Privacy Policy

Throughout this Privacy Policy, the following terms carry the meanings defined below:

2.1 Registration Data. When you create an account on nsl168, we collect the personal information you provide in the registration form, which includes: your full legal name, date of birth, email address, mobile phone number (Indonesian numbers preferred for verification), and your residential address in Indonesia. This information is required to create and maintain your account and to verify that you meet the 21+ age requirement.

2.2 KYC Verification Data. To comply with international anti-money laundering (AML) requirements and to verify your eligibility to withdraw funds, we collect identity documentation including: a copy of your National Identity Card (KTP), proof of current residential address (a utility bill or bank statement issued within three months), and in some cases, a live selfie photograph for biometric comparison against your submitted ID document.

2.3 Financial Transaction Data. We collect records of all deposits and withdrawals associated with your account, including the payment method used (e.g., BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, LinkAja), transaction amounts in IDR, timestamps, and transaction reference numbers. We do not store full card numbers or full bank account numbers on our servers — payment tokenization is used for all card-based transactions.

2.4 Usage and Activity Data. When you use the nsl168 platform, we automatically collect technical and behavioral data including: your IP address, device type and operating system, browser type and version, session duration and timestamps, pages visited and features used, bet history (game titles, wager amounts, outcomes), and any search queries or filters applied within the platform.

2.5 Communications Data. We retain records of any communications between you and the nsl168 support team, including email correspondence, live chat transcripts, and any formal complaint submissions. These records are used to maintain service quality, resolve disputes, and ensure compliance with our operational obligations.

2.6 Voluntarily Submitted Data. You may choose to provide additional information when participating in promotions, completing surveys, or updating your account profile. Any voluntarily submitted data is collected and used only for the stated purpose of the activity through which it was submitted.

nsl168 uses Personal Data collected from Members for the following defined purposes:

nsl168 processes Personal Data on the following legal bases, consistent with internationally recognize d data protection standards:

• Contractual Necessity: Processing your registration data, KYC documents, and financial transaction records is necessary to perform our obligations under the Terms & Conditions you accepted when creating your nsl168 account. Without this processing, we cannot provide the platform services you have requested.
• Legal Obligation: Certain processing activities — particularly KYC identity verification, AML transaction monitoring, and the retention of financial records — are required by the international gaming license under which nsl168 operates and by applicable financial crime prevention standards.
• Legitimate Interests: We process usage data, session logs, and fraud-detection signals on the basis of our legitimate interest in maintaining a secure, fair, and operationally reliable platform. Where we rely on legitimate interests, we have assessed that our interests are not overridden by your privacy rights.
• Consent: Where we send marketing communications or deploy non-essential cookies, we do so only on the basis of your explicit, freely given consent. You may withdraw consent for marketing communications at any time by contacting our support team or using the unsubscribe link in any promotional email. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

5.1 Payment Processors. To facilitate deposits and withdrawals, nsl168 shares the minimum necessary transaction data with its payment processing partners who support Indonesian payment methods including BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata, OVO, DANA, GoPay, ShopeePay, and LinkAja. These partners process data solely to execute the requested financial transactions and are contractually prohibited from using that data for any other purpose.

5.2 KYC and Identity Verification Providers. nsl168 may engage licensed third-party KYC verification services to authenticate identity documents and conduct biometric checks. These providers are bound by strict data processing agreements and may not retain, use, or share your identity documents beyond the verification purpose for which they were engaged.

5.3 Game Studio Providers. Game titles on the nsl168 platform are delivered under license from studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft. These providers receive session identifiers and anonymized gameplay data required to deliver the game experience but do not receive your full personal profile unless explicitly required for the game's own regulatory compliance.

5.4 Regulatory and Law Enforcement Authorities. nsl168 will disclose Personal Data to licensing regulators, financial intelligence units, law enforcement agencies, or courts where required to do so by a valid legal order, regulatory direction, or statutory obligation. We will notify affected Members of such disclosures to the extent permitted by law.

