Nova Patti Privacy Policy

Nova Patti ("we", "us", "the Platform") is committed to protecting the privacy of every person who uses novapatti.app. This Privacy Policy describes how Nova Patti collects, processes, stores, and shares personal data when you register an account, make deposits or withdrawals, play games, contact support, or simply browse the website.

This policy applies to all users of Nova Patti who are based in Pakistan or who access the platform from Pakistan. By registering a Nova Patti account or using any part of the platform, you acknowledge that you have read and understood this Privacy Policy and agree to the data practices described within it.

This Privacy Policy forms part of the overall legal agreement between you and Nova Patti, alongside the Terms and Conditions. If you have questions at any point, our support team is available 24/7 at support@novapatti.app.

Nova Patti collects personal data from several sources: directly from you when you register or update your account, automatically when you use the platform, and from third-party service providers where necessary for payment processing and fraud prevention. The categories of data we collect are as follows:

We do not collect sensitive categories of data such as biometric data (beyond liveness checks for KYC), racial or ethnic origin, political opinions, health information, or religious beliefs. We collect only what we genuinely need to operate the platform fairly and securely.

Every use of your personal data by Nova Patti has a specific, documented purpose. We do not use your data for purposes beyond what is listed below, and we do not use it in ways that would be inconsistent with what you would reasonably expect when signing up to an online gaming platform.

• Account Management: Creating and maintaining your Nova Patti account, authenticating your identity when you log in, and enabling account self-service features including responsible gaming tools.
• Processing Transactions: Handling deposits, withdrawals, and balance adjustments accurately. Your payment account details are used solely to route funds correctly to your registered payment methods.
• Identity Verification (KYC): Confirming that you meet the age and eligibility requirements, and satisfying our anti-money laundering obligations. KYC checks may be triggered at registration or when your withdrawal activity crosses defined thresholds.
• Fraud Prevention and Security: Detecting unusual account activity, preventing unauthorised access, monitoring for collusion or bot activity in player-versus-player games, and protecting the integrity of the platform for all users.
• Responsible Gaming: Monitoring gaming patterns to identify signs of problem gambling behaviour, enabling our support team to make proactive welfare checks where appropriate, and enforcing any self-imposed limits or exclusions you have set.
• Platform Improvement: Analysing aggregated, anonymised usage data to understand how players use the platform and improve game offerings, performance, and the user interface. This analysis does not identify individual users.
• Customer Support: Responding to your queries and resolving disputes. Support chat and email records are retained to maintain an accurate history of your interactions with Nova Patti.
• Legal and Regulatory Compliance: Retaining data for periods required by applicable Pakistani law, and providing data to regulatory authorities or law enforcement when legally required to do so.

Nova Patti processes your personal data under the following legal bases, each of which applies to specific categories of processing activity:

• Contractual Necessity: The majority of processing — account management, transaction processing, game operation — is necessary to perform the contract between you and Nova Patti (the Terms and Conditions you accepted at registration).
• Legal Obligation: Identity verification (KYC), anti-money laundering checks, and the retention of financial records are required by law. Nova Patti must process and retain this data to comply with applicable Pakistani financial regulations.
• Legitimate Interests: Fraud prevention, security monitoring, and platform improvement are carried out on the basis of our legitimate interest in operating a secure, fair platform. These interests are balanced against your rights — we do not process more data than is proportionate.
• Consent: Where we send you promotional communications (bonus offers, tournament announcements), this is based on your consent, which you can withdraw at any time through your account notification settings or by contacting support.

Nova Patti does not sell, rent, or trade your personal data to any third party for their own commercial purposes. We share your data only in the limited circumstances described below, and only to the extent necessary:

• Payment Processors: Easypaisa, JazzCash, NayaPay, SadaPay, and card payment gateways receive your payment account details to process transactions. These providers operate under their own privacy policies and are subject to financial services regulations.
• Identity Verification Services: When KYC verification is required, Nova Patti uses accredited third-party verification services to authenticate your identity documents. These providers process your identity data under strict data processing agreements with Nova Patti.
• Fraud Prevention Networks: Nova Patti participates in industry fraud prevention networks. Relevant technical identifiers (such as anonymised device fingerprints) may be checked against fraud databases. No full identity data is shared in this context.
• Legal and Regulatory Authorities: Nova Patti is required by law to share data with Pakistani law enforcement, financial intelligence authorities, or regulatory bodies when presented with a lawful request. We cannot refuse legally mandated disclosure requests.
• Business Transfers: If Nova Patti undergoes a merger, acquisition, or asset sale, player data may be transferred as part of the transaction. Affected users would be notified before their data is transferred and becomes subject to a different privacy policy.

Nova Patti retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, and to comply with legal obligations. The following retention periods apply:

When data is no longer required and no legal obligation mandates its retention, Nova Patti securely deletes or permanently anonymises it. Anonymised aggregated data (such as platform usage statistics with no individual identifiers) may be retained indefinitely for analytical purposes.

