Privacy & Data Security

Privacy Policy nona22 – Your Personal Data Protection

Nona22 is fully committed to protecting the privacy and personal data of every member. This document clearly explains how we collect, use, store and protect your information in accordance with strict data protection standards.

Last Updated: 1 January 2026

Six Pillars Privacy Protection nona22

Your personal data is a trust we uphold with full responsibility. The following are the core principles guiding how nona22 handles your information.

Military-Grade Encryption

All your personal data and financial transactions are protected by 256-bit SSL encryption — the same security technology used by banking institutions and government agencies worldwide.

No Sharing Without Consent

Nona22 does not sell, rent or share your personal data to third parties for marketing purposes without first obtaining your explicit consent.

Full Control in Your Hands

You have the right to access, correct, download, or request deletion of your personal data at any time through your account settings or by contacting our support team.

Secure Data Storage

Your data is stored on servers protected by multi-layered firewalls and monitored 24/7. Access to members' personal databases is restricted to authorized personnel only, under strict permission controls.

Cookie Usage Transparency

Nona22 uses cookies solely to improve user experience and monitor website performance. You can manage your cookie preferences at any time through your browser settings.

Immediate Breach Notification

In the event of any security incident involving your data, nona22 will notify you within 72 hours and take immediate remedial action to protect your interests.


Simple Summary

This Privacy Policy explains what data we collect, why we collect it, how we protect it, and what choices you have. We do not sell your data. We do not share your data without a legitimate reason. The security of your information is our responsibility.

1Identification

Nona22 ("we", "Platform", "Company") values the privacy of every individual who uses our services. This Privacy Policy is prepared in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and the highest international data protection standards in the industry.

This document clearly and transparently explains how nona22 collects, processes, stores, and protects your personal data when you visit our website at nona22.app, registering as a member, making financial transactions, or interacting with any of the services we offer. By using the nona22 platform, you acknowledge that you have read and understood the terms set out in this Privacy Policy.

If you have any questions about how we handle your data after reading this document, do not hesitate to contact our Data Protection Officer through the channels stated at the end of this document.

2Data We Collect

Nona22 collects various types of data for different purposes to provide and improve our services to you. The following are the categories of data we collect:

2.1 Data You Provide Directly

  • Identity Information: Full name, date of birth, gender, and identification number (MyKad/passport) for KYC verification purposes.
  • Contact Information: Email address, mobile phone number, and residential address.
  • Financial Information: Bank account details, e-wallet numbers, and the payment methods you use for deposits and withdrawals.
  • Verification Documents: Copies of identity card, passport, utility bills or other documents requested during the KYC process.
  • Communication Information: Records of conversations with our support team via live chat, email or WhatsApp.

2.2 Data We Collect Automatically

  • Technical Data: IP address, browser type, operating system, screen resolution, and device information.
  • Usage Data: Pages visited, time spent, games played, buttons clicked, and your navigation flow on the platform.
  • Transaction Data: History of deposits, withdrawals, wagering, wins and any financial activity within your account.
  • Location Data: General geographic location based on your IP address for regulatory compliance purposes.
  • Cookie Data: Session information, user preferences, and analytics data collected through cookies and similar technologies.

2.3 Data from Third-Party Sources

In certain cases, we may receive data about you from trusted third-party sources, including identity verification service providers, credit checking agencies for anti-money laundering purposes, and our payment partners. All data received from third parties is processed under the same strict privacy standards as data you provide directly.

Data Category Example Information Primary Purpose
Identity Verification Name, IC, date of birth KYC verification, legal compliance
Contact Email, phone, address Account communications, notifications
Financial Bank accounts, e-wallets Payment processing, verification
Technical IP, device, browser Security, fraud detection
Usage Game activity, clicks Service improvement

3How We Use Your Data

Nona22 uses your personal data only for legitimate, relevant and non-excessive purposes. The following are the primary purposes for which your data is used:

3.1 Account Management & Services

Your data is used to create and manage your account, process registration, verify your identity through KYC, and grant you access to all services offered by nona22, including casino games, sports betting, and fund withdrawals.

3.2 Financial Transaction Processing

Your financial information is used solely to process deposits, execute withdrawals, verify payment account ownership, and detect suspicious transaction activity. nona22 does not store credit or debit card numbers directly — all sensitive payment data is handled by authorized and registered payment providers.

3.3 Security & Fraud Prevention

Your technical and usage data helps our security systems detect and prevent unauthorized access, fraud attempts, bonus abuse, money laundering, and other illegal activities that could compromise the safety of the platform and other members.

