nsk8 Privacy Policy — How nsk8 Casino Handles Your Personal Data

1.Introduction

1.1 nsk8 operates the online gaming platform accessible at nsk8.app and is the data controller responsible for personal data collected through the platform. This Privacy Policy applies to all users who register an account, access games, make deposits or withdrawals, contact support, or otherwise interact with nsk8.

1.2 nsk8 is committed to handling your personal data with transparency and security. As an internationally licensed gaming operator, nsk8 is subject to data protection requirements under its licence conditions, which include obligations around data minimisation, purpose limitation, security standards, and individual rights.

1.3 This Policy uses "personal data" to mean any information that identifies or can reasonably be used to identify you as an individual. Anonymous or aggregated data that cannot be linked back to an individual is not personal data for the purposes of this Policy.

2.Data We Collect

2.1 Registration and Identity Data. When you create an nsk8 account, we collect your full legal name, date of birth, residential address, email address, and chosen username and password. This information is required to create and administer your account.

2.2 KYC Verification Documents. To comply with our international gaming licence obligations and applicable anti-money laundering requirements, we may collect copies of government-issued identification documents (such as your MyKad or passport), proof of address documents, and in certain cases proof of source of funds. Malaysian players may be asked to submit their MyKad for identity verification purposes.

2.3 Financial and Transaction Data. We collect details of all MYR deposits, withdrawals, and betting transactions on the platform — including payment method identifiers (Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX reference numbers), transaction amounts, timestamps, and processing status. We do not store full card numbers or complete e-wallet credentials.

2.4 Gaming Activity Data. We collect records of your game play — games accessed, bets placed, outcomes, session duration, and bonus activity. This data is required for regulatory compliance, dispute resolution, and responsible gaming monitoring.

2.5 Technical and Device Data. When you access nsk8, we automatically collect your IP address, browser type and version, operating system, device identifiers, screen resolution, and referring URL. This data helps us detect fraud, maintain platform security, and optimise the user experience.

2.6 Communications Data. If you contact nsk8 support via live chat or email, we retain records of those communications — including the content of messages, timestamps, and resolution outcomes — for quality assurance, compliance, and dispute resolution purposes.

2.7 Cookies and Tracking Data. nsk8 uses cookies and similar technologies. Please see Section 6 for full details.

3.How We Use Your Data

3.1 nsk8 uses personal data for the following purposes:

• Account administration: Creating, maintaining, and securing your nsk8 account; processing logins and authentication.
• Service delivery: Processing deposits and withdrawals in MYR; providing access to games and the sportsbook; managing bonuses and VIP programme activity.
• KYC and compliance: Verifying your identity and age (21+ requirement); meeting anti-money laundering obligations; complying with licence conditions and applicable law.
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent activity, account abuse, and unauthorised access.
• Responsible gaming: Monitoring for indicators of problem gambling; administering deposit limits, self-exclusion, and other responsible gaming tools; complying with responsible gaming obligations under our licence.
• Customer support: Responding to enquiries, resolving disputes, and improving support quality.
• Platform improvement: Analysing usage patterns to improve platform performance, game selection, and user experience.
• Communications: Sending transactional messages (deposit confirmations, withdrawal updates, security alerts); sending promotional communications where you have consented.

4.Legal Basis for Processing

4.1 nsk8 processes personal data on the following legal bases:

• Contractual necessity: Processing required to perform our contract with you — account management, payment processing, game delivery.
• Legal obligation: Processing required to comply with our gaming licence conditions, anti-money laundering obligations, and applicable regulatory requirements — including KYC verification.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and service improvement — where our legitimate interests are not overridden by your rights.
• Consent: Where we send optional marketing communications, we will do so only on the basis of your explicit consent, which you may withdraw at any time through your account settings.

5.Data Sharing & Disclosure

5.1 nsk8 does not sell your personal data to third parties. We share personal data only in the following circumstances:

• Payment processors: We share transaction data with payment service providers (e-wallet operators, FPX banking partners) to the extent necessary to process your MYR deposits and withdrawals.
• Game software providers: Game play data may be shared with licensed game developers (e.g., Pragmatic Play, PG Soft) for game delivery, dispute resolution, and RNG auditing purposes.
• KYC and compliance partners: Identity documents may be processed by accredited KYC verification services retained by nsk8 for identity and age verification.
• Regulatory and legal authorities: We will disclose personal data to regulators, law enforcement, courts, or other governmental bodies where required by law, court order, or our gaming licence obligations — including in connection with anti-money laundering investigations.
• Self-exclusion registers: Where you elect to self-exclude from the nsk8 platform, your details may be shared with applicable gaming industry self-exclusion schemes in accordance with our responsible gaming obligations.
• Business transfers: In the event of a merger, acquisition, or sale of assets, your personal data may be transferred as part of that transaction, subject to the same data protection obligations.

5.2 All third parties with whom nsk8 shares personal data are required to handle that data in accordance with applicable data protection standards and are prohibited from using it for any purpose other than the specific service being provided.

