nova888 Privacy Policy

Full Privacy Policy

This Privacy Policy ("Policy") applies to nova888, accessible at nova888.lat, and governs the collection, processing, storage, and disclosure of personal data belonging to registered members and visitors based in Malaysia. By accessing or using our platform, you acknowledge that you have read and understood this Policy in its entirety.

1. Who We Are

nova888 operates an online casino and sports betting platform designed for Malaysian adults aged 21 and above. Our platform offers live baccarat, online poker, slot games, and comprehensive sports betting including markets for the Malaysia Super League, English Premier League (EPL), and international events. References to "nova888," "we," "our," and "us" throughout this Policy refer to the platform operator and its data processing functions.

2. Personal Data We Collect

Depending on how you interact with nova888, we may collect the following categories of personal data:

• Identity Data: Full name, date of birth, nationality, government-issued identification number (e.g., MyKad or passport number).
• Contact Data: Email address, mobile phone number, and residential address (including city, state, and postcode within Malaysia).
• Account Data: Username, hashed password, member ID, account preferences, and communication settings.
• Financial Data: Payment method details (e.g., Touch n Go eWallet, Boost, Maybank, CIMB, Public Bank), transaction history, deposit and withdrawal records denominated in MYR.
• Technical Data: IP address, browser type and version, operating system, device identifiers, session timestamps, and referring URL.
• Usage Data: Game history, betting activity, session duration, features accessed, and interaction logs within the nova888 platform.
• Marketing Preferences: Your stated preferences regarding promotional communications and offers.
• Verification Data: Know Your Customer (KYC) documents including copies of identification or proof of address, collected in compliance with anti-money laundering obligations.

We collect data directly from you when you register an account, make a deposit or withdrawal, contact our support team, or otherwise use our services. We may also receive technical data automatically through your device and browser when you visit our site.

3. How We Use Your Data

nova888 uses your personal data only for legitimate, clearly defined purposes. Specifically, we process your information to:

• Create, verify, and maintain your member account on the nova888 platform.
• Process deposits and withdrawals in MYR through your chosen payment method.
• Fulfil our legal obligations under applicable anti-money laundering (AML) and Know Your Customer (KYC) requirements.
• Verify that all registered members are aged 21 and above, as required under responsible gaming commitments.
• Deliver the games, sports betting markets, and platform features you have chosen to access.
• Provide customer support and respond to your enquiries promptly and accurately.
• Send transactional communications such as deposit confirmations, withdrawal updates, and account security alerts.
• Send promotional offers, bonuses, and platform updates where you have given your consent or where a legitimate interest applies.
• Monitor platform activity to detect and prevent fraud, collusion, money laundering, and other unlawful conduct.
• Analyse aggregated, anonymised usage patterns to improve our platform, product offerings, and user experience.
• Comply with any court order, regulatory direction, or other legal obligation applicable to our operations.

We will not use your personal data for any purpose that is incompatible with those listed above without first obtaining your explicit consent or providing you with advance notice.

4. Legal Basis for Processing

Where data protection law requires us to identify a lawful basis for processing personal data, nova888 relies on one or more of the following grounds:

• Contractual Necessity: Processing is required to perform the contract between you and nova888 — for example, to operate your account, process wagers, and facilitate payments.
• Legal Obligation: Processing is necessary to comply with our legal and regulatory obligations, including AML/KYC obligations and age verification requirements.
• Legitimate Interests: Processing is necessary for the legitimate interests of nova888 or a third party, provided those interests are not overridden by your rights. Examples include fraud prevention, platform security, and service improvement through aggregated analytics.
• Consent: Where we rely on your consent — for example, to send you marketing communications — you retain the right to withdraw that consent at any time by contacting our support team or updating your account notification preferences.

5. Data Sharing and Disclosure

nova888 does not sell, rent, or otherwise transfer your personal data to third parties for their own marketing purposes. We may share your information only in the following limited circumstances:

• Service Providers: We engage trusted third-party vendors — including payment processors, identity verification services, cloud hosting providers, and customer support platforms — who process data on our behalf under strict contractual data protection obligations.
• Payment Partners: To process your transactions, relevant financial data is shared with payment service providers such as e-wallet operators and local bank payment gateways operating in Malaysia.
• Fraud and Security Partners: We may share data with fraud prevention agencies or security intelligence services where necessary to protect the integrity of our platform and comply with AML obligations.
• Regulatory and Law Enforcement Authorities: We will disclose personal data when required to do so by law, court order, or at the request of a competent regulatory or government authority.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of our business assets, your personal data may be transferred as part of that transaction, subject to the same privacy protections outlined in this Policy.

All third parties with whom we share data are required to handle it securely, use it only for the purposes for which it was disclosed, and comply with applicable data protection obligations.

