Contents

1 Definitions

In this Privacy Policy, the following terms carry the meanings set out below, unless context clearly requires otherwise.

  • "nobu88" / "the Company" / "we" / "us" / "our" — the internationally incorporated entity that owns, operates, and maintains the nobu88 online betting Platform at nobu88.cam.
  • "Platform" — the nobu88 website, mobile-optimised site, software, and all associated services accessible at nobu88.cam.
  • "Player" / "you" / "your" — any individual who visits, browses, registers on, or uses the Platform in any capacity.
  • "Personal Data" — any information relating to an identified or identifiable natural person, including name, identification number, location data, online identifier, or data specific to the physical, economic, or social identity of that person.
  • "Processing" — any operation performed on Personal Data, whether or not by automated means, including collection, recording, storage, use, disclosure, erasure, or destruction.
  • "Data Controller" — the entity that determines the purposes and means of Processing Personal Data. nobu88 acts as Data Controller in respect of Player data collected via the Platform.
  • "Data Processor" — any third party engaged by nobu88 to Process Personal Data on nobu88's behalf and in accordance with nobu88's instructions.
  • "KYC" — Know Your Customer: the identity and age verification process mandated by our licensing obligations and anti-money-laundering (AML) framework.
  • "Cookies" — small text files placed on your device by the Platform for the purposes of session management, analytics, and personalisation.
2 Data Controller

nobu88 is the Data Controller for all Personal Data collected from Players and site visitors via the Platform. As Data Controller, nobu88 is responsible for ensuring that Personal Data is Processed lawfully, fairly, and transparently, and that appropriate technical and organisational security measures are in place to protect it against unauthorised access, loss, or destruction.

For all data-related inquiries, requests, or complaints, Players should contact the nobu88 Data Privacy Team using the contact details provided in Clause 15 of this Policy.

Our Commitment: nobu88 processes Player data only for the purposes described in this Policy. We do not sell your Personal Data to third parties. We do not use your data for purposes incompatible with those disclosed at the time of collection.
3 Data We Collect

nobu88 collects the following categories of Personal Data in connection with the operation of the Platform and the provision of our services to registered Players:

3.1 Identity & Registration Data

  • Full legal name as it appears on your national identity document (KTP).
  • Date of birth (used to verify that you are aged 21 or above).
  • Gender (where provided voluntarily during registration).
  • Nationality and country of residence.
  • KTP number or equivalent national identity reference.
  • Selfie photograph submitted for KYC biometric verification.

3.2 Contact & Communication Data

  • Email address (primary account identifier and communication channel).
  • Mobile phone number (used for two-factor authentication and security alerts).
  • Residential address in Indonesia (required for KYC address verification).
  • City of residence (e.g., Jakarta, Surabaya, Medan, Bandung, Bali, Yogyakarta, Makassar).

3.3 Financial & Payment Data

  • Indonesian bank account details (bank name, account number, account holder name) — covering BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Permata, and BSI.
  • E-wallet account details (OVO, DANA, GoPay, ShopeePay, LinkAja) where used for deposits or withdrawals.
  • Transaction history: deposit amounts, withdrawal amounts, dates, and reference numbers — denominated in Indonesian Rupiah (IDR / Rp).
  • Bonus and promotional credits awarded to your Account.

3.4 Wagering & Activity Data

  • Betting history across all product verticals: sports markets (including bandar bola football wagering and mix parlay accumulators), live casino, togel (lottery), and slot gacor (high-frequency slot titles).
  • Game session data: session start and end times, game titles played, stake amounts, win/loss outcomes.
  • Responsible gaming tool usage: deposit limit settings, self-exclusion requests, cool-off periods activated.

3.5 Technical & Device Data

  • IP address and geolocation data (country and city level).
  • Device type, operating system, and browser version.
  • Pages visited, navigation paths, and time spent on the Platform.
  • Login timestamps and session identifiers.
  • Cookie and tracking pixel data (see Clause 12).

