1 Introduction – nona123's Privacy Commitment
Welcome to the Privacy Policy nona123. This document explains our platform's privacy practices — how we collect, use, store, and protect your personal information when you use nona123's services at nona123.best.
Nona123 takes our responsibility to every member's privacy seriously. We believe your trust is our most valuable asset, and the way we handle your personal data reflects the core values we uphold. Privacy is not merely a compliance checkbox for us — it is embedded in our culture and the way we operate every day.
This Privacy Policy applies to all users who register an account, access the website, make a deposit, play games, or interact with any aspect of the nona123. By using our platform, you agree to the collection and use of data as described in this document.
Important Note: This Privacy Policy is to be read together with nona123 Terms & Conditions. Together, these two documents form the complete agreement between you and nona123 governing your use of the platform and your personal data.
2 Personal Data We Collect
Nona123 collects your personal data only when there is a clear and legitimate need to do so. The data we collect falls into three main categories:
A. Data You Provide Directly
- Full name as shown on your Malaysian identity card
- National identity card number (MyKad) or passport
- An active Malaysian phone number
- Email address
- Date of birth (for age verification — must be 18 years or older)
- E-wallet or bank account details for withdrawals (Touch 'n Go eWallet, GrabPay, DuitNow, FPX)
- Identity card information or documents submitted for KYC
- Any information you share via live chat or support email
B. Automatically Collected Data
- The IP address of your device when accessing nona123
- Web browser type and device operating system
- Gaming activity records (games played, bet amounts, wins, losses)
- Financial transaction records (deposits, withdrawals, credited bonuses)
- Login session timestamps and duration
- Cookie data and similar tracking technologies (see Section 9)
C. Data from Third Parties
- Identity verification from an accredited KYC service provider
- Payment verification data from financial service providers such as Touch 'n Go, GrabPay, and the relevant FPX banks
- Publicly available information relating to legal compliance requirements
Data Minimisation Principle: nona123 collects only the data that is genuinely necessary for the stated purposes. We do not collect data beyond what is required, nor do we retain it for longer than necessary.
3 Purpose of Data Collection & Use
Nona123 uses the personal data collected for the following clearly stated purposes:
| Purpose of Use |
Types of Data Used |
Legal Basis for Processing |
| Registration & account management |
Name, email, phone number, date of birth |
Contract performance |
| Identity verification (KYC) |
MyKad, passport, verification selfie |
Legal obligation |
| Deposit & withdrawal processing |
E-wallet/bank account information, transaction records |
Contract performance |
| Customer Support |
Name, account history, communication logs |
Legitimate interests |
| Fraud detection & security |
IP address, login records, activity patterns |
Legitimate interests |
| Responsible gaming |
Gameplay patterns, set limits, play duration |
Legitimate interests & legal obligations |
| Marketing communications |
Email, phone number |
Consent (withdrawable) |
| Platform improvement & analytics |
Anonymised usage data, navigation patterns |
Legitimate interests |
Nona123 will not use your data for any purpose beyond those stated above without first obtaining your additional consent. Should we wish to use your data for a new purpose not covered in this Privacy Policy, we will notify you and seek your consent before doing so.
4 Legal Basis for Data Processing
Under Malaysia's Personal Data Protection Act 2010 (PDPA), nona123 processes personal data based on one or more of the following valid legal bases:
- Consent: When you register an account and agree to our Privacy Policy and Terms & Conditions, you give your consent for data processing for the stated purposes. Consent for marketing communications is separate and may be withdrawn at any time.
- Contract performance: Processing required to deliver nona123's services to you — including payment processing, account management, and bonus distribution — is carried out on the basis of contractual necessity.
- Legal obligation: nona123 is required by Malaysian law to collect and retain certain records, including for compliance with the Anti-Money Laundering Act (AMLA) and KYC requirements.
- Legitimate interest: nona123 has a legitimate interest in processing certain data for platform security, fraud detection, customer support, and service improvement purposes — provided these interests do not override your fundamental privacy rights.
