Privacy Policy nova 88 — Our Commitment to Protecting Your Personal Data

Welcome to the nova 88 Privacy Policy. This document is published to provide full transparency to all members and visitors of the website nova 88 about how their personal information is managed. Nova 88 views privacy not merely as a legal obligation — it is a core value that is embedded in the way we operate every day.

This Privacy Policy applies to all personal information collected by nova 88 through our website at nova88-khelo.com, mobile applications, betting platform, and all points of contact between members and nova 88, including communications via email, LiveChat, and WhatsApp. By using any nova 88 service, you acknowledge that you have read and understood this Privacy Policy.

Nova 88 complies with Malaysia's Personal Data Protection Act 2010 (PDPA) and all applicable related regulations. We are committed to managing your personal data in a transparent, fair, and secure manner, in line with both legal requirements and the expectations of our members.

Nova 88 only collects personal data that is strictly necessary to deliver quality services, maintain platform security, and comply with legal requirements. We do not collect data that is excessive or irrelevant to our operations. The following are the categories of data we may collect from you:

Nova 88 only processes your personal data where there is a valid legal basis to do so. Each of our data processing purposes is clearly defined, justified, and directly related to the services we provide to you as a member. The following are the primary purposes for which we process your personal data:

• Registration and account management — Processing membership applications, verifying your identity (KYC process), and managing your nova 88 account on an ongoing basis.
• Provision of betting services — Allows you to place bets on football, badminton, e-sports, live casino, baccarat, roulette, lottery, and all other games offered by nova 88.
• Processing financial transactions — Manages deposits via Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, FPX, Maybank2u, CIMB Clicks, and processes your withdrawal payouts.
• Fraud prevention and security — Monitoring suspicious activity, preventing multi-account usage, and maintaining the integrity of the nova 88 platform.
• Legal compliance — Complying with the requirements of PDPA 2010, anti-money laundering (AML) laws, and any applicable regulatory obligations.
• Service communications — Sending important account notifications, changes to terms, promotions you have opted in to receive, and updates regarding your complaints.
• Platform Improvements — Analysing usage patterns in aggregate (not at an individual level) to improve nova 88's design, performance, and user experience.

Nova 88 does not sell, rent, or trade members' personal data to any third party for their own marketing purposes. This is an absolute commitment we uphold without exception. That said, within the context of our business operations, there are limited situations where personal data may be shared with the following parties:

• Payment service providers — Digital wallet providers such as Touch 'n Go, GrabPay, and DuitNow, as well as banking institutions, for transaction processing purposes. Data shared is limited to the minimum required to complete each transaction.
• Game software providers — Casino gaming and Sports Betting platform providers that partner with nova 88 to deliver games. They are bound by strict confidentiality agreements.
• Law enforcement authorities — The Royal Malaysia Police (PDRM), Bank Negara Malaysia, or other regulatory authorities when lawfully required by law or court order.
• Technical service providers — Cloud computing companies, cybersecurity providers, and technical support services that assist us in managing and protecting the nova 88 platform.

All third parties who receive nova 88 members' personal data are bound by strict data processing agreements and must adhere to data protection standards equivalent to, or higher than, those of nova 88 itself.

Nova 88 continuously invests in cutting-edge cybersecurity infrastructure to ensure that members' personal data is protected at every stage — from the moment you log in to every transaction you make. The key security measures we employ include:

• 256-bit SSL/TLS encryption — All data transmitted between your browser or device and nova 88's servers is encrypted using the same protocol employed by Malaysia's leading banking institutions.
• Two-factor authentication (2FA) — An additional security layer via SMS OTP for all logins and high-value financial transactions.
• Role-based access control (RBAC) — Only authorised nova 88 staff with a legitimate work-related need are permitted to access members' personal data.
• Regular security audits — Penetration testing and security audits are conducted periodically by certified independent third parties.
• Real-time threat monitoring — A 24/7 SIEM (Security Information and Event Management) system that continuously monitors and responds to cybersecurity threats.
• ISO 27001-certified data centre — Member data is stored in data centres that comply with international information security management standards.

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and nova 88's own policies, you hold several important rights regarding your personal data. nova 88 is committed to respecting and facilitating the exercise of these rights:

To exercise any of the rights above, please contact the nova 88 Data Protection team by email at privacy@nova88-khelo.com or via the platform's LiveChat. We will endeavour to process your request within 30 business days.

Nova 88 uses cookies and similar tracking technologies to enhance the user experience, ensure platform security, and understand how members interact with our services. The following are the types of cookies we use:

You can manage your cookie settings through your browser preferences. However, disabling essential cookies may affect the functionality of the nova 88 platform, including your ability to log in and complete transactions.

Nova 88 retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required under Malaysian law. Our data retention policy is as follows:

• Active account data: Retained for the duration of active membership and up to 7 years after account closure — in accordance with Malaysia's tax and anti-money laundering legal requirements.
• Financial transaction records: Retained for a minimum of 7 years in accordance with the Anti-Money Laundering, Anti-Terrorism Financing and Proceeds of Unlawful Activities Act 2001.
• Communication logs (LiveChat, email): Retained for 2 years for reference and dispute resolution purposes.
• Analytics and usage data: Retained in aggregated, non-identifiable form for a maximum of 3 years.
• Cookie data: As specified in the cookie table above.

Once the retention period has elapsed, your personal data will be securely deleted or anonymised in accordance with nova 88's established data disposal procedures.

Nova 88 takes the protection of children and minors extremely seriously. Our platform not intended for anyone under the age of 21 and we do not knowingly collect any personal data from individuals below this age limit.

All registrations require age verification, and nova 88 applies a rigorous KYC process to confirm that all members meet the minimum age requirement. Should we discover that we have collected personal data from an individual under the age of 21, we will take immediate steps to delete that data and close the account in question.

Nova 88 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or improvements in the way we protect member data. When we make material amendments, we will take the following steps:

1. Updating the "Last Updated" date at the top of this page.
2. Sending notifications to all active members via their registered email address.
3. Displaying a clear notice on the nova 88 homepage for at least 14 days after the amendment takes effect.
4. For material amendments, we may seek fresh explicit consent from members before such changes take effect on their accounts.

Your continued use of the nova 88 platform after any amendment takes effect constitutes your acceptance of the revised Privacy Policy. It is the member's responsibility to review this page periodically.

Nova 88 has appointed a Data Protection Officer (DPO) responsible for ensuring PDPA compliance and handling all data privacy-related enquiries. To reach our data protection team:

This Privacy Policy is a legally binding document. Effective date: 1 January 2026. Version 3.1. Nova 88 © 2026. All rights reserved.