3.6 Support & Correspondence Data

  • Content of support tickets, live chat transcripts, and email correspondence with the nobu88 support team.
  • Complaint and dispute records, including supporting documentation submitted by the Player.
4 How Data Is Collected

nobu88 collects Personal Data through the following channels and mechanisms:

  • Directly from you: when you register an Account, complete the KYC process, make a deposit or withdrawal, place a wager, contact support, or participate in a promotion.
  • Automatically via technology: through Cookies, web server logs, and similar tracking technologies deployed on the Platform that record technical and behavioural data during your browsing sessions.
  • From third-party identity verification providers: nobu88 may use licensed third-party KYC and AML screening services to verify the identity documents and financial history you submit. These providers return verification decisions to nobu88 but do not retain your data beyond their own stated retention periods.
  • From payment processors: transaction confirmation data is received from our partner banks and e-wallet providers (BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, LinkAja) when you make deposits or withdrawals.
  • From fraud and AML screening tools: nobu88 uses automated risk-scoring systems that analyse behavioural patterns to detect money laundering, multi-accounting, and fraudulent activity.
5 Purposes of Processing

nobu88 processes your Personal Data for the following defined purposes, each of which is necessary to deliver and improve our services or to comply with legal obligations:

  • Account Creation & Management: To register, authenticate, and maintain your Account, including password resets, two-factor authentication, and security notifications.
  • Identity & Age Verification (KYC): To confirm that you are at least 21 years of age and are the individual you claim to be, as required under our licensing obligations.
  • Payment Processing: To facilitate deposits and withdrawals via Indonesian banking channels and e-wallets, and to maintain accurate financial records in IDR.
  • Service Delivery: To provide access to all Platform products, including sports betting markets, live casino, togel lottery, and slot gacor titles.
  • Anti-Money Laundering (AML) & Fraud Prevention: To screen transactions and account activity for signs of money laundering, fraud, multi-accounting, or other prohibited activities, as required by our international gaming licence.
  • Customer Support: To respond to inquiries, manage complaints, and resolve disputes in a timely and fair manner.
  • Responsible Gaming: To monitor player activity for indicators of problem gambling and to administer responsible gaming tools such as deposit limits, self-exclusion, and reality-check reminders.
  • Marketing & Promotions: To send you relevant promotional offers, bonus notifications, and seasonal campaign communications — only where you have consented to receive marketing communications. You may withdraw consent at any time by contacting support.
  • Platform Improvement & Analytics: To analyse usage patterns, improve the user interface and experience, and develop new features and product categories.
  • Legal & Regulatory Compliance: To meet obligations imposed by our international gaming licence, applicable anti-money-laundering regulations, and any lawful requests from competent authorities.
7 Data Sharing & Disclosure

nobu88 does not sell, rent, or trade your Personal Data to third parties for their own marketing purposes. We may, however, share your Personal Data with the following categories of recipients where necessary to deliver our services or to comply with legal obligations:

  • Payment Processors & Banking Partners: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Permata, BSI) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) receive the financial data necessary to execute deposit and withdrawal transactions on your behalf.
  • KYC & Identity Verification Providers: Licensed third-party providers who verify the identity documents and biometric data you submit during the KYC process. These providers operate under data processing agreements with nobu88 and are prohibited from using your data for any purpose beyond KYC verification.
  • AML & Fraud Screening Services: Automated systems and specialised service providers that analyse transaction and behavioural data to detect money laundering, fraud, and other prohibited activities. These providers act as Data Processors under nobu88's instructions.
  • Game Content Providers: Third-party game studios (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft) may receive anonymised session and game-play data necessary for the technical delivery of their game content on the Platform.
  • IT Infrastructure & Cloud Service Providers: Hosting, cloud storage, and cybersecurity providers who maintain and secure the Platform's technical infrastructure. All such providers operate under data processing agreements with strict confidentiality obligations.
  • Regulatory & Law Enforcement Authorities: nobu88 will disclose Personal Data to licensing authorities, law enforcement agencies, or other competent authorities where required to do so by applicable law, court order, or regulatory direction — and only to the extent strictly required.
  • Professional Advisers: Legal counsel, auditors, and accountants who require access to certain data to provide professional services to nobu88, subject to professional confidentiality obligations.
Important: All third parties with whom nobu88 shares Personal Data are contractually bound to handle that data securely, use it only for the specified purpose, and comply with applicable data protection standards.
8 International Data Transfers

As an internationally operated Platform, nobu88 may transfer your Personal Data to servers and service providers located in jurisdictions outside Indonesia. These transfers are necessary for the operation of our Platform, the delivery of our gaming services, and the administration of KYC and AML processes.

