nono4 Privacy Policy

This Privacy Policy ("Policy") applies to all personal data processed by nono4 ("we", "us", "our") in connection with the operation of the online gaming platform accessible at nono4.vip (the "Platform"). It covers data collected from players who are residents of Indonesia and from any other individual who accesses or uses the Platform's services.

This Policy should be read alongside nono4's Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference. Together, these documents form the complete agreement between nono4 and its players regarding the use of the Platform.

By creating an account on nono4, depositing funds, placing bets, or otherwise interacting with the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree to this Policy, please do not use the Platform.

The following terms have specific meanings throughout this Policy:

• "Personal Data" — any information that identifies or can reasonably be used to identify a living individual, directly or in combination with other data.
• "Processing" — any operation performed on Personal Data, including collection, storage, use, disclosure, transfer, deletion, or destruction.
• "Data Controller" — nono4, the entity that determines the purposes and means of processing your Personal Data.
• "Data Processor" — a third party that processes Personal Data on behalf of nono4 under a contractual obligation, such as a payment processor, KYC verification provider, or cloud infrastructure supplier.
• "Player" — any individual who has registered or is in the process of registering an account on the nono4 Platform.
• "KYC" — Know Your Customer, the identity and age verification process applied to Player accounts.
• "Cookies" — small text files stored on a Player's device by the Platform for purposes including session management, analytics, and personalization.

nono4 collects the following categories of personal data from Players:

nono4 does not knowingly collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health information, except where health-related information is voluntarily disclosed by a Player in the context of a responsible gaming self-exclusion or limit-setting request.

nono4 collects Personal Data through the following channels:

• Direct submission. Information you provide when registering an account, completing KYC verification, making a deposit or withdrawal request, contacting our support team, or responding to a survey or promotion.
• Automated technologies. Technical and usage data collected automatically via cookies, web beacons, server logs, and similar tracking technologies when you access or interact with the Platform. See Clause 8 for full details on our cookie practices.
• Third-party sources. Identity verification data received from licensed KYC and anti-money laundering (AML) service providers. Payment confirmation data received from your bank or e-wallet provider (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja) when processing a transaction. Fraud screening data from our fraud-prevention partners. Game result and betting data from our certified game studio partners (Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, Pocket Games Soft).

nono4 uses Personal Data only for the purposes described in this Policy. Specifically, we process your data to:

• Operate and maintain your account. Creating, managing, and securing your Player account, including processing login sessions, resetting credentials, and applying account-level restrictions such as deposit limits or self-exclusion where requested.
• Process transactions. Crediting deposits and processing withdrawal requests through your chosen local payment channel (bank transfer or e-wallet), including verifying that the sending and receiving accounts are registered in your own name.
• Verify your identity (KYC). Confirming that you are at least 21 years of age, an Indonesian resident, and not a politically exposed person (PEP) or individual subject to applicable sanctions screening.
• Comply with legal and regulatory obligations. Maintaining transaction records, responding to lawful information requests from competent authorities, filing suspicious transaction reports where required by applicable anti-money laundering frameworks, and retaining data for the periods required by applicable law.
• Prevent fraud, money laundering, and abuse. Monitoring account activity for indicators of fraudulent behavior, unauthorized access, multi-accounting, bonus abuse, and money laundering. Sharing relevant data with fraud prevention networks and payment processors where necessary.
• Support responsible gaming. Analyzing betting patterns and session data to identify potential problem gambling behavior, applying mandatory cooling-off periods or self-exclusion restrictions, and reaching out to Players who trigger responsible gaming alerts.
• Improve the Platform. Analyzing aggregated and anonymized usage data to understand how players navigate and use the Platform, identify technical issues, and prioritize feature development.
• Communicate with you. Sending transactional messages (deposit confirmations, withdrawal notifications, account security alerts), responding to support enquiries, and — where you have given explicit consent — sending promotional communications about bonuses, new games, and seasonal offers.
• Personalize your experience. Tailoring the games and promotions shown to you based on your account history and stated preferences, within the bounds of responsible gaming guidelines.

nono4 does not use your Personal Data for automated decision-making that produces legal or similarly significant effects on your account status, except where such processing is required for fraud prevention or legal compliance, in which case you have the right to request human review of any automated decision.

nono4 processes your Personal Data on the following legal bases:

• Contractual necessity. Processing required to perform the contract between nono4 and the Player — specifically, to operate the Player's account, process deposits and withdrawals, and deliver gaming services.
• Legal obligation. Processing required to comply with applicable anti-money laundering, counter-terrorism financing, and data retention laws in the jurisdiction in which nono4 is licensed.
• Legitimate interests. Processing carried out in the legitimate interests of nono4 or a third party — specifically, fraud prevention, platform security, network integrity, responsible gaming monitoring, and service improvement — where those interests are not overridden by your fundamental rights and freedoms.
• Consent. Where nono4 relies on your consent as the legal basis for processing — principally for marketing communications and non-essential cookies — you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal. To withdraw marketing consent, update your notification preferences in your account settings or contact support.

nono4 does not sell, rent, or trade your Personal Data to any third party for their own marketing purposes. We share data only in the following circumstances:

• Service providers and Data Processors. We engage vetted third-party service providers to assist in operating the Platform, including: payment processors and banking partners (BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, LinkAja) for transaction settlement; KYC and identity verification providers; cloud hosting and infrastructure providers; fraud detection and AML screening services; customer support platform operators; and game studio partners (Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, Pocket Games Soft). Each such provider is bound by a data processing agreement that restricts their use of your data to the specified service purpose only.
• Regulatory and legal authorities. nono4 will disclose Personal Data to competent regulatory bodies, law enforcement agencies, financial intelligence units, or courts of law when required to do so by a valid legal order, warrant, or regulatory directive. We will notify the relevant Player of such disclosure where we are legally permitted to do so.
• Corporate transactions. In the event of a merger, acquisition, restructuring, or sale of all or part of nono4's business, Player data may be transferred to the acquiring entity as part of the transaction. We will notify affected Players via in-platform announcement or email before any such transfer takes effect, and the acquiring entity will be bound by the terms of this Policy.
• Fraud prevention networks. Where a Player account is found to be engaged in fraud, multi-accounting, or money laundering, relevant account identifiers may be shared with shared industry fraud-prevention databases to protect other platforms and the wider financial system.

nono4 uses cookies and similar tracking technologies to operate and improve the Platform. The following categories of cookies are used:

You can manage your cookie preferences through your browser settings. Please note that disabling cookies beyond strictly necessary and functional categories may limit the personalization features available on the Platform but will not prevent you from placing bets or managing your account.

nono4 does not use third-party advertising cookies to track your activity outside of the nono4.vip domain.

nono4 retains Personal Data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply:

• Active account data — retained for the full duration of the Player's account plus a minimum of five (5) years following voluntary account closure or termination, in order to comply with AML record-keeping requirements.
• KYC verification documents — retained for a minimum of five (5) years following the most recent transaction on the account, or as required by applicable anti-money laundering regulations in the relevant jurisdiction.
• Financial transaction records — retained for a minimum of five (5) years following the date of each transaction.
• Support communications — retained for three (3) years following the resolution of the relevant support case, or longer if the communication relates to an active dispute or legal proceeding.
• Analytical and usage data — aggregated anonymized data retained indefinitely; individual-level usage data retained for twenty-four (24) months from the date of collection, then anonymized or deleted.
• Marketing consent records — retained for three (3) years following the date of last consent action (opt-in or opt-out) as evidence of compliance.

Upon expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymized in accordance with nono4's internal data disposal procedures.

nono4 implements a comprehensive set of technical and organizational security measures to protect your Personal Data against unauthorized access, disclosure, alteration, or destruction:

• 256-bit SSL/TLS encryption on all data transmitted between your device and nono4 servers, including during login, account management, deposit, and withdrawal processes.
• Encrypted storage for all sensitive Personal Data and financial records held on nono4 infrastructure, using AES-256 encryption at rest.
• Access controls — strict role-based access control (RBAC) policies ensuring that only authorized nono4 personnel with a legitimate operational need can access Player Personal Data. All staff access to production data systems is logged and audited.
• Two-factor authentication (2FA) available for Player accounts and mandatory for all nono4 staff accounts with access to Player data systems.
• Regular penetration testing conducted by independent third-party security firms to identify and remediate vulnerabilities before they can be exploited.
• Incident response procedures — nono4 maintains a documented data breach response plan. In the event of a data breach affecting Player Personal Data, nono4 will notify affected Players within 72 hours of becoming aware of the breach, where technically feasible.

