Privacy Policy

01 Introduction

noya88 operates an online gaming platform serving Indonesian players with casino games, live dealer tables, sports betting, and togel (Indonesia's traditional numbers-prediction lottery) markets. Protecting your personal information is fundamental to our business model and core values.

This Privacy Policy applies to all personal data collected through:

• The noya88 website at https://noya88.cam
• All subdomains and associated web properties
• Customer support channels (live chat, email, WhatsApp)
• Account registration and verification processes
• Payment processing and transaction systems

This policy should be read in conjunction with our Terms & Conditions, which govern your use of the noya88 platform.

02 Data Controller

For the purposes of applicable data protection law, noya88 is the data controller responsible for your personal information. This means we determine the purposes and means of processing your personal data and are accountable for its protection.

Our designated contact for privacy matters is:

• Email: [email protected] (Subject: Privacy Inquiry)

For data protection rights requests (access, correction, deletion), please include "Data Subject Request" in your email subject line and provide your registered account username and email address for verification purposes.

03 Information We Collect

noya88 collects several categories of personal information to operate your account, process transactions, and comply with regulatory obligations:

Registration & Account Information:

• Full legal name (as it appears on your government-issued ID)
• Date of birth
• Email address
• Mobile phone number (Indonesian +62 format)
• Residential address (street, city, province, postal code)
• Chosen username and encrypted password
• Preferred language and currency (IDR)

Identity Verification (KYC) Documents:

• Government-issued photo identification (Indonesian KTP national identity card, passport, or driver's license)
• Proof of address documents (utility bills, bank statements, government correspondence)
• Selfie photographs holding your ID document
• Source of funds documentation (for large deposits or withdrawals)

Financial & Transaction Data:

• Bank account details (bank name, account number, account holder name) for BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon accounts
• E-wallet account information for OVO, DANA, GoPay, ShopeePay, LinkAja
• Deposit and withdrawal transaction history
• Payment method preferences and transaction timestamps

Gaming & Betting Activity:

• Betting history (sports bets, casino wagers, togel lottery tickets)
• Game play logs and session data
• Win/loss records and account balance history
• Bonus claims and wagering requirement progress

Technical & Usage Data:

• IP address and geographic location data
• Device type, operating system, browser type and version
• Login timestamps and session duration
• Pages visited, features used, and click patterns
• Referring URLs and search terms used to find noya88
• Cookies and similar tracking technologies (see Clause 06)

Communications:

• Live chat transcripts with customer support agents
• Email correspondence with noya88
• Feedback, complaints, and support tickets
• Marketing preference selections (opt-in/opt-out status)

04 How We Use Your Data

noya88 uses your personal information for the following purposes, each based on a legitimate lawful basis under data protection regulations:

We do not use your personal data for automated decision-making or profiling that produces legal effects or similarly significant effects on you, except for automated fraud detection systems which flag suspicious activity for manual review.

05 Data Sharing & Disclosure

noya88 does not sell, rent, or trade your personal information to third parties for their marketing purposes. We share your data only in the following limited circumstances:

Essential Service Providers:

• Payment Processors: Indonesian bank partners (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) receive the minimum information necessary to process your deposits and withdrawals.
• Game Providers: Casino game studios (Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, Pocket Games Soft) receive your username and betting activity to deliver game services. They operate under strict data protection agreements.
• Identity Verification Services: Third-party KYC verification vendors may process your identity documents to confirm your age and identity. These vendors are bound by confidentiality agreements.
• Cloud Infrastructure Providers: Secure server hosting companies store our databases in encrypted form.

Legal & Regulatory Compliance:

• Gaming regulators and licensing authorities in our jurisdiction of operation
• Law enforcement agencies when legally required by court order, subpoena, or applicable law
• Financial intelligence units for anti-money laundering investigations
• Tax authorities if required under Indonesian or international tax treaties

Business Transfers:

In the event of a merger, acquisition, asset sale, or bankruptcy proceeding involving noya88, your personal information may be transferred to the acquiring entity. You will be notified via email of any such change in ownership or control of your personal data.

06 Cookies & Tracking Technologies

noya88 uses cookies and similar tracking technologies to improve your experience, analyze platform usage, and prevent fraud. A cookie is a small text file stored on your device that allows us to recognize you on subsequent visits.

Types of Cookies We Use:

• Essential Cookies: Required for core platform functionality such as maintaining your login session, processing payments, and remembering your language preference. These cannot be disabled without breaking core features.
• Analytics Cookies: Help us understand how players use noya88 by collecting anonymous usage statistics (pages visited, time spent, features used). We use this data to optimize the platform.
• Security Cookies: Detect fraudulent activity, prevent multi-accounting, and protect against unauthorized access. These cookies help identify suspicious behavior patterns.
• Preference Cookies: Remember your settings such as preferred odds format, timezone (WIB), and display preferences.

Third-Party Cookies:

Some third-party service providers (game studios, analytics platforms) may set their own cookies when you use their embedded services on noya88. These third parties have their own privacy policies governing their cookie usage.