5 Data Sharing & Disclosure
Nona123 does not sell, rent, or trade members' personal data. However, there are limited situations where we are required to share your data with certain parties:
Parties Who May Receive Your Data
- KYC service provider: To fulfil identity verification requirements, we share the necessary information with accredited KYC providers. They are bound by strict confidentiality agreements.
- Payment service providers: Touch 'n Go, GrabPay, DuitNow, FPX, and other payment providers receive the transaction information required to process your deposits and withdrawals.
- Game software providers: Third-party game providers receive only the minimum technical session data (session ID, wager amount) required to operate their games. Personal information that directly identifies you is not shared.
- Legal authorities: nona123 will disclose data to Malaysian authorities (police, courts, regulatory bodies) when required by law or a valid court order.
- Independent auditors: Appointed auditors engaged to verify legal compliance and the operational integrity of nona123 may access limited data under strict confidentiality obligations.
Data Sharing Guarantee: All third parties receiving nona123 member data have signed Data Processing Agreements obligating them to protect your data to a standard no less stringent than that set out in this Privacy Policy.
6 Data Security Measures
Nona123 implements a range of technical and organisational measures to protect members' personal data from unauthorised access, loss, misuse, or disclosure:
- Data encryption in transit: All communication between your browser and the nona123 platform is encrypted using TLS 1.3 protocol with 256-bit SSL encryption.
- Stored data encryption: Sensitive data stored in our databases, including financial information and identity documents, is encrypted using the AES-256 algorithm.
- Access controls: Only authorised nona123 staff with a legitimate operational need may access member data — and every access is logged and monitored
- Multi-factor authentication: nona123's internal systems require MFA for all staff access to systems containing member data
- Regular security audits: nona123 conducts regular penetration testing and vulnerability scans carried out by independent security parties
- Staff training: All nona123 staff who handle member data receive regular data privacy and security training
- Incident response procedure: nona123 has clear procedures in place for detecting, reporting, and responding to any data breach within the timeframes stipulated by the PDPA.
While we take all reasonable steps to protect your data, no system can guarantee absolute security. In the event of a data breach affecting your information, nona123 will notify you within the timeframe required under PDPA and take immediate steps to mitigate the impact.
7 Data Retention Period
Nona123 retains members' personal data only for as long as necessary for the stated purposes and to fulfil legal obligations. Our general data retention principles are as follows:
| Data Type |
Retention Period |
Reason |
| Active account information |
For the duration of the active account |
Ongoing service provision |
| Financial transaction records |
7 years after the transaction |
Malaysia AMLA & PDPA requirements |
| KYC documents |
5 years after account closure |
Legal compliance obligations |
| Game logs & activity |
5 years |
Complaint resolution & audits |
| Support communication logs |
3 years |
Complaint resolution & training |
| Marketing data (with consent) |
Until consent is withdrawn |
Based on member consent |
| Non-essential cookie data |
Up to 12 months |
User experience improvement |
Once the relevant retention period has expired, data will be securely deleted or fully anonymised in accordance with our security procedures. nona123. Anonymised data — where individual identity can no longer be identified — may be retained for analytics and aggregate reporting purposes.
8 Your Rights as a Data Owner
Under Malaysia's Personal Data Protection Act 2010 (PDPA), you as the data subject have the following rights in relation to your personal data held by nona123:
Right of Access
You have the right to request a copy of the personal data we hold about you. We will provide this information in a readable format within 21 days of your request.
Right to Rectification
If the data we hold about you is inaccurate, outdated, or incomplete, you have the right to request a correction. We will update the data within 14 days of receiving a valid request.
Right to Erasure
You may request the deletion of your personal data under certain circumstances — for example, when the data is no longer needed or consent has been withdrawn. This right is subject to statutory retention obligations.
Right to Object
You may object to the processing of your personal data for direct marketing purposes at any time. Your objection will be acted on immediately and at no cost to you.
Right to Restriction
Under certain circumstances, you may request that the processing of your data be restricted — for example, while you are contesting the accuracy of the data or objecting to its processing.
Data Portability Rights
You have the right to receive the personal data you have provided to us in a structured, machine-readable format, for transfer to another service provider if desired.
