nsr4d Privacy Policy

This Privacy Policy ("Policy") describes how nsr4d ("the Platform", "we", "us", "our") collects, uses, stores, discloses, and protects the personal data of individuals ("Members", "Users", "you") who register an account or otherwise interact with the nsr4d website at https://nsr4d.vip and its associated services.

nsr4d is committed to handling all personal data responsibly and transparently. We apply internationally recognized data protection principles in the operation of our platform, with particular attention to the privacy expectations of our Indonesian Member base. Our practices are aligned with the general principles established by international data protection frameworks, including proportionality, purpose limitation, data minimization, and security.

This Policy should be read alongside our Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference. By registering an account with nsr4d, you acknowledge that you have read and understood this Privacy Policy.

For the purposes of this Policy, nsr4d acts as the data controller in respect of all personal data collected through the Platform. As data controller, nsr4d determines the purposes and means of processing your personal data and bears responsibility for ensuring that processing is carried out lawfully, fairly, and transparently.

nsr4d operates under an international gaming license. Our data protection contact for all privacy-related inquiries, access requests, and complaints is the nsr4d Privacy Team, reachable via:

• Email: [email protected] — please include "Privacy Request" in your subject line to ensure prompt routing to the correct team.
• Live Chat: Available 24/7 on the Platform, with native Indonesian-speaking agents on every shift.
• Response Time: Privacy requests are acknowledged within 2 business days and substantively addressed within 30 calendar days of receipt.

nsr4d collects personal data through several channels: directly from you when you register or use our services, automatically as you interact with the Platform, and from trusted third parties such as payment processors and identity verification services. The categories of data we collect are set out below.

3.1 Registration & Identity Data

• Full legal name (as it appears on your Indonesian KTP).
• Date of birth (to verify that you meet the 21+ age requirement).
• Gender.
• Residential address in Indonesia, including kelurahan, kecamatan, city or kabupaten, and province.
• Email address (primary contact channel for account communications).
• Indonesian mobile phone number (used for two-factor authentication and account notifications).
• Username and hashed password.

3.2 Identity Verification (KYC) Documents

• A scanned or photographed copy of your KTP (Indonesian National Identity Card).
• A selfie photograph taken alongside your KTP, where enhanced verification is required.
• A recent proof-of-address document (e.g., a utility bill or bank statement dated within 90 days).
• Proof of the payment method registered to your account (e.g., a bank statement header from BCA, BRI, BNI, or Mandiri, or a screenshot of your OVO, DANA, or GoPay account showing your registered name and number).

3.3 Financial & Transaction Data

• Bank account details (account number, bank name, and account holder name) for withdrawal processing — stored in tokenized form.
• E-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja) registered for deposits and withdrawals.
• Deposit amounts, withdrawal amounts, transaction timestamps, and transaction reference numbers.
• Betting history: bet amounts, markets, odds accepted, settlement outcomes, and account balance movements.

3.4 Technical & Device Data

• IP address at time of registration and at each login.
• Device type, operating system, browser type and version.
• Device fingerprint data (a non-identifiable hash used for fraud detection and multi-account prevention).
• Session start and end times, pages visited, and features interacted with during each session.
• Geolocation data at the city level (derived from IP address — no precise GPS data is collected).

3.5 Communications Data

• Records of all communications between you and nsr4d customer support via live chat, email, or any other channel, including message content and timestamps.
• Survey responses and feedback submissions, where provided voluntarily.

nsr4d uses your personal data for the specific purposes described in the table below. Each purpose is linked to a lawful basis for processing, which is detailed separately in Clause 5.

nsr4d does not use your personal data for automated individual decision-making that produces legal or similarly significant effects on you without a human review step — with the exception of automated fraud detection holds, which are always subject to manual review within 24 hours of triggering.

nsr4d processes your personal data on the following legal grounds, each of which corresponds to one or more of the purposes listed in Clause 4:

• Contractual Necessity: Processing required to fulfill the contract between you and nsr4d — including account creation, identity verification, bet settlement, and payment processing. Without this processing, nsr4d cannot provide its services to you.
• Legal Obligation: Processing required to comply with applicable laws, including anti-money laundering (AML) regulations, counter-terrorism financing (CTF) requirements, and gaming license obligations. This includes KYC verification and the retention of transaction records.
• Legitimate Interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and aggregate analytics — where these interests are not overridden by your fundamental rights and freedoms. nsr4d conducts a documented legitimate interests assessment for each purpose in this category.
• Consent: Processing for optional promotional communications (email and SMS marketing). You may withdraw consent at any time by contacting [email protected] or adjusting your communication preferences in your account settings. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

nsr4d does not sell, rent, or trade your personal data to any third party for commercial or marketing purposes. We share your data only with the following categories of recipient, and only to the extent necessary for the stated purpose:

