nft888 Privacy Policy

1. Introduction

nft888 operates the online gaming platform accessible at nft888.win, offering live casino, sports betting, slots, Toto 4D, and poker products to Members in Malaysia and other permitted jurisdictions. In the course of providing these services, nft888 processes personal data relating to its Members and website visitors.

This Privacy Policy is intended to give you a clear and honest account of what data nft888 collects, why we collect it, how long we keep it, and what your rights are in relation to it. This Policy forms part of the nft888 Terms & Conditions and should be read alongside them.

nft888 takes data protection seriously. The trust Malaysian players place in a financial-grade platform is not taken lightly. The same rigour applied to securing your MYR wallet and payment transactions is applied to securing your personal information.

2. Data We Collect

nft888 may collect and process the following categories of personal data in connection with your account and use of the Platform:

Identity Data

Contact Data

Financial Data

Technical & Usage Data

Communications Data

3. How We Collect Data

nft888 collects personal data through the following channels:

• Account Registration: Data you provide directly when creating your nft888 account, including your name, date of birth, contact details, and chosen login credentials.
• KYC Verification: Identity documents submitted in response to nft888's Know Your Customer verification process, which may include MyKad, passport, proof of address, and proof of payment method.
• Deposits & Withdrawals: Financial data processed through FPX, Touch 'n Go eWallet, Boost, and cryptocurrency payment channels when you transact on the Platform.
• Platform Activity: Technical and usage data generated automatically through your interaction with the nft888 Platform, including through cookies and similar technologies described in Section 7.
• Customer Support: Information you provide when contacting nft888's support team via live chat or email.
• Third-Party Sources: In limited circumstances, nft888 may receive data from identity verification agencies, fraud prevention services, or payment processors for the purpose of verifying your identity and protecting the integrity of the Platform.

4. Purposes of Processing

nft888 processes your personal data for the following purposes:

• Account Management: Creating, maintaining, and administering your nft888 account, including login authentication, password management, and account security.
• Payment Processing: Facilitating deposits and withdrawals in MYR via FPX, Touch 'n Go eWallet, Boost, and cryptocurrency channels, and maintaining accurate transaction records.
• Identity Verification (KYC): Verifying your identity, age (21+), and eligibility to use the Platform in compliance with applicable regulatory obligations and responsible gaming requirements.
• Fraud Prevention & Security: Detecting, investigating, and preventing fraudulent transactions, money laundering, account takeovers, bonus abuse, and other prohibited conduct as defined in the Terms & Conditions.
• Responsible Gaming: Monitoring account activity for signs of problem gambling, enforcing self-exclusion requests, and administering deposit limits, session timers, and other responsible gaming tools activated by Members.
• Customer Support: Responding to enquiries, resolving complaints, and administering disputes submitted through live chat or email.
• Legal Compliance: Fulfilling nft888's obligations under applicable law, including record-keeping requirements, reporting obligations, and cooperation with lawful requests from regulatory or law enforcement authorities.
• Platform Improvement: Analysing aggregated usage data to improve Platform functionality, game offerings, and user experience. This analysis uses anonymised or pseudonymised data where possible.
• Marketing Communications: Where you have provided consent, sending promotional offers, bonus notifications, and platform news relevant to your gaming interests. You may withdraw this consent at any time via your account notification settings.

5. Legal Basis for Processing

nft888 processes personal data on the following legal bases:

• Contractual Necessity: Processing required to perform the contract between you and nft888 — including account management, payment processing, and game access.
• Legal Obligation: Processing required to comply with applicable law, including KYC verification, anti-money laundering obligations, and record retention requirements.
• Legitimate Interests: Processing carried out in pursuit of nft888's legitimate business interests, including fraud prevention, platform security, and service improvement, where those interests are not overridden by your rights and interests.
• Consent: Processing based on your freely given, informed consent — specifically in relation to marketing communications. Consent may be withdrawn at any time without affecting the lawfulness of processing carried out prior to withdrawal.

6. Third-Party Sharing

nft888 does not sell or rent your personal data to third parties. We may share personal data with the following categories of recipients, strictly for the purposes described in this Policy:

• Payment Processors: FPX-connected banking institutions (including Maybank, CIMB, Public Bank), Touch 'n Go eWallet, Boost, and cryptocurrency payment processors — for the purpose of processing your deposits and withdrawals.
• Identity Verification Providers: Third-party KYC and document verification services that assist nft888 in fulfilling its age verification and identity confirmation obligations.
• Fraud Prevention Services: Risk management and fraud detection providers who help nft888 identify and prevent prohibited conduct on the Platform.
• Game Content Providers: Licensed game providers (including Pragmatic Play, Evolution Gaming, and others) may receive limited technical data necessary for the delivery and integrity of their game content on the nft888 Platform.
• IT & Infrastructure Providers: Cloud hosting, content delivery, and cybersecurity service providers who process data on nft888's behalf under contractual data processing agreements.
• Legal & Regulatory Authorities: Regulatory bodies, law enforcement agencies, or courts where disclosure is required by law or pursuant to a lawful order.

