nova88mas Privacy Policy

1. Introduction and Scope

This Privacy Policy ("Policy") governs the collection, processing, storage, and disclosure of personal data by nova88mas ("we", "us", "our", "the Platform") in connection with the operation of the online gaming and sports betting platform accessible at nova88mas.lat. This Policy applies to all registered members, visitors, and prospective users who interact with the Platform from any location, with primary applicability to users based in Malaysia.

By registering an account, accessing the Platform, or utilising any of our services — including sports betting, live casino, slots, and deposit or withdrawal functions — you acknowledge that you have read, understood, and consented to the practices described in this Policy. If you do not agree with any part of this Policy, you should discontinue use of the Platform immediately.

This Policy is to be read alongside our Terms & Conditions and our Responsible Gaming guidelines, which form part of the overall agreement between you and nova88mas.

2. Data Controller Information

nova88mas acts as the data controller for the personal information collected through this Platform. All privacy-related enquiries, data access requests, or complaints should be directed to our dedicated Privacy Team via email at [email protected]. We aim to respond to all substantive queries within 14 business days.

3. Information We Collect

nova88mas collects several categories of personal data depending on how you use our Platform. The table below provides a structured overview of the data types, the lawful basis for collection, and the purpose for which each category is processed.

We do not knowingly collect sensitive personal data such as racial or ethnic origin, religious beliefs, or health information unless strictly required for responsible gaming interventions (e.g., self-exclusion processing).

4. How We Collect Your Data

We obtain your personal data through the following channels:

• Direct registration: When you create an account on nova88mas, you provide your name, email address, date of birth, and contact details.
• KYC documentation: When you submit identity verification documents (MyKad, passport, utility bills) as required under our compliance obligations.
• Financial transactions: When you deposit or withdraw funds via Maybank, CIMB, Public Bank, Touch n Go eWallet, Boost, or other supported channels.
• Platform usage: Automatically collected during your sessions via cookies, server logs, and analytics tools.
• Customer support interactions: When you contact our support team via live chat, email, or telephone.
• Third-party verification services: Identity verification partners used solely for KYC/AML compliance purposes, subject to strict data-sharing agreements.

5. Cookies and Tracking Technologies

nova88mas uses cookies and similar tracking technologies (including web beacons and local storage) to operate and improve the Platform. Cookies are small text files stored on your device that allow us to recognise you across sessions and maintain your login state.

We categorise our cookies as follows:

• Strictly Necessary: Essential for the Platform to function (e.g., session management, security tokens). These cannot be disabled.
• Performance & Analytics: Help us understand how members navigate the Platform, which pages are most visited, and where technical issues arise. Data is aggregated and anonymised.
• Functional: Remember your preferences such as language selection, preferred currency (MYR), and notification settings to improve your experience.
• Marketing: Used to deliver relevant promotions and bonus offers based on your activity. These are only activated with your explicit consent.

You may manage or withdraw your cookie preferences at any time through your browser settings or our on-site cookie preference centre. Please note that disabling certain cookies may affect the functionality of the Platform.

6. How We Use Your Personal Data

nova88mas processes your personal data for the following purposes:

• To create and manage your registered member account on the Platform.
• To verify your identity and age (21+ requirement strictly enforced in compliance with Malaysian regulations).
• To process deposits and withdrawals via your chosen payment method, including local Malaysian banking and e-wallet services.
• To detect and prevent fraudulent activity, money laundering, and other prohibited conduct under the Anti-Money Laundering, Anti-Terrorism Financing and Proceeds of Unlawful Activities Act 2001 (AMLA).
• To provide personalised betting and gaming recommendations based on your usage patterns.
• To send transactional communications such as deposit confirmations, withdrawal notifications, and security alerts.
• To send promotional communications, bonus offers, and platform updates — only where you have provided explicit consent.
• To monitor gameplay patterns as part of our Responsible Gaming obligations, including identifying members who may be at risk of problem gambling.
• To comply with legal and regulatory requirements imposed by applicable Malaysian law and our international licensing obligations.
• To improve the Platform through aggregated behavioural analytics and user feedback.

7. Disclosure of Personal Data to Third Parties

nova88mas does not sell, rent, or trade your personal data to any third party for commercial purposes. We may share your information with selected third parties only in the following circumstances and under strict contractual safeguards:

• Payment processors: Banks and e-wallet providers (e.g., Maybank, CIMB, Public Bank, Touch n Go, Boost) to facilitate deposits and withdrawals. These entities process your financial data under their own regulated privacy frameworks.
• KYC/AML compliance partners: Licensed identity verification and anti-money laundering screening service providers engaged to satisfy our regulatory obligations.
• Technology infrastructure providers: Cloud hosting, content delivery, and cybersecurity vendors who process data on our behalf under data processing agreements that prohibit independent use of your data.
• Regulatory authorities: Malaysian authorities including Bank Negara Malaysia, the Royal Malaysia Police (PDRM), and other relevant bodies, where we are legally compelled to disclose information.
• Professional advisors: Lawyers, auditors, and accountants bound by professional confidentiality obligations, where required for legal or financial proceedings.

