Privacy Policy

Introduction

This Privacy Policy ("Policy") is published by noci88 ("we", "us", "our", "the Platform"), the operator of the online gaming and sports betting platform accessible at https://noci88.cam. This Policy applies to all Users ("you", "your") who access or use our website, mobile-optimised platform, and any associated services.

noci88 is committed to safeguarding the privacy and personal data of all Users, including our Malaysian player base spanning Kuala Lumpur, Petaling Jaya, Shah Alam, Penang, Johor Bahru, and beyond. We recognise that the collection and processing of personal data carries significant responsibility, and we take that responsibility seriously.

This Policy describes in detail:

• The categories of personal data we collect from you;
• The purposes for which we collect and process that data;
• The legal bases on which we rely to process your data;
• How we share your data with third parties and under what conditions;
• How long we retain your data and our deletion practices;
• The rights you hold with respect to your personal data and how to exercise them.

By accessing the noci88 Platform or creating an Account, you acknowledge that you have read, understood, and consent to the data practices described in this Privacy Policy. This Policy should be read together with our Terms & Conditions, which form the broader contractual framework governing your use of noci88.

Definitions

For the purposes of this Privacy Policy, the following terms shall have the meanings ascribed to them below:

• "Personal Data" — Any information that identifies or could reasonably be used to identify a living individual, directly or in combination with other data. This includes, but is not limited to, name, email address, phone number, identity document details, financial account information, and IP address.
• "Processing" — Any operation performed on personal data, whether automated or manual, including collection, storage, use, disclosure, erasure, or any other form of handling.
• "Data Controller" — The entity that determines the purposes and means of processing personal data. For the purposes of this Policy, noci88 acts as the Data Controller with respect to User personal data.
• "Data Processor" — A third party that processes personal data on behalf of noci88, under contractual instruction and for specified purposes.
• "Cookies" — Small text files placed on a User's device by the Platform for the purposes of session management, analytics, and functionality improvement.
• "KYC Data" — Identity and verification documentation submitted by Users to fulfil Know Your Customer obligations, including government-issued identification and proof of payment method.
• "Sensitive Personal Data" — A subset of personal data afforded heightened protection, including identity document numbers and financial account details.
• "Consent" — A freely given, specific, informed, and unambiguous indication of the User's agreement to the processing of their personal data for a specified purpose.

Data We Collect

noci88 collects personal data from you through a variety of channels depending on the nature of your interaction with the Platform. The categories of data we collect are set out in the table below:

How We Use Your Data

noci88 uses the personal data we collect for the following purposes:

4.1 Service Delivery and Account Management

We use your registration data and account credentials to create and manage your noci88 Account, authenticate your identity on login, and provide access to all Platform features including gameplay, deposits, withdrawals, and promotional participation.

4.2 Financial Transactions and Payment Processing

Your financial data is used to process deposits and withdrawals via Malaysian payment methods including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong, and USDT TRC20 cryptocurrency. Payment data is processed in cooperation with licensed payment processors and is subject to their independent privacy frameworks.

4.3 Identity Verification and Regulatory Compliance

KYC data is processed for the purposes of fulfilling our regulatory obligations under applicable anti-money laundering (AML) laws, responsible gambling requirements, and age verification mandates. This includes verifying that you are aged 21 or above before permitting Casino-class gaming activity.

4.4 Responsible Gambling Monitoring

Gameplay data and account activity are monitored to identify patterns indicative of problem gambling. Where such patterns are detected, noci88 may contact you proactively or apply protective measures in line with our responsible gambling obligations. For further information, please visit our Responsible Gambling page.

4.5 Fraud Detection and Platform Security

Technical data, financial data, and account activity are analysed using automated and manual monitoring systems to detect and prevent fraudulent activity, multi-accounting, bonus abuse, money laundering, and other prohibited conduct as defined in our Terms & Conditions.

4.6 Customer Support

Communication data is retained to facilitate the resolution of support queries, disputes, and complaints. Support records may also be used for staff training and quality assurance purposes.