Nova Patti implements a layered set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, and disclosure. These measures include:

• TLS Encryption: All data transmitted between your device and Nova Patti's servers is encrypted using TLS 1.2 or higher. This applies to every page of the platform, not just login or payment pages.
• Encrypted Data Storage: Sensitive personal data stored in our systems — including identity documents and payment account numbers — is encrypted at rest using AES-256 encryption.
• No Card Data Storage: Nova Patti does not store your debit or credit card numbers on its own servers. Card payments are processed entirely within the PCI-DSS compliant environments of our payment gateway partners.
• Access Controls: Access to player data within Nova Patti's systems is restricted on a strict need-to-know basis. Support agents, finance staff, and technical teams each have access only to the data categories required for their specific role.
• Intrusion Detection: Automated systems monitor Nova Patti's infrastructure for unusual access patterns, brute force login attempts, and other indicators of compromise around the clock.
• Breach Response: Nova Patti maintains an incident response plan. In the event of a data breach that poses a risk to your rights, affected users will be notified promptly with details of what occurred, what data was involved, and what steps have been taken.

Nova Patti uses cookies and similar tracking technologies on its website. A cookie is a small file stored on your device that helps the platform remember your preferences and session state across visits.

• Strictly Necessary Cookies: These cookies are essential for the platform to function. They maintain your logged-in session, remember your preferred language, and enable core features like the game lobby. You cannot opt out of these without logging out of the platform entirely.
• Analytics Cookies: Nova Patti uses first-party analytics to understand how players navigate the platform — which pages are visited most, where users drop off during registration, and how game categories are browsed. This data is aggregated and anonymised. You can opt out via your browser cookie settings.
• Responsible Gaming Cookies: These cookies remember your responsible gaming preferences and active session time limits across devices. Disabling them may prevent responsible gaming tools from working correctly across sessions.
• Security Cookies: Used to detect and prevent fraudulent activity, bot access, and session hijacking. These are essential and cannot be disabled.

Nova Patti does not use third-party advertising or retargeting cookies. You will not find Nova Patti tracking pixels embedded in advertisements on other websites. You can manage your cookie preferences through your browser settings. Clearing all cookies will log you out of the platform.

As a Nova Patti user, you have a number of rights in relation to your personal data. These rights are described below. To exercise any of them, contact support@novapatti.app with your registered mobile number and a description of your request. We aim to respond within 30 days.

• Right to Access: You can request a copy of the personal data Nova Patti holds about you. This is sometimes called a Subject Access Request (SAR). We will provide the data in a readable format within 30 days.
• Right to Rectification: If any of your personal data is inaccurate or incomplete, you have the right to have it corrected. For basic account details, you can update these yourself in account settings. For verified identity data, contact support.
• Right to Erasure: You can request that Nova Patti delete your personal data. This right is subject to legal retention obligations — we cannot delete financial records we are legally required to keep. For data not subject to such obligations, we will action deletion requests promptly.
• Right to Restrict Processing: You can ask Nova Patti to limit how your data is used in certain circumstances — for example, while a dispute is being investigated.
• Right to Data Portability: You can request your personal data in a structured, machine-readable format to transfer to another service provider where technically feasible.
• Right to Object: You can object to processing carried out on the basis of our legitimate interests. We will cease that processing unless we can demonstrate compelling legitimate grounds that override your rights.
• Right to Withdraw Consent: Where processing is based on your consent (promotional communications), you can withdraw that consent at any time. This does not affect the lawfulness of processing before withdrawal.

Nova Patti's platform is strictly for adults aged 18 and over. We do not knowingly collect personal data from anyone under the age of 18. If we discover that a minor has registered an account or provided us with personal data, we will immediately close the account, delete all associated data, and return any deposits made (less any withdrawals already processed).

Parents and guardians who believe a minor in their household has accessed Nova Patti should contact support@novapatti.app immediately. We take such reports seriously and act on them promptly. We also encourage the use of parental control software to restrict access to gaming platforms for households with children.

Nova Patti may update this Privacy Policy from time to time to reflect changes in our data practices, changes in applicable law, or improvements to the platform. When we make changes, we will update the "Last Updated" date at the top of this page.

For material changes — those that significantly affect how your data is used or your rights in relation to it — Nova Patti will notify you by SMS to your registered mobile number at least 7 days before the change takes effect. This mirrors the approach taken for material changes to our Terms and Conditions.

Continuing to use the Nova Patti platform after the effective date of any update constitutes acceptance of the revised Privacy Policy. If you do not accept the changes, you should close your account before the effective date. You may request a copy of any previous version of this policy by contacting support.

If you have any questions about this Privacy Policy, want to exercise your data rights, or wish to raise a concern about how Nova Patti has handled your personal data, please contact us through one of the following channels:

• Email: support@novapatti.app — for privacy rights requests, data access requests, or detailed concerns. Please include your registered mobile number in all correspondence.
• Live Chat: Available 24/7 via the Help icon on any page of the Nova Patti platform. For general privacy questions or quick clarifications.
• FAQ: Answers to common privacy and account questions are on the FAQ page.

Nova Patti aims to resolve all privacy-related enquiries within 30 days of receipt. If you are not satisfied with our response, you may also raise concerns directly with the relevant Pakistani data protection or financial regulatory authority.