Privacy Policy

Introduction

nona123 ("we", "us", "our", "Platform") operates the online casino and sports betting platform accessible at https://nona123.cam. We are committed to protecting the privacy of every person who interacts with our platform, including registered Members, visitors, and individuals who contact our support team.

This Privacy Policy ("Policy") describes the categories of personal data we collect, the purposes for which we process that data, the circumstances under which it may be shared with third parties, the measures we take to keep it secure, and the rights available to you in respect of your personal data.

This Policy applies to all personal data collected through: the nona123 website; the account registration and KYC verification process; deposit and withdrawal transactions; customer support interactions; and any marketing communications you receive from us.

Definitions

For the purposes of this Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information that identifies or could reasonably be used to identify a living natural person, directly or indirectly.
• "Processing" means any operation performed on personal data, including collection, storage, use, disclosure, transfer, and deletion.
• "Data Controller" means the entity that determines the purposes and means of processing personal data. For the purposes of this Policy, nona123 acts as the Data Controller in respect of personal data collected from Members and visitors.
• "Data Processor" means any entity that processes personal data on behalf of the Data Controller under a written data processing agreement.
• "Member" means a natural person who has completed the registration process and holds an active Account on the nona123 platform.
• "KYC Data" means identity verification documents and associated information submitted by a Member in fulfilment of the Know Your Customer verification process.
• "Cookie" means a small text file placed on your device by a website for the purpose of storing session information, user preferences, or tracking data.
• "Sensitive Personal Data" means personal data that, by its nature, warrants a higher level of protection — including financial account details, identity document numbers, and data relating to health or criminal records.

Data We Collect

nona123 collects personal data through several distinct channels. The categories of data collected, and the context in which they arise, are set out below.

We do not knowingly collect sensitive personal data beyond what is strictly required for KYC compliance and fraud prevention purposes. We do not collect data relating to racial or ethnic origin, political opinions, religious beliefs, trade union membership, biometric data, health data, or sexual orientation.

How We Use Your Data

nona123 processes your personal data for the following purposes:

1. Account management. To create, maintain, and administer your nona123 Account, including processing your registration, verifying your identity, and updating your account details.
2. Service delivery. To provide you with access to casino games, sports betting markets, live dealer tables, and all other features of the nona123 platform.
3. Financial transactions. To process deposits and withdrawals in MYR using your nominated payment method (including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong Bank, credit/debit cards, and cryptocurrency), and to maintain accurate financial records.
4. Regulatory compliance and KYC. To verify your identity and age (21+ requirement), comply with anti-money laundering obligations, and fulfil any reporting requirements under applicable law or licence conditions.
5. Fraud prevention and security. To detect, investigate, and prevent fraudulent activity, unauthorised account access, multi-accounting, collusion, and other conduct that may be in breach of our Terms and Conditions.
6. Responsible gambling monitoring. To monitor gaming activity for indicators of problem gambling and, where appropriate, to proactively apply responsible gambling measures or reach out to Members who may be at risk.
7. Customer support. To respond to your enquiries, resolve disputes, and process complaints submitted via live chat or email.
8. Marketing communications. To send you promotional offers, bonus notifications, and platform updates where you have consented to receive such communications. You may withdraw this consent at any time.
9. Platform improvement. To analyse aggregated usage data, identify technical issues, and improve the functionality and user experience of the nona123 platform.

Legal Basis for Processing

Each category of processing activity undertaken by nona123 is carried out on one or more of the following legal bases:

• Contractual necessity. Processing required to perform our obligations under the Terms and Conditions you accepted upon registration — including account management, game delivery, and payment processing.
• Legal obligation. Processing required to comply with applicable laws and regulatory requirements, including KYC verification, anti-money laundering checks, age verification, and regulatory reporting.
• Legitimate interests. Processing that serves nona123's legitimate business interests, provided those interests are not overridden by your fundamental rights and freedoms — including fraud detection, platform security, and service improvement through aggregated analytics.
• Consent. Processing based on your freely given, specific, informed, and unambiguous consent — principally in respect of direct marketing communications. You may withdraw consent at any time without penalty by contacting our support team.