All third parties with whom nft888 shares personal data are required to handle that data in accordance with applicable data protection standards and may not use it for their own unrelated purposes.

7. Cookies & Tracking Technologies

nft888 uses cookies and similar tracking technologies on nft888.win to enable Platform functionality, maintain your login session, and collect usage analytics. The categories of cookies used are:

• Strictly Necessary Cookies: Required for the Platform to function. These cannot be disabled without impairing your ability to use nft888. They include session authentication cookies and security tokens.
• Functional Cookies: Used to remember your preferences — such as language settings, game lobby filters, and display options — to improve your experience on nft888.
• Analytics Cookies: Used to collect anonymised data about how visitors interact with nft888.win, which pages are most visited, and where users encounter issues. This data helps nft888 improve Platform performance and content.
• Marketing Cookies: Where you have consented, cookies that assist in delivering relevant promotional content within the nft888 Platform. These cookies do not track your activity outside of nft888.win.

You may control cookie settings through your browser's privacy controls. Please note that disabling certain cookies may affect the functionality of the nft888 Platform, including login persistence and game loading.

8. Data Retention

nft888 retains personal data for the periods described below, after which data is securely deleted or anonymised:

• Account Data: Retained for the duration of your nft888 account plus five years following account closure, in accordance with standard compliance record-keeping requirements.
• Transaction Records: Deposit, withdrawal, and betting records are retained for a minimum of five years from the date of each transaction.
• KYC Documents: Identity verification documents are retained for five years from the date of verification or account closure, whichever is later.
• Support Communications: Live chat transcripts and email correspondence are retained for three years from the date of the interaction.
• Marketing Consent Records: Records of marketing consent and withdrawal of consent are retained for five years.
• Technical Logs: Server logs, IP records, and access logs are retained for 12 months and then deleted on a rolling basis.

9. Security Measures

nft888 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• AES-256 encryption of personal data stored on nft888 servers
• TLS 1.2+ encryption for all data in transit between your device and nft888 infrastructure
• Role-based access controls limiting internal data access to authorised personnel only
• Multi-factor authentication required for administrative access to nft888 backend systems
• Regular security audits and penetration testing of the Platform infrastructure
• Automated anomaly detection systems monitoring for unusual account activity and potential data breaches
• Incident response procedures providing for prompt notification in the event of a confirmed data breach affecting Members

While nft888 implements industry-standard security measures, no online platform can guarantee absolute security. You are encouraged to use a strong, unique password for your nft888 account and to enable two-factor authentication for additional protection.

10. Your Rights

Subject to applicable law, you have the following rights in relation to your personal data held by nft888:

• Right of Access: You may request a copy of the personal data nft888 holds about you.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to nft888's legal retention obligations.
• Right to Restriction: You may request that nft888 restrict processing of your data in certain circumstances, such as while a dispute is being resolved.
• Right to Data Portability: You may request a machine-readable copy of the personal data you have provided to nft888, where technically feasible.
• Right to Object: You may object to processing of your data on the basis of legitimate interests, including for direct marketing purposes. An objection to marketing will be honoured immediately.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact nft888 support at [email protected]. nft888 will respond to all valid data rights requests within 30 calendar days. In complex cases, this period may be extended by a further 30 days, with notice provided to you.

11. Children & Minors

The nft888 Platform is strictly restricted to individuals aged 21 years and above. nft888 does not knowingly collect personal data from individuals below this age. If nft888 becomes aware that personal data has been collected from an individual who has misrepresented their age, that account will be suspended immediately, all associated data will be deleted, and any real-money balance will be returned to the verified source of funds. If you believe a minor has registered on the Platform, please notify nft888 support immediately.

12. International Data Transfers

nft888 may transfer personal data to servers or third-party service providers located outside Malaysia. Where such transfers occur, nft888 ensures that appropriate safeguards are in place — including contractual data processing agreements incorporating standard data protection clauses — to maintain a level of protection equivalent to that described in this Policy. nft888 does not transfer personal data to jurisdictions that do not provide an adequate level of data protection without first implementing appropriate transfer mechanisms.

13. Changes to This Policy

nft888 reserves the right to update this Privacy Policy at any time. Where changes are material, nft888 will notify affected Members via email or an in-account notification at least 14 days before the changes take effect. Continued use of the Platform following notification of a change constitutes acceptance of the revised Policy. The "Last updated" date at the top of this page will always reflect the most recent revision.

14. Contact

For any questions, concerns, or requests relating to this Privacy Policy or your personal data, please contact nft888 via:

• Live Chat: Available 24/7 from within your nft888 account dashboard
• Email: [email protected]

nft888 aims to acknowledge all data-related enquiries within one business day and to resolve them within 30 calendar days of receipt.