Privacy Policy

Protecting your personal data and assets is our highest priority. We are fully committed to keeping them secure.

Nova Bitvaul collects and retains information necessary for your trading activities on our trading platform. The methods we use to collect and store this information are set out in the Privacy Policy below.

The following principles guide our policy:

• To ensure full transparency about how we collect and store your personal data:

Our aim is to ensure you clearly understand how we collect and process your data, so you can make informed decisions. We follow clear guidelines and procedures for handling data on this official website. This policy sets out the methods we use and provides transparent, concrete information on how your data is used. You’re in control.

We will provide timely updates whenever we determine you should be notified. Transparency is central to how we operate.

Our trained staff are always available to answer any questions you may have about our processes, including our obligations under the laws of Malaysia. You can contact us at: info@nova-bitvaul.com

• We do not use personal data for any purpose other than what is described in our Privacy Policy.

We may process personal data for purposes such as ensuring the proper operation of Nova Bitvaul services and facilitating connections between trader-members and third-party trading platforms. We may also use this data to maintain and improve functions on our official website and services, protect our rights, and comply with regulatory or other legal obligations. Where necessary, we may process data to carry out administrative and other business functions related to the Services provided to you as the client.

To provide better services tailored to your preferences and needs, Nova Bitvaul uses personal data.

• To access the essential tools for protecting your personal data and safeguarding your rights:

At any time, you may contact us to request access to your personal data. We can update or delete it where appropriate. We also support requests to transfer your data to you or to a designated third party. These services help you exercise your rights to privacy and control.

• Safeguard your personal data:

We use bank-grade security measures to protect your information. While no system can be guaranteed 100%, we are committed to continuously upgrading our systems and strengthening the safeguards already in place.

We maintain a comprehensive Privacy Policy and enterprise-grade security systems.

1. The Scope?

This policy sets out how we collect, process, and share data relating to natural persons.

The terms of this policy apply to all natural persons who are identifiable or have been identified. This includes any individual who can be identified, or has already been identified, in connection with data entrusted to us or data we can access and/or combine.

In the Privacy Policy, data processing specifically refers to the storage, management, and organisation of your personal data.

We do not collect, and do not intend to collect, any information about individuals under the age of 18. We also do not allow anyone under 18 to use our platform for any purpose. If we discover a user or any data relating to a person under 18, we will delete that information immediately.

2. Which personal data do we store?

When you register with us, we collect the personal data required to enable your use of our services. Where necessary, we may also request additional details to verify account ownership. To maintain and improve service quality, we collect and analyse data about how you use our official website and trading platform, as well as information from third-party partners.

3. You are never required to provide your personal data to the company.

Although you are not obliged to provide your data, choosing not to do so may limit the services we can offer and may restrict your access to our platform.

4. What personal data do we collect? When you visit our website, we may collect the following personal data:

We do not collect any data that directly identifies you. We do, however, record your account activity, your IP address, and the date and time of access when you use your account on our official website. For maintenance, security, and support, we retain system crash reports, browser details, and the type of device used to access your account. We also record the language setting associated with your account.

Regarding personal data collection, we only collect and retain the information you consent to provide when you connect, through us, with a third-party trading platform.

The personal data you provide to third-party platforms may include your full name, address, phone number, and email address.

5. Why does the company need my personal data, and is it legal for them to collect it?

The company collects, stores, and processes your personal information solely for the purposes set out in the Policy. All such uses and processing comply with applicable laws in Malaysia.

The company will only handle, process, or transmit your data in accordance with the relevant laws in Malaysia. The legal grounds for this are as follows:

• You consent to the company storing and processing your personal data. By submitting your data to the company, you also authorise us to transfer it to the appropriate third-party trading platform. Your consent covers the processing of your personal data for one or more purposes.
• To enhance its services, assert or defend legal claims, and pursue legitimate interests, among other purposes, the company may need to store and process your personal data.
• We process data where necessary to meet our legal obligations.

If you would like to learn more about the data processing activities the company is required to undertake, please contact us via email.

Below is a list of the specific purposes for which we may process your personal data, together with the legal basis we rely on.

6. Disclosure of Personal Data to Third Parties

For activities such as storing and processing IP addresses, carrying out user surveys and analyses, and delivering related services, the company may share anonymised personal data with third-party service providers.