Data Sharing & Disclosure

nona123 does not sell your personal data to third parties. We do not share your personal data with advertisers, data brokers, or unrelated commercial entities. Your data may be shared in the following limited and controlled circumstances only:

• Payment service providers. Financial data necessary to process your deposits and withdrawals is shared with the relevant payment processors (e.g., FPX gateway operators, e-wallet providers, card acquirers, and cryptocurrency exchange platforms). These providers act as Data Processors under contractual data processing agreements.
• KYC and identity verification providers. Identity documents and related data submitted during the verification process may be shared with licensed third-party KYC verification service providers operating under appropriate data protection safeguards.
• Game software providers. Certain technical data (such as player session identifiers and stake amounts) is transmitted to our game software partners to facilitate game delivery. These providers do not receive your name, contact details, or financial account information.
• Regulatory and law enforcement authorities. We may disclose personal data to regulators, law enforcement agencies, or courts where required to do so by law, court order, or in connection with the investigation of suspected criminal activity.
• Professional advisers. Personal data may be disclosed to our legal advisers, auditors, or insurers on a need-to-know basis in connection with professional services they provide to nona123.
• Business transfers. In the event that nona123's business or assets are acquired by or merged with another entity, personal data held by us may form part of the transferred assets, subject to the acquiring entity assuming the same data protection obligations set out in this Policy.

Cookies & Tracking Technologies

nona123 uses cookies and similar tracking technologies to operate the platform, improve your user experience, and analyse platform usage. The following categories of cookies are used:

• Strictly necessary cookies. These cookies are essential for the platform to function. They manage your login session, maintain your account state, and support security features such as CSRF protection. These cookies cannot be disabled without significantly impairing your ability to use the platform.
• Functional cookies. These cookies remember your preferences — such as language settings, preferred game categories, and display options — so that you do not need to re-configure them on each visit.
• Analytics cookies. These cookies collect aggregated, anonymised information about how Members use the platform — including pages visited, time on platform, and features used. This data helps us improve the platform over time.
• Marketing cookies. Where you have consented to receive marketing communications, these cookies help us understand which promotions are relevant to you and measure the effectiveness of our campaigns.

You may manage your cookie preferences through your browser settings. Disabling certain categories of cookies may affect the functionality of the nona123 platform.

Data Retention

nona123 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law or regulatory obligations. The following general retention periods apply:

• Account and identity data: Retained for the duration of your active Account relationship with nona123, and for a minimum of five (5) years following account closure, in accordance with anti-money laundering record-keeping requirements.
• Financial transaction records: Retained for a minimum of seven (7) years following the date of each transaction, in accordance with applicable financial record-keeping requirements.
• KYC verification documents: Retained for a minimum of five (5) years following account closure or the completion of the relevant KYC process, whichever is later.
• Gaming activity data: Retained for the duration of the active account relationship and for up to five (5) years thereafter, for the purposes of dispute resolution, responsible gambling monitoring, and regulatory compliance.
• Customer support communications: Retained for up to three (3) years following the resolution of the relevant support interaction.
• Marketing data: Retained until you withdraw your marketing consent or request deletion of your data, subject to any overriding legal retention obligations.

Following the expiry of applicable retention periods, personal data is securely deleted or irreversibly anonymised.

Data Security

nona123 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS encryption applied to all data transmitted between your device and the nona123 platform.
• AES-256 encryption at rest for all sensitive personal data and financial records stored on our servers.
• Role-based access controls limiting access to personal data to authorised personnel who have a legitimate need to process it in the performance of their duties.
• Regular third-party security audits and penetration testing of our platform infrastructure.
• Multi-factor authentication required for all staff access to systems holding personal data.
• Incident response procedures in place to detect, contain, and remediate any security breach, with notification protocols where required by applicable law.

International Data Transfers

As an internationally licensed gaming platform serving players across Malaysia, nona123 may transfer personal data to service providers and infrastructure partners located outside of Malaysia. These transfers may include data processing in jurisdictions that have data protection frameworks that differ from those applicable in Malaysia.