6. Cookies and Tracking Technologies

nova888 uses cookies and similar technologies to operate and improve our platform. A cookie is a small text file stored on your device when you visit our site. We use the following types of cookies:

• Strictly Necessary Cookies: Essential for core platform functionality such as login sessions, game state management, and secure payment flows. These cannot be disabled without affecting your ability to use nova888.
• Performance and Analytics Cookies: Help us understand how members navigate our platform, which games are most popular, and where technical issues occur. Data collected is aggregated and anonymised.
• Functional Cookies: Remember your preferences such as language selection, preferred currency display, and notification settings to personalise your experience.
• Marketing Cookies: Used to deliver relevant promotional content within our own platform. We do not place third-party cross-site advertising tracking cookies.

You may manage or disable non-essential cookies through your browser settings at any time. Please note that disabling certain cookies may impact the functionality and performance of the nova888 platform.

7. Data Retention

nova888 retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. The following general retention periods apply:

• Account and identity data is retained for the duration of your membership and for a minimum of five (5) years following account closure, to satisfy AML and KYC record-keeping obligations.
• Transaction and financial records are retained for a minimum of seven (7) years in accordance with financial regulatory requirements applicable in our operating jurisdiction.
• Technical and usage data is retained for up to twenty-four (24) months, after which it is either deleted or permanently anonymised for aggregate analytics purposes.
• Marketing preference records are retained until you withdraw consent or for three (3) years from the last interaction, whichever comes first.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. You may request earlier deletion subject to the conditions outlined in Section 9 below.

8. Data Security

nova888 implements a comprehensive set of technical and organisational measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. Our security practices include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers.
• Encryption at rest for sensitive data held in our databases, including financial records and identity documents.
• Role-based access controls ensuring that staff can only access the data necessary for their specific job functions.
• Regular security assessments, penetration testing, and vulnerability scanning of our platform infrastructure.
• Comprehensive audit logging of all access to personal data by internal personnel.
• Employee training and binding confidentiality obligations for all staff who handle member data.
• Incident response procedures enabling us to detect, contain, and notify affected members of any data breach without undue delay.

While we apply industry-leading security measures, no system is completely immune to risk. We encourage all nova888 members to use strong, unique passwords, enable any available two-factor authentication, and contact our support team immediately if they suspect any unauthorised activity on their account.

9. Your Rights

As a nova888 member, you have the following rights in relation to your personal data. To exercise any of these rights, please contact us using the details in Section 12. We will respond to all verified requests within 14 business days.

• Right of Access: You may request a copy of the personal data we hold about you, along with information about how it is used.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data held in your account or our records.
• Right to Erasure: In certain circumstances, you may request that we delete your personal data. This right is subject to limitations where retention is required by law — for example, mandatory AML record-keeping obligations.
• Right to Restrict Processing: You may ask us to pause processing of your data while a dispute about its accuracy or lawfulness is resolved.
• Right to Data Portability: Where processing is based on your consent or contract performance, you may request that we provide your data in a structured, machine-readable format.
• Right to Object: You may object to processing based on legitimate interests, or to the use of your data for direct marketing purposes. We will comply unless compelling legitimate grounds override your objection.
• Right to Withdraw Consent: Where we rely on your consent, you may withdraw it at any time without affecting the lawfulness of processing that occurred before withdrawal.

nova888 will never discriminate against members for exercising their privacy rights. Exercising any of the above rights will not affect your ability to use our platform, subject to any legal obligations that require us to retain certain data.

10. Minors and Age Restriction

nova888 is strictly an adults-only platform. Our services are intended exclusively for individuals aged 21 and above. We do not knowingly collect personal data from anyone under the age of 21. If we discover that we have inadvertently collected data from a person under this age limit, we will delete that data immediately and close the associated account without delay.

As part of our responsible gaming commitment, all new members are required to complete age verification as part of the registration process. If you believe a minor has registered on our platform, please notify us immediately at [email protected] so we can take urgent corrective action. For more information on our responsible gaming practices, please visit our Responsible Gaming page.

11. Changes to This Policy

nova888 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or platform features. When we make material changes, we will:

• Update the "Last Updated" date at the top of this Policy.
• Display a prominent notice on the nova888 platform informing members of the update.
• Where required by law or where changes materially affect your rights, seek your renewed consent.

We encourage you to review this Policy periodically. Your continued use of the nova888 platform following notification of changes constitutes your acknowledgment of the updated Policy. If you do not agree with any changes, you should cease using the platform and may request account closure by contacting our support team.

12. How to Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way nova888 handles your personal data, please get in touch with our Data Protection team. You can reach us at:

• Email: [email protected] (plain text — not a clickable link)
• Platform: Via the Live Chat or support ticket system available within your nova888 member account.

We are committed to resolving all privacy-related enquiries fairly and promptly. If you are dissatisfied with our response, you retain the right to escalate the matter to the appropriate data protection authority in your jurisdiction.