ns8 Privacy Policy

1. Introduction

ns8 ("ns8", "we", "us", "our") is committed to protecting the privacy and personal data of all individuals who use the ns8 online gaming platform at ns8.one ("Platform"). This Privacy Policy ("Policy") describes how ns8 collects, uses, stores, discloses, and protects personal data in connection with the operation of the Platform and the provision of our online casino, sports betting, slot, and lottery services to players in Malaysia and other jurisdictions.

This Policy is to be read alongside the ns8 Terms and Conditions, which govern use of the Platform. By registering an ns8 account or using the Platform in any capacity, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein.

2. Data Controller

ns8 is the data controller in respect of the personal data collected and processed through the Platform. As data controller, ns8 determines the purposes and means of processing your personal data and is responsible for ensuring that such processing complies with applicable data protection laws and regulations.

For all data protection enquiries, including data subject rights requests and complaints, you may contact ns8 via the 24/7 customer support live chat on the Platform or by email at [email protected].

3. Data We Collect

ns8 collects the following categories of personal data in connection with account registration, Platform use, and regulatory compliance:

• Identity Data: Full legal name, date of birth, nationality, and government-issued identification document details (such as NRIC number, passport number) as required for age and identity verification.
• Contact Data: Email address, mobile phone number, and residential address.
• Financial Data: Payment method details, transaction history, deposit and withdrawal records, and wallet balance information. ns8 does not store full payment card numbers; card data is handled by our PCI-DSS compliant payment processors.
• Account Data: Username, account preferences, responsible gaming settings, self-exclusion elections, and communication preferences.
• Gameplay Data: Betting history, game participation records, session duration, wagers placed, and outcomes received.
• Technical Data: IP address, device identifiers, browser type and version, operating system, and connection data collected automatically when you access the Platform.
• Usage Data: Pages visited, features accessed, navigation patterns, and interactions with Platform content.
• Communications Data: Records of customer support interactions, including live chat transcripts and email correspondence.

4. How We Collect Data

ns8 collects personal data through the following means:

• Direct Collection: Information you provide when registering an account, completing identity verification, making deposits or withdrawals, contacting customer support, or updating your account profile.
• Automated Collection: Technical and usage data collected automatically via cookies, server logs, and similar tracking technologies when you access and interact with the Platform.
• Third-Party Sources: Identity and fraud verification data received from third-party identity verification service providers used to fulfil ns8's regulatory Know Your Customer (KYC) obligations.

5. Purposes & Legal Basis for Processing

ns8 processes your personal data for the following purposes and on the following legal bases:

• Account Management & Contract Performance: To register and manage your ns8 account, process transactions, and provide access to Gaming Services. Legal basis: Performance of contract.
• Identity & Age Verification: To verify your identity and confirm you meet the 21+ age requirement, in compliance with our licensing obligations. Legal basis: Legal obligation and legitimate interests.
• Payment Processing: To process deposits, withdrawals, and refunds through our payment service providers. Legal basis: Performance of contract.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, money laundering, and other prohibited conduct on the Platform. Legal basis: Legal obligation and legitimate interests.
• Regulatory Compliance: To comply with applicable gaming licensing requirements, anti-money laundering (AML) obligations, and other legal and regulatory requirements. Legal basis: Legal obligation.
• Responsible Gaming: To monitor gameplay patterns and apply responsible gaming measures including deposit limits and self-exclusion. Legal basis: Legal obligation and legitimate interests.
• Customer Support: To respond to your enquiries and resolve disputes. Legal basis: Performance of contract and legitimate interests.
• Platform Improvement: To analyse how the Platform is used and improve its functionality, performance, and user experience. Legal basis: Legitimate interests.
• Marketing Communications: To send you promotional offers, news, and personalised recommendations where you have consented to receive such communications. Legal basis: Consent.

6. Third-Party Disclosure

ns8 does not sell, rent, or otherwise trade your personal data with third parties for their own commercial purposes. ns8 shares personal data only in the following circumstances and only to the extent strictly necessary:

• Payment Processors: Financial data shared with payment service providers (including Touch 'n Go eWallet, Boost, and banking partners) to process deposits and withdrawals.
• Identity Verification Providers: Identity data shared with third-party KYC and age verification service providers for regulatory compliance purposes.
• Game Providers: Gameplay and account data shared with licensed game software providers to enable game functionality and ensure fair play.
• Licensing Authorities: Account and gameplay data disclosed to our licensing authority as required under our operating licence conditions.
• Law Enforcement & Legal Process: Personal data disclosed to law enforcement agencies, courts, or regulators where ns8 is legally required to do so, or where necessary to protect the rights, property, or safety of ns8, its users, or the public.

