nft888a Privacy Policy

Introduction

nft888a is an online casino and sports betting platform serving Malaysian users and other registered players. We are committed to processing personal data responsibly, transparently, and in accordance with internationally recognised data protection principles. This Privacy Policy applies to all data collected through the nft888a website, mobile experience, customer support channels, KYC process, payment infrastructure, and any other feature that involves the collection or use of personal information.

By creating an nft888a account, depositing funds, placing a bet, or otherwise using the platform, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein. Where consent is the legal basis for a particular processing activity, you have the right to withdraw that consent at any time without affecting the lawfulness of prior processing.

Definitions

Throughout this document, the following terms carry the meanings assigned below:

• "Personal Data" — any information that identifies or can reasonably be used to identify a natural person, including name, national identity number, email address, mobile number, IP address, and account credentials.
• "Processing" — any operation performed on personal data, including collection, recording, organisation, storage, adaptation, retrieval, use, disclosure, erasure, or destruction.
• "Data Controller" — nft888a, as the entity that determines the purposes and means of processing personal data.
• "Data Subject" — the natural person to whom the personal data relates; in most cases, a registered player or website visitor.
• "KYC" — Know Your Customer processes conducted to verify identity, age, address, and payment ownership.
• "Third Party" — any organisation or individual that is not nft888a and is not acting under the direct authority of nft888a.
• "MYR" — Malaysian Ringgit, the primary transaction currency supported on nft888a for Malaysian players.

Categories of Personal Data Collected

nft888a collects the following categories of personal data, depending on how you use the platform:

• Registration data: Full legal name, date of birth, gender, residential address in Malaysia or elsewhere, email address, and mobile phone number.
• Identity verification data: Malaysian MyKad, passport, or driver's licence image, proof of address (such as a Tenaga Nasional or Indah Water utility bill or a bank statement), and in certain cases a selfie photograph holding your identity document.
• Payment data: Records of deposits and withdrawals processed via Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong, USDT, or BTC, including transaction reference numbers, amounts in MYR or cryptocurrency, and ownership confirmation. Full card numbers or full bank account numbers are not stored on nft888a servers.
• Account activity data: Login times, session duration, games played, bets placed on EPL, Liga Super Malaysia, UFC, or casino tables, wager amounts, game outcomes, bonus claims, and withdrawal requests.
• Device and technical data: IP address, browser type and version, operating system, device identifiers, screen resolution, referring URL, and approximate geographic location derived from IP.
• Support correspondence: Chat transcripts, email messages, WhatsApp exchanges, and records of telephone calls with the nft888a customer support team, including timestamps and agent notes.
• Responsible gambling data: Deposit limits set by you, self-exclusion periods, cooling-off requests, and session reminder preferences.

nft888a does not knowingly collect personal data from individuals under the age of 21. If we become aware that an account was registered by or for a person under 21, that account will be suspended and the matter investigated promptly.

Legal Basis and Purposes of Processing

nft888a processes personal data only where a recognised legal basis exists. The primary legal bases and corresponding processing purposes are as follows:

• Performance of a contract: Processing your registration data, verifying identity for KYC, authorising deposits and withdrawals in MYR, settling casino game results, settling sports wagers, and administering your account all constitute necessary steps to provide the services you requested from nft888a.
• Legal obligation: nft888a processes identity, payment, and transaction data to comply with international anti-money-laundering requirements, fraud prevention obligations, and age verification duties under applicable licensing conditions.
• Legitimate interest: nft888a processes device, session, and account activity data to detect and prevent unauthorised access, account fraud, payment abuse, bonus manipulation, and prohibited betting conduct. These legitimate interests are balanced against the rights and freedoms of data subjects.
• Consent: Where you have opted in to marketing communications, nft888a may process your contact details to send you personalised promotional offers, bonus announcements, and sports event notifications. Consent may be withdrawn at any time through your account settings or by contacting support.

Cookies and Tracking Technologies

nft888a uses cookies and similar technologies to maintain authenticated sessions, remember language and display preferences, measure platform performance, and — where consent has been provided — support personalised content delivery. The following cookie categories may be present:

• Strictly necessary cookies: Required for the website to function. They maintain your login session, enforce security protections, and remember your shopping cart during a deposit session. These cannot be disabled without breaking core platform functionality.
• Analytics cookies: Help nft888a understand how players navigate the platform — which pages are visited most, how long sessions last, and at which points players encounter difficulty. Data is aggregated and not used to identify individuals directly.
• Functional cookies: Remember optional settings such as preferred language, responsible gambling display preferences, and recently viewed game categories.
• Marketing cookies: Used only where you have provided explicit consent. They may track interactions with nft888a promotional content or refer-a-friend campaigns and help avoid showing you the same offer repeatedly.

You may manage or withdraw cookie consent at any time through your browser settings. Disabling strictly necessary cookies will affect your ability to log in and use core platform features.