As a Player whose Personal Data is processed by nono4, you hold the following rights with respect to your data:

• Right of access. You may request a copy of all Personal Data that nono4 holds about you. We will respond to verified access requests within 30 days. The first request is provided free of charge; subsequent requests within a 12-month period may incur a reasonable administrative fee.
• Right to rectification. If any Personal Data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Minor corrections (e.g., email address updates) can be made directly in your account settings; corrections to identity data require re-submission of KYC documents.
• Right to erasure ("right to be forgotten"). You may request deletion of your Personal Data where: (a) the data is no longer necessary for the purpose for which it was collected; (b) you withdraw consent and no other legal basis applies; or (c) the data has been unlawfully processed. Erasure requests will be honored except where retention is required by applicable law (e.g., AML record-keeping obligations).
• Right to restriction of processing. You may request that nono4 restrict the processing of your Personal Data in certain circumstances — for example, while the accuracy of the data is being contested, or while an objection is being assessed.
• Right to data portability. Where processing is based on your consent or on contractual necessity and is carried out by automated means, you may request that your Personal Data be provided to you in a structured, commonly used, machine-readable format.
• Right to object. You may object to processing based on legitimate interests at any time. You have an unconditional right to object to processing of your data for direct marketing purposes, which will be honored immediately upon receipt of your objection.
• Right to withdraw consent. Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

To exercise any of the above rights, please contact the nono4 Data Protection team at [email protected] (plain text — not a clickable link). We may request identity verification before processing a rights request to ensure that data is not disclosed to unauthorized parties.

nono4 is strictly an adults-only platform. No individual under the age of 21 may register an account, make a deposit, or participate in any gaming activity on the Platform. This restriction applies absolutely and without exception to all players in Indonesia and all other jurisdictions from which the Platform is accessible.

nono4 does not knowingly collect Personal Data from individuals under the age of 21. If nono4 becomes aware that Personal Data has been collected from a minor, that data will be deleted immediately, the associated account will be permanently closed, and any deposits made will be returned through the original payment channel after deducting any withdrawals already processed.

If you are a parent or guardian and have reason to believe that your child has registered an account on nono4, please contact our support team immediately at [email protected]. We take underage gambling extremely seriously and will act on all such reports with urgency.

The Platform integrates with a number of third-party services that may process your Personal Data as independent Data Controllers or as Data Processors on behalf of nono4. These include:

• Game studios. Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Pocket Games Soft operate game engines that may process game-play data (but not financial or identity data) on their own infrastructure. Each studio's own privacy practices apply to data processed within their game environments.
• Payment providers. Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) receive transaction data sufficient to settle deposits and withdrawals. Each provider operates under its own privacy policy and is subject to Bank Indonesia's data protection regulations.
• KYC verification providers. Licensed identity verification partners process KYC documents and return a verification result to nono4. Document images are handled in accordance with the provider's own certified data security standards.
• Cloud infrastructure. nono4's Platform is hosted on enterprise-grade cloud infrastructure. Server infrastructure is located in data centers compliant with internationally recognized security standards.

nono4 is not responsible for the privacy practices of third-party services beyond the scope of the data processing agreements in place. We recommend reviewing the privacy policies of any third-party service you interact with directly, particularly your bank or e-wallet provider, when making deposits and withdrawals on the Platform.

nono4 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable legal requirements, or operational procedures. When material changes are made, we will notify registered Players via in-platform notification or email to the address associated with their account at least seven (7) days before the changes take effect.

The "Last updated" date displayed at the top of this Policy indicates when the most recent revision was published. Continued use of the Platform following the effective date of any amended Policy constitutes your acceptance of the revised terms. If you do not accept the revised Policy, you must stop using the Platform and contact support to request voluntary account closure before the effective date.

The current version of this Policy is always accessible at nono4.vip/privacy-policy. We encourage you to review it periodically to stay informed of how nono4 protects and uses your Personal Data.

If you have any questions, concerns, or requests relating to this Privacy Policy or to nono4's processing of your Personal Data, please reach out to us through the following channels:

• Live Chat: Available 24/7 via the chat widget accessible after logging in to your nono4 account. Native Indonesian-speaking agents are available on every shift to assist with data-related enquiries.
• Email: [email protected] — this address is displayed as plain text and is not a clickable link. Please copy it manually into your email client. Include "Privacy Request" in the subject line for faster routing to our Data Protection team.

nono4 aims to acknowledge all privacy-related enquiries within 48 hours and to resolve substantive requests within 30 calendar days. Where a request is complex or voluminous, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it before the initial 30-day period expires.

All support communications are handled in English and Indonesian. If you prefer to communicate in Indonesian, our agents will accommodate your preference while ensuring that any formal written decisions regarding your data rights are provided in English as the authoritative language of this Policy.