nota4d Privacy Policy

nota4d ("we", "us", "our") operates Indonesia's premier English-language online betting and casino platform at nota4d.bio. We understand that when you use our sportsbook, live casino, slot gacor (high-payout slot) titles, togel (Indonesia's traditional numbers lottery) draws, or any other service on the Platform, you are entrusting us with information that matters to you. We take that responsibility seriously.

This Privacy Policy sets out in clear, plain language how nota4d collects, receives, uses, stores, transfers, and protects personal data relating to users of our Platform — particularly those accessing nota4d from Indonesia, including the major cities of Jakarta, Surabaya, Bandung, Medan, Bali, Yogyakarta, and Semarang. It also explains the rights you hold in relation to your personal data and how you can exercise them.

This policy applies to all personal data processed by nota4d in connection with your use of the Platform, regardless of the device or channel through which you access it — desktop browser, mobile browser, or any nota4d-branded application. It should be read alongside our Terms & Conditions and our Responsible Gaming policy, both of which are incorporated by reference.

nota4d is the data controller for all personal data processed under this policy. Our designated contact for privacy matters is available at [email protected] — responses to data-related enquiries are typically provided within five (5) business days.

nota4d collects personal data in the categories described in the table below. We only collect data that is genuinely necessary for the purposes described in this policy — we do not collect data speculatively or for purposes we cannot justify.

nota4d collects personal data through the following channels:

• Direct submission: Data you actively provide when registering an account, completing KYC verification, making a deposit or withdrawal request, contacting customer support, or participating in a promotional survey.
• Automated technical collection: Data collected automatically as you interact with the Platform — including IP address, device fingerprint, cookies, session logs, and browser metadata. See Clause 9 (Cookies & Tracking) for full details.
• Payment processors: Confirmation data (transaction reference numbers, status codes, timestamps) returned by our payment gateway partners when you transact via local Indonesian banks or e-wallets. nota4d does not receive or store your full bank account PIN, internet banking password, or e-wallet PIN — these remain exclusively with your bank or e-wallet provider.
• KYC verification partners: Identity verification outcomes (pass/fail, document type confirmed, age confirmed) returned by our licensed third-party KYC service provider after you submit your KTP or supporting documents. The underlying document images are processed by the KYC provider under their own security standards and are not retained on nota4d's primary application servers beyond the legally required minimum.
• Third-party game studios: Aggregate session data (game round IDs, bet amounts, win/loss results, RTP data) returned by game providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Pocket Games Soft, and Spribe — sufficient to accurately credit winnings, settle bets, and resolve disputes.
• Publicly available sources: In limited fraud-investigation contexts, nota4d may cross-reference publicly available information to verify the accuracy of account data you have provided.

nota4d uses the personal data described in Clause 2 for the following specific purposes. We do not use your data for any purpose not listed here without first obtaining your consent or updating this policy with adequate notice.

1. Account creation and management: To create, maintain, authenticate, and, where necessary, close your nota4d Account — including verifying that you are at least 21 years of age and are acting as an individual in your own name.
2. Service delivery: To accept bets, settle game rounds, credit winnings, process deposits and withdrawals in IDR via your chosen Indonesian bank or e-wallet, and provide you with real-time access to the Platform's sportsbook, live casino, slots, and togel products.
3. KYC and fraud prevention: To verify your identity before your first withdrawal, to detect multi-accounting, to identify and prevent fraudulent transactions, and to comply with our anti-money-laundering (AML) obligations under our international operating licence.
4. Responsible gaming compliance: To operate and enforce the deposit limits, session reminders, cooling-off periods, and self-exclusion settings you have applied to your account; and to identify account activity patterns that may indicate problem gambling behaviour, enabling us to make proactive welfare interventions.
5. Legal and regulatory compliance: To satisfy obligations imposed by our international licence authority, including the retention of betting records, transaction logs, and identity documents for legally prescribed periods.
6. Customer support: To investigate and resolve account queries, payment disputes, game-round disputes, and complaints submitted via live chat or email to [email protected].
7. Platform security: To monitor for suspicious login activity, brute-force attempts, automated bot usage, and other security threats — and to enforce account security measures including session timeout and two-step verification where offered.
8. Personalisation and improvement: To understand how users interact with the Platform, identify popular features and game titles, improve the user experience, and — where you have opted in — tailor promotional offers to your gaming preferences.
9. Marketing communications: To send you promotional emails, bonus notifications, and seasonal campaign alerts (for example, Idul Fitri or Indonesian Independence Day promotions) — only where you have opted in to marketing communications. You may withdraw consent at any time by contacting support.

nota4d processes your personal data under one or more of the following legal bases, depending on the purpose of processing:

nota4d does not sell, rent, or trade your personal data to third parties for their independent marketing purposes. Data is shared externally only in the specific, controlled circumstances described below:

• Payment processors and banks: Your name and account/e-wallet details are shared with the relevant Indonesian payment provider (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, OVO, DANA, GoPay, ShopeePay, LinkAja, or QRIS) solely to process the specific transaction you have initiated. These providers operate under their own licensed and regulated data protection frameworks.
• KYC verification services: Your identity document data is transmitted to our licensed third-party KYC provider for automated identity and age verification. The provider acts as a data processor under a binding data processing agreement with nota4d and may only use the data for KYC services on nota4d's behalf.
• Game studio providers: Game session data (player ID, bet amounts, round results) is exchanged with game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Pocket Games Soft, and Spribe to the extent technically necessary to deliver their games via the Platform and resolve any game-round disputes.
• IT infrastructure and hosting providers: nota4d's Platform is hosted on enterprise-grade cloud infrastructure. Our infrastructure partners act as data processors under contractual terms that require them to maintain appropriate security standards and prohibit independent use of your data.
• Legal and regulatory disclosures: nota4d may disclose your personal data to competent authorities, regulators, or law enforcement agencies where required to do so by law, court order, or the conditions of our international operating licence. Where permitted by law, we will notify you of any such disclosure request before complying with it.
• Business restructuring: In the event of a merger, acquisition, or sale of substantially all of nota4d's assets, user personal data may be transferred to the acquiring entity as part of the transaction — subject to the acquiring entity honouring the terms of this Privacy Policy or providing notice of any material changes.

nota4d retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by the conditions of our international operating licence and applicable law. The retention periods below represent our standard practice:

When retention periods expire, data is securely deleted or anonymised so that it can no longer be associated with any individual. Anonymised, aggregated data (e.g., aggregate monthly deposit volumes, aggregate game popularity statistics) may be retained indefinitely for statistical and business analysis purposes, as it no longer constitutes personal data.

nota4d implements a layered security architecture to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. Our technical and organisational measures include:

• Encryption in transit: All communications between your browser or device and nota4d's servers use TLS 1.2 or higher (256-bit). HTTP connections are automatically redirected to HTTPS.
• Encryption at rest: Sensitive stored data — including identity document references, bank account details, and KYC outcomes — is encrypted at rest using AES-256.
• Password security: User passwords are never stored in plaintext. nota4d uses industry-standard adaptive hashing algorithms (bcrypt or Argon2) with unique salts per user. Support staff cannot retrieve your password — only reset it through an authenticated channel.
• Access controls: Access to personal data within nota4d's internal systems is restricted on a strict need-to-know basis. Staff access is governed by role-based access controls (RBAC), individual audit logging, and regular access reviews.
• Intrusion detection: nota4d employs automated intrusion detection and anomaly monitoring systems that flag unusual access patterns, brute-force login attempts, and suspicious account activity in real time.
• Penetration testing: nota4d commissions regular third-party security assessments and penetration tests to identify and remediate vulnerabilities in the Platform before they can be exploited.
• Incident response: nota4d maintains a documented data breach response plan. In the event of a breach affecting your personal data, nota4d will notify affected users without undue delay and take all reasonable steps to limit harm and restore security.

While nota4d applies rigorous security measures, no internet-based service can guarantee absolute security. You are responsible for maintaining the confidentiality of your own login credentials. If you believe your account has been accessed without your authorisation, contact support at [email protected] immediately.

nota4d uses cookies and similar tracking technologies to operate the Platform, maintain your session, prevent fraud, and improve your experience. The cookies we use fall into the following categories:

You may manage your cookie preferences at any time through your browser settings. Note that disabling strictly necessary cookies will prevent the Platform from functioning correctly. nota4d does not use third-party advertising network cookies to track your activity across external websites.

As a user of nota4d and a data subject under applicable privacy frameworks, you hold the following rights in relation to your personal data. To exercise any of these rights, contact [email protected] with the subject line "Data Rights Request". nota4d will respond within 30 days.

nota4d operates on internationally hosted infrastructure. As a result, your personal data may be processed on servers located outside Indonesia. When data is transferred internationally, nota4d takes the following steps to ensure your data remains protected to the same standard as if it were processed locally:

• All international data transfers to our infrastructure and processing partners are governed by binding contractual clauses that impose equivalent data protection obligations on the recipient.
• nota4d only selects infrastructure and service providers that maintain recognised international security certifications (including ISO 27001 compliance where applicable).
• Data transfers to game studio partners (Pragmatic Play, Evolution Gaming, etc.) are limited to the minimum data necessary for game delivery and dispute resolution, under binding data processing agreements.
• nota4d does not transfer personal data to jurisdictions that lack adequate data protection standards without implementing compensating safeguards.

nota4d enforces a strict minimum age of 21 years for all registered users. Age verification is conducted as part of the KYC process required before any withdrawal is processed. If nota4d discovers at any stage that an account was registered by an individual under 21 years of age, the account will be immediately suspended, all pending transactions cancelled, and the case referred for investigation. Any winnings generated on an underage account may be forfeited.

If you are a parent or guardian and believe that your child has created a nota4d account without your knowledge, please contact [email protected] immediately with details. nota4d will act on verified reports within 24 hours.

nota4d may update this Privacy Policy from time to time to reflect changes in our data processing practices, legal requirements, or Platform features. When we make material changes — meaning changes that significantly affect how we use your data or your rights in relation to it — we will notify you by:

• Displaying a prominent notice on the nota4d Platform homepage and login page for a minimum of 14 days prior to the change taking effect; and
• Sending a notification to the email address registered on your Account, where you have provided a valid address.

Minor changes (such as clarifications , spelling corrections, or updated contact details) may be made without advance notice, though the "Last Updated" date at the top of the policy and in the sidebar will always reflect the date of the most recent revision.

Your continued use of the nota4d Platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with a material change, you must stop using the Platform and may request account closure by contacting support before the change takes effect.

nota4d has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with this Privacy Policy and applicable data protection obligations. If you have any questions, concerns, or requests relating to your personal data or this Privacy Policy, please contact us using the details below:

We are committed to working with you constructively to resolve any privacy concern. If you feel that your concern has not been adequately addressed after contacting us, you retain the right to escalate the matter to the relevant supervisory authority under your applicable jurisdiction's data protection framework.