All third parties with whom ns8 shares personal data are required to handle that data in accordance with applicable data protection standards and are prohibited from using it for any purpose beyond the specific purpose for which it was shared.

7. International Data Transfers

ns8 operates in an international context and some of the third-party service providers with whom we share data may be located in jurisdictions outside Malaysia. Where personal data is transferred internationally, ns8 implements appropriate safeguards to ensure that your data receives a standard of protection equivalent to that applicable in Malaysia, including the use of contractual data protection clauses with recipient entities. By using the Platform and accepting this Policy, you consent to such international transfers where applicable.

8. Data Retention Periods

ns8 retains personal data for the period necessary to fulfil the purposes set out in this Policy, subject to the following:

• Active Accounts: Personal data is retained for the duration your ns8 account is active and in use.
• Closed Accounts: Following account closure, ns8 retains personal data for a minimum of five (5) years to comply with anti-money laundering regulations, licensing conditions, and to resolve any outstanding disputes or legal claims.
• Marketing Data: Where consent has been withdrawn, ns8 will cease marketing communications and retain a record of that withdrawal to prevent future unsolicited contact.
• Technical Logs: Server and access logs are typically retained for twelve (12) months for security and fraud detection purposes.

9. Cookies & Tracking Technologies

ns8 uses cookies and similar tracking technologies on the Platform. Cookies are small data files stored on your device that help the Platform function correctly and allow us to understand how the Platform is used.

ns8 uses the following categories of cookies:

• Strictly Necessary Cookies: Essential to Platform operation, including session management and login authentication. These cannot be disabled without impairing Platform functionality.
• Analytical Cookies: Used to collect aggregate, anonymised data about Platform usage to improve performance and user experience. These are operated by ns8's internal analytics systems and are not shared with third-party advertising networks.

ns8 does not use third-party behavioural advertising cookies or social media tracking pixels. You can manage cookie settings through your browser's privacy settings. Disabling strictly necessary cookies may affect your ability to use certain Platform features.

10. Your Data Subject Rights

Subject to applicable data protection laws, you have the following rights in respect of your personal data held by ns8:

• Right of Access: You may request a copy of the personal data ns8 holds about you.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to ns8's legal retention obligations.
• Right to Restriction: You may request that ns8 restrict the processing of your data in certain circumstances.
• Right to Data Portability: You may request a structured, machine-readable copy of the personal data you have provided to ns8.
• Right to Object: You may object to processing of your personal data carried out on the basis of legitimate interests, including profiling.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

To exercise any of the above rights, contact ns8 customer support via the 24/7 live chat or at [email protected]. ns8 will respond to verified data subject requests within 30 days of receipt.

11. Children's Privacy

The ns8 Platform is strictly restricted to individuals aged 21 years and above. ns8 does not knowingly collect personal data from individuals under 21 years of age. If ns8 becomes aware that personal data has been collected from a person under the minimum age, the relevant account will be immediately suspended and the data deleted or anonymised. Parents or guardians who believe their minor child has accessed the ns8 Platform should contact customer support immediately.

12. Security Measures

ns8 implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data in transit;
• Encryption of sensitive data at rest, including payment and identity information;
• Role-based access controls limiting staff access to personal data on a need-to-know basis;
• Regular security assessments and penetration testing of Platform infrastructure;
• Two-factor authentication available for all user accounts.

While ns8 employs industry-standard security measures, no online platform can guarantee absolute security. In the event of a data breach that poses a material risk to affected individuals, ns8 will notify impacted users and applicable regulators in accordance with legal requirements.

13. Marketing Communications

ns8 will only send you promotional emails, SMS messages, or push notifications if you have given explicit consent to receive such communications during account registration or subsequently through your Account preferences. Each marketing communication will include an unsubscribe option. You may also withdraw consent at any time by contacting ns8 customer support or updating your communication preferences in your Account settings. Withdrawal of marketing consent will be processed within five (5) business days.

14. Amendments to This Policy

ns8 may update this Privacy Policy from time to time to reflect changes in our data processing practices, legal obligations, or Platform features. Material changes to this Policy will be communicated to registered users via email or on-Platform notification at least 14 days before the changes take effect. The "Last Updated" date at the top of this Policy will be revised accordingly. Continued use of the Platform after the effective date of any amendment constitutes acceptance of the revised Policy.

15. Contact & Complaints

For any questions about this Privacy Policy, to exercise your data subject rights, or to raise a data protection concern, please contact the ns8 data protection team:

[email protected]

Customer support is available 24 hours a day, 7 days a week via live chat on the Platform. We aim to acknowledge all data protection enquiries within 2 business days and resolve them within 30 calendar days. If you are not satisfied with ns8's response to a data protection concern, you may have the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction.