nuvototo Privacy Policy: How We Protect Your Account Data

When you access nuvototo through Android, iOS, or your mobile browser, data flows through encrypted channels from your device to our servers. This page describes what we collect when you register, deposit, or place a wager on nuvototo, and how we keep that data protected under applicable law.

We at nuvototo operate an online gaming and sports betting platform across supported jurisdictions. We handle personal information—your name, email, payment details, and account activity—with strict confidentiality protocols. Our privacy commitment reflects our broader obligation to maintain account security and comply with regulatory frameworks in the regions where we operate.

What We Collect and Why

We collect personal information in several categories. When you register, we gather your full name, email, phone number, date of birth, and password. During KYC (Know Your Customer) verification, we request government-issued ID documents, proof of address, and sometimes source-of-funds documentation. When you deposit or withdraw, we record the amount, payment method (DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, or bank VA), transaction ID, and timestamp. Our live-dealer tables and sportsbook generate betting history, which we retain for settlement confirmation and dispute resolution.

Identity Verification and Fraud Prevention

We collect identity data to prevent fraud, comply with anti-money-laundering (AML) regulations, and ensure account holders are who they claim. nuvototo uses document-verification software to detect forged or altered IDs. We cross-reference submissions against known fraud databases. If you bet on Liga 1, Piala Indonesia, or Piala AFF matches, your account tier and verification status determine which markets you access.

Payment Processing and Transaction Records

We retain payment information (the last four digits of your card or e-wallet, payment-provider reference codes) to process deposits and withdrawals efficiently. nuvototo does not store full card numbers or full e-wallet credentials; our payment processor handles that encryption. We keep transaction logs for six years to satisfy regulatory audit requirements and resolve withdrawal disputes. During high-volume periods around Idul Fitri, Idul Adha, Imlek, or Nyepi, transaction logs help our team track unusual activity patterns.

How we protect your data

  • nuvototo encrypts all data in transit using TLS 1.2 or higher
  • Passwords are hashed with salted algorithms; we never store plaintext
  • Identity documents are encrypted at rest and deleted 30 days after verification
  • Access to nuvototo databases is restricted by role-based permissions and logged
  • Two-factor authentication protects all withdrawal requests

Third-Party Processors and Data Sharing

We at nuvototo work with external partners who process data on our behalf. Payment processors (mobile banking, local payment, online payment operators) receive transaction details to confirm transfers. Our compliance vendor conducts KYC verification and document analysis. Game providers (live-dealer studios, slot platforms) receive your account ID, balance, and bet history to settle wagers. Sports data vendors receive your market selections to confirm odds and settlement accuracy. nuvototo does not sell your data to advertisers or data brokers. We share personal information only when necessary to deliver services or meet legal obligations.

Data Locations and Cross-Border Transfer

Our primary servers are located in Southeast Asia. Some nuvototo support functions (email, logging) may be processed in jurisdictions outside Indonesia. When you withdraw via bank transfer to JakartaSurabaya, Bandung, Medan, or Semarang, your banking details may transit through correspondent bank networks outside the region. We ensure all transfers comply with data-protection frameworks and are encrypted end-to-end. You retain the right to request the specific locations where your data is held.

Your Rights and Data Access

Under applicable privacy laws, you may request access to personal data we hold about you. Contact nuvototo support with "Data Access Request" in the subject line. We will provide a copy of your registration details, identity documents (if still retained), transaction history, and betting records within 14 days. You may also request correction of inaccurate information or deletion of data no longer necessary for our service delivery, subject to legal retention requirements.

Account Deletion and Withdrawal

If you wish to close your nuvototo account permanently, submit a request through account settings or contact our support team. We will disable login access immediately. Your betting history and transactions remain in our archive for seven years (regulatory requirement), but your email, phone, and identity documents are depersonalised or deleted within 30 days. You may reopen a nuvototo account later using different credentials, subject to full KYC verification again.

Cookies and Tracking Technology

nuvototo uses cookies to maintain your login session, remember your language preference, and detect fraud. Essential cookies (session, security) are mandatory; optional cookies (analytics, performance) allow us to understand how you navigate the platform. We do not use cookies to track activity across unrelated websites. You may disable non-essential cookies in your browser settings without losing nuvototo access, though some features may function suboptimally.

Do Not Track signals

We honor Do Not Track (DNT) browser signals for analytics and behavioural tracking, but we cannot disable security cookies necessary for account protection and fraud detection.

Policy Changes and Contact

nuvototo may update this privacy policy to reflect regulatory changes or operational improvements. We will notify you via email of material changes and ask for re-consent if required. Your continued use of nuvototo after changes take effect constitutes acceptance. If you have questions about how nuvototo handles your data, contact our privacy team at [email protected] or through your account messaging. We respond to privacy inquiries within five business days. This policy is effective as of the date published and applies to all current and past nuvototo account holders in supported jurisdictions.

Summary of Our Commitments

We at nuvototo commit to transparency about data collection and use. Your personal information is encrypted, access-controlled, and retained only as long as necessary. We do not share data with unrelated third parties, and we respect your rights to access, correct, and delete your information subject to legal obligations. nuvototo's privacy practices reflect our broader obligation to operate a secure, compliant platform for account holders across our service jurisdictions.

Privacy policy Guide

Info