4.7 Marketing and Promotional Communications

With your consent, noci88 may use your contact details and preferences to send you targeted promotional communications regarding bonuses, new game releases, seasonal promotions, and VIP programme updates. You may opt out of marketing communications at any time without affecting your access to Platform services.

4.8 Platform Analytics and Improvement

Aggregated, anonymised gameplay and device data is used to analyse Platform performance, identify user experience friction points, and inform product development decisions. This processing does not identify individual Users.

Legal Basis for Processing

noci88 processes personal data under the following legal bases, which vary by processing purpose:

• Contractual Necessity: Processing required to perform the contract we have with you — specifically, to provide your Account and gaming services as described in our Terms & Conditions;
• Legal Obligation: Processing required to comply with applicable laws, including AML legislation, responsible gambling regulations, and tax reporting obligations;
• Legitimate Interests: Processing for fraud prevention, platform security, and internal analytics, where such interests are not overridden by your fundamental rights;
• Consent: Processing for marketing communications and non-essential cookies, where you have provided explicit, informed consent that may be withdrawn at any time.

Data Sharing & Disclosure

noci88 does not sell, rent, or trade your personal data to third parties for commercial marketing purposes. We share personal data only in the following limited and controlled circumstances:

6.1 Service Providers and Data Processors

We engage trusted third-party service providers to perform functions on our behalf, including payment processing (e.g., FPX gateway operators, e-wallet processors), identity verification services, cloud hosting infrastructure, and customer communication tools. All such providers are bound by Data Processing Agreements that restrict their use of your data to the specified service and prohibit independent use for their own purposes.

6.2 Regulatory and Law Enforcement Authorities

noci88 may disclose personal data to governmental, regulatory, or law enforcement authorities where required by applicable law, court order, or regulatory directive. Such disclosures are made only to the minimum extent necessary to satisfy the legal requirement and, where permitted, we will notify affected Users.

6.3 Group Companies and Corporate Transactions

In the event of a merger, acquisition, restructuring, or sale of substantially all of noci88's assets, your personal data may be transferred to a successor entity. You will be notified of any such transfer and your continued use of the Platform following the transfer will constitute acceptance of the successor entity's privacy practices.

6.4 Fraud Prevention and Security Partners

In cases of suspected fraud, money laundering, or material security incidents, noci88 may share relevant personal data with industry fraud prevention bodies, cybersecurity partners, or other gaming operators (where permitted under applicable data sharing frameworks) for the purposes of preventing harm and protecting the integrity of the online gaming industry.

International Data Transfers

noci88's primary server infrastructure is located in secure data centres operating under applicable international hosting standards. Where the processing of your data involves transfer outside of Malaysia, noci88 takes appropriate safeguards to ensure that such transfers comply with applicable data protection requirements, including:

• Transfer to jurisdictions that offer an adequate level of data protection as recognised under applicable law;
• Implementation of Standard Contractual Clauses or equivalent contractual protections with receiving parties;
• Application of technical safeguards including encryption to protect data in transit across international networks.

By registering an Account with noci88, you acknowledge and consent to the processing of your personal data in jurisdictions outside Malaysia, subject to the protections described in this section.

Data Retention

noci88 retains personal data for the period necessary to fulfil the purposes for which it was collected, subject to any longer retention period required by applicable law or regulation. The following general retention guidelines apply:

Following the expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with noci88's data destruction procedures. Anonymised or aggregated data that no longer identifies any individual may be retained indefinitely for analytical purposes.

Cookies & Tracking Technologies

noci88 uses cookies and similar tracking technologies to enhance your experience on the Platform, maintain session integrity, and gather analytical insights that help us improve our services. The following categories of cookies are used:

9.1 Managing Cookies

You may manage your cookie preferences at any time through your browser settings. Instructions for disabling cookies vary by browser; consult your browser's help documentation for guidance. Please note that disabling essential cookies will impair your ability to use the noci88 Platform, including the ability to log in and maintain an authenticated session.

9.2 Third-Party Tracking

noci88 does not permit third-party advertising networks to place tracking cookies on the Platform. Any third-party cookies deployed on the Platform (e.g., analytics or payment processing providers) are contractually restricted to the stated service purpose and may not use collected data for independent advertising or marketing activities.

