Novibet Privacy Policy

Novibet ("we", "us", "our", "the Platform") operates the online betting and casino platform accessible at novibet.casa. This Privacy Policy ("Policy") describes how we collect, use, store, disclose, and protect personal data relating to individuals ("you", "User", "Player") who register accounts, visit our website, or otherwise interact with our services.

Novibet is committed to handling personal data responsibly, with transparency, and in accordance with applicable data protection and privacy laws. Our services are designed for the Malaysian market and are used by players across Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and other locations throughout Malaysia.

By creating an account on novibet.casa, making a deposit, or otherwise using our services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein. If you do not agree with this Policy, you should not use the Novibet Platform.

For the purposes of this Privacy Policy, the following terms have the meanings set out below:

Novibet collects the following categories of Personal Data in the course of operating the Platform and delivering our services:

3.1 Registration and Identity Data. When you create an account, we collect your full legal name, date of birth, residential address in Malaysia, email address, and a chosen username and password. This information is necessary to create and manage your account.

3.2 Identity Verification (KYC) Data. To comply with our obligations and to protect against fraud and money laundering, we collect copies of identity documents such as your Malaysian identity card (MyKad), Driver's Licence, or Passport, as well as proof of address documents such as utility bills or bank statements issued within the preceding three months.

3.3 Financial and Transaction Data. We collect information relating to your deposits and withdrawals, including payment method details (e.g., Touch 'n Go eWallet account references, DuitNow identifiers, FPX bank references, or cryptocurrency wallet addresses), transaction amounts in MYR, transaction dates and times, and transaction history.

3.4 Usage and Behavioural Data. We collect information about how you use the Platform, including pages visited, games played, betting history, session durations, click patterns, and feature interactions. This data helps us improve the Platform and personalise your experience.

3.5 Technical Data. We automatically collect certain technical data when you access the Platform, including your IP address, device type and model, operating system, browser type and version, and referring URLs.

3.6 Communications Data. When you contact our customer support team via live chat, email, or any other channel, we retain records of those communications, including the content of messages and any attachments provided.

3.7 Responsible Gambling Data. Where you set deposit limits, loss limits, session time alerts, or request self-exclusion, we record those preferences and instructions as part of our responsible gambling obligations.

Novibet collects Personal Data through the following means:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact support, or update your account settings.
• Automatically — through cookies, server logs, and similar technologies when you access and interact with the Platform.
• From third-party verification partners — identity verification services, fraud prevention databases, and payment processors may provide us with data about you to assist with account verification and transaction processing.
• From payment service providers — when you make deposits via Maybank, CIMB, Public Bank, Hong Leong, or e-wallet providers including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, or FPX, transaction confirmation data is received from those providers.

Novibet processes your Personal Data for the following purposes:

Novibet processes Personal Data on the following legal bases:

• Contractual necessity — Processing is necessary to perform the contract we have with you as an Account holder, including account management, transaction processing, and dispute resolution.
• Legal obligation — Processing is required to comply with applicable laws, including anti-money laundering (AML) regulations, age verification requirements, and data retention obligations.
• Legitimate interests — Processing is necessary for our legitimate business interests, including fraud prevention, platform security, and service improvement, provided these interests are not overridden by your rights.
• Consent — Where we rely on consent as a legal basis (for example, for direct marketing communications), you may withdraw your consent at any time by contacting our support team or updating your account preferences.

Novibet does not sell, rent, or trade your Personal Data to third parties for their own commercial purposes. We may share your Personal Data with the following categories of recipients only where necessary and under strict data protection obligations:

• Payment processors and financial institutions — including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong, Visa, and Mastercard, for the purpose of processing your financial transactions.
• Identity verification and KYC service providers — third-party providers who assist us in verifying player identities and ages as required by our policies.
• Fraud prevention and anti-money laundering services — providers that assist us in identifying and preventing fraudulent activity and financial crime.
• Technology and infrastructure providers — hosting, cloud storage, and software service providers who process data on our behalf under data processing agreements.
• Regulatory and law enforcement authorities — where we are required by law or by a binding order of a competent authority to disclose Personal Data.
• Professional advisers — including legal counsel and auditors, where necessary for the exercise or defence of legal claims or regulatory compliance.

