Nova88mas Privacy Policy – Our Commitment to Your Data Security

Introduction and Scope of the Privacy Policy

Nova88mas ("we", "Platform", or "nova88mas") values the privacy of every user who registers and uses our services. This Privacy Policy explains in detail how we handle your personal data from the moment you first visit our website through to becoming an active member of the nova88mas platform.

This document applies to all users accessing the nova88mas platform via the official website, Android and iOS mobile apps, and any other official digital channels operating under the nova88mas brand. This policy forms part of the platform's Terms and Conditions and should be read together with them.

We practise privacy by design — meaning data protection is not merely a legal obligation, but has been embedded into every aspect of our platform's development and operations from the planning stage onwards.

Types of Personal Data We Collect

Nova88mas only collects data that is strictly necessary to provide safe, efficient, and legally compliant services. We do not collect excessive data beyond our operational requirements. The following are the categories of data we collect:

We may also receive your personal data from trusted third-party sources such as identity verification service providers, licensed payment providers, and legitimate public information sources, solely for verification and anti-money laundering (AML) compliance purposes.

How We Use Your Personal Data

Every piece of data we collect is used for a clear and legitimate purpose. Nova88mas does not use your personal data for unrelated purposes without obtaining your consent beforehand. The following are the primary purposes for which your data is used:

• Account Management: Creates, verifies, and maintains your member account, including processing registration and the KYC verification required by law.
• Transaction Processing: Processes deposits, withdrawals, and all financial transactions securely and accurately through integrated payment channels.
• Platform Security: Detects and prevents fraud, unauthorised access, money laundering, and other suspicious activities that could compromise platform integrity.
• Service Communication: Sends important notifications relating to your account, security updates, transaction confirmations, and customer support responses.
• Legal Compliance: Fulfils our legal obligations under the Personal Data Protection Act 2010, anti-money laundering requirements, and directives from relevant authorities.
• Service Improvement: Analyses usage patterns in aggregate and anonymised form to improve platform performance, user interface, and the overall experience.
• Customer Support: Enables effective technical assistance and customer service when you contact the nova88mas support team.

With your consent, we may also use your data to send information about promotions, bonuses, and special offers relevant to your interests. You may withdraw this consent at any time through your account settings with no negative impact on the core services you use.

Data Sharing with Third Parties

Nova88mas does not sell, rent, or disclose your personal data to third parties for commercial gain. However, there are limited situations where we need to share your data with trusted third parties, and this is always done strictly on a need-to-know basis:

• Payment Service Provider: Banks, digital wallets (Touch 'n Go eWallet, Boost, GrabPay), and licensed payment processors that help us securely process your financial transactions.
• Identity Verification Provider: Third-party identity verification services that assist us in completing the KYC process in accordance with current legal requirements.
• Game Providers: Gaming technology companies that provide game content on our platform may receive the minimum technical data necessary to ensure games function correctly.
• Cloud Infrastructure: Server and data storage service providers that handle the technical operations of the nova88mas platform under strict confidentiality agreements.
• Authority: Government agencies, law enforcement bodies, or courts when lawfully required under applicable Malaysian law.

Data Security Measures

Protecting your personal data is nova88mas's number one priority. We continuously invest in world-class security infrastructure to keep your information safe from both internal and external threats.

• End-to-End Encryption: All data in transit is protected with TLS 1.3 encryption, while stored data uses military-grade AES-256 encryption.
• Multi-Layered Firewall: Our infrastructure is protected by next-generation firewalls (NGFW) with intrusion detection and prevention systems (IDS/IPS) operating 24/7.
• Continuous Monitoring: Our cybersecurity team monitors all system activity in real time to detect any anomalies or unauthorised access attempts.
• Independent Security Audit: Nova88mas undergoes annual security audits by accredited independent firms to ensure our systems meet the latest industry standards.
• Secure Password Management: Member passwords are stored in an irreversible hashed format, meaning even nova88mas staff cannot read your password.
• Two-Factor Authentication: A 2FA system is available for all member accounts to add an extra layer of protection during login.

While we take all reasonable steps to protect your data, no online system can be guaranteed 100% secure. We therefore encourage you to take personal precautions as well, such as using a strong password and not sharing your login credentials with anyone.

Cookies, Tracking, and Similar Technologies

Nova88mas uses cookies and similar tracking technologies to enhance user experience, analyse platform performance, and secure your session. We use several types of cookies:

• Essential Cookies: Required for core platform functions such as login authentication, session management, and security. These cookies cannot be disabled without affecting platform functionality.
• Preference Cookies: Saves your preferences such as language, time zone, and display settings so you do not need to reconfigure them on every visit.
• Analytics Cookies: Helps us understand how users interact with the platform so we can improve its design and performance. This data is collected in aggregate and anonymised form.
• Security Cookies: Used to detect suspicious activity, prevent CSRF attacks, and protect your account from unauthorised access.

Nova88mas does not use third-party cookies for external advertising purposes outside our platform. All tracking technologies we use serve the direct interests of nova88mas platform users exclusively.

Your Rights as a Data Owner

Under Malaysia's Personal Data Protection Act 2010 and nova88mas's internal policies, you have the following rights regarding your personal data:

To exercise any of the above rights, contact our data protection team via live chat or the official nova88mas email. We will process your request within 30 business days. We may need to verify your identity before processing certain requests to ensure the security of your data.

Data Retention Period

Nova88mas retains your personal data only for as long as necessary to fulfil the purposes stated in this Privacy Policy or as required by applicable Malaysia law.

• Active Account Data: Retained for as long as your account is active and for an additional period following account closure as required by AML laws and audit requirements.
• Financial Transaction Records: Retained for a minimum of seven years from the transaction date in accordance with Malaysian accounting and financial legal requirements.
• Security Logs: Retained for 12 months for security incident investigation and fraud detection purposes.
• Support Communication Data: Retained for two years after a support ticket is closed for quality control and reference purposes.
• Cookie Data: Expiry varies by cookie type — session cookies expire when you close your browser, while persistent cookies have a set expiry date.

When data is no longer needed, nova88mas will securely delete it or anonymise it so that it can no longer be associated with you as an individual.

Child Protection

The nova88mas platform is strictly for individuals aged 21 and above. We do not intentionally collect, store, or process personal data from children or individuals below the specified age.

If we discover that personal data of a minor has been collected inadvertently, we will take immediate action to delete that data and close the account in question. If you believe someone under the age of 21 has registered on our platform, please contact our support team immediately so that appropriate action can be taken.

Privacy Policy Amendment

Nova88mas reserves the right to amend this Privacy Policy at any time to reflect changes in our data practices, updated legal requirements, or service improvements. We are committed to informing you of any material changes through:

• In-app and on-site nova88mas notifications at least 14 days before any amendment takes effect.
• An email will be sent to the address registered in your account for significant changes.
• A clearly displayed "Last Updated" date at the top of this page.

Continued use of the nova88mas platform after an amendment's effective date constitutes your acceptance of the revised policy. If you do not agree with the changes, you may close your account before the effective date at no charge.

How to Contact Us About Privacy

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, the nova88mas Data Protection Officer (DPO) team is ready to assist you.

• Live Chat: The fastest channel — available 24 hours a day, 7 days a week, directly through the nova88mas platform.
• Official Email: Submit your written enquiry to our data protection team at [email protected] and we will respond within two business days.

For complaints that cannot be resolved internally, you have the right to file a complaint with the Malaysian Communications and Multimedia Commission (MCMC) or the relevant Personal Data Protection Department through the official channels of those bodies.