Privacy Policy

The following defined terms are used throughout this Privacy Policy:

• "Personal Data" means any information that identifies or could reasonably identify a natural person, directly or indirectly, including name, email address, phone number, device identifiers, IP address, and financial account details.
• "Processing" means any operation performed on Personal Data, whether automated or manual, including collection, recording, storage, adaptation, retrieval, consultation, use, disclosure, restriction, erasure, or destruction.
• "Data Controller" means the entity that determines the purposes and means of Processing Personal Data — in this context, nupo77 and its operating entity.
• "Data Processor" means any third party that Processes Personal Data on behalf of nupo77 under contract and in accordance with nupo77's instructions.
• "Player" or "You" means any individual who registers an account on or otherwise accesses the nupo77 Platform.
• "KYC" (Know Your Customer) refers to the identity verification process nupo77 employs to confirm a Player's identity and age before authorizing withdrawals or unlocking certain Platform features.
• "Cookies" means small data files placed on your device by the Platform to facilitate session management, analytics, and personalization.
• "AML" (Anti-Money Laundering) refers to the regulatory and procedural framework nupo77 applies to detect, prevent, and report financial crime on the Platform.

nupo77 acts as the Data Controller for all Personal Data collected through the Platform. As Data Controller, nupo77 determines what data is collected, the purposes for which it is used, and the manner in which it is stored and protected. Where nupo77 engages third-party service providers — such as payment processors, game studios, identity verification agencies, or analytics platforms — those parties act as Data Processors under contractual obligations that restrict their use of your data to the specific purposes authorized by nupo77.

nupo77 collects Personal Data across several categories, depending on how you interact with the Platform. The table below summarizes the main data categories and specific data points collected:

nupo77 collects only the Personal Data that is necessary for the specific purposes described in this Policy. We do not collect sensitive categories of data — such as racial or ethnic origin, religious beliefs, health data, or political opinions — except where strictly required by applicable AML or KYC regulation and with your explicit consent.

nupo77 collects Personal Data through the following means:

• Direct Submission: Data you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or participating in a promotion.
• Automated Technical Collection: Data collected automatically when you access the Platform, including IP address, device identifiers, session cookies, and behavioral analytics gathered via our logging infrastructure.
• Payment Providers: Transaction confirmation data received from our Indonesian payment processing partners — including banks such as BCA, BRI, BNI, and Mandiri, and e-wallet providers such as OVO, DANA, GoPay, and ShopeePay — when you initiate a deposit or withdrawal.
• Identity Verification Partners: Results of identity and age verification checks conducted by our third-party KYC service providers as part of the account verification process.
• Fraud Prevention and AML Partners: Risk signals and transaction screening results received from licensed third-party anti-fraud and AML screening services.
• Game Studio Providers: Aggregated game session data transmitted by our integrated game studio partners — including Pragmatic Play, Evolution Gaming, PG Soft, NetEnt, Microgaming, and Spribe — for the purposes of game history display and dispute resolution.

nupo77 processes your Personal Data for the following specific, legitimate purposes:

• Account Registration and Management: To create and maintain your nupo77 account, authenticate your identity at login, and manage your account settings and preferences.
• Service Delivery: To provide access to sports betting markets — including BRI Liga 1, EPL, La Liga, Serie A, Bundesliga, UEFA Champions League, Piala AFF, and MotoGP — live casino tables, slot games, and all other Platform features.
• Financial Transaction Processing: To process deposits and withdrawals via supported Indonesian banks and e-wallets, verify payment ownership, and maintain accurate account balance records.
• KYC and Age Verification: To verify that you are at least 21 years of age and to confirm your identity as required under nupo77's licensing obligations and responsible gaming commitment.
• Fraud Prevention and Security: To detect and prevent fraudulent account access, bonus abuse, multi-accounting, money laundering, and other prohibited conduct as defined in our Terms & Conditions.
• AML Compliance: To screen transactions and account activity against applicable AML standards and, where required, to report suspicious activity to relevant regulatory or law enforcement authorities.
• Customer Support: To respond to your queries, resolve disputes, investigate complaints, and provide assistance via live chat and email in Indonesian and English.
• Responsible Gaming: To monitor player behavior for signs of problem gambling, administer self-imposed limits and exclusions, and proactively reach out where our responsible gaming systems identify potential concern.
• Promotions and Marketing: To send you promotional offers, bonus notifications, and seasonal campaign communications — such as Ramadhan, Idul Fitri, and Imlek promotions — where you have opted in to receive marketing communications. You may opt out at any time.
• Platform Improvement: To analyze aggregated behavioral and technical data for the purpose of improving the Platform's performance, user interface, and game selection.
• Legal Compliance: To comply with applicable laws, regulations, court orders, and the instructions of competent regulatory authorities.