Wherever Personal Data is transferred internationally, nobu88 takes steps to ensure that an adequate level of data protection is maintained, consistent with the standards applied within Indonesia and under our licensing jurisdiction. Protective measures may include:

  • Contractual data transfer agreements with receiving parties that impose equivalent data protection obligations.
  • Transferring data only to service providers in jurisdictions recognised as providing an adequate level of data protection.
  • Applying technical security measures — including end-to-end encryption and access controls — to data in transit and at rest.
Server Security: All data transmitted between your device and the nobu88 Platform is protected by industry-standard TLS/SSL encryption. Data centres used by nobu88 maintain ISO-27001-aligned security controls.
9 Data Retention

nobu88 retains Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and our licensing obligations. The following retention periods apply as a general guide — specific retention periods may vary depending on the data category and applicable regulatory requirements:

Data Category Retention Period
Account registration and identity data Duration of Account + 5 years after closure
KYC documents and verification records Duration of Account + 5 years after closure
Financial transaction records (deposits / withdrawals) Duration of Account + 7 years after closure
Wagering and game-play history Duration of Account + 3 years after closure
AML screening and fraud investigation records Up to 7 years from the date of the relevant event
Support correspondence and complaint records 3 years from the date of the last interaction
Marketing consent records Until consent is withdrawn + 1 year thereafter
Cookie and session data As specified in Clause 12; typically 30–365 days

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised so that it can no longer be associated with an identified individual. Where anonymisation is not possible, data is archived with strict access controls and deleted at the earliest practicable opportunity.

10 Security Measures

nobu88 implements a comprehensive set of technical and organisational security measures to protect your Personal Data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include, but are not limited to:

  • TLS/SSL Encryption: All data transmitted between your device and the nobu88 Platform is encrypted using Transport Layer Security (TLS), preventing interception by unauthorised parties during transit.
  • Data Encryption at Rest: Sensitive Personal Data — including identity documents and financial records — is stored in encrypted form within our secure data infrastructure.
  • Two-Factor Authentication (2FA): Players are strongly encouraged to enable 2FA on their Accounts. nobu88 supports SMS-based and authenticator app-based 2FA to add a second layer of protection beyond your password.
  • Access Controls: Access to Personal Data within nobu88's internal systems is restricted on a strict need-to-know basis. All staff with access to Player data undergo background checks and receive regular data protection training.
  • Penetration Testing & Security Audits: The Platform undergoes regular security assessments, including external penetration testing, to identify and remediate vulnerabilities before they can be exploited.
  • Fraud Monitoring: Automated fraud-detection systems continuously monitor Account activity and transaction patterns for indicators of unauthorised access or suspicious behaviour.
  • Incident Response: nobu88 maintains a documented data breach response procedure. In the event of a breach that poses a risk to Player rights, nobu88 will notify affected Players without undue delay and take immediate steps to contain and remediate the incident.
Your Responsibility: The security of your Account also depends on you. Never share your password with anyone. Use a strong, unique password for your nobu88 Account. Contact support immediately if you suspect unauthorised access to your Account.
11 Your Data Rights

As a Player whose Personal Data is processed by nobu88, you hold the following rights in respect of your data. To exercise any of these rights, please contact the nobu88 Data Privacy Team using the details in Clause 15. We will respond to all valid requests within thirty (30) days of receipt.

  • Right of Access: You have the right to request a copy of the Personal Data that nobu88 holds about you, along with information about how it is processed.
  • Right to Rectification: If any of your Personal Data is inaccurate or incomplete, you have the right to request that it be corrected or updated.
  • Right to Erasure ("Right to Be Forgotten"): In certain circumstances, you may request that nobu88 delete your Personal Data. This right is subject to nobu88's legal obligations to retain certain data under our licensing and AML framework — we cannot delete data that we are legally required to retain.
  • Right to Restriction of Processing: You may request that nobu88 restrict the processing of your Personal Data in certain circumstances — for example, while a dispute about data accuracy is being resolved.
  • Right to Data Portability: Where processing is based on your consent or on performance of a contract, you have the right to receive your Personal Data in a structured, commonly used, machine-readable format.
  • Right to Object: You have the right to object to the processing of your Personal Data where nobu88 relies on legitimate interests as the legal basis. nobu88 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
  • Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
  • Right to Lodge a Complaint: If you are dissatisfied with how nobu88 handles your Personal Data, you have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.
How to Submit a Request: Email our Data Privacy Team at [email protected] with the subject line "Data Rights Request" and your Account username. We will verify your identity before processing any request.
12 Cookies & Tracking Technologies

The nobu88 Platform uses Cookies and similar tracking technologies to deliver a functional, personalised, and secure user experience. By continuing to use the Platform, you consent to the use of Cookies in accordance with this Clause.

Cookie Type Purpose Duration
Essential / Functional Required for the Platform to operate — session management, authentication tokens, security functions. Cannot be disabled. Session / up to 30 days
Analytics Anonymised data on page views, navigation paths, and feature usage — used to improve the Platform experience. Up to 365 days
Personalisation Remembers your language preferences, display settings, and recently viewed games to personalise your experience. Up to 180 days
Marketing / Tracking Used to measure the effectiveness of promotional campaigns and, where consented, to serve relevant offers. May involve third-party pixels. Up to 90 days

You can manage or disable non-essential Cookies through your browser settings. Please note that disabling certain Cookies may impair the functionality of the Platform, including the ability to log in or maintain a session. Detailed browser-specific Cookie management instructions are available in the help documentation of your browser.