Any third party receiving your data is required to implement appropriate technical and organisational security measures equivalent to those maintained by nova88mas. We do not authorise third parties to use your data for any purpose other than the specific purpose for which it was disclosed.

8. International Data Transfers

Given the international nature of online gaming operations, some of your personal data may be processed on servers located outside Malaysia. Where such transfers occur, nova88mas ensures that appropriate safeguards are in place — including standard contractual clauses, data processing agreements, and adequacy assessments — to ensure your data receives a level of protection consistent with Malaysian personal data protection standards and international best practices.

We will not transfer your personal data to any jurisdiction that does not provide adequate data protection guarantees without your explicit consent or a lawful legal basis for doing so.

9. Data Retention

We retain your personal data only for as long as is necessary to fulfil the purposes outlined in this Policy, or as required by applicable law. The following general retention periods apply:

Upon expiry of the applicable retention period, your data will be securely deleted or irreversibly anonymised in accordance with our data disposal procedures.

10. Your Rights Under This Policy

As a user of nova88mas, you have the following rights with respect to your personal data. To exercise any of these rights, please contact our Privacy Team at [email protected] with your full name, registered email address, and a clear description of your request.

• Right of Access: You may request a copy of the personal data we hold about you, including details of how it is being used and with whom it has been shared.
• Right to Rectification: If any personal data we hold is inaccurate or incomplete, you have the right to request that it be corrected without undue delay.
• Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to overriding legal retention obligations.
• Right to Restrict Processing: In certain circumstances, you may request that we limit the processing of your data while a dispute or investigation is in progress.
• Right to Data Portability: You may request that we provide your personal data in a structured, commonly used, machine-readable format for transfer to another service provider.
• Right to Object: You may object to the processing of your personal data for direct marketing purposes at any time. We will honour such requests promptly.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of prior processing.

We will respond to all verified requests within 14 business days. In complex cases we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it.

11. Security Measures

nova88mas implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security framework includes, but is not limited to:

• TLS 1.3 encryption for all data in transit between your browser and our servers.
• AES-256 encryption for sensitive data stored at rest, including financial records and identity documents.
• Multi-factor authentication (MFA) options available on all member accounts.
• Regular penetration testing and vulnerability assessments conducted by independent cybersecurity specialists.
• Role-based access controls (RBAC) ensuring that only authorised personnel can access personal data, and only to the extent required for their specific job function.
• Continuous 24/7 security monitoring with automated threat detection and incident response protocols.
• Staff training on data protection obligations and information security best practices, conducted on a regular basis.

While we employ industry-leading security standards, no system is entirely impervious to attack. In the event of a data breach that poses a risk to your rights and freedoms, we will notify you and relevant authorities in a timely manner in accordance with applicable legal requirements.

12. Children and Minors

nova88mas is strictly an adults-only platform. We do not knowingly collect or process personal data from individuals under the age of 21. Age verification is a mandatory step of our account registration and KYC process. If we become aware that a minor has registered on the Platform, we will immediately suspend the account, delete all associated personal data, and notify the relevant authorities where required.

If you believe that a minor may have gained access to this Platform, please contact us immediately at [email protected].

13. Links to Third-Party Content

The Platform may display references to third-party payment services, sports data providers, and game studios. This Privacy Policy applies solely to data processed by nova88mas. We are not responsible for the privacy practices of any third-party entities. We encourage you to review the privacy policies of any external services you interact with independently of our Platform.

14. Changes to This Privacy Policy

nova88mas reserves the right to update or modify this Privacy Policy at any time to reflect changes in our practices, applicable law, or operational requirements. When material changes are made, we will notify registered members via email or through a prominent notice on the Platform, along with the updated effective date shown at the top of this document.

Your continued use of the Platform following notification of any changes constitutes your acceptance of the revised Policy. We recommend reviewing this page periodically to stay informed of how we protect your data.

15. Governing Law and Jurisdiction

This Privacy Policy shall be governed by and construed in accordance with the laws of Malaysia, including but not limited to the Personal Data Protection Act 2010 (PDPA) and the Anti-Money Laundering, Anti-Terrorism Financing and Proceeds of Unlawful Activities Act 2001 (AMLA). Any dispute arising in connection with this Policy shall be subject to the exclusive jurisdiction of the courts of Malaysia.

16. Contact Us

For any privacy-related queries, data subject access requests, or concerns, please reach out to the nova88mas Privacy Team. We are committed to addressing your concerns transparently and promptly.