nupo77 processes your Personal Data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual Necessity: Processing required to perform the contract between nupo77 and you — specifically, to operate your account, process financial transactions, and deliver the betting and gaming services you have requested.
• Legal Obligation: Processing required to comply with nupo77's obligations under applicable law, including KYC regulations, AML obligations, and any reporting requirements imposed by licensing authorities.
• Legitimate Interests: Processing carried out for nupo77's legitimate business interests — including fraud prevention, security monitoring, abuse detection, and internal analytics — where those interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent — primarily for marketing communications and for optional behavioral analytics beyond what is strictly necessary for service delivery. You have the right to withdraw consent at any time without affecting the lawfulness of prior processing.

nupo77 does not sell, rent, or trade your Personal Data to any third party for their own marketing purposes. We share your data only in the following circumstances and only to the extent strictly necessary:

• Payment Service Providers: We share transaction data with our Indonesian banking and e-wallet partners — BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, BSI, Bank Permata, OVO, DANA, GoPay, ShopeePay, and LinkAja — solely for the purpose of processing your deposits and withdrawals.
• KYC and Identity Verification Providers: We share identity documents and verification requests with our contracted third-party KYC service providers for the purpose of age and identity verification. These providers are bound by strict confidentiality obligations.
• Game Studio Partners: We share the minimum account and session data required by integrated game studios — including Pragmatic Play, Evolution Gaming, PG Soft, NetEnt, Microgaming, and Spribe — to enable game delivery and to maintain game session records.
• Fraud and AML Screening Services: We share transaction and behavioral data with licensed fraud prevention and AML compliance service providers for risk assessment and screening purposes.
• Analytics Providers: We share aggregated, de-identified technical and behavioral data with Platform analytics services for the purpose of improving Platform performance and user experience.
• Legal and Regulatory Authorities: We may disclose Personal Data to regulatory bodies, law enforcement agencies, courts, or other government authorities where we are required to do so by law, court order, or in connection with the investigation of suspected fraud, money laundering, or other criminal activity.
• Business Transfers: In the event of a merger, acquisition, restructuring, or sale of substantially all of nupo77's assets, your Personal Data may be transferred to the acquiring entity, subject to the same privacy protections described in this Policy.

All third parties with whom nupo77 shares Personal Data are required by contract to implement appropriate technical and organizational security measures and to process your data only for the specific purposes for which it was shared.

nupo77 operates globally and may process or store your Personal Data on servers located outside Indonesia. Where Personal Data is transferred to countries or territories that do not provide a level of data protection equivalent to that applicable in Indonesia, nupo77 implements appropriate safeguards — including contractual protections and data processing agreements — to ensure that your data receives a consistent standard of protection regardless of where it is processed.

nupo77 retains your Personal Data only for as long as is necessary to fulfill the purposes for which it was collected and to comply with applicable legal, regulatory, and licensing obligations. The following general retention periods apply:

Where Personal Data is no longer required, nupo77 will securely delete or irreversibly anonymize it in accordance with industry-standard data disposal procedures. Anonymized data — from which all identifying information has been permanently removed — may be retained indefinitely for aggregated analytics and Platform improvement purposes.

nupo77 implements a comprehensive suite of technical and organizational security measures designed to protect your Personal Data against unauthorized access, accidental loss, destruction, alteration, or disclosure. Key security measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the nupo77 Platform is encrypted using industry-standard 256-bit SSL/TLS protocols. This protects your login credentials, financial transactions, and personal details from interception in transit.
• Password Hashing: nupo77 stores account passwords using strong one-way cryptographic hashing algorithms. nupo77 staff cannot view your plaintext password under any circumstances.
• Access Controls: Access to Personal Data within nupo77's internal systems is restricted on a strict need-to-know basis, enforced by role-based access controls and multi-factor authentication for all staff with administrative system access.
• Intrusion Detection and Monitoring: nupo77's infrastructure is continuously monitored for suspicious access patterns, unauthorized login attempts, and anomalous data exfiltration behavior using automated intrusion detection systems.
• Regular Security Audits: nupo77 commissions regular third-party security audits and penetration tests to independently assess the effectiveness of its security controls and to identify and remediate vulnerabilities proactively.
• Data Minimization: nupo77 applies the principle of data minimization — collecting only the data strictly necessary for each processing purpose — to reduce the potential impact of any security incident.

