nanastotoPrivacy Policy

This page describes what we collect when you use nanastoto and how we keep that data protected. Account opening starts with email verification, identity documentation (KTP, passport, or driver's licence), and a deposit method—typically DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, or bank transfer. We retain this information to comply with local regulations, process your withdrawals, and prevent fraud.

We at nanastoto encrypt all account data under SSL protocols and store it on secure servers. We do not share your personal information with third parties except where required by law (anti-money-laundering compliance, court order) or necessary to complete your transactions (bank details shared only with our payment processor). You may request access to your data or deletion of your account at any time through our support team.

Our servers may sit outside your jurisdiction, but we comply with data-protection standards applicable in the regions where we operate. If you have questions about how we handle your data, contact us through in-app support or email. Our commitment is transparent data handling—we do not sell your information, do not use it for marketing beyond our platform, and do not retain it longer than necessary.

What We Collect and How We Use It on nanastoto

Account Information

We collect your email, phone number, and full name when you register on nanastoto. During account verification, we request identity documents (KTP, passport, or driver's licence) and may ask for proof of address (utility bill or bank statement). We use this information to verify your identity, comply with anti-money-laundering laws, and prevent fraud and account duplication.

We retain identity documents only for the duration of your account. If you close your account, we delete or anonymize these documents according to our data-retention schedule (typically within 90 days of closure). You may request earlier deletion by contacting our support team.

Payment and Transaction Data

When you deposit through DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, or e-wallet, we record the transaction date, amount, and payment method. We do not store your full bank account or card details—we store only the token or reference provided by the payment processor. Your bank details are encrypted and handled solely by our payment provider.

We retain transaction records indefinitely for compliance and dispute resolution. All transactions are visible in your account history; you may download transaction statements at any time. We use transaction data only to process withdrawals, detect fraud, and comply with regulatory reporting requirements.

Gameplay and Betting Records

We record your gameplay history across all nanastoto products—slots (Aviator, Sweet Bonanza, Gates of Olympus, Fortune Tiger, Mahjong Ways), live-dealer tables (blackjack, roulette, baccarat, Dragon Tiger), sportsbook bets (Liga 1, Piala AFF, Champions League, MotoGP, badminton), and esports markets (Mobile Legends, Free Fire, PUBG Mobile). We store game outcomes, bet details, and settlement results to enable account history review and dispute resolution.

This data is encrypted and accessed only by your account and our support team (when you dispute an outcome). We do not use gameplay data for marketing or share it with third parties. We retain gameplay records for your account lifetime and for seven years after account closure to comply with regulatory requirements.

Technical and Usage Data

We collect information about how you use nanastoto—your IP address, device type (mobile, desktop, tablet), browser version, and session duration. We use this data to detect unauthorized access, improve platform performance, and identify technical issues. We do not use this data for profiling or behavioral targeting.

We may use cookies to remember your login session and language preference. Cookies expire after your session ends or when you manually log out. You may disable cookies in your browser; this may prevent some nanastoto features from functioning properly.

Cookies and Analytics

We use essential cookies only—authentication cookies that keep you logged in, and preference cookies (language, theme). We do not use third-party analytics cookies or tracking pixels. We do not share session data with advertisers or social media platforms.

If you clear your browser cookies, you will be logged out of nanastoto and must log in again. This does not affect your account balance or transaction history—those remain secure on our servers.

Your Rights, Third Parties, and Data Protection

Third-Party Processors

We work with payment processors (DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, and bank platforms) to handle deposits and withdrawals. These processors have their own privacy policies governing how they handle your bank details. We do not control their practices, but we choose processors that maintain encryption and comply with local data-protection standards.

We may use hosting providers to store our servers and databases. These providers are contractually bound to keep your data confidential and use it only to provide hosting services. We do not share your data with marketing platforms, social media companies, or advertisers.

International Data Transfer

Our servers may be located outside your home jurisdiction. By using nanastoto, you consent to your data being transferred and stored in these locations. We apply the same encryption and security standards regardless of server location. If your local law restricts international data transfer, we may be unable to provide service in your jurisdiction—please verify local compliance before opening an account.

Data Breach Notification

If we experience a data breach affecting your personal information, we will notify you by email as required by local law. We will describe the scope of the breach, the data affected, and steps we have taken to secure your account. We offer password-reset assistance and account monitoring if your credentials are compromised. We do not hold you liable for unauthorized transactions resulting from a breach caused by our negligence.

Contact and Data Requests

To request access to your data, correct information, or delete your account, contact our support team through in-app messaging or email. We respond to data-subject requests within 30 days. For complex requests (e.g., deletion involving regulatory retention requirements), we may require additional time but will update you on progress.

If you have privacy concerns about nanastoto, contact us first. If we do not resolve your concern, you may escalate to your local data-protection authority or privacy commissioner. We respect all regulatory privacy frameworks applicable in the regions where we operate.

We at nanastoto treat your data as a trust we must protect. We encrypt all information, limit access to authorized personnel only, and never sell your data for profit. Our servers may be located internationally, but we apply consistent security standards everywhere. Your account remains under your control—you may download your records, request corrections, or delete your account at any time. Our privacy commitment is transparency: we tell you what we collect, why we collect it, and who can access it. For questions about this policy or how we handle your personal information, contact our support team through in-app messaging or email.