• Email address — the only field on the registration form. It is your login and the channel we use for magic links, security alerts and, if you opt in, promotional messages.
• Two-factor secret — if you enable TOTP, the shared secret is stored encrypted so we can verify your codes. We never see the codes your authenticator app shows you.
• Withdrawal addresses — every TRC-20 address you have sent USDT to is kept with the withdrawal record.
• Support conversations — messages you send through the in-site chat, including any attachments, are kept with your ticket.
• Affiliate application details — if you apply to the affiliate program you may supply a Telegram handle, a website or notes; these are stored with the application.
• Responsible-gambling settings — deposit limits, time-outs and self-exclusion requests are stored so we can enforce them.

• Wallet events — the deposit address derived for you, incoming TRON transactions, withdrawal requests and their on-chain hashes, and the running Balance ledger.
• Game activity — each bet, its stake, outcome and timestamp, the provider and game, and the rakeback it generated. Live studios also keep their own round logs under their own policies.
• Reward records — VIP tier changes, rakeback accrual and conversions, cashback, mission progress, tournament rankings, referral attachments and payouts.
• Session and device logs — IP address, browser and operating system strings, screen size, language preference, sign-in timestamps and the pages you visit. These are kept for security, fraud prevention and debugging.
• Analytics — aggregated, non-identifying usage statistics that help us see which pages and games are used. We do not run third-party advertising trackers.

• To run your account: sign you in, show your Balance, settle bets, pay rewards and process withdrawals.
• To keep the platform safe: detect duplicate accounts, bots, bonus abuse and unauthorised access, and screen deposits against known illicit addresses.
• To meet obligations we have towards game providers, such as supplying a player identifier so a round can be reconciled.
• To support you: answer tickets and investigate disputed rounds or transactions.
• To improve the product using aggregated statistics.
• To send you promotional email — only if you have opted in, and you can opt out from any message.

We do not sell personal data, and we do not share it with advertisers.

Where a shorter or longer period is required by law, or by an open investigation, that period applies instead.

• Game providers receive a pseudonymous player ID, the stake and the game selection needed to run a round. They do not receive your email address.
• Infrastructure providers host our servers, database backups and email delivery. They process data on our instructions under contract and cannot use it for their own purposes.
• Cloudflare sits in front of the website and sees the IP address and request metadata of every visitor as part of providing DDoS protection and TLS.
• TRON network — deposits and withdrawals are public blockchain transactions. Anyone can see the addresses and amounts involved; nobody can link them to your email from the chain alone.
• Authorities — we disclose data only when required by a valid legal order in a jurisdiction that applies to us, and we limit the disclosure to what the order covers.

There are no other recipients. In particular, we do not share data with marketing networks, data brokers or affiliates beyond the aggregate figures shown in an affiliate's own dashboard.

Application data is stored on servers operated by our infrastructure providers, with encrypted backups. Access is restricted to staff who need it to operate the service, is logged, and requires two-factor authentication. Depending on where you live, your data may be processed in a country other than your own; where that happens we rely on contractual safeguards with the provider.

• Access — ask support for a copy of the data we hold about your account. We provide it in a machine-readable format.
• Correction — change your email address from the account page.
• Deletion — request account closure. We delete the email address and settings and pseudonymise the ledger records that must be retained for the periods above.
• Marketing opt-out — every promotional email carries an unsubscribe link; turning it off does not affect security or transactional messages.
• Restriction — if you dispute the accuracy of data we hold, you can ask us to pause processing while we check.
• Complaint — if you believe we have mishandled your data, tell support first. You may also complain to the data protection authority in your country of residence.

Requests are handled through the in-site support chat. To prevent someone else from exercising your rights, we may ask you to confirm the request from the registered email address.

• Session cookie — keeps you signed in. Deleted when you sign out or when the session expires.
• Preference cookies — remember your language, theme and dismissed notices.
• Security cookies — set by Cloudflare to distinguish real browsers from automated traffic.

We do not use advertising cookies or cross-site tracking. Blocking cookies in your browser will prevent sign-in from working.

• All traffic between your browser and Nova is encrypted with TLS. Plain HTTP is redirected.
• The website is served through Cloudflare, which filters malicious traffic before it reaches our servers.
• We hold no passwords, so a database breach cannot expose credentials you reuse elsewhere.
• Withdrawal signing keys are held on segregated infrastructure with tightly restricted access.
• Every administrative action on an account is logged with the staff member, the time and the change made.
• If a breach affecting your data ever occurs, we notify affected accounts by email without undue delay and explain what happened and what we are doing about it.

Some safeguards on Nova run without a human in the loop: withdrawal cooldowns, deposit screening against known illicit addresses, duplicate-account detection and the pausing of withdrawals when a fraud rule fires. These are rule-based checks, not profiling for marketing. Whenever an automated check holds a withdrawal or restricts an account, a member of staff reviews it and you can ask support to explain the decision and to reconsider it.

Pages on Nova link to game studios, block explorers and responsible-gambling organisations. Those sites have their own privacy practices, which we do not control. Following a link to a TRON block explorer, for example, reveals nothing about your account to us, but the explorer may set its own cookies.

Nova is for adults only. We do not knowingly hold data about anyone under 19. If you believe a minor has opened an account, contact support and we will close it and delete the data.

The date at the top shows the version currently in force. If we change how we use data in a way that affects you, we announce it on the site or by email before the change applies. Older versions are available from support on request.

Privacy questions and data requests go through the in-site support chat.