Introduction
nova88 ("the Platform", "we", "us", "our") operates the online casino and sports betting information platform accessible at nova88.casa and associated member interfaces. This Privacy Policy governs the collection and handling of personal information submitted by or obtained from registered Members ("you", "your") and anonymous visitors to the Platform.
We recognise that privacy is a matter of trust. Malaysian users accessing the Platform from Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam or elsewhere in Malaysia are entitled to understand precisely what personal data nova88 collects, why it is collected, how it is stored, who may access it and what rights you hold in relation to it.
By accessing the Platform, registering a Member Account or submitting any personal information, you acknowledge that you have read and understood this Privacy Policy and consent to the processing activities described herein, to the extent that consent constitutes the applicable legal basis under the circumstances.
Definitions
The following terms carry the meanings assigned below throughout this Privacy Policy. Where context permits, singular terms include the plural and vice versa.
| Term | Meaning |
|---|---|
| Personal Data | Any information relating to an identified or identifiable natural person, including name, contact details, financial information and device identifiers. |
| Processing | Any operation performed on Personal Data, including collection, storage, use, disclosure, erasure or any combination thereof. |
| Data Controller | The entity that determines the purposes and means of Processing Personal Data — in this context, the operator of the nova88 Platform. |
| Data Processor | A third party that processes Personal Data on behalf of the Data Controller under a contractual arrangement. |
| Member | A natural person who has registered an Account on the nova88 Platform. |
| KYC | Know Your Customer — the identity and payment-ownership verification process applicable to Members under the Platform's anti-money-laundering obligations. |
| Cookies | Small data files placed on a user's device by the Platform to store session or preference information. |
Data We Collect
nova88 collects Personal Data through several channels: directly from you during registration and account management, automatically through your use of the Platform, and occasionally from third-party sources such as payment processors and identity verification providers.
3.1 Information You Provide Directly
- Full legal name and date of birth;
- Email address and password (stored in encrypted form);
- Malaysian telephone number;
- Residential address, including city (Kuala Lumpur, Penang, Johor Bahru, etc.);
- Government-issued identity document details (MyKad, passport) for KYC;
- Payment method details including bank account numbers, e-wallet identifiers (Touch 'n Go eWallet, Boost, GrabPay) and, where applicable, cryptocurrency wallet addresses (BTC, ETH, USDT);
- Communications submitted through support channels, live chat or email.
3.2 Information Collected Automatically
- IP address and approximate geolocation;
- Device type, operating system and browser version;
- Session timestamps, page interaction logs and navigation paths;
- Deposit and withdrawal transaction records;
- Game activity and wagering history;
- Cookie identifiers and local storage data (see Section 7).
3.3 Information from Third Parties
nova88 may receive Personal Data from payment service providers (including Maybank, CIMB, Public Bank, Hong Leong, DuitNow and FPX operators), identity verification partners, fraud-prevention services and, where applicable, other platforms in the context of the brand migration programme. All third-party data sharing is governed by appropriate data processing agreements.
Data Processing
nova88 processes Personal Data for defined, specific and legitimate purposes only. We do not use your data for purposes incompatible with those for which it was originally collected without your prior consent or other lawful grounds.
| Processing Purpose | Categories of Data Used |
|---|---|
| Account registration and management | Identity details, contact information, password hash |
| KYC identity and age verification | Government ID details, date of birth, address, payment ownership evidence |
| Deposit and withdrawal processing | Bank account and e-wallet details, transaction records, IP address |
| Fraud prevention and security monitoring | Device fingerprint, IP logs, session data, transaction patterns |
| Responsible gambling programme | Wagering activity, deposit frequency, self-declared limit preferences |
| Bonus and promotion management | Account history, promotional eligibility records, wagering progress |
| Customer support and dispute resolution | Communication records, account activity logs, transaction history |
| Legal and regulatory compliance | Identity data, transaction records, AML monitoring outputs |
| Platform improvement and analytics | Aggregated usage data, session logs, device and browser data |
Legal Basis for Processing
nova88 processes Personal Data on the following legal grounds depending on the nature and purpose of the processing activity:
- Contractual Necessity: Processing required to fulfil the Member agreement, including account management, payment processing, wagering services and withdrawal fulfilment.