Managing Cookies:

You can control or delete cookies through your browser settings. However, disabling essential cookies will prevent you from using certain features of the noya88 platform. Most browsers accept cookies automatically, but you can modify your browser settings to decline cookies if you prefer.

07 Data Security

noya88 implements industry-standard technical and organizational security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction:

• Encryption: All data transmitted between your device and noya88 servers is encrypted using 256-bit SSL/TLS encryption. Sensitive data at rest (passwords, financial information) is encrypted using AES-256 encryption.
• Access Controls: Personal data is accessible only to authorized noya88 personnel who require it to perform their job functions. All staff undergo background checks and sign confidentiality agreements.
• Secure Infrastructure: Our servers are hosted in access-controlled data centers with 24/7 physical security, fire suppression systems, and redundant power supplies.
• Vulnerability Management: We conduct regular security audits, penetration testing, and vulnerability assessments. Security patches are applied promptly.
• Password Security: Player passwords are hashed using bcrypt with per-user salts. noya88 staff cannot view your plaintext password.
• Two-Factor Authentication: Optional 2FA is available for account login, adding an extra layer of protection beyond your password.
• Fraud Detection Systems: Automated systems monitor for suspicious activity patterns such as duplicate accounts, unusual betting patterns, or payment fraud indicators.

While we employ robust security measures, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your login credentials and should notify us immediately if you suspect unauthorized account access.

08 Data Retention

noya88 retains your personal information only as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law:

After the applicable retention period expires, your personal data will be securely deleted or anonymized so that it can no longer be associated with you. Financial records subject to legal retention requirements will be maintained in secure, access-restricted archives.

Accounts that remain inactive (no login, no deposits, no bets) for 24 consecutive months may be subject to automatic closure and data deletion after advance notice is sent to your registered email address.

09 Your Privacy Rights

Under applicable data protection laws, you have the following rights regarding your personal information:

• Right of Access: You may request a copy of all personal data we hold about you. We will provide this in a structured, commonly used, machine-readable format.
• Right to Rectification: If your personal information is inaccurate or incomplete, you have the right to request correction. You can update most account information directly via your account settings.
• Right to Erasure (Right to be Forgotten): You may request deletion of your personal data. However, we may be legally required to retain certain information (financial records, KYC documents) for regulatory compliance purposes.
• Right to Restrict Processing: You may request that we limit how we use your personal data in certain circumstances (e.g., while we verify accuracy of disputed data).
• Right to Data Portability: You may request transfer of your personal data to another service provider in a machine-readable format, where technically feasible.
• Right to Object: You may object to processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time (e.g., unsubscribing from marketing emails).
• Right to Lodge a Complaint: You have the right to lodge a complaint with a data protection supervisory authority in your jurisdiction if you believe we have violated your privacy rights.

Exercising Your Rights:

To exercise any of these rights, contact us at [email protected] with "Data Subject Request" in the subject line. Include your registered username and email address for verification. We will respond to verified requests within 30 days.

10 International Data Transfers

noya88 operates internationally and may transfer your personal data to servers and service providers located outside Indonesia. When we transfer data internationally, we ensure appropriate safeguards are in place:

• Transfers to countries recognized as providing adequate data protection standards
• Use of Standard Contractual Clauses (SCCs) approved by data protection authorities
• Certification schemes such as Privacy Shield (where applicable)
• Binding Corporate Rules for intra-group transfers

Third-party service providers processing data on our behalf (payment processors, game providers, cloud infrastructure providers) are contractually required to maintain equivalent data protection standards regardless of their location.

11 Children's Privacy

noya88 operates a strict 21+ age policy. Our Services are not directed at individuals under 21 years of age, and we do not knowingly collect personal information from minors.

If we discover that we have inadvertently collected personal data from a person under 21 years of age, we will:

• Immediately terminate the account
• Delete all associated personal data from our systems
• Return any deposited funds to the source payment method
• Void any winnings or bonuses claimed

If you are a parent or guardian and believe your child has provided personal information to noya88, please contact us immediately at [email protected] so we can take appropriate action.

12 Changes to This Privacy Policy

noya88 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. Material changes will be communicated to you via:

• Email notification to your registered address
• Prominent notice on the noya88 homepage for 30 days
• Pop-up notification upon your next login

The "Last Updated" date at the top of this document indicates when the policy was most recently revised. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

Continued use of noya88 after changes are posted constitutes acceptance of the revised Privacy Policy. If you do not agree to the updated terms, you should cease using the platform and may request account closure and data deletion (subject to applicable retention obligations).

13 Contact Information

For questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Email: [email protected]
• Subject Line for Privacy Inquiries: "Privacy Policy Question"
• Subject Line for Data Subject Requests: "Data Subject Request"
• Live Chat: Available 24/7 via the chat widget on noya88 (for urgent privacy concerns)

Our customer support team operates in English and Indonesian and will respond to privacy inquiries within 48 hours. For formal data subject rights requests, we will provide a substantive response within 30 days as required by law.