nupo77 uses cookies and similar tracking technologies to operate the Platform, maintain your logged-in session, analyze usage patterns, and deliver a personalized experience. The following cookie categories are used:

• Strictly Necessary Cookies: Essential for the Platform to function correctly. These include session authentication tokens, security cookies, and load-balancing identifiers. These cookies cannot be disabled without impairing core Platform functionality.
• Functional Cookies: Used to remember your preferences — such as language settings, preferred game lobby view, and responsible gaming reminder intervals — to deliver a more personalized experience across sessions.
• Analytics Cookies: Used to collect aggregated, anonymized data about how Players navigate the Platform — including pages visited, session duration, and feature usage — to help nupo77 improve Platform performance and user experience.
• Security and Fraud Prevention Cookies: Used by nupo77's anti-fraud and bot-detection systems to identify suspicious access patterns and protect the integrity of the Platform and all player accounts.

nupo77 does not use third-party advertising or retargeting cookies. The Platform is not monetized via external advertising networks, and your behavioral data is not shared with advertising platforms for targeted advertising purposes.

As a nupo77 Player, you hold the following rights with respect to your Personal Data. To exercise any of these rights, please contact our support team via live chat or email at [email protected]:

• Right of Access: You have the right to request a copy of the Personal Data nupo77 holds about you and to receive information about how it is processed. nupo77 will respond to access requests within 30 calendar days.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete Personal Data held about you. Some corrections may require KYC re-verification to confirm the updated information.
• Right to Erasure ("Right to Be Forgotten"): You have the right to request deletion of your Personal Data in certain circumstances — for example, where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent and no other legal basis for processing applies. This right is subject to nupo77's overriding obligations to retain data for legal, regulatory, and AML compliance purposes.
• Right to Restriction of Processing: You have the right to request that nupo77 restrict the processing of your Personal Data in certain circumstances — for example, while a rectification request is being assessed or while a complaint is under investigation.
• Right to Data Portability: Where processing is based on consent or contractual necessity and is carried out by automated means, you have the right to receive your Personal Data in a structured, commonly used, machine-readable format and to transmit it to another controller.
• Right to Object: You have the right to object to processing based on nupo77's legitimate interests, including profiling. nupo77 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests, or where processing is necessary for legal claims.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.
• Right to Lodge a Complaint: You have the right to lodge a complaint with the relevant data protection authority in your jurisdiction if you believe nupo77 has processed your Personal Data in breach of applicable data protection law.

nupo77 will not charge a fee for handling data rights requests made in good faith. Where a request is manifestly unfounded or excessive — for example, due to its repetitive character — nupo77 reserves the right to either charge a reasonable administrative fee or refuse to act on the request, with written explanation.

If you are a parent or guardian and believe that your child has registered an account on nupo77 or submitted Personal Data to our Platform without your consent, please contact us immediately at [email protected]. nupo77 will investigate and, upon confirmation, promptly delete all associated data and close the account.

nupo77 actively employs age-gating controls at registration and supplements these with document-based KYC verification to enforce the 21+ requirement. This age policy applies uniformly to all Players regardless of their location within Indonesia — Jakarta, Surabaya, Bali, Bandung, Yogyakarta, Semarang, Medan, Makassar, or elsewhere.

nupo77 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or Platform features. When a material change is made, nupo77 will notify registered Players by email to the address on record and/or by displaying a prominent notice on the Platform, at least seven (7) days before the change takes effect — except where an immediate change is required by law, in which case the revised Policy will take effect immediately upon publication.

Your continued use of the nupo77 Platform after the effective date of any amendment constitutes your acknowledgment of the revised Policy. The "Last Updated" date at the top of this page reflects the date the most recent revision came into force. We encourage all Players to review this page periodically to remain informed of how nupo77 handles your data.

If you have any questions, concerns, or requests regarding this Privacy Policy or nupo77's handling of your Personal Data, please reach out to our team through the following channel:

nupo77 aims to acknowledge all data protection inquiries within 48 hours and to provide a substantive response within 30 calendar days. Complex requests — such as large-scale data access requests or erasure requests subject to AML retention requirements — may take up to 60 calendar days, in which case nupo77 will communicate the extended timeline in writing within the initial 30-day period.