Upon your request, we may share certain personal data you provide with third-party services. In such cases, the handling of your data will be governed by that company’s privacy policy. This may include multiple digital trading platforms.

To better serve our clients and enhance our overall services, the company may share personal data with its affiliates and partner companies.

Where required by law, or to protect the company’s rights and assets and those of our third-party partners, we may disclose data to the relevant legal or regulatory authorities.

In connection with major corporate transactions—such as the sale of the company or the pursuit of investment or loans—we may share relevant data in a lawful and appropriate manner. This also applies in the event of a merger, restructuring, consolidation, or bankruptcy, as permitted by law.

7. Use of Cookies and Third-Party Services

Cookies and similar technologies may be used for site analytics and in collaboration with advertising partners, in accordance with applicable laws and standard industry practice.

Cookies are small text files stored on your device when you visit our official website. We use them to collect information about your browsing behaviour and preferences so we can personalise and enhance your experience. Cookies allow us to remember your settings and tailor our services accordingly. They also support site analytics and aggregated statistics for strategic planning and improvement.

This site uses two main types of cookies. Session cookies are stored only for the duration of your visit and are deleted when you close your browser. Persistent cookies remain in your browser after your session ends, allowing the site to recognise you when you return and making your experience smoother.

Types of cookies:

Cookies may be used as necessary, in accordance with their intended purposes:

Cookies are blocked or have been deleted in your browser.

To delete or block cookies, adjust your browser settings. For step-by-step guides, follow the links below for the most popular browsers.

• firefox
• Microsoft Edge
• Google Chrome
• safari

Blocking cookies may prevent some site functions and features from working as intended.

ONLINE TRACKING NOTICE

Your personal data will be retained for as long as necessary to perform the operations set out elsewhere in this policy. We may keep it longer to comply with applicable laws and regulations, or in line with our company policies.

At your request and discretion, your personal data will be shared with third-party trading platforms for 12 months. When this period ends, and with your consent, we will continue sharing your data for a further 12 months.

As part of our operations, we conduct regular reviews of all personal data to determine whether it remains necessary.

9. Transfers of personal data to third countries or international organisations

Where necessary to deliver our services or for security reasons, we may transfer personal data to third countries (countries other than your own) and to international organisations, using robust, verified security protocols. We maintain data protection measures to the highest possible standard to safeguard your information and ensure you retain access to legal rights and remedies in all circumstances.

All residents in the EEA (European Economic Area) are protected by data protection laws and safeguards.

• All data transfers take place under EU legal jurisdiction and competence and comply with the data protection standards in Article 45(3) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (“GDPR”).
• All data transfers between public bodies or authorities are carried out in accordance with Article 46(2). These transfers are governed by a legally binding and enforceable agreement.
• Data transfers are carried out in accordance with the European Commission’s Standard Contractual Clauses under Article 46(2)(c) of the GDPR, which set the applicable conditions. The Clauses are available on the European Commission’s official website at https://ec.europa.eu/info/law/law-topic/data-protection/data-transfers-outside-eu/model-contracts-transfer-personal-data-third-countries_en.

To learn more about the specific security measures the company uses to protect your personal data during transfers to third countries, please send your request via email to info@wealthwaydigital.uk

10. Personal Data Protection

Personal data is safeguarded using the highest level of technical and organisational measures, aligned with industry best-practice standards. These controls are designed to prevent unlawful or accidental destruction, loss, or alteration of data.

While we exercise the highest level of care and follow gold-standard, legally mandated data protection practices, it is not possible to guarantee that your personal data will remain error-free in all circumstances. Accordingly, we are not liable for any disclosure of personal data or for incidental, intangible, or consequential loss or damage. This includes situations beyond our control, such as transmission errors, unauthorised third-party access, or other similar causes.

In response to legally binding requests from regulators or legal bodies, we may be required by law to share your personal data. Once disclosed to such authorities in compliance with the law, we do not control how they handle, store, or safeguard your data.

Any information sent over the internet, including personal information, may be intercepted and is not completely secure. The Company cannot guarantee the security of any data transmitted online.