Disclosure and Third-Party Sharing

nft888a does not sell, rent, or trade your personal data to third-party marketers. Personal data may be shared with third parties only in the following circumstances:

• Payment processors: Information necessary to complete a DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, or cryptocurrency transaction is shared with the relevant payment service provider solely to execute the transaction.
• Game and platform providers: Licensed casino game studios and live dealer operators may receive game session data required to determine results, manage jackpot pools, and investigate game-related disputes.
• Identity verification services: Third-party KYC and document verification providers may process your identity documents for the sole purpose of confirming your eligibility to maintain an nft888a account.
• Fraud and risk management providers: Transaction risk scoring, device fingerprinting, and chargeback prevention services may process limited session and payment data to protect players and nft888a from fraud.
• Legal and regulatory disclosure: nft888a may disclose personal data where required by a court order, law enforcement authority, licensing regulator, or other legal process.
• Business transfers: In the event of a merger, acquisition, or sale of substantially all assets, player data may be transferred to a successor entity that assumes the obligations of this Privacy Policy.

All third-party service providers engaged by nft888a are required to process personal data only for the specified purpose, apply appropriate security measures, and refrain from any further use or onward disclosure.

Data Retention

nft888a retains personal data for as long as necessary to fulfil the purposes described in this Privacy Policy and to comply with applicable legal retention obligations. The following retention guidelines apply as a general principle:

• Active account data: Retained throughout the period your nft888a account remains open and active.
• KYC and identity documents: Retained for a minimum of five years following account closure or the last transaction, in line with standard anti-money-laundering record-keeping expectations.
• Payment and transaction records: Retained for a minimum of five years following the transaction date.
• Support communications: Retained for three years from the date of the last communication, unless a specific dispute requires longer retention.
• Marketing preference records: Retained for three years from the date of the last consent or preference update.

When data is no longer needed and retention obligations have been met, nft888a will securely delete or anonymise it. Anonymised data that cannot be re-associated with an individual may be retained indefinitely for statistical and platform improvement purposes.

Security Measures

nft888a implements technical and organisational security measures proportionate to the risk associated with each category of personal data. Current measures include:

• 256-bit SSL/TLS encryption applied to all data transmitted between your browser or mobile device and nft888a servers.
• Encrypted storage for sensitive account credentials, identity documents, and payment references.
• Role-based internal access controls that restrict employee access to personal data on a strict need-to-know basis.
• Regular security assessments and penetration testing of platform infrastructure.
• Multi-factor authentication options for player account login.
• Automated fraud and anomaly detection systems that flag unusual account activity for human review.

No data transmission over the internet is completely immune to risk. You should protect your nft888a credentials, avoid using public or shared Wi-Fi to access your account, and contact support immediately if you suspect unauthorised access. nft888a will notify you of a material data breach affecting your personal data in a manner consistent with applicable obligations.

User Rights and Data Subject Requests

Subject to applicable law and verification of your identity, you have the following rights in relation to your personal data held by nft888a:

• Right of access: Request a copy of the personal data nft888a holds about you and information about how it is processed.
• Right to rectification: Request correction of inaccurate or incomplete personal data, including updating your registered address, mobile number, or email.
• Right to erasure: Request deletion of personal data where it is no longer necessary, where consent has been withdrawn, or where processing is unlawful. This right is subject to legal retention obligations — for example, transaction records may need to be retained for five years regardless of a deletion request.
• Right to restrict processing: Request that nft888a suspends processing of your data while the accuracy of that data is being verified or a legitimate interest objection is being assessed.
• Right to data portability: Request a copy of your personal data in a structured, commonly used, machine-readable format where processing is based on consent or contract.
• Right to object: Object to processing based on legitimate interest, including direct marketing. Where you object to marketing, nft888a will stop sending promotional communications promptly.
• Right to withdraw consent: Withdraw consent for any processing activity based on consent — such as marketing communications — at any time without penalty, by adjusting account settings or contacting support.

To exercise any of these rights, contact the nft888a support team with your username and a clear description of your request. nft888a will verify your identity before processing the request and respond within a reasonable timeframe. Some requests may require additional information to fulfil accurately.

International Data Transfers

nft888a operates with infrastructure, game providers, and service partners that may be located in jurisdictions outside Malaysia. Where personal data is transferred internationally, nft888a applies safeguards intended to ensure that the data receives a comparable level of protection to that applied within the platform's primary operating jurisdiction. Such safeguards may include contractual clauses with data processors, adherence to recognised transfer frameworks, or equivalent measures appropriate to the circumstances of each transfer.

Malaysian players should be aware that their data may be processed on servers located outside Malaysia and that the legal framework governing data protection in those jurisdictions may differ from Malaysian law. nft888a takes reasonable steps to select reputable processors and to contractually require appropriate security and confidentiality standards.

Changes to This Privacy Policy

nft888a may update this Privacy Policy periodically to reflect changes in data practices, platform features, payment methods, applicable legal requirements, or service provider relationships. Material changes will be communicated to registered players through a platform notification or account message before the revised policy takes effect. The effective date shown at the top of this page indicates the current version in force.

Continued use of nft888a following a notified amendment constitutes acceptance of the revised Privacy Policy. If you do not accept the changes, you should stop using the platform and may request closure of your account through the customer support team.

Contact Us Regarding Privacy

For questions about this Privacy Policy, to exercise your data subject rights, to report a privacy concern, or to raise a complaint about how your personal data has been handled, please contact the nft888a support team. We aim to acknowledge all privacy-related requests promptly and to provide a substantive response within a reasonable period.

Support email (plain text, not a clickable link): [email protected]

Live Chat and WhatsApp support are available 24/7, including Malaysian public holidays, with an average first-response time of 3–5 minutes. When submitting a privacy request, please include your registered username, a description of the personal data concerned, and the specific right or concern you wish to raise.