Privacy Policy

1. Introduction and Scope

This Privacy Policy ("Policy") is issued by ns8.club ("ns8", "we", "us", "our") and governs the collection, use, storage, and disclosure of personal data obtained through your use of the ns8 online gaming platform, including the website at ns8.club, any mobile-optimised interface, and all associated services and features.

ns8 is committed to handling personal data responsibly, transparently, and in accordance with applicable data protection law. This Policy applies to all registered users, prospective users, and visitors to the ns8 platform, regardless of geographic location, with specific reference to Malaysian players operating under the Personal Data Protection Act 2010 (PDPA) of Malaysia.

By registering an account, logging in to your ns8 account, or otherwise using the ns8 platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you do not agree with any provision of this Policy, you must discontinue your use of the ns8 platform.

2. Data Controller Information

For the purposes of applicable data protection legislation, the data controller responsible for your personal data processed through the ns8 platform is ns8.club. For all privacy-related enquiries, data subject access requests, or complaints, you may contact our data protection team via:

• Email (plain text): [email protected]
• Live Chat: 24/7 in-platform support — average response under 3 minutes

When contacting us regarding a privacy matter, please mark your message "Privacy / Data Request" to ensure it is directed to the appropriate team promptly.

3. Personal Data We Collect

3.1 Registration and Account Data

When you register an ns8 account, we collect: full legal name, date of birth, Malaysian identity card number (MyKad) or equivalent government-issued ID number, email address, Malaysian mobile number, and residential address. This information is necessary to create and maintain your account and to fulfil our legal obligations regarding age verification and identity verification (KYC).

3.2 Identity Verification (KYC) Documents

To comply with responsible gaming and anti-money laundering requirements, ns8 collects photographic copies of government-issued identity documents submitted during the KYC verification process — typically a front-and-back photograph of your MyKad or, where applicable, a passport biographical page. These documents are used solely for identity verification and are not used for any other commercial purpose.

3.3 Financial Data

ns8 collects information necessary to process deposits and withdrawals, including: payment method identifiers (e.g., Touch 'n Go account references, bank account numbers for FPX transfers, or USDT wallet addresses), transaction amounts, transaction timestamps, and transaction status records. ns8 does not store complete payment card numbers. All financial transaction processing is handled through certified payment processors.

3.4 Usage and Gaming Data

ns8 automatically collects data about your use of the platform, including: game session logs (games played, stakes, wins and losses), login timestamps, IP addresses, device identifiers, browser type and version, operating system information, and session duration. This data is used for account security, responsible gaming monitoring, and platform improvement purposes.

3.5 Communications Data

If you contact ns8 support via live chat or email, we retain records of those communications, including the content of messages and the contact details used. This data is used to resolve support queries, maintain quality assurance, and to comply with applicable regulatory record-keeping requirements.

3.6 Responsible Gaming Data

Where you activate responsible gaming tools — including deposit limits, session time limits, cooling-off periods, or self-exclusion — ns8 records the details of those settings and any changes made to them. This data is processed specifically to give effect to your responsible gaming choices and to comply with our regulatory obligations.

4. How We Collect Your Data

ns8 collects personal data through the following means:

• Directly from you: Information provided during account registration, KYC document upload, support interactions, and when you update your account settings.
• Automatically: Technical and usage data collected via server logs, session tracking, and platform analytics when you interact with the ns8 website or mobile interface.
• From payment processors: Transaction confirmation and status data received from payment service providers following deposits or withdrawal processing.
• From game providers: Game session outcome and history data received from ns8's certified third-party game providers, used to populate your account game history and for dispute resolution purposes.
• From identity verification services: Where ns8 uses third-party KYC verification services to cross-reference submitted identity documents, verification outcome data is received from those providers.

5. Purposes and Legal Basis for Processing

ns8 processes your personal data for the following purposes and on the following legal bases:

• Contract performance: Processing necessary to provide the ns8 gaming platform services you have registered for, including account management, game access, and payment processing.
• Legal obligation: Processing required to comply with applicable laws, including age verification, KYC / anti-money laundering obligations, responsible gaming regulatory requirements, and record-keeping requirements.
• Legitimate interests: Processing for fraud prevention, account security, platform improvement, and customer support quality assurance — where these interests are not overridden by your data protection rights.
• Consent: Processing for optional communications such as promotional emails or SMS notifications, where you have given explicit consent. You may withdraw consent at any time by updating your account communication preferences or contacting ns8 support.

6. Disclosure of Personal Data to Third Parties

ns8 does not sell your personal data to any third party. ns8 may share your personal data with the following categories of recipients, only to the extent necessary for the stated purpose:

• Payment service providers: To process deposits and withdrawals (e.g., FPX operators, e-wallet providers such as Touch 'n Go and Boost, and cryptocurrency exchange services for USDT transactions).
• Game providers: Game session data is shared with certified third-party game providers to facilitate gameplay and for game log integrity purposes.
• Identity verification services: KYC document data may be processed by a third-party identity verification provider engaged by ns8 for the sole purpose of completing account verification.
• Regulatory and law enforcement authorities: ns8 will disclose personal data to competent authorities where required by applicable law, court order, or regulatory direction — including in connection with anti-money laundering investigations.
• Technical service providers: Cloud hosting and IT infrastructure providers engaged by ns8 who process data on ns8's behalf under binding data processing agreements.

All third-party processors engaged by ns8 are required by contract to process personal data only on ns8's documented instructions and to maintain appropriate security measures.

7. International Data Transfers

ns8 may transfer personal data to recipients located outside Malaysia in connection with the provision of game provider services or cloud infrastructure. Where such transfers occur, ns8 ensures that appropriate safeguards are in place — including contractual clauses requiring the recipient to maintain data protection standards equivalent to those applicable in Malaysia — before any transfer is made.

8. Data Retention

ns8 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, including to satisfy applicable legal, regulatory, accounting, and reporting requirements. Specifically:

• Account data and KYC documents are retained for a minimum of five (5) years following account closure, in accordance with anti-money laundering record-keeping requirements.
• Financial transaction records are retained for a minimum of seven (7) years.
• Game session logs are retained for a minimum of two (2) years from the date of the session.
• Support communication records are retained for two (2) years from the date of the communication.
• Responsible gaming settings records are retained for five (5) years to support regulatory compliance.

After the applicable retention period expires, personal data is securely deleted or anonymised. Anonymised data that cannot be used to identify you may be retained indefinitely for statistical and analytical purposes.

9. Cookies and Tracking Technologies

The ns8 platform uses cookies and similar tracking technologies to support the operation of the website and to improve user experience. The categories of cookies used by ns8 include:

• Strictly necessary cookies: Essential for the operation of the ns8 platform, including session management and security features. These cannot be disabled.
• Functional cookies: Used to remember your preferences such as language settings and to maintain your login session across page loads.
• Analytics cookies: Used to collect aggregated, anonymised data about how visitors use the ns8 platform, enabling us to identify and fix usability issues and improve platform performance.

You may configure your browser settings to block or delete cookies. However, disabling strictly necessary cookies will impair the functionality of the ns8 platform. ns8 does not use third-party advertising or cross-site tracking cookies.

10. Security of Personal Data

ns8 implements and maintains appropriate technical and organisational security measures to protect personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Security measures in place include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and ns8 servers
• Cryptographic hashing of account passwords using industry-standard algorithms — plain-text passwords are never stored
• Access controls and role-based permissions restricting internal access to personal data to authorised personnel on a need-to-know basis
• Regular security audits and vulnerability assessments of platform infrastructure
• Optional two-factor authentication (2FA) for ns8 account login

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, ns8 will notify affected users and, where required, the relevant supervisory authority, in accordance with applicable data breach notification obligations.

11. Your Data Subject Rights

Subject to applicable law, you have the following rights in respect of your personal data held by ns8:

• Right of access: You may request a copy of the personal data ns8 holds about you.
• Right to correction: You may request that inaccurate or incomplete personal data is corrected. You can update most account information directly from your ns8 account settings panel.
• Right to erasure: In certain circumstances, you may request that ns8 delete your personal data. Note that ns8 may be unable to fully comply where retention is required by applicable law (e.g., anti-money laundering record-keeping obligations).
• Right to restrict processing: In certain circumstances, you may request that ns8 temporarily restricts the processing of your personal data.
• Right to data portability: You may request that ns8 provides your personal data in a structured, machine-readable format for transfer to another service provider, where technically feasible.
• Right to withdraw consent: Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of processing that occurred prior to withdrawal.
• Right to lodge a complaint: If you believe ns8 has processed your personal data in violation of applicable law, you have the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction.

To exercise any of these rights, contact ns8 via live chat (24/7, in-platform) or by email at [email protected]. ns8 will respond to verified data subject requests within 30 days of receipt. Complex requests may require additional time, in which case ns8 will notify you of the extended timeframe.

12. Children and Minors

ns8 does not knowingly collect or process personal data of individuals under 21 years of age. The ns8 platform is strictly an adult gaming service. Any account found to belong to a user under 21 will be immediately suspended and the personal data associated with that account will be deleted (save for any retention required by law for record-keeping purposes). If you believe a minor has registered an ns8 account, please contact ns8 support immediately via live chat.

13. Amendments to This Policy

ns8 reserves the right to amend this Privacy Policy at any time. Where amendments are material, ns8 will notify registered users via the email address on file or via a notice on the ns8 platform prior to the amendments taking effect. The "Last Updated" date at the top of this Policy will be revised to reflect the most recent amendment. Your continued use of the ns8 platform following notification of an amendment constitutes your acceptance of the revised Policy.

14. Contact and Data Enquiries

For all privacy-related enquiries, data subject access requests, or complaints regarding ns8's handling of your personal data, please contact us via:

• 24/7 Live Chat: Available directly within the ns8 platform — fastest response channel, average response under 3 minutes
• Email: [email protected] — please include "Privacy Request" in the subject line; average response 2–4 hours

ns8 will acknowledge receipt of all privacy-related requests within 2 business days and will aim to resolve all requests within 30 days of verified receipt.