• Payment Processors: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata, Bank Danamon, OCBC NISP) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) receive your name, account number, and transaction amount strictly to process deposits and withdrawals.
• Identity Verification Providers: Third-party KYC service providers receive KTP images and biometric data solely to perform automated identity and age verification on nsr4d's behalf. These providers are contractually bound to use the data for no other purpose.
• Game Content Providers: Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft receive a session token and game-round data necessary to deliver and settle games. They do not receive your KTP, financial account details, or full registration data.
• Fraud Detection & Security Partners: Specialist fraud-prevention technology providers receive device fingerprint data and behavioral signals to assist in identifying suspicious activity. All such providers operate under strict data processing agreements with nsr4d.
• Regulatory & Law Enforcement Authorities: nsr4d will disclose personal data to competent authorities where required by applicable law, court order, or a legitimate regulatory demand. nsr4d will notify affected Members of such disclosures where legally permitted to do so.
• Professional Advisers: Legal counsel, accountants, and auditors may access personal data to the minimum extent required to provide their professional services to nsr4d. All such parties are bound by professional confidentiality obligations.

nsr4d uses cookies and similar tracking technologies (such as local storage tokens and session identifiers) to operate the Platform and improve your experience. The categories of cookies we use are described below:

nsr4d does not deploy third-party advertising cookies, cross-site tracking pixels, or social media trackers on any page of the Platform. You can manage or delete cookies at any time through your browser settings. Blocking strictly necessary cookies will impair your ability to log in and use the Platform. Blocking functional or analytics cookies has no impact on your ability to place bets or make transactions.

nsr4d retains your personal data only for as long as is necessary to fulfill the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The key retention periods applied by nsr4d are as follows:

• Active Account Data: Retained throughout the lifetime of your active account and for a minimum of 5 years following account closure — consistent with standard anti-money-laundering record-keeping requirements applicable to internationally licensed gaming operators.
• KYC Documents (KTP, selfie, proof of address): Retained for 5 years following account closure or the completion of the relevant KYC review, whichever is later. KTP images are stored in an encrypted, access-controlled document vault and are not accessible to general customer support staff.
• Transaction Records (deposits, withdrawals, bets): Retained for 5 years following each transaction date, in line with financial record-keeping obligations applicable to licensed gaming operators.
• Customer Support Communications: Retained for 3 years following the close of each support case, to support dispute resolution and quality assurance.
• Technical & Device Logs: Retained for 12 months on a rolling basis, then automatically purged unless flagged for a fraud or security investigation.
• Marketing Consent Records: Retained until you withdraw consent, plus 3 years thereafter to evidence the history of your consent status in the event of a complaint.

Upon expiry of the applicable retention period, your data is securely deleted or anonymized. Anonymized aggregate data (which cannot be re-linked to any individual) may be retained indefinitely for statistical and business-planning purposes.

nsr4d implements a layered, defense-in-depth approach to data security. Our technical and organizational measures include, but are not limited to:

• Encryption in Transit: All data exchanged between your browser or app and nsr4d servers is encrypted using TLS 1.2 or TLS 1.3. Connections over older, insecure protocols are automatically rejected.
• Encryption at Rest: Sensitive data fields — including password hashes, bank account numbers, and KTP document files — are encrypted at rest using AES-256 encryption. Encryption keys are managed through a dedicated key management service with quarterly rotation.
• Access Controls: Access to personal data is restricted on a need-to-know basis. All internal access to Member data requires role-based authentication and is logged for audit purposes. Customer support agents can view account status and transaction summaries but cannot access raw KYC document images without a separate approval workflow.
• Two-Factor Authentication: nsr4d strongly recommends that all Members enable 2FA via their registered Indonesian mobile number. Internal staff systems require mandatory 2FA for all logins.
• Penetration Testing: nsr4d engages independent security firms to conduct penetration tests and vulnerability assessments on our platform infrastructure at least twice per calendar year.
• Incident Response: In the event of a personal data breach that poses a risk to Members, nsr4d will notify affected Members via their registered email address as promptly as possible, and in any case within 72 hours of becoming aware of the breach. Notifications will describe the nature of the breach, the data categories affected, and the steps Members should take to protect themselves.

nsr4d is an internationally operated platform and some of our service providers — including game content providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, and Spribe, as well as our fraud detection and cloud infrastructure partners — are based outside Indonesia. When personal data is transferred to these third parties, nsr4d ensures that appropriate safeguards are in place to protect your data to a standard equivalent to the protections described in this Policy.