- Legal Obligation: Processing required to comply with applicable anti-money-laundering obligations, age verification requirements, fraud prevention duties and responses to lawful regulatory requests.
- Legitimate Interests: Processing for fraud monitoring, Platform security, analytics and service improvement, where our legitimate interests are not overridden by your fundamental rights.
- Consent: Processing for certain non-essential marketing communications or optional features, where you have given clear and freely withdrawable consent.
Data Sharing and Disclosure
nova88 does not sell, rent or trade your Personal Data to third parties for their independent marketing use. Disclosure to third parties is limited to the categories and purposes described below.
6.1 Payment Service Providers
Transaction data is shared with payment processors to facilitate deposits and withdrawals. This includes Malaysian banking operators (Maybank, CIMB, Public Bank, Hong Leong), e-wallet providers (Touch 'n Go eWallet, Boost, GrabPay), national payment infrastructure operators (DuitNow, FPX) and cryptocurrency networks where applicable. Each provider operates under its own applicable privacy framework.
6.2 Identity Verification Partners
KYC-related Personal Data, including identity document details and facial verification data where collected, may be shared with accredited identity verification service providers engaged under formal data processing agreements.
6.3 Fraud and Security Services
Device, session and behavioural data may be shared with specialised fraud-prevention and platform security vendors to protect the integrity of the Platform and its Members.
6.4 Legal and Regulatory Disclosure
nova88 may disclose Personal Data to competent authorities, courts or regulatory bodies where required by applicable law or in response to a lawful order. We will endeavour to notify you of such disclosures where legally permissible.
No Commercial Data Selling: nova88 does not sell your Personal Data to advertisers, data brokers or any commercial third party for marketing, profiling or targeting purposes.
Cookies and Tracking Technologies
nova88 uses cookies and similar browser-based tracking technologies to operate certain Platform functions, maintain authenticated sessions, assess Platform performance and, where consent is given, personalise the user experience.
7.1 Types of Cookies Used
- Strictly Necessary Cookies: Required for core Platform functionality including session authentication, security token management and load balancing. These cannot be disabled without materially impairing Platform access.
- Functional Cookies: Store user preferences such as language settings, display options and session restore points.
- Analytics Cookies: Collect aggregated usage data used to understand how Members navigate the Platform and identify areas for improvement. Where implemented, this is done using privacy-respecting configurations.
7.2 Managing Cookies
Most browsers allow you to view, restrict or delete cookies through browser settings. Disabling strictly necessary cookies will impair your ability to log in or use core Platform features. Disabling analytics cookies will not affect your access to Member functionality.
Data Retention
nova88 retains Personal Data for as long as is reasonably necessary to fulfil the purposes for which it was collected, to comply with applicable legal obligations and to support legitimate business functions including fraud prevention and dispute resolution.
- Active Account Data: Retained throughout the period of active membership and for a minimum of five years following account closure, in compliance with anti-money-laundering record-keeping requirements.
- Transaction Records: Financial transaction data including deposit and withdrawal records are retained for a minimum of five years to satisfy applicable financial compliance obligations.
- KYC Documentation: Identity and age verification documents are retained for the duration of the account relationship plus a minimum compliance retention period thereafter.
- Support Communications: Customer support exchanges are retained for a period sufficient to resolve disputes and improve service quality, typically not exceeding three years from last interaction.
- Analytics Data: Aggregated and anonymised analytics data may be retained indefinitely as it does not constitute Personal Data following anonymisation.
Data Security
nova88 implements reasonable and proportionate technical and organisational security measures to protect Personal Data against unauthorised access, accidental loss, alteration, disclosure or destruction.
9.1 Security Measures
- Encryption of data in transit using industry-standard TLS protocols;
- Encrypted storage of passwords and sensitive authentication credentials;
- Access controls limiting Personal Data access to authorised personnel only;
- Regular review of data handling procedures and access permission audits;
- Segregation of Member account balances from operational Platform funds.