3.4 Legal & Regulatory Compliance

As a platform operating under strict compliance requirements, nona22 uses your data to fulfil applicable legal obligations, including anti-money laundering (AML) requirements, know-your-customer (KYC) procedures, and reporting mandated by relevant authorities.

3.5 Service Improvement & Communications

Usage data is analyzed in aggregate and anonymized form to help us understand usage patterns, improve the platform interface, develop new features, and personalize the user experience. We also use your email and phone number to send important account notifications, security verifications, and relevant promotional information (you may opt out of marketing communications at any time).

4Legal Basis for Data Processing

Nona22 processes your personal data on solid legal bases as provided under Malaysia's Personal Data Protection Act 2010 (PDPA):

  • Your Consent: When you register an account at nona22, you give your consent for us to process your data for the purposes stated in this Privacy Policy.
  • Contract Performance: Processing required to provide the services you request, including transaction processing and account management.
  • Legal Obligation: Processing required to comply with legal and regulatory requirements applicable to our operations.
  • Legitimate Interest: Processing for platform security, fraud prevention, and service improvement purposes that do not affect your fundamental rights.

5Data Sharing with Third Parties

Nona22 does not sell, rent or trade your personal data to any third party for their own commercial purposes. However, we may share your data with a limited category of recipients in the following situations:

5.1 Approved Service Providers

We work with trusted third-party service providers to support our platform operations, including payment gateway providers, KYC identity verification services, server hosting providers, and analytics services. All such providers are bound by strict data protection agreements and are not permitted to use your data for any other purpose.

5.2 Legal Requirements & Authorities

Nona22 will disclose your data to government authorities or law enforcement bodies where required by law, court order or valid legal process. We will endeavour to notify you of any such request unless prohibited from doing so by law.

5.3 Business Transfers

In the event that nona22 is involved in a merger, acquisition, or asset sale, member personal data may be transferred as part of that transaction. You will be notified in advance and your rights will be protected throughout the process.

Nona22 will never ask for your password via email, phone or live chat. If you receive any communication requesting such sensitive information, please report it to our support team immediately as it may be a phishing attempt.

6International Data Transfers

Nona22's technical infrastructure may involve processing or storing data outside Malaysia. In such cases, we ensure that any international data transfers are carried out with adequate safeguards, including the use of standard data transfer agreements, compliance with data protection requirements equivalent to Malaysia's PDPA, and verification that the recipient country maintains an adequate level of data protection.

You may request further information about the international data transfer mechanisms we use by contacting our Data Protection Officer.

7Data Retention Period

Nona22 retains your personal data only for as long as necessary to fulfil the purposes stated in this Privacy Policy, or as required by law. Our general data retention guidelines are as follows:

  • Active Account Data: Retained for the duration your account is active, plus 5 years after account closure for legal compliance purposes.
  • Financial Transaction Records: Retained for a minimum of 7 years in accordance with Malaysia's anti-money laundering legal requirements.
  • KYC Documents: Retained for 6 years after the end of the business relationship between you and nona22.
  • Support Communication Logs: Retained for 2 years for quality control and dispute resolution purposes.
  • Analytics Data: Anonymized usage data is retained for a maximum of 26 months before being permanently deleted.

When data is no longer needed, nona22 ensures it is securely deleted or anonymised using methods that prevent it from being re-linked to you.

8Data Security Measures

Nona22 continuously invests in sophisticated data security infrastructure to ensure your personal data is always protected. The key security measures we implement include:

  • End-to-End Encryption: All communications between your browser and our servers are secured by TLS 1.3 protocol with 256-bit SSL encryption.
  • Layered Access Controls: Access to member personal data is restricted to staff who genuinely require it, with two-factor authentication (2FA) enforced across the board.
  • 24/7 Monitoring: Intrusion detection systems (IDS) and intrusion prevention systems (IPS) monitor suspicious activity on our platform around the clock.
  • Regular Security Testing: We conduct regular penetration testing and independent security audits to identify and address any vulnerabilities.
  • Staff Training: All staff who handle personal data receive comprehensive data protection training and are bound by strict confidentiality agreements.
  • Secure Data Backup: Data is backed up regularly and stored in a secure, separate location to ensure continuity of service.

9Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by nona22:

9.1 Right of Access

You have the right to request a copy of the personal data we hold about you. nona22 will process your access request within 21 working days and may charge a reasonable administrative fee for repeated or excessive requests.