Where personal data is transferred internationally, nona123 takes appropriate measures to ensure that the receiving entity provides an adequate level of protection for the data, including through:

• Entering into contractual data processing agreements with all third-party processors that impose data protection obligations equivalent in substance to those set out in this Policy;
• Utilising service providers that operate in jurisdictions recognised as providing an adequate level of data protection; and
• Implementing appropriate technical safeguards (including encryption) for all cross-border data transfers.

Your Rights

Subject to applicable law and any overriding legal obligations that restrict disclosure, you have the following rights in respect of your personal data held by nona123:

1. Right of access. You have the right to request a copy of the personal data we hold about you, along with information about how it is processed.
2. Right to rectification. You have the right to request correction of any inaccurate or incomplete personal data held about you.
3. Right to erasure. You have the right to request deletion of your personal data in certain circumstances, including where the data is no longer necessary for the purposes for which it was collected and no overriding legal retention obligation applies.
4. Right to restriction of processing. You have the right to request that we restrict the processing of your personal data in certain circumstances — for example, while a rectification request is being assessed.
5. Right to data portability. Where processing is based on your consent or on a contractual necessity, you have the right to receive your personal data in a structured, commonly used, and machine-readable format.
6. Right to object. You have the right to object to processing of your personal data carried out on the basis of our legitimate interests. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
7. Right to withdraw consent. Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

To exercise any of the rights set out above, please contact the nona123 support team via live chat or by sending a written request to [email protected] (email address — plain text, not a link). We will respond to all data subject requests within 30 days of receipt. Where a request is complex or numerous, this period may be extended by a further 60 days, in which case we will notify you of the extension and the reasons for it.

Minors & Age Verification

nona123 does not knowingly collect personal data from individuals under the age of 21. The platform is strictly for players aged 21 and above. Age verification is conducted as part of the KYC process for all Members, and the platform employs technical measures to help prevent access by minors.

If nona123 becomes aware that personal data has been collected from an individual under the age of 21, that data will be permanently deleted and the associated Account will be closed immediately.

If you are a parent or guardian and believe that a minor under your care has created an Account or submitted personal data to nona123, please contact our support team via live chat immediately so that we may take appropriate action.

Third-Party Services

The nona123 platform integrates with a number of third-party service providers in order to deliver its full suite of features. These providers include game software studios, payment gateway operators, KYC verification services, and hosting infrastructure providers. Each of these providers has its own privacy policy and data handling practices.

nona123 is not responsible for the privacy practices of any third-party service whose integration is beyond our direct control. However, all third-party processors engaged by nona123 are contractually required to process personal data only in accordance with our documented instructions and to maintain security standards no less rigorous than those described in this Policy.

The nona123 platform does not contain links to third-party websites unrelated to the provision of our services. Where you interact with integrated third-party payment providers (such as Touch 'n Go eWallet, Boost, or GrabPay) during a deposit or withdrawal transaction, you will be subject to that provider's terms of service and privacy policy for the duration of that interaction.

Amendments to This Policy

nona123 reserves the right to update or amend this Privacy Policy at any time in response to changes in applicable law, regulatory requirements, or our data processing practices. The most current version of this Policy will always be available at https://nona123.cam/privacy-policy.

The "Last Updated" date at the top of this page will be revised upon each amendment. Where an amendment materially affects the way in which we process your personal data, we will endeavour to notify you in advance via email or a platform notification. Your continued use of the nona123 platform following the effective date of any amendment constitutes your acknowledgement of the updated Policy.

We encourage you to review this Policy periodically to remain informed about how nona123 handles your personal data.

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way nona123 handles your personal data, please contact us through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week directly within the nona123 platform. Live chat is the recommended channel for time-sensitive privacy enquiries.
• Email (plain text — not a link): [email protected]

Please include your registered Account username and a clear description of your enquiry or request in any communication you send to us. We aim to acknowledge all privacy-related communications within 48 hours and to provide a substantive response within 30 days.

For information about the Terms and Conditions governing your use of the nona123 platform, please refer to our Terms & Conditions page. For responsible gambling support, tools, and self-exclusion, please visit our Responsible Gambling page.