13 Minors & Age Restriction

The nobu88 Platform is strictly intended for adults aged 21 and above. nobu88 does not knowingly collect Personal Data from individuals under the age of 21. Age verification is a mandatory step in the KYC process, and any Account found to be held by a person under 21 will be immediately suspended, investigated, and closed in accordance with our Terms & Conditions.

If nobu88 discovers that Personal Data has been collected from a person under 21 without proper verification having been completed, that data will be deleted as promptly as possible, subject to any overriding legal obligations to retain records of the incident for AML and regulatory reporting purposes.

If you are a parent or guardian and believe that a minor in your care has registered an Account on the nobu88 Platform, please contact us immediately at [email protected]. We will investigate and take appropriate action without undue delay.

21+ Only: nobu88 enforces a strict minimum age policy. We support parental control tools and encourage adults to use web-filtering software to prevent minors from accessing online gambling content.
14 Amendments to This Policy

nobu88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or our licensing obligations. When material changes are made, we will update the "Last Updated" date displayed at the top of this page and, where the changes are significant, notify registered Players by email or via an in-platform notification.

Your continued use of the Platform following the publication of an updated Privacy Policy constitutes your acknowledgement of the changes. We encourage you to review this Policy periodically to stay informed about how we collect, use, and protect your Personal Data.

If you disagree with any amendment to this Privacy Policy, you should cease using the Platform and contact our support team to request Account closure. Any Personal Data collected prior to the amendment will continue to be handled in accordance with the version of the Policy in force at the time of collection, unless you expressly consent to the amended terms.

15 Contact & Data Inquiries

For any questions, concerns, or requests relating to this Privacy Policy or to the processing of your Personal Data by nobu88, please contact our Data Privacy Team using the details below. All contact information is provided as plain text — please copy the email address manually.

  • Data Privacy Email: [email protected]
  • Subject Line: Please use "Privacy Inquiry" or "Data Rights Request" so your message is routed to the correct team.
  • Response Time: All privacy-related inquiries are acknowledged within 24 hours and substantively responded to within 30 days of receipt (WIB business days).
  • Language: Inquiries may be submitted in English or Indonesian (Bahasa Indonesia). Our support team includes native Indonesian-speaking agents.
  • Identity Verification: For requests to exercise your data rights (Clause 11), we will ask you to verify your identity before we process the request, to protect against unauthorised access to your data.

For formal legal notices addressed to nobu88's registered corporate entity, please include "Legal Notice — Privacy" in your subject line. Formal legal notices will be acknowledged within two (2) business days.

Why Your Privacy Is Safe With nobu88

Six pillars underpin our data protection framework — built to give every Indonesian player genuine confidence.

End-to-End SSL Encryption

Every byte of data exchanged between your device and the nobu88 Platform travels over TLS-encrypted connections. Whether you are depositing via BCA or browsing live casino tables, your session is shielded from interception at every step.

We Never Sell Your Data

nobu88 does not sell, rent, or trade your Personal Data to third-party marketers — full stop. Data shared with third-party service providers is strictly limited to what is needed to deliver the service, under binding contractual confidentiality obligations.

Certified KYC Framework

Our identity verification process is conducted by licensed third-party KYC providers under strict data processing agreements. Your KTP and selfie data are used solely to verify your identity and are never shared beyond that specific purpose.

You Control Your Data

Players hold clear, exercisable rights over their Personal Data — including access, rectification, erasure, and portability. Submit a request to our Data Privacy Team at any time and receive a substantive response within 30 days, no questions asked.

Minimal Data Collection

nobu88 operates on a data minimisation principle — we collect only what is genuinely necessary to provide our services, fulfil our legal obligations, and keep your Account secure. We do not collect data speculatively or "just in case".

Opt-Out Marketing, Always

Promotional communications are sent only with your explicit consent and can be withdrawn at any point. There are no dark patterns, no buried unsubscribe links, and no penalty for opting out — your inbox preferences are yours to control.

Questions About Your Privacy?

Our Data Privacy Team is ready to help. You can also explore our FAQ for quick answers to common questions, review our Terms & Conditions for the full legal framework, or visit our Responsible Gaming page to manage your account safety settings.

Visit the FAQ Terms & Conditions Responsible Gaming Back to Home