Privacy Policy

This Privacy Policy ("Policy") describes how nobu99 ("we", "us", "our") collects, uses, processes, stores, and protects personal data obtained from players and visitors who access or use the nobu99 platform at https://nobu99.lat and any associated services, mobile interfaces, or sub-domains (collectively, the "Platform").

nobu99 operates as an online entertainment platform providing casino gaming and sports betting services to eligible adult players, with a primary focus on the Malaysian market. We serve players across Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and other locations throughout Malaysia.

By accessing the Platform, creating an account, or submitting any personal information to nobu99, you acknowledge that you have read, understood, and consented to the data practices described in this Policy. This Policy is incorporated into and must be read alongside our Terms & Conditions.

For the purposes of this Privacy Policy, the following terms carry the meanings defined below:

• "Personal Data" — any information that identifies or can reasonably be used to identify a living individual, including name, email address, phone number, payment details, IP address, and device identifiers.
• "Processing" — any operation performed on personal data, including collection, storage, use, disclosure, erasure, or any combination thereof.
• "Data Controller" — nobu99, as the entity that determines the purposes and means by which personal data is processed.
• "Data Subject" — the individual whose personal data is being processed (i.e., you, the player or visitor).
• "KYC" — Know Your Customer. The identity and address verification process required for withdrawal eligibility and regulatory compliance.
• "Cookie" — a small text file stored on your device by the Platform to enable functionality, remember preferences, and collect analytical data.
• "Third-Party Service Provider" — any external entity engaged by nobu99 to provide services that involve processing player data on our behalf, including payment processors, KYC verification services, and analytics providers.

nobu99 collects personal data across several categories, each serving a specific operational or regulatory purpose. The categories of data we collect are set out in the table below:

We do not collect sensitive personal data such as racial or ethnic origin, religious beliefs, health data, or biometric data beyond what is strictly required for identity verification purposes as part of the KYC process.

4.1 Information You Provide Directly

The majority of personal data nobu99 holds is provided directly by you during registration, KYC submission, customer support interactions, or through the submission of forms or feedback on the Platform.

4.2 Automated Collection

When you access the nobu99 Platform, our servers automatically record technical data including your IP address, device identifiers, browser information, and session timestamps. This data is collected for security monitoring, fraud detection, and platform performance optimisation purposes.

4.3 Cookies and Similar Technologies

nobu99 uses cookies, web beacons, and similar technologies to enhance your experience, maintain session state, remember your preferences, and analyse Platform usage patterns. For full details of our cookie usage, please refer to Section 8 of this Policy.

4.4 Third-Party Sources

In certain circumstances, nobu99 may receive personal data about you from third-party sources, including:

• Identity verification service providers used to authenticate KYC submissions.
• Payment processors and financial institutions who confirm transaction status and account ownership.
• Fraud prevention databases to check for known fraudulent identities or payment instruments.
• Publicly available government databases where required for regulatory compliance.

nobu99 processes your personal data on the following legal grounds, depending on the specific purpose of the processing:

• Contractual Necessity — Processing that is necessary to perform our obligations under the Terms & Conditions, including account management, deposit and withdrawal processing, and the provision of gaming services.
• Legal Obligation — Processing required to comply with applicable laws and regulations, including anti-money laundering (AML) obligations, KYC requirements, and fraud prevention obligations imposed by gaming regulators and financial authorities.
• Legitimate Interests — Processing necessary for nobu99's legitimate operational interests, including security monitoring, fraud detection, platform performance analysis, and responsible gambling compliance — provided these interests are not overridden by your data protection rights.
• Consent — Where nobu99 relies on your consent for specific processing activities — such as optional marketing communications — you may withdraw that consent at any time by contacting our support team.

nobu99 uses the personal data we hold for the following purposes:

• Account Creation and Management — to register, authenticate, and maintain your player account.
• Payment Processing — to facilitate deposits via Touch 'n Go eWallet, Boost, GrabPay, DuitNow FPX, Maybank, CIMB, Public Bank, Hong Leong Bank, USDT TRC20, BTC, and other supported methods; and to process withdrawal requests to verified accounts.
• Identity Verification (KYC) — to verify your identity and address in compliance with anti-money laundering and gaming regulatory requirements.
• Fraud Prevention and Security — to detect, investigate, and prevent fraudulent transactions, unauthorised account access, bonus abuse, and other prohibited conduct.
• Regulatory Compliance — to maintain records required by applicable gaming, financial, and anti-money laundering regulations.
• Customer Support — to respond to your queries, complaints, and support requests via live chat and email.
• Responsible Gambling — to enforce deposit limits, session time settings, self-exclusion requests, and other responsible gambling tools as configured by you.
• Platform Improvement — to analyse usage patterns and technical performance data to improve Platform stability, features, and user experience.
• Communications — to send you account-related notifications, security alerts, and — where you have provided consent — promotional communications about bonuses and new features.

nobu99 does not sell, lease, or trade your personal data to any third party. We may share your data only in the following limited circumstances:

7.1 Authorised Service Providers

nobu99 engages trusted third-party service providers to perform specific functions on our behalf, including payment processing, KYC identity verification, fraud detection, and infrastructure hosting. These providers are contractually bound to process your data only as instructed by nobu99 and in accordance with applicable data protection standards. They are not permitted to use your data for their own purposes.