Your Rights

Subject to applicable law and certain regulatory limitations, you hold the following rights with respect to your personal data held by noci88:

10.1 Exercising Your Rights

To exercise any of the above rights, please contact our Data Protection team at [email protected] with the subject line "Data Rights Request". Please include your registered email address and Account username to enable us to locate your records. We will respond to all valid data rights requests within thirty (30) calendar days. Where a request requires additional processing time due to its complexity, we will inform you and provide an updated timeline.

10.2 Limitations on Rights

Certain data rights requests may be subject to limitations where data retention is required by applicable law — for instance, transaction records required under AML legislation, or KYC documents required under responsible gambling regulations. In such cases, noci88 will inform you of the limitation and the applicable legal basis.

Children's Privacy

The noci88 Platform is intended exclusively for individuals aged 21 and above. We do not knowingly collect personal data from persons under the age of 18, and we strictly prohibit access by minors to our gaming services.

If we become aware that personal data has been collected from a person under the minimum age threshold without appropriate parental or guardian consent, we will take immediate steps to delete such data and close the associated Account. If you believe that noci88 may have inadvertently collected data from a minor, please notify us immediately at [email protected].

Age verification is conducted as part of the KYC process and is enforced on all Accounts seeking to make their first withdrawal. noci88 also reserves the right to conduct age verification checks on Accounts at any time where underage use is suspected.

Security Measures

noci88 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. These measures include:

• Encryption in Transit: All data transmitted between your device and noci88 servers is protected by TLS 1.3 encryption with 256-bit cipher strength;
• Encryption at Rest: Personal data stored in our databases is encrypted using AES-256 encryption;
• Access Controls: Access to personal data within noci88's systems is governed by role-based access controls and multi-factor authentication requirements for staff;
• Audit Logging: All access to personal data records by internal staff is logged and subject to periodic audit;
• Penetration Testing: noci88's infrastructure is subject to regular independent penetration tests and vulnerability assessments;
• Incident Response: noci88 maintains a documented data breach response procedure. In the event of a material personal data breach, we will notify affected Users and relevant regulatory authorities in accordance with applicable legal timelines.

Third-Party Links

The noci88 Platform may, on occasion, contain references or links to third-party services or resources (for example, licensed payment processors or gaming technology partners). This Privacy Policy applies exclusively to data processing conducted by noci88 and does not extend to third-party websites, services, or platforms, regardless of whether they are accessed through a link from the noci88 Platform.

noci88 exercises no control over and accepts no responsibility for the privacy practices of third-party services. We strongly encourage Users to review the independent privacy policies of any third-party services they interact with in connection with their noci88 activity, particularly payment processors such as Touch 'n Go eWallet, Boost, GrabPay, and banking portals for Maybank, CIMB, Public Bank, and Hong Leong.

Policy Amendments

noci88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. Material changes to this Policy will be communicated to registered Users via the email address associated with their Account and/or by prominent notice on the Platform for a minimum period of seven (7) days before the changes take effect.

The "Last Updated" date at the top of this Policy will be revised each time a material amendment is made. Your continued use of the noci88 Platform following the effective date of any amendment constitutes your acceptance of the revised Privacy Policy.

We encourage Users to review this Privacy Policy periodically to stay informed of how noci88 manages and protects their personal data.

Contact Us

If you have questions, concerns, or requests relating to this Privacy Policy or the manner in which noci88 processes your personal data, please contact our Data Protection team through the following channels. We are committed to responding promptly and transparently to all privacy-related enquiries.

Data Protection Contact Email:
[email protected] — Subject line: "Privacy Policy Enquiry" or "Data Rights Request"

Live Support:
Available 24/7 via the live chat function on the noci88 Platform. For formal data rights requests, please use the email channel to ensure a documented record is maintained.

Response Commitment:
General privacy enquiries: within 5 business days. Formal data rights requests: within 30 calendar days. Complex requests requiring extended review will be acknowledged within 5 business days with an updated timeline.