5.5 Corporate Transactions. In the event of a merger, acquisition, restructuring, or sale of all or part of nsl168's business, Personal Data held by nsl168 may be transferred to the acquiring entity as part of the transaction. Members will be notified of any such transfer and the privacy terms applicable to their data going forward.

5.6 No Sale of Personal Data. nsl168 does not sell, rent, lease, or otherwise commercially exploit your Personal Data to any third party for that party's own marketing or commercial purposes. This is an unconditional commitment.

6.1 What Are Cookies. Cookies are small text files placed on your device when you visit the nsl168 platform. They enable core platform functionality, remember your preferences, and allow us to analyze how the platform is used so we can continuously improve the experience for Members across Jakarta, Surabaya, Bandung, Bali, Medan, and all regions of Indonesia.

6.2 Types of Cookies We Use.

• Strictly Necessary Cookies: Required for the platform to function. These include session authentication tokens, CSRF protection tokens, and load-balancing cookies. They cannot be disabled without breaking core platform functionality.
• Functional Cookies: Enable the platform to remember your preferences, such as language settings, preferred payment method, and display configuration. Disabling these cookies may reduce platform convenience but will not prevent core access.
• Analytics Cookies: Used to collect aggregated, anonymized data about how Members interact with the platform — including pages visited, session duration, and feature engagement. This data is used solely to improve platform performance and user experience. No individual Member is identified in analytics reports.
• Marketing Cookies: Used only where you have provided explicit consent, to deliver promotional content relevant to your gaming interests. These cookies track interactions with our promotional materials and help us assess the effectiveness of campaigns.

6.3 Managing Cookies. You may manage cookie preferences through your browser settings at any time. Deleting or blocking cookies may affect your ability to use certain features of the nsl168 platform. Consent for non-essential cookies (analytics and marketing) may also be withdrawn by contacting our support team at the address set out in Clause 13.

6.4 Third-Party Tracking. nsl168 does not permit third-party advertising networks to place tracking cookies on the nsl168 platform for the purpose of delivering cross-site behavioral advertising. Any analytics or tracking tools in use are operated directly by nsl168 or by vetted, contracted data processors acting on our instructions.

7.1 Retention Principles. nsl168 retains Personal Data only for as long as it is required for the purpose for which it was collected, or as mandated by applicable legal and regulatory obligations. When data is no longer needed and no legal retention requirement applies, it is securely deleted or anonymized.

7.2 Retention Periods by Data Category.

7.3 Deletion Requests. Where a Member submits a verified request for deletion of their Personal Data, nsl168 will action that request to the extent permitted by applicable law. Data subject to a statutory retention obligation cannot be deleted prior to the expiry of the applicable retention period, but will be restricted from active use and access during that time.

8.1 Cross-Border Processing. nsl168 operates as an internationally licensed platform. As such, certain processing activities — including cloud infrastructure, KYC verification services, and game studio data flows — may involve the transfer of Personal Data to countries other than Indonesia. Where such transfers occur, nsl168 ensures that adequate safeguards are in place to protect your data to a standard consistent with this Privacy Policy.

8.2 Transfer Safeguards. International data transfers conducted by nsl168 or on our behalf are protected by one or more of the following mechanisms:

• Contractual data processing agreements incorporating internationally recognized model clauses for data protection.
• Transfer to jurisdictions that maintain data protection laws recognized as providing an adequate level of protection for personal data.
• Implementation of technical and organizational security measures appropriate to the risk profile of the transferred data.

8.3 Member Rights on International Transfers. If you have questions about the specific safeguards applied to any international transfer of your Personal Data, you may submit a request to the contact details provided in Clause 13 and we will provide the relevant information within 30 calendar days.

As a Member of nsl168, you hold the following rights with respect to your Personal Data. To exercise any of these rights, please contact us at the details provided in Clause 13. We will respond to all verified requests within 30 calendar days.