To exercise any of the above rights, please contact the nona123 support team via live chat or email at support@nona123.best, stating the type of request and any relevant details. We will verify your identity before processing any data-related request. A response will be provided within 21 days from the date your request is verified.
9 Cookies & Tracking Technologies
nona123 uses cookies and similar tracking technologies to enhance the user experience, analyse platform usage, and maintain session security. The following are the types of cookies we use:
Strictly Necessary Cookies (Required)
Analytics Cookies
Functional Cookies
Marketing Cookies
- Necessary Cookies (Always Active): These cookies are essential for the basic functionality of the nona123 platform, including login authentication, session security, and language preferences. They cannot be disabled, as the platform will not function properly without them.
- Analytics Cookies: We use aggregated analytics to understand platform usage patterns — most-visited pages, time spent, and navigation paths. This data is anonymised and cannot be linked to any specific individual.
- Functional Cookies: These cookies remember your preferences such as language, display settings and game preferences, providing a more personalised experience when you return to nona123.
- Marketing Cookies: With your consent, these cookies are used to display relevant promotions and measure the effectiveness of marketing campaigns. You can disable marketing cookies at any time through the cookie settings on the platform.
You can manage cookie settings through your web browser preferences. However, disabling certain cookies may affect the functionality of some parts of the platform. nona123. For information on how to manage cookies in popular browsers, please refer to your browser's help documentation.
10 Children's Privacy
Platform nona123 is intended for individuals aged 18 and above only. We do not knowingly collect personal data from individuals under the age of 18.
All new account registrations require age verification as part of the KYC process. If we discover that personal data has been collected from anyone under the age of 18, we will take immediate steps to delete that data and close the account.
If you believe a minor has registered for or is using the nona123 platform, please contact us immediately at support@nona123.best so we can take the appropriate action without delay.
Parents & Guardians: If you discover that your child has accessed the nona123 platform, please contact us immediately. We will process the account closure and data deletion as a top priority, no unnecessary questions asked.
11 Cross-Border Data Transfers
In the course of nona123's operations, your personal data may be processed or stored on servers located outside Malaysia. This can occur in the context of using international cloud services or third-party game software providers operating across multiple countries.
In all such circumstances, nona123 ensure that:
- Data transfers are made only to countries or entities that provide a level of data protection equivalent to or greater than Malaysia's PDPA
- Legally binding data processing agreements are in place before any data transfer takes place
- Data recipients outside Malaysia are subject to confidentiality and data protection obligations no less stringent than those set out in this Privacy Policy
- You may contact us for more information about the safeguards in place for such international data transfers.
12 Privacy Policy Amendments
Nona123 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements, or changes to the services we offer.
When we make material changes to this Privacy Policy, we will notify you via:
- A prominent notice on the nona123.best homepage
- Email to the address registered on your account (for material changes)
- In-platform notification during your next login session
We encourage you to review this Privacy Policy periodically. The "Updated" date at the top of this page will always reflect the date of the latest version. Your continued use of the platform nona123 after an amendment takes effect will be considered acceptance of the revised Privacy Policy.
Current Version: This Privacy Policy takes effect from 1 January 2026 and fully supersedes all previous versions.
13 Contact Us About Privacy
If you have any questions, concerns or requests regarding this Privacy Policy or how we nona123 handle your personal data, our team is ready to assist through the following channels:
- Live Chat: Available 24 hours a day, 7 days a week within the nona123 platform — the fastest way to get a response in under 2 minutes
- Privacy Email: support@nona123.best — include "Privacy Inquiry" or "Data Request" in the email subject line for faster processing
- Frequently Asked Questions: Visit page Frequently Asked Questions us for immediate answers to common privacy-related questions
For formal requests regarding your data rights under PDPA 2010 (access, correction, deletion), please send an email to support@nona123.best with the subject line "PDPA Data Rights Request", along with your full name and account number. We will verify your identity and respond within 21 calendar days from the date your request is received.
If you are not satisfied with how we have handled your privacy-related query or complaint, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP), the statutory body overseeing PDPA compliance in Malaysia.