All third-party Data Processors engaged by Novibet are required to handle Personal Data securely, use it only for the specified purpose, and comply with applicable data protection requirements. We do not permit third-party processors to use your data for their own independent purposes.

The Novibet Platform uses cookies and similar tracking technologies to deliver, maintain, and improve our services. Cookies are small text files stored on your device when you visit the Platform.

8.1 Essential Cookies. These are strictly necessary for the Platform to function. They enable core features such as account login sessions, security controls, and navigation. Essential cookies cannot be disabled without significantly impairing Platform functionality.

8.2 Analytics Cookies. We use analytics tools to collect aggregated information about how users interact with the Platform — which pages are visited most frequently, session lengths, and navigation patterns. This data helps us improve the Platform experience. Analytics data is not used to identify individual users for marketing purposes.

8.3 Functional Cookies. Functional cookies remember your preferences — such as preferred language settings or display options — to provide a more personalised experience on return visits.

8.4 Managing Cookies. You may manage or disable cookies through your browser settings. Note that disabling certain cookies may affect the functionality of the Platform. For guidance on managing cookies in your browser, please refer to your browser's official help documentation.

Novibet retains Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law or regulatory obligation. Our general retention practices are as follows:

• Active account data — retained for the duration of your account relationship with Novibet and for a minimum period thereafter as required by applicable regulations.
• Transaction records — financial and transaction data is retained for the period required under applicable financial record-keeping obligations, typically a minimum of five (5) years from the date of the transaction.
• KYC and identity verification records — retained for the period required by applicable anti-money laundering and identity verification regulations.
• Customer communications — support interaction records are retained for a reasonable period to assist with dispute resolution and service improvement.
• Marketing consent records — retained until you withdraw consent, plus a reasonable period for record-keeping purposes.

Upon expiry of the applicable retention period, Personal Data will be securely deleted or anonymised in accordance with our data disposal procedures.

Novibet implements appropriate technical and organisational security measures to protect your Personal Data against unauthorised access, disclosure, alteration, loss, or destruction. Our security controls include:

• 256-bit Transport Layer Security (TLS/SSL) encryption for all data transmitted between your device and our servers.
• Encrypted storage of sensitive data including passwords and financial information.
• Role-based access controls ensuring that only authorised Novibet personnel can access Personal Data, and only to the extent necessary for their role.
• Regular security assessments, penetration testing, and vulnerability management processes.
• Incident response procedures to detect, contain, and report data security incidents in a timely manner.

While we take all reasonable precautions, no method of electronic transmission or storage is completely secure. We cannot guarantee absolute security but commit to notifying affected users and relevant authorities promptly in the event of a confirmed data breach that poses a risk to your rights and interests.

Subject to applicable law, you have the following rights in relation to your Personal Data held by Novibet. To exercise any of these rights, please contact our support team using the details in Section 15.

Novibet will respond to all valid data rights requests within thirty (30) days. We may need to verify your identity before fulfilling a request. In certain cases, we may be unable to fully comply with a request where doing so would conflict with our legal obligations.

The Novibet Platform is strictly for persons aged 21 years and above. We do not knowingly collect Personal Data from individuals under the age of 21. Age verification is a mandatory step in our KYC process for all new account holders.

If we become aware that Personal Data has been inadvertently collected from a person under 21, we will promptly delete that data, close the associated account, and return any deposited funds to the payment source. If you believe a minor has registered on our Platform, please contact us immediately using the details in Section 15.

In the course of operating our Platform and engaging third-party service providers, your Personal Data may be transferred to, stored in, or processed in countries outside of Malaysia. Where such transfers occur, Novibet takes appropriate measures to ensure that your Personal Data continues to receive an adequate level of protection consistent with this Privacy Policy.

These measures may include entering into standard contractual clauses with receiving parties, ensuring that recipients operate under data protection regimes recognised as adequate, or relying on other lawful transfer mechanisms as applicable.

Novibet reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, operational requirements, or applicable law. When material changes are made, we will update the effective date at the top of this Policy and may notify registered Account holders via email or through a notice on the Platform.

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of the Platform following the posting of changes constitutes your acceptance of those changes.

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your Personal Data, please contact our dedicated support team using the details below. We are committed to addressing all data protection enquiries promptly and transparently.