6.Cookies & Tracking Technologies

6.1 nsk8 uses cookies and similar technologies (including web beacons and local storage) to operate the platform, remember your preferences, maintain session authentication, detect fraud, and analyse usage patterns.

6.2 The categories of cookies used by nsk8 include:

• Strictly necessary cookies: Required for the platform to function — session management, login authentication, security tokens. These cannot be disabled without disrupting platform functionality.
• Functional cookies: Remember your account preferences, language settings, and display options to personalise your experience.
• Analytics cookies: Collect aggregated, anonymised data about how users interact with the platform to help us improve performance and content. No personally identifiable information is transmitted in analytics data.
• Security cookies: Used to detect and prevent fraudulent activity, bot access, and account abuse.

6.3 You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will affect platform functionality. nsk8 does not use advertising or cross-site tracking cookies.

7.Data Retention

7.1 nsk8 retains personal data for as long as your account is active and for a period thereafter as required by our legal, regulatory, and contractual obligations.

7.2 Transaction records and KYC documentation are retained for a minimum of five (5) years from the date of the relevant transaction or account closure, in accordance with standard anti-money laundering record-keeping requirements under international gaming licence conditions.

7.3 Gaming activity logs, responsible gaming records, and self-exclusion data are retained for the duration of any applicable exclusion period and for a minimum of two (2) years after account closure.

7.4 Communications records (live chat logs, support correspondence) are retained for a minimum of two (2) years for quality assurance and dispute resolution purposes.

7.5 When retention periods expire, personal data is securely deleted or irreversibly anonymised.

8.Data Security

8.1 nsk8 implements technical and organisational security measures proportionate to the sensitivity of the personal data we hold. These measures include 256-bit SSL/TLS encryption for all data in transit, encryption of sensitive data at rest, access controls and role-based permissions limiting staff access to personal data, regular security audits and penetration testing, and two-factor authentication availability for player accounts.

8.2 While nsk8 takes its data security obligations seriously, no internet-based system can be guaranteed to be completely secure. You are responsible for maintaining the confidentiality of your account credentials. If you believe your account has been compromised, contact nsk8 support immediately.

8.3 In the event of a personal data breach that is likely to result in a risk to your rights or freedoms, nsk8 will notify affected users and the relevant regulatory authority in accordance with applicable requirements.

9.Your Data Rights

9.1 Subject to applicable law and our legal obligations (including gaming licence requirements), you have the following rights in respect of your personal data held by nsk8:

• Right of access: Request a copy of the personal data we hold about you.
• Right to rectification: Request correction of inaccurate or incomplete personal data.
• Right to erasure: Request deletion of your personal data where retention is no longer necessary and no overriding legal obligation requires us to retain it. Note that gaming licence compliance obligations may prevent full erasure in certain cases.
• Right to restriction: Request that we restrict processing of your data in certain circumstances.
• Right to data portability: Request a machine-readable copy of personal data you have provided to us.
• Right to object: Object to processing based on legitimate interests, including direct marketing.
• Right to withdraw consent: Where processing is based on consent (e.g., marketing communications), withdraw that consent at any time through your account settings.

9.2 To exercise any of these rights, contact nsk8 support via live chat or at the email address listed in Section 13. nsk8 will respond to verified requests within 30 days. We may require identity verification before processing data rights requests.

10.International Data Transfers

10.1 As an internationally licensed operator, nsk8 may process or store personal data on servers or through service providers located outside Malaysia. Where personal data is transferred internationally, nsk8 ensures that appropriate safeguards are in place — including contractual protections with data processors — to maintain data protection standards equivalent to those required under our licence conditions.

10.2 By using the nsk8 platform, you acknowledge and consent to the processing of your personal data in jurisdictions outside Malaysia where nsk8 or its service providers operate, subject to the safeguards described in this section.

11.Children's Privacy

11.1 The nsk8 platform is strictly for individuals aged 21 and above. nsk8 does not knowingly collect personal data from any person under the age of 21. If we discover or are notified that personal data belonging to a person under the age of 21 has been collected, that data will be deleted immediately and the associated account closed.

11.2 If you have reason to believe that a minor has registered an nsk8 account or provided personal data to nsk8, please contact our support team immediately.

12.Changes to This Privacy Policy

12.1 nsk8 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or our gaming licence requirements. The current version will always be published at nsk8.app/privacy-policy with the effective date noted at the top of the document.

12.2 Where a material change affects your rights or how we use your personal data, nsk8 will notify registered users via their registered email address or through an in-platform notification before the changes take effect.

12.3 Your continued use of the nsk8 platform following the publication of a revised Privacy Policy constitutes your acknowledgement of the updated terms.

13.Contact Us

13.1 If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data by nsk8, please contact us via:

13.2 Live chat support is available 24 hours a day, 7 days a week, including Malaysian public holidays. For data-related requests requiring written documentation, email is preferred.

13.3 nsk8 will acknowledge receipt of your enquiry within two (2) business days and provide a substantive response within thirty (30) days. Complex requests may require additional time, in which case nsk8 will notify you of the extended timeline.