What data rights do I have at Nova88?

5 core rights under PDPA 2010 and Nova88 policy: (1) Right to access — request a copy of all data we hold. (2) Right to rectification — correct inaccurate data. (3) Right to deletion — request data removal (subject to regulatory retention rules). (4) Right to data portability — export in machine-readable format. (5) Right to object — opt out of marketing. All requests handled free within 30 days.

How do I request a copy of my data?

3 steps: (1) Login to Account → Privacy → Data Request. (2) Select "Data Access" — specify what you want (transactions, bets, KYC documents, communication logs). (3) Confirm identity via SMS OTP. Encrypted export delivered to your registered email within 30 days. Standard format is JSON + PDF summary.

Can I request deletion of my data?

Yes, with regulatory caveats. Account-related data deletable after account closure. However, AML/KYC records must be retained 5+ years under Malaysian financial regulations — we cannot delete those even if requested. Transaction records similarly retained for tax/audit purposes. Personal preferences, marketing data, non-essential information: fully deletable.

What about data already shared with third parties?

We share data only with: (1) Payment processors (banks, e-wallets) — they keep their own records under their own retention policies. (2) Game providers — minimal data (username for accounting). (3) Regulators — audit access only. (4) AML compliance services. For third-party deletion, you must contact them directly. We provide the list on request.

Your Data Rights at <a href="/">Nova88</a> | Access, Delete, Export

🔒 PDPA & Data Rights · For Malaysian Players

Your Data Rights at Nova88 — Access, Delete, Export

Under Malaysia's Personal Data Protection Act (PDPA) 2010 and Nova88's privacy framework, you have specific rights over the data we hold /about-us/ you. This guide explains those rights, how to exercise each one, and what to expect. For the technical detail of how your data is processed and stored, see our complete data usage policy. To submit a rights request, /login/ at the official Nova88 secure member access portal.

● PDPA Compliant● 30-Day Response● Free Requests● Encrypted Export

🎰 Join Nova88 Now → Member Sign In

📋 Your 5 Data Rights Explained

1Right to Access: Request a copy of all personal data we hold about you. Includes registration info, transaction history, bet logs, KYC documents, communications. Free, delivered within 30 days.
2Right to Rectification: Correct inaccurate data. Name spelling errors, outdated address, wrong phone number. Update via Account Settings or formal request.
3Right to Deletion ("Right to be Forgotten"): Request data removal, subject to regulatory retention. Marketing preferences, optional profile fields: fully deletable. AML/KYC records: must be retained 5 years minimum by law.
4Right to Data Portability: Export your data in machine-readable JSON format. Useful if migrating elsewhere or analysing your own play patterns. Provided encrypted via email.
5Right to Object: Opt out of marketing emails, SMS Promotions, behavioural advertising. Doesn't affect transactional emails (KYC, security alerts). Toggle in Account → Communications.

📥 How to Submit a Data Rights Request

Request Type	How to Submit	Identity Verification	Response Time
📂 Data Access	Account → Privacy → Data Request	SMS OTP	≤ 30 days
✏ Data Correction	Account Settings (most fields) or live chat	Login	≤ 7 days
🗑 Data Deletion	Account → Close Account flow	Email + SMS + KYC	≤ 30 days
📤 Data Portability	Privacy → Data Export	SMS OTP	≤ 30 days
🛑 Object to Marketing	Account → Communications toggle	Login	Immediate
⚖ Formal Complaint	[email protected]	Identity verification	≤ 30 days

⚖ What Cannot Be Deleted (Regulatory Holds)

Some data is legally protected from deletion under Malaysian financial regulations. Even with a valid deletion request, we cannot remove:

AML/KYC verification documents: Retained 5 years minimum under Anti-Money Laundering Act 2001.
Transaction history: Retained 7 years under tax and audit requirements.
Bet history and outcomes: Retained for dispute resolution and integrity audits.
Communication logs: Retained 2 years for dispute and complaint trails.
Self-exclusion records: Retained permanently to honour exclusion requests — see our self-exclusion guide.

After mandatory retention periods expire, data is automatically purged. Until then it's held in secure encrypted archive, accessible only to compliance officers under regulatory request.

Data Rights FAQ

What data rights do I have?

5 rights under PDPA: access, rectification, deletion, portability, objection. All free, all responded to within 30 days.

How to request data copy?

Account → Privacy → Data Request → Data Access. SMS OTP verify. Encrypted JSON + PDF delivered via email within 30 days.

Can I delete my data?

Yes for non-essential data. AML/KYC and financial records retained 5-7 years by law and cannot be deleted before that.

What about third-party data?

/payment/ processors and game providers keep their own records. /contact-us/ them directly for third-party deletion. See privacy policy.

Is exercising my rights free?

Yes — all data rights requests are free. No fees, no penalties. PDPA legal requirement.

How is my data protected?

AES-256 encryption at rest, TLS 1.3 in transit, RBAC access controls. See full security stack.

Explore More Nova88 Malaysia

🃏 Live Casino

🎮 More Games

💳 Account

ℹ Help

Ready to Get Started?

Start at the official Nova88 Malaysia portal today. New players: Welcome Bonus up to RM 2,880.

🎰 Join Nova88 — Claim Bonus Existing Member Login →

Participation in gambling can be addictive. Please play responsibly. 18+ only. Verified licence: Curacao eGaming.