Privacy
Policy.

Nusantara is committed to fostering a secure and legally compliant digital asset ecosystem under the guidance of Otoritas Jasa Keuangan (OJK), Indonesia.

Important Disclosure

Please be advised that while Nusantara is currently operating under the stringent regulatory guidance and surveillance of the OJK, the final digital asset/finance license has not yet been issued. We are currently in a critical compliance period to finalize licensing requirements. This Privacy Policy is designed to adhere to both Indonesian personal data protection laws and international standards (e.g., GDPR).

To provide our stablecoin services and comply with Anti-Money Laundering (AML) and Know Your Customer (KYC) regulations, we collect the following types of information:

A. Personal Identification Information

Through our partnership with solutions provider, we collect:

• Full legal name, date of birth, and nationality.
• Government-issued identification (e.g., KTP, Passport).
• Biometric data and liveness detection results.
• Contact details (email address and phone number).

B. Financial and Transactional Data

• Wallet addresses and transaction history on the Polygon network.
• Bank account information for IDR on-ramp/off-ramp transfers.
• Source of funds documentation for high-value transactions.

C. Technical and Usage Data

• IP address, device identification, and browser type.
• Real-time behavioral data for risk monitoring provided by Hypernative.

We process your data for the following purposes:

• Identity Verification: To perform mandatory KYC/AML screenings before granting access to NIDR services.
• Transaction Monitoring: To analyze transactions for suspicious patterns and connections to illicit activities via Hypernative.
• Compliance & Reporting: To fulfill our legal obligations to OJK, including filing Suspicious Transaction Reports (STRs) and Currency Transaction Reports (CTRs).
• Platform Security: To protect against fraud, unauthorized access, and to implement security protocols like multi-sig and access controls.

KYC and AML requirements are applied in strict compliance with Indonesian financial regulations based on user activity and specific regulatory mandates.

We do not sell your personal data. We share information only with:

• Regulatory Authorities: We fully comply with lawful requests from OJK, the National Police, and PPATK to block or freeze transactions.
• Service Partners: Billions Network (KYC) and Hypernative (AML Surveillance).
• Financial Institutions: Regulated custodian banks (e.g., Mandiri, BRI, BNI) holding the IDR reserves.
• Blockchain Network: Transaction data is recorded publicly and immutably on the Polygon network and any other network in the future.

• Security: We employ industry-standard encryption for data in transit and at rest. All smart contracts undergo third-party audits.
• Retention: We maintain records of AML/CTF monitoring and identity verification for the legally required period under Indonesian law.

Depending on your jurisdiction, you may have the right to:

• Request access to or a copy of your personal data.
• Request correction of inaccurate information.
• Withdraw consent for certain data processing (though this may limit your access to NIDR services).
• Request deletion of data, subject to regulatory retention requirements.