Privacy Policy nft888 — Malaysia Player Data Protection

Nft888 collects your personal information to enable us to provide a safe, seamless gaming service that meets your needs as a player in Malaysia. We only collect data that is strictly necessary — nothing more, nothing less.

There are two main categories of information we collect:

Information You Provide Directly:

• Full name as stated on your identification card (MyKad)
• Date of birth for age verification
• Active email address for account communications
• A valid Malaysian phone number
• Bank account or e-wallet details for processing deposits and withdrawals
• Identity document copies submitted during the KYC (Know Your Customer) process
• Current residential address

Information Collected Automatically:

• IP address and approximate geographic location
• Device type, operating system, and web browser used
• Session log data including login and logout times
• Game history, wagering, deposits, and withdrawals
• Cookie data and session identifiers for security purposes
• Usage patterns and game preferences for service improvement

Every piece of data we collect is used for a clear and legitimate purpose. nft888 does not use your data for any purpose unrelated to the services you use. Here is how we use your information:

• Account Management: Creating, verifying, and maintaining your player account, including the mandatory KYC process.
• Transaction Processing: Processing your deposits, withdrawals, and all financial transactions securely and accurately.
• Platform Security: Detecting and preventing fraud, money laundering, bonus abuse, and other suspicious activity.
• Customer Support: Enabling our support team to assist you quickly and effectively whenever needed.
• Service Communications: Sending important notifications related to your account, transactions, and policy changes via email or SMS.
• Platform Enhancements: Analysing aggregate usage patterns to continuously improve the user experience on nft888.
• Legal Compliance: Meeting reporting and compliance obligations with the relevant authorities.
• Responsible Gaming: Monitoring wagering patterns to identify players who may need responsible gaming support.

For marketing communications such as promotions and bonus offers, we will only contact you if you have given your consent during registration. You may withdraw this consent at any time through your account settings.

Nft888 takes data sharing responsibilities very seriously. We will not share, sell, or disclose your personal information to any third party except in the following situations permitted by law or operational necessity:

• Payment Service Providers: Financial information required to process your deposits and withdrawals is shared with trusted payment gateway providers such as FPX, Touch 'n Go eWallet, GrabPay, and registered local banks.
• Game Providers: Usernames and session data required by third-party game providers (such as slot or live casino providers) to run games correctly.
• Regulatory Authority: When required by Malaysian law or a court order, we will disclose the necessary information to the relevant authorities.
• Fraud Detection: Required data may be shared with fraud prevention agencies and industry bodies to protect all players.

Protecting your personal data is a core commitment of nft888. We invest in the latest security infrastructure to keep your information safe at all times, even against increasingly sophisticated cyber threats.

The security measures we implement include:

• Data Encryption in Transit: All data transmitted between your browser and nft888 servers is protected with TLS 1.3 protocol and 256-bit SSL encryption.
• Data Encryption at Rest: Sensitive data such as financial information and identity documents is stored in encrypted form using AES-256 algorithms.
• Layered Access Controls: Only personnel with specific authorisation may access player personal data, and every access is logged for audit purposes.
• Continuous Monitoring: Our security systems operate 24 hours a day, 7 days a week to detect any unusual activity or intrusion attempts.
• Regular Penetration Testing: nft888 conducts regular security testing by independent cybersecurity experts to identify and address any vulnerabilities.
• Two-Factor Authentication (2FA): Players are encouraged to enable 2FA for an additional layer of account protection.

While we do everything within our means to protect your data, no system can be guaranteed 100% secure. We therefore encourage you to also take proactive steps such as using a strong password and not sharing your login credentials.

Nft888 uses cookies and similar tracking technologies to enhance your experience on our platform, ensure session security, and understand how players use our services.

There are four types of cookies we use:

• Essential Cookies: Required for core platform functions such as login, session management, and security. These cookies cannot be disabled as they are essential for the platform to function properly.
• Performance Cookies: Collecting information about how you use the platform — which pages you visit most, where you encounter issues — to help us improve our services.
• Functional Cookies: Saving your preferences such as language, layout, and platform settings so you do not need to reconfigure them each time you log in.
• Analytics Cookies: Used to understand overall usage trends for product planning purposes. This data is processed in aggregate and cannot be individually identified.

You can manage your cookie settings through your web browser. However, disabling essential cookies may affect platform functionality. Analytics and performance cookies can be turned off without impacting your gaming experience.

Under the Malaysian Personal Data Protection Act 2010 (PDPA) and nft888's own policy, you have the following rights regarding your personal data:

Nft888 retains your personal data only for as long as necessary to fulfil the purposes described in this Privacy Policy, or as required by applicable Malaysian law.

• Active Account Data: Retained for the duration of your active account and for 5 years after account closure for financial record and compliance purposes.
• Financial Transaction Data: Retained for a minimum of 7 years in line with Malaysia's anti-money laundering (AML) legal requirements.
• KYC Documents: Retained for the lifetime of the account plus 5 years, or longer if required by law.
• Communication Logs: Customer support session recordings and email logs are retained for 2 years.
• Technical Log Data: Server logs and technical diagnostic data are retained for 90 days.

Once the retention period expires, your data will be securely deleted or anonymised so it can no longer be personally linked to you. Our secure deletion process ensures data cannot be recovered after removal.

Nft888 is a gaming platform restricted to users aged 18 Years and Above only. We do not intentionally collect, store, or process any personal data from individuals under the age of 18.

All account registrations require age verification. Should we discover that data from an individual under the age of 18 has been inadvertently collected, we will:

• Closing the account immediately
• Deleting all associated data from our systems
• Refunding any deposits that have been made
• Reporting the incident to the relevant authorities if required

The nft888 platform may contain links to third-party websites or services such as game providers or payment processors. This Privacy Policy applies solely to the nft888 platform.

Nft888 is not responsible for the privacy practices of third-party websites. We encourage you to read the privacy policy of every website you visit. While we strive to partner only with those who uphold high privacy standards, we cannot fully control the data practices of those third parties.

Nft888 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service improvements. Any amendments made will take effect immediately upon being published on this website.

When we make significant changes to this Privacy Policy, we will:

• Updating the "Last Updated" date at the top of this document
• Displaying a clear notice on the platform's home page for at least 7 days
• Sending a notification to your registered email address for any material changes

We encourage you to review this page periodically to stay informed about how we protect your information. Continued use of the nft888 platform after any amendments are published will be considered your acceptance of the updated terms.

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, the nft888 Data Protection Officer (DPO) team is ready to assist you.