In the event of a data security incident that poses a material risk to Member rights, nova88 will take reasonable steps to notify affected Members and relevant authorities as appropriate and in accordance with applicable legal obligations.
Your Rights
Subject to applicable law and the nature of the processing activity, you may hold the following rights in relation to your Personal Data held by nova88. To exercise any of these rights, contact us using the details in Section 15.
Right of Access
Request confirmation of whether nova88 holds Personal Data about you and obtain a copy of that data.
Right to Rectification
Request correction of inaccurate or incomplete Personal Data held about you.
Right to Erasure
Request deletion of your Personal Data where it is no longer needed, subject to legal retention obligations that may override this right.
Right to Restrict Processing
Request that nova88 limits how your Personal Data is used while a request or complaint is under review.
Right to Data Portability
Where processing is based on consent or contract and is automated, request a machine-readable copy of your Personal Data.
Right to Object
Object to processing based on legitimate interests where your particular situation provides grounds to do so.
Right to Withdraw Consent
Where processing is based on consent, withdraw consent at any time without affecting prior lawful processing.
Right to Complain
Lodge a complaint with an appropriate supervisory authority if you believe your Personal Data rights have been infringed.
Minors and Age Verification
nova88 is strictly intended for individuals aged 21 years and above. We do not knowingly collect Personal Data from persons under the age of 21. The Platform's KYC verification process includes age confirmation, and Accounts found to have been registered by underage individuals will be immediately closed and all associated data reviewed in accordance with applicable legal obligations.
If you believe that nova88 has inadvertently collected data from a person under 21, please contact us immediately at [email protected] (plain text only — not a clickable link) so that we can investigate and take appropriate action.
Third-Party Services and Links
The nova88 Platform may reference or functionally interact with third-party services including payment processors, game content providers and identity verification platforms. This Privacy Policy applies solely to data processing conducted by or directly on behalf of nova88.
When you interact with a third-party service — such as completing a payment through Maybank2u, authorising a Touch 'n Go eWallet transaction or submitting identity documents to a KYC provider — your Personal Data is subject to that third party's own privacy practices. nova88 is not responsible for the data handling practices of third-party service providers beyond its contractual agreements with them as Data Processors.
Generic game studio partners referenced on the Platform as content providers do not receive independently identifiable Member data without separate contractual and privacy safeguards in place.
Cross-Border Data Transfers
The nova88 Platform operates under international online gaming licensing and may store or process Personal Data on servers located outside Malaysia. Where Personal Data is transferred outside Malaysia, nova88 takes reasonable steps to ensure that appropriate safeguards are in place, including contractual arrangements with receiving parties that impose equivalent data protection standards.
Members acknowledge that by registering on the Platform, their Personal Data may be transferred to and processed in jurisdictions outside Malaysia. Where such transfers occur, they are carried out on the basis of contractual necessity or applicable legal grounds and are subject to reasonable security measures.
Policy Amendments
nova88 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations or Platform functionality. The review date displayed at the top of this page indicates when the policy was last materially updated.
Where amendments are material — such as new categories of data collection, a change in the purposes for which data is used, or material changes to retention periods — nova88 will provide notice to registered Members through the Platform notification system or via registered email address before the changes take effect.
Continued use of the nova88 Platform following the effective date of any policy update constitutes acceptance of the revised Privacy Policy. Members who do not accept revised terms are encouraged to contact support to discuss Account closure and any associated data erasure rights under Section 10.
Contact Us
For questions, concerns or requests relating to this Privacy Policy or the handling of your Personal Data, please contact the nova88 privacy and support team through the following channels. All contact information is provided as plain text only — no clickable links are used.
Data and Privacy Enquiries: [email protected]
Live Chat Support: Available 24 hours a day, 7 days a week through the logged-in Member Account portal.
Response Target: Privacy and data rights requests are typically acknowledged within 3 business days and substantively addressed within 30 days.
Subject Line Guidance: Please include "Privacy Request" in your email subject line to ensure appropriate routing to the data handling team.