Nobu99 Privacy Policy – Malaysia Personal Data Protection

1 Personal Information We Collect

Nobu99 collects your personal data solely for the purpose of providing services that are safe, efficient and compliant with applicable legal requirements in Malaysia. The type of information we collect depends on how you interact with our platform.

Information you provide directly:

• Full name as stated on your identity card or passport.
• Identity card number (MyKad) or passport number.
• Date of birth and gender.
• Full current residential address.
• Active phone number (for SMS verification and account communications).
• A valid and active email address used.
• Bank account or e-wallet information for processing deposits and withdrawals.
• Supporting KYC documents such as a selfie with your identity card when required.

Information collected automatically:

• IP address and geographic location derived from IP.
• Device type, operating system and web browser used.
• Activity log data including pages visited, access times and actions taken.
• Cookie data and session identifiers to ensure continuity of the user experience.
• Records of all financial transactions including deposits, wagering and withdrawals.

2 How We Use Your Personal Data

Every piece of data collected by nobu99 is used for stated, lawful purposes only. We do not use your data for any other purpose without obtaining your consent first.

For marketing and promotional communications, we will only send you notifications if you have given consent during registration or through your account settings. You may withdraw this consent at any time via your account settings page.

3 Sharing Information with Third Parties

Nobu99 does not sell, rent or disclose your personal data to third parties for their own marketing purposes. However, in the course of operating our platform, there are certain situations where your data may need to be shared with trusted parties:

• Payment service providers: Banking institutions, FPX, Touch 'n Go eWallet, GrabPay, Boost and payment gateway providers that process your financial transactions. This sharing is limited to the information required to process the transaction only.
• Technology service providers: Companies that provide the technical infrastructure, server hosting and cloud services we use to operate the platform. They are bound by strict confidentiality agreements.
• Identity verification service providers: Third parties who assist us in carrying out KYC processes and identity document verification in accordance with legal requirements.
• Regulatory authorities: Government agencies and regulatory bodies with legal authority to obtain such information, including in financial crime investigations.
• Professional advisors: Lawyers, accountants, and auditors who assist us with legal and compliance matters, subject to their professional confidentiality obligations.

All third parties we work with are required to comply with strict privacy policies and are not permitted to use your data for any purpose other than those specified in our mutual service agreements.

4 Data Security & Protection Measures

Your personal data security is nobu99's top priority. We implement multiple layers of technical and organizational protection designed to prevent unauthorized access, loss, destruction, or disclosure of your data.

Technical security measures we implement:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers.
• Encryption at rest for all sensitive data stored in our databases.
• Two-factor authentication (2FA) is available for all member accounts for added protection during login.
• Intrusion detection systems (IDS/IPS) that monitor network traffic in real time.
• Role-based access control (RBAC) ensuring nobu99 staff can only access the data required for their specific responsibilities.
• Regular security audits conducted by independent, certified third parties.
• Regular security patching for all systems and software.

While we take all reasonable precautions, no security system is entirely foolproof. If you suspect your account has been compromised, please contact the nobu99 support team immediately via 24/7 live chat.

5 Personal Data Retention Period

Nobu99 only retains your personal data for as long as it is needed to fulfil the original purpose of collection or as required by applicable Malaysian law. Once the retention period expires, your data will be securely deleted or anonymised.

• Active account data: Retained for the entire duration your account is active on the nobu99 platform.
• Financial transaction records: Retained for a minimum of 7 years from the transaction date in accordance with the Anti-Money Laundering, Anti-Terrorism Financing and Proceeds of Unlawful Activities Act 2001 (AMLA).
• KYC documents: Retained for a minimum of 6 years after the business relationship ends in accordance with regulatory requirements.
• Activity and security logs: Retained for 2 years for fraud detection and security investigation purposes.
• Marketing communications data: Retained until you withdraw consent or request deletion.
• Closed accounts: Core data is retained for 7 years after account closure for legal compliance purposes.

Once the defined retention period has expired, your data will be securely deleted using methods that guarantee the information cannot be recovered by any party.

6 Cookies, Tracking Technology & Analytics

Nobu99 uses cookies and similar tracking technologies to enhance your user experience, maintain session security and analyse platform usage patterns for continuous improvement.

Types of cookies we use:

• Essential Cookies: Required for core platform functionality including login authentication, session management and security. These cookies cannot be disabled as they are critical to platform operations.
• Preference Cookies: Saving your preferences such as language, time zone, and display settings to deliver a more personalized experience.
• Analytics Cookies: Collecting information about how you use our platform in aggregated, anonymized form to help us understand usage patterns and improve our services.
• Security Cookies: Helping detect and prevent fraudulent activity, suspicious login attempts, and other security threats.

You can manage cookie settings through your web browser settings. However, disabling certain cookies may affect the functionality of the nobu99 platform and your overall user experience. Analytics cookies can be disabled without affecting core platform functionality.

7 Your Rights Regarding Personal Data

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and nobu99's privacy policy, you have the following rights regarding your personal data that we hold:

• Right of Access: You have the right to request a copy of the personal data we hold about you. We will process your request within 21 working days.
• Right to Rectification: If your personal data is inaccurate or out of date, you have the right to request that we correct it. We encourage you to update your information directly through your account settings.
• Right to Erasure: In certain circumstances, you have the right to request that we delete your personal data. This right is subject to applicable legal retention obligations.
• Right to Restrict Processing: You may request that we restrict how we process your personal data in certain situations, for example while you are disputing the accuracy of that data.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes at any time without providing any justification.
• Right to Withdraw Consent: You may withdraw consent you have previously given for the processing of your personal data at any time through your account settings.

To exercise any of the above rights, please contact the nobu99 privacy team via 24/7 live chat or our support email. We will verify your identity before processing any request related to your personal data.

8 Children's Privacy & Protection of Minors

Nobu99 is an online entertainment platform strictly restricted to individuals aged 18 and above. We do not intentionally collect, store or process any personal data from children or minors.

All prospective members are required to verify their age during the registration process. Our KYC process includes identity document checks to ensure that no individual under 18 years of age can register and use our platform.

If we discover or become aware that we have inadvertently collected personal data from a minor, we will:

• Suspending the account immediately without prior notice.
• Deleting all personal data associated with the account.
• Returning any legitimate fund balances to the original payment source owner.
• Reporting the case to the relevant authorities where required.

If you are aware of or suspect that an underage individual is using the nobu99 platform, please contact our support team immediately so that appropriate action can be taken.

9 Amendments to This Privacy Policy

Nobu99 reserves the right to review and update this Privacy Policy at any time to reflect changes in our privacy practices, new legal requirements, technological developments or changes to the services we offer.

Any material amendments to this Privacy Policy will be communicated to you via:

• A clear notice on the nobu99 platform homepage at least 14 days before any changes take effect.
• Email sent to the email address registered to your account.
• In-app or platform notifications when you are logged in.

For minor, non-material amendments such as grammatical corrections or language clarifications, we will update this document without specific prior notice. The "Updated" date at the top of this document always reflects the date of the latest version.

Your continued use of the nobu99 platform after the effective date of any Privacy Policy amendments will be considered your acceptance of the latest version. If you do not agree with the amendments, you have the right to close your account by contacting our support team.

10 Contact Us About Privacy

If you have any questions, concerns or complaints regarding this Privacy Policy or how we handle your personal data, please contact the nobu99 privacy team through the following channels:

If you are not satisfied with our response, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP) or the relevant regulatory authority, following the procedures set by that authority.