Privacy Policy nasib888 — How We Protect the Personal Data of Malaysia Members

This Privacy Policy is published by nasib888 ("we", "Platform" or "nasib888") and applies to all personal information collected through the nasib888.best website, mobile application (where applicable), and all services provided under that domain.

Nasib888 is an online gaming and betting platform offering video slots, Live Casino, fish shooting, card games, Sports Betting covering the Malaysia Super League and EPL, digital lottery and progressive jackpots to registered members in Malaysia. In delivering these services, we are required to collect and process certain personal data from our users.

We recognise that privacy is a fundamental right, and we are committed to protecting it in every aspect of nasib888's operations. This Privacy Policy is written in plain, transparent language so you genuinely understand how your data is managed — not buried in legalese that's difficult to follow.

Nasib888 collects several types of personal data depending on how you interact with our platform. Below is a full breakdown of the data we collect, where it comes from and what it is used for:

There is also data that we never collect: PIN numbers or plaintext passwords, full credit or debit card details (we do not accept direct card payments), or health information except in the context of responsible gaming at your voluntary request.

Nasib888 uses the personal data collected solely for legitimate purposes that are directly related to providing services to you. We do not use your data for any purpose not stated in this document without first obtaining your renewed consent.

• Account management: To create, verify and manage your nasib888 account, including account recovery and identity verification where required.
• Financial transaction processing: To process deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow or local FPX banking, as well as withdrawals to an account registered in your name.
• Gaming service provision: To provide access to all games available on nasib888 — video slots, Live Casino, fish shooting, card games, Sports Betting and digital lottery — including the storage of game history and account balance.
• Security and fraud prevention: To detect and prevent fraud, money laundering, bonus abuse, multiple account ownership, and other unlawful activities that may compromise the integrity of the nasib888 platform and the safety of other members.
• Legal and regulatory compliance: To comply with anti-money laundering (AML) legal requirements, know-your-customer (KYC) procedures, operating licence requirements and any other legal obligations applicable to nasib888.
• Customer support: To respond to enquiries, resolve technical issues, handle complaints and provide the assistance you need via live chat, WhatsApp or email.
• Platform improvement: To analyse usage patterns in aggregate (not at an individual level) in order to understand the most useful features and identify areas for improvement on the nasib888 platform.
• Marketing communications: To send you information about nasib888 promotions, bonuses, new games and exclusive offers that may interest you — but only if you have not unsubscribed from our marketing communications. You may unsubscribe at any time via your account settings or the unsubscribe link in any email.
• VIP programme and rewards: To manage your participation in the nasib888 VIP rewards programme, calculate accumulated points, determine eligibility for tier benefits, and process the associated rewards.

Every personal data processing activity carried out by nasib888 has a valid legal basis. We do not process your data arbitrarily — each instance of processing is grounded in at least one of the following bases:

• Your consent: For marketing communications and any optional processing not required for account operation, we obtain your explicit consent at or after registration. This consent may be withdrawn at any time.
• Contract performance: The majority of nasib888's data processing is carried out solely to fulfil the service contract between you and nasib888 — including account management, processing deposits and withdrawals via Malaysian payment methods, and providing access to games.
• Legal obligation: Processing for AML, KYC and licensing compliance purposes is carried out on the basis of legal obligations binding on nasib888 as a licensed online gambling platform operator.
• Legitimate interests: Processing for the purposes of platform security, fraud prevention and service improvement is carried out on the basis of nasib888's legitimate interests, which do not override your fundamental rights and freedoms as an individual.

Nasib888 does not sell, rent, or trade your personal data to any third party for their own commercial purposes. This is an absolute, non-negotiable policy. However, there are limited situations in which nasib888 shares your personal data with specific third parties for legitimate operational purposes:

• Payment providers: The transaction information required is shared with licensed payment providers such as Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow and banking institutions such as Maybank and CIMB for the purpose of processing your deposits and withdrawals. This sharing is limited to the minimum necessary to complete each transaction.
• Game providers: Anonymised member identifiers are shared with licensed game providers such as Pragmatic Play, PG Soft, Habanero and Evolution for technical purposes to enable game access and the storage of game data. These providers are bound by strict confidentiality agreements with nasib888.
• Technology service providers: Third parties that assist nasib888 in operating its technical infrastructure, such as server hosting, email services, and internal analytics tools. All such providers are carefully vetted and required to sign data processing agreements that prohibit them from using your data for their own purposes.
• Authorities: nasib888 will disclose personal data to national authorities, law enforcement agencies, or regulatory bodies when required to do so by law, court order, or in the context of a legitimate investigation into fraud, money laundering, or criminal activity.

Nasib888 makes serious investments in security infrastructure to ensure your personal data is protected at all times. The following technical and organisational measures are applied on an ongoing basis:

• Transmission encryption: All communications between your browser and nasib888 servers are secured with TLS 1.3 protocol using AES-256 encryption — the same standard used by Malaysia's major banks.
• Stored data encryption: Sensitive data stored in nasib888's databases — including payment information and identity documents — is held in encrypted form. Even in the event of a database breach, the data cannot be read without the encryption key.
• Strict access controls: Access to member personal data within nasib888's internal systems is strictly restricted on a need-to-know basis. Only staff who require access for their specific duties are permitted to view member personal data. All access is logged and audited regularly.
• Two-factor authentication: All access to nasib888's internal administrative systems containing member data is protected by mandatory two-factor authentication. No one can access that data on the basis of a password alone.
• Regular security audits: nasib888 conducts regular internal security audits and engages independent third-party cybersecurity firms to test and verify the effectiveness of our protection systems.
• Incident response plan: nasib888 maintains a tested incident response procedure for data breach scenarios. Should a breach occur that affects your personal data, we will notify you within 72 hours of confirming the breach, in line with industry best practices.

While nasib888 takes all reasonable steps to protect your data, no digital system can guarantee absolute 100% security. We therefore encourage you to take your own protective measures, such as using a strong, unique password and enabling two-factor authentication on your nasib888 account.

Nasib888 uses cookies and similar tracking technologies to enhance the user experience and ensure the platform functions correctly. The following types of cookies are used:

• Essential cookies (required): These cookies are required for the core functionality of the nasib888 platform and cannot be disabled. They include login session cookies, security tokens and language preference settings. Without these cookies, the platform will not function correctly.
• Performance cookies: Used to collect information on how visitors use nasib888 — most visited pages, loading times, error messages, and similar metrics. All data is collected in aggregate and without personal identification. This helps nasib888 identify technical issues that need to be addressed.
• Functional cookies: Enables the platform to remember your preferences — such as display settings, your last played game and language preference — to deliver a more personalised experience throughout your session.
• Analytics cookies: nasib888 uses internal analytics tools to understand platform usage patterns on an aggregate basis. This data is never linked to the personal identity of any individual member — it is used solely for platform improvement purposes.

You can manage cookie settings through your browser preferences. However, disabling essential cookies may affect the functionality of the nasib888 platform. nasib888 does not use third-party advertising network cookies to track your activity on other websites.

Nasib888 adheres to the principle of data retention minimisation — we do not retain your personal data for longer than is necessary for the relevant purpose. Retention periods vary by data type:

• Active account data: Retained for the duration of your active nasib888 account and for the period required after account closure in accordance with legal requirements.
• Financial transaction records: Retained for a minimum of 7 years from the transaction date, in accordance with Malaysia's accounting and anti-money laundering legal requirements. This is a statutory obligation that cannot be waived.
• Game history: Retained for 3 years from the date of play for dispute resolution, internal audit, and regulatory compliance purposes.
• Customer support records: Retained for 2 years from the date of last interaction to provide historical context for ongoing support enquiries.
• Marketing data: Retained until you unsubscribe from marketing communications or request deletion. Once a request is received, data is deleted within 30 business days.
• Closed account data: Once an account is closed at a member's request, identifying data will be anonymised after the minimum retention period required by law has elapsed. Financial records will be retained in accordance with accounting legal requirements.

As a nasib888 member, you have the following rights regarding your personal data. All rights may be exercised by contacting the nasib888 privacy team at support@nasib888.best:

Nasib888 strictly does not accept registration or use of the platform by individuals under the age of 18. This is an absolute requirement reflecting the legal gambling age in Malaysia and nasib888's commitment to the protection of minors.

We do not knowingly collect personal data from minors. If nasib888 discovers that personal data belonging to an individual under the age of 18 has been collected without proper verification, we will take the following steps immediately:

• Temporarily suspending the relevant account while an investigation is conducted.
• Deleting all of that individual's personal data from nasib888's systems within a reasonable timeframe.
• Processing the return of any funds remaining in the account in accordance with the appropriate procedures.
• Reporting cases to the relevant authorities where required.

As nasib888 works with international service providers such as globally licensed game providers, your personal data may be processed or stored on servers located outside Malaysia. nasib888 ensures that any cross-border data transfer is carried out with adequate safeguards:

• All international third parties that receive nasib888 member data are required to sign data processing agreements that meet data protection standards equivalent to or higher than those applicable in Malaysia.
• Service providers used by nasib888 are selected based on their track record in data protection, regulatory compliance and reputation within the licensed online gaming industry.
• Nasib888 continuously monitors third-party compliance with their data protection obligations and reserves the right to terminate the contractual relationship with any party that fails to meet the standards set.

If you have any questions, concerns, or requests regarding this Privacy Policy or how nasib888 handles your personal data, please contact the nasib888 Privacy Officer through the following channels:

• Email: support@nasib888.best (with the subject line "Privacy Policy Inquiry")
• Live Chat: Click the chat icon at the bottom corner of nasib888.best — response within 5 minutes
• WhatsApp: Available 24/7 — responses are typically within 15 minutes

Nasib888 is committed to responding to all privacy-related enquiries within 2 business days. For formal rights requests (access, deletion, data portability), the processing period is 30 business days.