nadi76 Platform Privacy Notice
We at nadi76 collect personal data when you create an account, fund it, and use our platform. This page describes what we collect, how we use it, and what rights you have under data protection law.
Our commitment is transparency. We do not sell your data to third parties for marketing purposes. We use your information to verify your identity, process payments, prevent fraud, and comply with regulations in the jurisdictions where we operate.
Your data is held securely on servers that may sit outside your jurisdiction. We employ industry-standard encryption and access controls. If you have questions about how we handle your information, contact our team using the details at the end of this notice.
What data we collect on nadi76
We collect your email address, phone number, full name, and date of birth when you register. These details are required to create your nadi76 account and send you transaction confirmations and security alerts.
We also collect identity documents—government ID, passport, or driver's license—during account verification. We use these to confirm your identity and comply with anti-money-laundering regulations. Proof of address (utility bill or bank statement) is also required; this confirms your residential location.
Payment information is collected when you fund your account via DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, or bank transfer (mobile banking, local payment, online payment, e-wallet). We record the payment method you used, transaction amounts, and timestamps. We do not store your full card numbers or e-wallet credentials—payment processors handle that securely on their own systems.
We collect account activity logs: login times, IP addresses, device information, browser type, and geographic location. This helps us detect unauthorized access and protect your account.
How we use your data on nadi76
We use your personal data for several core purposes. First, identity verification: your name, date of birth, and ID documents are checked against government records and fraud databases to ensure you are who you claim to be. This is mandatory in most jurisdictions.
Second, payment processing: your banking details are sent to our payment processors (mobile banking's systems, local payment's backend, your bank's payment gateway, etc.) to execute deposits and withdrawals. Each processor has its own privacy policy; we recommend reviewing theirs if you have concerns.
Third, regulatory compliance: we are required by law to keep records of all transactions, verify customer identities, and report suspicious activity to financial authorities. Our records may be audited by regulators in the jurisdictions where we operate.
Fourth, account security: we monitor your account for unusual activity. If we detect a withdrawal from a new device, a login from an unfamiliar location, or a rapid series of deposits and withdrawals, we may flag your account for additional review or contact you to confirm the activity is legitimate.
Fifth, customer support: if you contact our team with a question or complaint, we use your account details and communication history to assist you.
Third parties we work with
Our payment processors are the main third party that receives your data. When you deposit via online payment, we send your transaction request to e-wallet's system; mobile banking then uses your login credentials to move funds. local payment handles your e-wallet credentials securely on their own servers—we never see them.
Similarly, when you withdraw to online payment or e-wallet, we route your request through their systems. Bank transfers go through your bank's payment infrastructure. These processors are bound by their own data protection agreements and Indonesia's financial regulations.
We may also work with identity verification vendors to check your ID against government databases. These vendors store your document copies temporarily (typically 30 days) and then delete them. We contractually require them to delete your data when verification is complete.
We do not share your data with marketing partners, data brokers, or third-party advertisers. Sports data providers (for Liga 1 fixtures, MotoGP schedules, Mobile Legends esports results) do not receive your personal information—only aggregated, anonymized event information flows to them.
Your rights under data protection law
In most jurisdictions, you have the right to access your data. You can request a copy of all information we hold about you—simply email our support team with "Data Access Request" in the subject line. We will provide your data within one month.
You have the right to correct inaccurate data. If your name is misspelled in our records, or if your address is outdated, contact us and we will update it.
You have the right to delete your data in some circumstances. If you no longer use nadi76 and have no outstanding transactions, we can close your account and delete your personal information (except where law requires us to retain it for tax or anti-money-laundering purposes).
You have the right to lodge a complaint with your local data protection authority if you believe we have mishandled your data. In Indonesia, complaints go to the Office of the President's Data Protection Task Force or your regional authority.
Cookies and tracking on nadi76
We use cookies to keep you logged in, remember your preferences, and measure site performance. Essential cookies are necessary for the site to function; you cannot disable these. Other cookies (analytics, performance) help us understand how you use nadi76 but are not essential. You can manage cookie preferences in your browser settings.
We do not use cookies for behavioral advertising or cross-site tracking. Our analytics are basic—we track page views and session duration, not your individual behavior across other websites.
Data retention and security on nadi76
We retain your personal data for as long as your account is active, plus a minimum of five years after you close it. This is required by anti-money-laundering regulations. Regulatory authorities may request access to records beyond five years in connection with investigations.
We encrypt all personal data in transit (using HTTPS) and at rest (using AES-256 encryption). Our servers are protected by firewalls, intrusion detection systems, and access controls. We conduct regular security audits and penetration tests. Staff access to your data is logged and reviewed.
If we discover a data breach—unauthorized access to personal information—we will notify affected users and cooperate with regulatory authorities. We maintain cyber liability insurance to cover costs of breach response.
International data transfers
Your data may be processed on servers located outside Indonesia. International transfers are protected by data processing agreements and encryption. We ensure that any third party we work with (payment processors, identity verifiers) applies the same level of data protection as we do.
Contact us about your data
If you have questions about this privacy notice, or if you wish to exercise any of your rights, contact our team at nadi76.net. Use the "Contact" page to submit a data-related request. We will respond within 14 days.
For complaints about data handling, you may also contact the Indonesian data protection authority or your local regulator.
This privacy notice may be updated from time to time as our practices evolve or as regulations change. We will announce significant changes on the nadi76 platform. Your continued use of nadi76 after such updates constitutes your acceptance of the revised notice.