10.1 Age Restriction. The nsl168 platform is strictly intended for adults aged 21 years and older. We do not knowingly collect, process, or retain Personal Data from any individual under the age of 21. This requirement is enforced through mandatory KYC age verification for all Members prior to the processing of withdrawal requests.

10.2 Discovery of Underage Data. If nsl168 discovers or is notified that Personal Data belonging to an individual under the age of 21 has been collected — whether through misrepresentation during registration or any other means — we will immediately suspend the associated account, delete all Personal Data belonging to that individual to the extent permitted by law, and cancel any pending transactions associated with the account.

10.3 Parental Notification. Parents or guardians who believe their child may have registered an account on nsl168 should contact our support team immediately using the contact details in Clause 13. We will investigate and take appropriate action on a priority basis.

11.1 Technical Safeguards. nsl168 implements a comprehensive set of technical security measures to protect Personal Data against unauthorized access, loss, destruction, or alteration. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the nsl168 platform.
• Encryption at rest for all sensitive Personal Data stored in nsl168 databases, including identity documents and financial records.
• Multi-factor authentication (MFA) options for Member account login, strongly recommended for all Members.
• Firewalls, intrusion detection systems, and continuous security monitoring of platform infrastructure.
• Regular third-party security audits and penetration testing to identify and remediate vulnerabilities.
• Payment tokenization to ensure that full bank account numbers and card details are never stored on nsl168 servers.

11.2 Organizational Safeguards. Access to Personal Data within nsl168 is restricted on a strict need-to-know basis. Staff members with access to Personal Data are subject to confidentiality obligations and receive regular data protection training. Access privileges are reviewed periodically and revoked immediately upon the departure of any staff member.

11.3 Data Breach Response. In the event of a data security incident that poses a material risk to Members' rights and freedoms, nsl168 will notify affected Members without undue delay and, where required by our licensing obligations, will report the incident to the relevant regulatory authority. Notification will include a description of the nature of the breach, the categories of data affected, and the steps nsl168 has taken or is taking to mitigate the impact.

12.1 Right to Update. nsl168 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or platform features. The most current version of this policy will always be published at https://nsl168.cam/privacy-policy, with the effective date updated accordingly.

12.2 Material Changes. Where an amendment constitutes a material change to how nsl168 processes your Personal Data — particularly changes that may reduce your privacy protections or introduce new categories of data sharing — we will notify you by email to your registered address at least 14 days before the change takes effect. The notification will summarize what has changed and why.

12.3 Continued Use. Your continued use of the nsl168 platform after any amendment to this Privacy Policy constitutes your acknowledgment of the updated policy. If you do not agree with any update, you may request account closure before the amendment's effective date in accordance with the account termination process described in the nsl168 Terms & Conditions.

13.1 Data Privacy Contact. For all questions, requests, or concerns relating to this Privacy Policy or the processing of your Personal Data by nsl168, please contact our Data Privacy team. Indonesian-speaking agents are available to assist you 24 hours a day, 7 days a week (WIB, UTC+7).

13.2 Response Times. nsl168 will acknowledge all Privacy Policy inquiries within 48 hours (WIB) and will provide a substantive response within 30 calendar days. Complex requests, such as Subject Access Requests involving large volumes of data, may take up to 60 calendar days, in which case we will notify you of the extension within the initial 30-day window.

13.3 Complaints. If you are not satisfied with how nsl168 has handled your Personal Data or responded to a data rights request, you have the right to escalate your complaint formally. To do so, email the above address with the subject line "Formal Privacy Complaint", include a full description of your concern, the steps already taken to resolve it, and your desired outcome. Formal privacy complaints are escalated to nsl168's senior compliance team and will be addressed within 14 calendar days of receipt.

13.4 Regulatory Escalation. If you remain unsatisfied following nsl168's formal complaints process, you may refer your complaint to the relevant data protection supervisory authority in your jurisdiction. nsl168 cooperates fully with regulatory investigations conducted by licensing and data protection authorities.