Safeguards used for international transfers include contractual clauses that require recipient parties to apply data protection standards consistent with internationally recognized frameworks, and where applicable, processing agreements that bind recipients to the same data minimization, purpose limitation, and security obligations that nsr4d itself applies.

Your KYC documents, including your KTP, are stored on servers located in data centers with certified physical and information security standards (ISO 27001 or equivalent). KTP data is not transferred to any jurisdiction that does not provide an adequate level of data protection without the contractual safeguards described above.

As a Member of nsr4d, you have the following rights in respect of your personal data. To exercise any of these rights, please contact us at [email protected] with the subject line "Privacy Request — [Right You Are Exercising]". We will respond within 30 calendar days.

• Right of Access: You may request a copy of all personal data nsr4d holds about you, together with information about how it is used and with whom it is shared. We will provide this in a structured, commonly used format.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request correction. Some corrections (e.g., name changes) may require supporting documentation.
• Right to Erasure ("Right to Be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent (for consent-based processing), or where processing is unlawful. This right is subject to our legal retention obligations — data required for AML, fraud prevention, or dispute resolution may be retained notwithstanding an erasure request.
• Right to Restriction: You may request that we restrict processing of your data while a rectification or objection request is being assessed, or where processing is unlawful but you prefer restriction to deletion.
• Right to Data Portability: You may request that we provide your personal data in a machine-readable format (CSV or JSON) so that it can be transferred to another service provider, where technically feasible.
• Right to Object: You may object at any time to processing of your personal data that is based on nsr4d's legitimate interests. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or unless processing is necessary for the establishment, exercise, or defense of legal claims.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., promotional communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal. Withdrawal can be effected via your account settings or by contacting [email protected].

nsr4d's services are strictly intended for adults aged 21 years and older. We do not knowingly collect personal data from any individual under the age of 21. Age verification is a mandatory step in the account registration process, and nsr4d reserves the right to request documentary proof of age at any time.

If nsr4d becomes aware that personal data has been collected from a person under the age of 21, we will immediately suspend the relevant account, cancel any pending transactions, and permanently delete all personal data associated with that account. If you believe that a minor has registered an account with nsr4d, please contact us immediately at [email protected].

The nsr4d Platform may contain references or hyperlinks to third-party services — for example, links to game provider support portals or payment method information pages. This Privacy Policy applies solely to data processed by nsr4d on the Platform at https://nsr4d.vip. nsr4d is not responsible for the privacy practices, data handling standards, or content of any third-party websites or services that you access through such links.

We encourage you to review the privacy policy of any third-party service before submitting personal data to it. nsr4d does not endorse, and accepts no liability for, the data practices of any third-party operator.

nsr4d reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory guidance. When material changes are made, nsr4d will notify all registered Members by email to their registered address at least 14 calendar days before the changes take effect.

The effective date at the top of this document will be updated to reflect the date the most recent version came into force. Continued use of the Platform after the effective date of any amendment constitutes acceptance of the revised Policy. If you do not agree to any amendment, you should cease using the Platform and request account closure before the amendment takes effect.

Minor amendments — such as corrections of typographical errors, clarifications that do not change the substance of a clause, or the addition of a new payment method to the data-sharing list — may be made without prior notice, but the effective date will still be updated to reflect the change.

If you have any questions, concerns, or complaints about how nsr4d handles your personal data, or if you wish to exercise any of the rights described in Clause 11, please contact the nsr4d Privacy Team through the following channels:

• Email: [email protected] — use the subject line "Privacy Request" for fastest routing.
• Live Chat: Available 24/7 on the Platform at https://nsr4d.vip, with native Indonesian-speaking agents on every shift.
• Response Commitment: All privacy-related inquiries are acknowledged within 2 business days (WIB, UTC+7) and substantively resolved within 30 calendar days.

nsr4d is committed to resolving all privacy complaints internally in the first instance. If you are not satisfied with our response after giving us a reasonable opportunity to address your complaint, you may refer the matter to the data protection authority or regulatory body applicable in your jurisdiction.

nsr4d
Website: https://nsr4d.vip
Email: [email protected]
Operating jurisdiction: Internationally Licensed
21+ Only