9.2 Right of Rectification

If the personal data we hold is inaccurate or incomplete, you have the right to request a correction. You can update most profile information directly through your account settings, or contact support for corrections that require document verification.

9.3 Right of Erasure

You may request deletion of your personal data under certain circumstances, such as when the data is no longer needed for its original purpose or when you withdraw your consent. Please note that we may be unable to fulfil a deletion request in full where legal obligations require us to retain that data.

9.4 Right to Object & Restrict Processing

You have the right to object to the processing of your data for specific purposes such as direct marketing, or to request that we restrict processing of your data during a dispute or investigation concerning the accuracy of that data.

9.5 How to Exercise Your Rights

To exercise any of the rights stated above, please contact our Data Protection Officer by email at [email protected] stating your full name, account number and the specific right you wish to exercise. We will verify your identity before processing any request to ensure the security of your data.

10Cookies & Tracking Technologies

Nona22 uses cookies and similar tracking technologies to enhance platform functionality, analyse usage patterns and deliver a more personalised experience to you.

10.1 Types of Cookies We Use

  • Essential Cookies: Required for core platform functions such as login authentication and session security. These cookies cannot be disabled without affecting platform usability.
  • Performance Cookies: Collects information on how you use the platform to help us understand performance and identify areas for improvement.
  • Functional Cookies: Saves your preferences such as language, time zone, and display settings to ensure a more comfortable experience.
  • Analytics Cookies: Used via trusted third-party analytics tools to understand user behavior in aggregate and anonymized form.

10.2 Managing Cookie Preferences

You can control and manage cookies through your browser settings. Most modern browsers allow you to view, delete, and block cookies from specific websites. Please note that disabling certain cookies may affect platform functionality and your user experience.

11Children's Privacy

Nona22 is a platform exclusively for adult users aged 18 years and above. We do not knowingly collect, process, or store personal data of individuals under the age of 18.

If we find that we have inadvertently collected data from someone under the age of 18, we will take immediate steps to delete that data and close the relevant account. If you believe your child or a minor has registered on our platform, please contact us immediately at [email protected].

12Privacy Policy Amendments

Nona22 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, new legal requirements or service improvements. Each updated version of the Privacy Policy will carry a new "Last Updated" date at the top of this document.

For material amendments that may significantly affect your rights, nona22 will notify you via an in-platform notification or email at least 14 days before the amendment takes effect. Your continued use of the nona22 platform after the effective date of any amendment constitutes your acceptance of the updated Privacy Policy.

13Contact Our Data Protection Officer

If you have any questions, concerns or complaints regarding how nona22 handles your personal data, or if you wish to exercise any of your privacy rights, please contact us through the following channels:

  • Data Protection Email: [email protected]
  • General Support Email: [email protected]
  • Live Chat: Available 24/7 on the nona22 platform — response within 3 minutes.
  • WhatsApp: Number available upon logging in to your account.

We are committed to addressing any privacy-related inquiries or complaints within 14 working days from the date of receipt. If you are not satisfied with our response, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia.


Frequently Asked Questions About Data Privacy

Answers to the most frequently asked questions by members regarding personal data protection on the nona22 platform.

No, absolutely not. nona22 has never and will never sell, rent or trade your personal data to any third party for their own commercial purposes. We only share data with service providers necessary to operate our platform (such as payment gateways and KYC services), and only when required by law.

You may request a copy of your personal data by emailing [email protected] with your full name and account number. nona22 will process your request within 21 working days and provide the data in a readable format. We will verify your identity before disclosing any data to ensure the security of your information.

When you close your nona22 account, most of your personal data will be deleted or anonymised within 30 days. However, financial records and transaction history will be retained for 7 years in line with Malaysia's anti-money laundering legal requirements. KYC documents are retained for 6 years after account closure. This data will not be used for any marketing purposes.

Yes, you can opt out of marketing emails at any time by clicking the "unsubscribe" link found at the bottom of every marketing email, or by contacting our support team. Please note that you will still receive important account-related emails such as transaction confirmations, security notices and policy updates — these are essential service communications that cannot be disabled.

nona22 uses 256-bit SSL encryption for all financial transactions. Your credit or debit card details are not stored directly on our servers — all sensitive payment data is handled by registered and certified payment providers that comply with PCI DSS security standards. Member funds are also held in accounts segregated from the company's operating funds for added protection.

Your Data Protected. Your Game is Secured.

Join millions of members who trust nona22 as Malaysia's safe, fair and responsible online gaming platform.


Bahasa Melayu