7.2 Regulatory and Legal Obligations

nobu99 may disclose personal data to relevant authorities — including law enforcement agencies, gaming regulators, financial intelligence units, or courts — where we are legally compelled to do so or where disclosure is necessary to prevent fraud, money laundering, or other criminal activity.

7.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of assets involving nobu99, player data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and any changes to data controller identity in advance where reasonably practicable.

7.4 With Your Explicit Consent

nobu99 may share your data with third parties where you have provided explicit, informed consent for a specific purpose beyond those described in this Policy.

8.1 Types of Cookies Used

nobu99 uses the following categories of cookies on the Platform:

• Essential Cookies — required for the Platform to function correctly. These include session authentication cookies that keep you logged in and maintain your account state. These cookies cannot be disabled without affecting Platform functionality.
• Functional Cookies — used to remember your preferences, such as language settings, responsible gambling limits, and game display options. These enhance your experience but are not strictly required.
• Analytical Cookies — used to collect anonymised data about how the Platform is used, including pages visited, session duration, and navigation paths. This data helps us improve Platform performance and usability.
• Security Cookies — used to detect and prevent fraudulent access attempts, bot activity, and other security threats. These are essential to Platform security.

8.2 Managing Cookies

You may control non-essential cookies through your browser settings. Most modern browsers allow you to block or delete cookies. Please note that disabling certain cookies may affect Platform functionality, including the ability to maintain a logged-in session. Instructions for managing cookies are available in the help documentation of your browser.

nobu99 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply as general guide:

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised so that it can no longer be used to identify you.

nobu99 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, and disclosure. These measures include:

• 256-bit SSL/TLS encryption on all data transmitted between your device and our servers.
• Encryption at rest for sensitive data fields including KYC documents, payment details, and authentication credentials.
• Multi-factor authentication available to players to secure account access.
• Restricted access controls ensuring that only authorised personnel with a legitimate operational need can access sensitive data.
• Regular penetration testing and security audits conducted by independent third-party specialists.
• 24/7 security monitoring with automated alerts for anomalous activity patterns.
• Secure data deletion procedures to ensure that expired data is irecoverably removed from our systems.

While nobu99 employs all reasonable security measures, no online platform can guarantee absolute security. You are also responsible for securing your account credentials and should use a strong, unique password and not share your login details with any third party.

As a data subject, you have a number of rights with respect to the personal data nobu99 holds about you. These rights are described below. To exercise any of these rights, contact us at [email protected] with your request. We will respond within 30 days of receiving a valid request.

The nobu99 Platform is strictly intended for adults aged21 years and above. nobu99 does not knowingly collect or process personal data from any person under the age of 21.

Where nobu99 discovers or has reasonable grounds to believe that an account has been registered by a person under the age of 21, the account will be immediately closed, all transactions voided, and any personal data collected from the minor will be securely deleted from our systems.

If you have reason to believe that a minor has registered on the nobu99 Platform, please notify us immediately at [email protected] so that we may take appropriate action without delay.

The nobu99 Platform may contain references to or integrations with third-party services, including payment gateways such as Touch 'n Go eWallet, Boost, GrabPay, DuitNow, Maybank, CIMB, Public Bank, and Hong Leong Bank for the purposes of processing deposits and withdrawals.

When you interact with a third-party payment interface, you are subject to that provider's own privacy policy and terms of use. nobu99 has no control over and accepts no responsibility for the data practices of third-party providers. We recommend that you review the privacy policies of any payment service you use in connection with nobu99.

nobu99 does not embed third-party advertising code, social media trackers, or cross-site retargeting pixels on the Platform. Any third-party code present on the Platform is strictly limited to services necessary for Platform operation, security, and payment processing.

nobu99 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory requirements. The revised Policy will be published on this page with an updated "Last Updated" date.

Where changes are material — for example, involving a new category of data collection or a new purpose for processing — nobu99 will notify affected players by email to their registered address or via a prominent notice on the Platform prior to the changes taking effect.

Your continued use of the Platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. We recommend bookmarking this page and reviewing it periodically.

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by nobu99, please contact our Data Support team through the following channels:

• Email (plain text — not a link): [email protected]
  For data access requests, erasure requests, and privacy-related enquiries. Response within 30 days.
• Live Chat: Available 24/7 via the nobu99 Platform for general queries.
  Average first response: under 2 minutes. Complex data requests will be escalated to our compliance team.

For further information about your rights and responsible gambling tools available on the Platform, please visit our Responsible Gambling page.

For the full terms governing your use of the Platform, please read our Terms & Conditions.