11. Hyperlinks to third-party websites

On this website, you may encounter links to third-party applications and websites outside our official website. Please note that these third parties are not affiliated with us and are not under the company’s control, and our privacy policy does not apply to them. They maintain their own policies and procedures for the collection and processing of personal data, and we are not responsible for their practices. Please use at your own discretion.

Before providing any personal data, always review the privacy policy on the company’s official website. Confirm that its data collection, use, and processing practices align with your preferences and priorities. Only share information directly with the service provider.

12. Policy Amendments

We may update or amend this policy at any time. Any changes will be communicated via our official website and other appropriate channels. The updated privacy policy will be posted on the website and will take effect immediately upon publication, unless stated otherwise.

13. Your Rights Regarding Personal Data

You retain full control and the final say over how all of your personal data is used, including the right to verify its accuracy, correct any errors, and choose to delete it or restrict the scope and nature of any processing by us.

This page contains information relevant to residents of the EEA:

Your personal data is protected by the rights described herein. You can exercise those rights immediately by sending an email to the address below.

Accessing Your Rights

If the personal data you have provided is accurate, you may access it at any time. Any of your personal data that we process is accessible to us and can therefore be verified.

You may request access to your personal data at any time for verification purposes, and we will provide it to you in electronic format. If you require additional copies of the data we process, beyond the initial copy, we may charge a reasonable fee.

Rights granted under applicable law and this Privacy Policy must not infringe the rights of others. The company may refuse or restrict access to personal data where such access would compromise the rights or freedoms of others.

Right to Rectify Errors

If your personal data contains any omissions or inaccuracies, you or the Company may correct it to ensure proper processing.

Erasure Rights

You have the right to request the deletion of your personal data in the following circumstances: 1) where your personal data has been processed without your consent or beyond lawful limits; 2) when you ask us to remove the data and the Company has no legal obligation to retain it; 3) if you object to any further processing by us, even if lawful and based on our or a third party provider’s legitimate interests; and 4) where we are legally required to delete your data.

Your right to deletion may be overridden by legal obligations under EU or any member state law. This also applies where the data is necessary for the establishment, exercise, or defence of legal claims.

Right to Restrict Data Processing

You have the right to request a restriction on the processing of your personal data if you believe it is inaccurate.

If you request that we restrict the use of your personal data, we will delete it unless: 1) applicable law in the European Union or any Member State prevents this; 2) with your consent, it is required to defend against or exercise legal claims; 3) deletion would compromise the rights of another natural person.

Data Portability Rights

You have the right to access and review any personal data you have provided, if you have consented in any manner to its collection and it is processed by automated systems.

You may request the transfer of your personal data to another company or organisation, where technically feasible. Exercising this right does not affect your right to have your data deleted. We may decline a request if fulfilling it would infringe the rights or freedoms of another individual.

Right to challenge the processing of your data

Although the Company may process data to pursue its legitimate interests, or those of a third-party service provider, you have the right to object and request that such processing stop. This right does not apply where there are compelling legal grounds to continue, including for the establishment, exercise, or defence of legal claims. In such cases, we may continue processing your personal data.

You may, at any time, request that your personal data not be processed for any direct marketing purposes.

Your Right to Withdraw or Refuse Consent

You have the right to withdraw your consent to our processing of your personal data at any time. Where possible, the withdrawal will take immediate effect and will not affect any processing carried out before you withdrew consent.

If you are dissatisfied for any reason, you have the right to lodge a complaint with any legal, regulatory or other supervisory authority.

If you believe your rights and freedoms have been compromised in relation to the processing of your personal data, each European Union Member State has a designated regulatory and supervisory authority to handle such matters. You may lodge a complaint with the relevant authority you consider appropriate.

Section 13 sets out the circumstances in which your personal data rights may be limited under European Union law or the laws of its Member States.

Once we receive your request about your personal data and its processing, we will provide access to the information you have requested, as outlined in Section 13 of this policy. We may extend this timeframe by up to two months, depending on the volume and nature of requests. If an extension is required, we will notify you within one month of receiving your request.

We will provide the requested information electronically at no charge, unless doing so would contravene applicable law or the provisions of Section 13. We may charge a reasonable fee or refuse a request if it is unfounded, excessive, or repetitive.

We reserve the right to request additional proof of identity if we have any reasonable doubt about the identity of the person requesting personal data, for data protection and security purposes.