Privacy Policy Nova 88 —
Your Information, Our Responsibility

This Privacy Policy ("Policy") is published by Nova 88 ("we", "Nova 88", or "Platform") and applies to all individuals who access or use the nova88-play.com website, the Nova 88 mobile app, and all related services ("Platform").

We understand that privacy matters deeply to you as a user of our platform. The trust you place in Nova 88 to handle your personal information is something we never take lightly. This Policy has been drawn up in accordance with Personal Data Protection Act 2010 (PDPA) Malaysia and all applicable related regulations in force.

By registering for or using the Nova 88 platform, you consent to the collection and use of your personal data as described in this Policy. If you do not agree, please discontinue use of the platform and contact us to close your account.

Nova 88 collects various categories of data depending on how you interact with our platform. Below is a comprehensive summary of the types of data we may collect:

We does not collect sensitive information such as biometric data, medical records, or religious beliefs unless required by applicable Malaysian law.

3.1 Direct Collection from You

We collect personal data directly from you through the following channels:

• Account registration form — full name, phone number, email address, date of birth
• Identity verification process (KYC) — copy of identity card, proof of address
• Financial transactions — deposit and withdrawal details via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX, Maybank2u, or CIMB Clicks
• Customer support interactions — information shared when you reach out to our support team via live chat or email
• Participation in promotions — information required to claim bonuses or rewards

3.2 Automatic Collection

When you use the Nova 88 platform, our systems automatically record certain technical information for security and service improvement purposes. This includes your IP address, browser and device type, cookie data, and in-platform activity logs.

3.3 Collection from Third Parties

In certain circumstances, Nova 88 may receive information about you from trusted third parties, such as identity verification service providers, payment partners operating in Malaysia, and fraud prevention agencies.

Nova 88 uses collected personal data solely for legitimate and reasonable purposes. The following is a complete list of how we use your data:

• Account management — to register, verify, and manage your Nova 88 account
• Transaction processing — processes deposits and withdrawals in MYR (RM) via local payment methods
• Legal compliance — fulfils the KYC (Know Your Customer) and AML (Anti-Money Laundering) requirements mandated in Malaysia
• Platform security — detecting and preventing fraud, hacking, and suspicious activity
• Customer Support — assists you with enquiries, complaints, and technical issues
• Service improvements — analysing usage patterns to enhance the playing experience on Nova 88
• Service communications — sends important notifications relating to your account, security, and promotions you have opted in to receive
• Research & analytics — understanding the needs of Malaysian players to develop better new features

Nova 88 does not sell, rent, or trade members' personal data to any third party for their own marketing purposes. However, we may share your data in the following limited circumstances:

5.1 Trusted Service Providers

We work with select service providers who help us operate the platform, such as:

• Game providers offering Live Casino, slots, and other games on the Nova 88 platform
• Payment processors handling transactions via Touch 'n Go eWallet, GrabPay, DuitNow, and the FPX network
• Cloud service providers that store data in secure environments
• Identity verification companies that assist with the KYC process

All service providers are bound by strict confidentiality agreements and may only use your data for the purposes we have specified.

5.2 Legal Requirements

Nova 88 may be required to disclose your personal data to Malaysian authorities where mandated by law — including the police, courts, the Malaysian Anti-Corruption Commission (MACC), or Bank Negara Malaysia in investigations related to money laundering or fraud.

Nova 88 implements multiple layers of technical and organisational security controls to protect your personal data from unauthorised access, loss, or accidental disclosure:

• 256-bit SSL/TLS encryption — all data transmitted between your device and our servers is fully encrypted
• Encrypted databases — sensitive data such as financial information is stored in encrypted format
• Strict access controls — only staff who require access to your data for work purposes are permitted to do so, and every access is recorded in an audit log
• Two-factor authentication (2FA) — available on member accounts as an additional security layer
• 24/7 security monitoring — a threat detection system that operates around the clock to identify any suspicious activity
• Periodic penetration testing — the Nova 88 platform undergoes regular security audits conducted by independent third-party experts

While we take all reasonable precautions, no security system is infallible. In the event of a data breach affecting your personal data, Nova 88 will notify you within a reasonable timeframe in accordance with Malaysian legal requirements.

Nova 88 retains your personal data only for as long as necessary to fulfil the purposes stated in this Policy, or as required under applicable Malaysian law.

• Active account data — retained for the duration of the active account and 7 years after account closure to meet financial record-keeping requirements
• Financial transaction records — retained for 7 years in accordance with Malaysian financial regulatory requirements
• Customer support communication logs — retained for 3 years from the date of the last interaction
• Technical data and system logs — retained for a maximum of 12 months
• Inactive account data — accounts inactive for 24 consecutive months may undergo a data deletion process after notice has been issued to the member

When your personal data is no longer required, we will securely delete it using methods that prevent recovery by any party.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by Nova 88:

The Nova 88 platform uses cookies and similar tracking technologies to enhance the user experience and ensure the platform functions properly. We use three types of cookies:

You can manage cookies through your web browser settings. Please note that disabling certain cookies may affect the functionality of the Nova 88 platform. For more information on managing cookies, refer to your web browser's documentation.

The Nova 88 platform is is not intended for individuals under the age of 18 and we do not knowingly collect personal data from children or minors. Should we discover that personal data belonging to an individual under the age of 18 has been collected inadvertently, we will take immediate steps to delete that data and close the account in question.

Nova 88 reserves the right to amend this Privacy Policy at any time to reflect changes in our data practices, new legal requirements, or improvements in how we handle user information. Any material changes to this Policy will be communicated to members via:

• Notice prominently displayed on the platform's homepage
• Notification emails sent to all members with active accounts
• In-app notifications on the Nova 88 mobile app

Amended policies take effect 14 days after notice is given, unless stated otherwise. Continued use of the Nova 88 platform after that notice period will be considered your acceptance of the revised Privacy Policy.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how Nova 88 handles your personal data, please contact us through the following channels: