Privacy Policy

Introduction

Nasib88 ("the Company", "we", "us", "our") operates the online gaming platform accessible at nasib88.cam ("the Platform"), serving players primarily located in Malaysia, including Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, and Shah Alam. The protection of our users' personal data is a fundamental operational responsibility, not an afterthought. This Privacy Policy ("Policy") sets out in precise terms what personal data we collect, why we collect it, how we use it, with whom we may share it, and what rights you have in relation to it.

This Policy applies to all individuals who access or interact with the Nasib88 Platform, whether as registered account holders, prospective users browsing the site, or individuals who contact our support team. It covers all data processing activities conducted by Nasib88 in connection with the Platform, regardless of the device or method used to access it.

This Policy should be read alongside our Terms & Conditions and Responsible Gambling Policy, which together form the complete framework governing your relationship with Nasib88.

Definitions

The following definitions apply throughout this Privacy Policy:

Personal Data We Collect

Nasib88 collects only the personal data that is necessary for the purposes described in this Policy. The categories of personal data we collect are as follows:

3.1 Registration & Account Data

• Full legal name as it appears on government-issued identification;
• Date of birth (for age verification — all users must be 21 years of age or older);
• Email address;
• Mobile phone number;
• Preferred username and encrypted account password;
• Residential address, including postcode and city (e.g., Kuala Lumpur, Petaling Jaya, Johor Bahru).

3.2 Identity Verification (KYC) Data

• Copies of government-issued photo identification (Malaysian MyKad, passport, or equivalent);
• Proof of residential address documentation;
• Proof of payment method ownership (where required for withdrawal processing);
• Selfie or video verification data where required by our KYC process.

3.3 Financial & Transaction Data

• Deposit and withdrawal transaction records, including amounts in MYR and processing timestamps;
• Payment method identifiers, including masked bank account numbers, e-wallet user IDs (Touch 'n Go eWallet, Boost, GrabPay), and cryptocurrency wallet addresses (USDT TRC20);
• Wagering history, including bet amounts, markets, outcomes, and account balance movements.

3.4 Technical & Device Data

• IP address and approximate geolocation at the time of each session;
• Device type, operating system, and browser information;
• Session duration, page interaction data, and feature usage logs;
• Cookie identifiers and session tokens.

3.5 Communications Data

• Records of all communications between you and Nasib88 support staff, including live chat transcripts and email correspondence;
• Feedback and complaint submissions.

How We Collect Personal Data

Nasib88 collects personal data through the following channels:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact our support team, or respond to any survey or promotional communication from the Company;
• Automatically through Platform usage — via cookies, session logs, and analytics tools that record your interaction with the Platform, including pages visited, games played, and betting activity;
• From payment processors — transaction confirmation data returned by payment providers such as FPX, DuitNow, and e-wallet platforms in connection with your deposits and withdrawals;
• From identity verification services — where the Company uses third-party KYC verification providers to validate identity documents submitted during the account verification process;
• From fraud prevention and security services — risk-scoring data and fraud signals from third-party security providers used to protect the integrity of the Platform.

Data Processing & Use

Nasib88 processes personal data for the following specific purposes:

Legal Basis for Processing

Nasib88 processes personal data only where a valid legal basis exists. The applicable legal bases for our processing activities are as follows:

• Contractual Necessity: Processing required to perform our contractual obligations to you, including account management, payment processing, and service delivery. Without this processing, we cannot provide you with access to the Platform.
• Legal Obligation: Processing required to comply with applicable legal obligations, including KYC identity verification, AML screening, age verification, and responses to lawful regulatory requests.
• Legitimate Interests: Processing necessary for the Company's legitimate business interests, including fraud prevention, platform security, responsible gambling monitoring, and improving our services — where such interests are not overridden by your data protection rights.
• Consent: Where we process personal data for purposes that are not strictly necessary for contractual performance or legal compliance — such as marketing communications and certain analytics activities — we will request your explicit consent, which you may withdraw at any time without affecting the lawfulness of processing carried out prior to withdrawal.

Data Sharing & Third Parties

Nasib88 does not sell, rent, or trade personal data to third parties for their own marketing or commercial purposes. Personal data may be shared with third parties only in the following circumstances and only to the extent necessary for each stated purpose:

• Payment Processors: Financial transaction data is shared with payment service providers — including FPX, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong Bank, and USDT TRC20 network processors — solely for the purpose of processing deposits and withdrawals.
• KYC & Identity Verification Providers: Identity documents and verification data are processed by approved third-party KYC service providers under strict contractual data processing agreements.
• Fraud Prevention Services: Risk and fraud data may be shared with security service providers to protect the Platform and its users from fraudulent activity.
• Game Providers: Where games are provided by third-party studios on the Platform, limited session and wagering data may be shared with those studios for the purpose of game operation and dispute resolution.
• Regulatory & Legal Authorities: The Company may disclose personal data to competent regulatory authorities, law enforcement agencies, or courts where required by applicable law or a lawful court order. The Company will notify affected users of such disclosure where legally permitted to do so.
• Professional Advisors: Lawyers, auditors, and insurers engaged by the Company may process personal data under conditions of confidentiality where necessary for professional service delivery.

Data Retention

Nasib88 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal or regulatory obligations. The following general retention periods apply:

• Account Data & Transaction Records: Retained for a minimum of five (5) years following Account closure or the last transaction date, in compliance with anti-money laundering record-keeping requirements.
• KYC Documentation: Retained for a minimum of five (5) years following the completion of the KYC process, or longer where required by applicable law.
• Support Communications: Retained for two (2) years from the date of the communication, or longer where the communication relates to an unresolved dispute or legal claim.
• Technical & Session Logs: Retained for ninety (90) days for security and fraud detection purposes, after which they are automatically deleted unless retained in connection with an active investigation.
• Marketing Preferences: Retained until you withdraw consent or close your account, at which point marketing data is deleted within thirty (30) days.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification. Where anonymisation is used in preference to deletion, the resulting anonymised data is no longer personal data and is not subject to this Policy.

Security Measures

Nasib88 implements appropriate technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, alteration, and disclosure. Our security framework includes, but is not limited to:

• Encryption in Transit: All data transmitted between your device and the Platform is protected using TLS 1.3 with 256-bit AES encryption, preventing interception during transmission.
• Encryption at Rest: Sensitive personal data, including passwords and financial information, is stored in encrypted form using industry-standard encryption algorithms. Passwords are stored as salted, one-way cryptographic hashes and cannot be retrieved in plain text.
• Access Controls: Access to personal data within the Company is restricted to authorised personnel on a strict need-to-know basis, with role-based access controls and multi-factor authentication requirements.
• Continuous Monitoring: Automated security monitoring systems operate around the clock to detect and respond to potential intrusion attempts, data breaches, and suspicious activity.
• Third-Party Security Audits: The Platform's security posture is subject to periodic review, including penetration testing and vulnerability assessments.

Notwithstanding these measures, no method of data transmission or storage is completely impervious to security risks. Users are responsible for maintaining the confidentiality of their account credentials and must notify Nasib88 immediately at [email protected] if they suspect that their account has been compromised.

Cookies & Tracking Technologies

Nasib88 uses cookies and similar tracking technologies on the Platform to provide a functional, secure, and personalised user experience. Cookies are small text files placed on your device by your browser when you access the Platform.

Categories of Cookies We Use

• Strictly Necessary Cookies: Required for the Platform to function correctly, including maintaining your login session, storing your language preferences, and enabling security features such as CSRF protection. These cannot be disabled without affecting Platform functionality.
• Functional Cookies: Used to remember your preferences and personalise your experience, such as remembering your preferred deposit method or favourite sports markets.
• Analytics Cookies: Used to collect aggregated data about how users interact with the Platform, helping us understand traffic patterns and improve performance. No individually identifiable data is reported in analytics unless you have provided consent.
• Security Cookies: Used to detect and prevent fraudulent activity, including bot detection and session integrity verification.

You may configure your browser to refuse or delete cookies at any time; however, disabling strictly necessary cookies will impair your ability to use the Platform. For detailed guidance on managing cookies, refer to your browser's help documentation.

Your Data Rights

Subject to applicable law and the legitimate interests of the Company (including its legal obligations and fraud prevention activities), you have the following rights in relation to your personal data held by Nasib88:

To exercise any of these rights, submit a written request by email to [email protected] with the subject line "Data Rights Request". Include your full registered name and Account email address. Requests will be acknowledged within 48 hours and responded to substantively within 30 calendar days. Where a request is complex or numerous, the Company may extend this period by a further 60 days with written notice.

Protection of Minors

The Nasib88 Platform is strictly intended for individuals aged 21 years and above. The Company does not knowingly collect or process personal data from individuals under the age of 21. The 21+ age requirement is enforced through the KYC identity verification process, and all accounts are subject to age confirmation prior to withdrawal processing.

Where the Company becomes aware that personal data has been collected from an individual who does not meet the minimum age requirement, it will take immediate steps to close the associated account, void all transactions, and delete the personal data collected, subject to any retention obligations required by applicable law.

Parents and guardians who become aware that a minor has registered an account on the Platform are encouraged to contact the Company immediately at [email protected] so that the account can be closed and the relevant data deleted without delay.

Policy Amendments

Nasib88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or operational requirements. Where amendments are material — meaning they substantially affect how your personal data is processed or alter your rights — the Company will provide not less than seven (7) days' advance notice by email to registered account holders prior to the changes taking effect.

Minor amendments — such as clarifications, corrections, or updates that do not adversely affect your rights — may be made without prior notice but will be reflected in an updated "Last Updated" date at the top of this document. We encourage you to review this Policy periodically to remain informed about how your data is processed.

Continued use of the Platform following the effective date of any amended Privacy Policy constitutes your acknowledgement of the updated processing terms. If you do not accept the amended terms, you must cease using the Platform and may request account closure by contacting [email protected].

Contact Us

For any queries, concerns, or formal requests relating to this Privacy Policy or the processing of your personal data by Nasib88, please contact our support team using the details below. All data-related communications are handled in English.