Privacy Policy — NusaBet88

This Privacy Policy ("Policy") is published by NusaBet88 ("the Company", "we", "us", "our"), the operator of the online gaming and sports betting platform accessible at nusabet88.buzz ("the Platform"). This Policy describes how we collect, use, store, share, and protect personal data in connection with your use of the Platform and any related services.

We are committed to processing personal data in a manner that is lawful, fair, and transparent. We apply appropriate technical and organisational measures to protect the personal data of all registered players, including those located in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and other regions across Malaysia.

This Policy applies to all data subjects whose personal data is processed by or on behalf of NusaBet88, including registered players, prospective registrants who have partially completed a registration form, and visitors to the Platform who interact with cookies or tracking technologies. By accessing or using the Platform, you acknowledge that you have read, understood, and consent to the practices described in this Policy.

This Policy must be read in conjunction with our Terms and Conditions and our Responsible Gambling Policy. Where any conflict exists between documents, this Policy shall govern matters specifically related to personal data and privacy.

The following terms carry the meanings set out below throughout this Policy:

NusaBet88 collects personal data that is necessary and proportionate to the purposes for which it is processed. The categories of data we collect are summarised below:

We collect personal data through a number of channels and mechanisms, which include the following:

• Registration: When you create a NusaBet88 account, you provide us with identity, contact, and authentication data directly through the registration form.
• Transactions: When you make deposits or withdrawals via Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, or USDT TRC20, our payment processing system records transactional metadata.
• Customer Support Interactions: When you contact our support team via live chat, WhatsApp, or email, we record the content of that communication for quality assurance and dispute resolution purposes.
• Platform Usage: As you navigate and interact with the Platform, technical and behavioural data is automatically collected via server logs, session tracking, and analytics tools.
• Cookies and Tracking Technologies: Our Platform uses cookies, web beacons, and similar technologies to collect data about your browsing behaviour, device characteristics, and session information. See Section 10 for full details.
• KYC Verification: When you submit identity verification documents (such as a national identity card, passport, or proof of address), those documents and the data extracted from them are processed for compliance purposes.
• Third-Party Sources: We may receive data about you from third-party identity verification providers, fraud prevention agencies, and payment processors, where permitted by applicable law.

NusaBet88 processes personal data only for specific, explicit, and legitimate purposes. We do not process personal data in a manner that is incompatible with the purpose for which it was originally collected. Our primary processing purposes are:

1. Account Administration: To create, maintain, and manage your Player Account, verify your identity, and ensure only eligible players (aged 21 and above) access the Platform.
2. Service Delivery: To process deposits and withdrawals in MYR, settle bets, credit winnings, and administer bonuses and promotions in accordance with applicable terms.
3. Legal Compliance: To fulfil our obligations under applicable anti-money laundering (AML), counter-terrorism financing (CTF), and know-your-customer (KYC) regulations, including the filing of mandatory reports where legally required.
4. Fraud Prevention and Security: To detect, investigate, and prevent fraudulent transactions, account abuse, multi-accounting, money laundering, and other prohibited activities.
5. Responsible Gambling: To monitor behavioural data for signs of problem gambling, enforce deposit limits and self-exclusion requests, and comply with responsible gambling obligations.
6. Customer Support: To respond to your enquiries, resolve disputes, and provide technical assistance across all our support channels.
7. Direct Marketing: Where you have provided explicit consent, to send you promotional communications regarding bonuses, new game launches, and platform news. You may withdraw this consent at any time.
8. Platform Improvement: To analyse aggregated and anonymised usage data to improve Platform features, game performance, and user experience.

Each processing activity conducted by NusaBet88 is grounded in one or more of the following legal bases:

• Contractual Necessity: Processing required to perform the contract between you and NusaBet88, including account creation, bet settlement, and payment processing.
• Legal Obligation: Processing required to comply with applicable laws, including AML legislation, KYC regulations, and tax reporting obligations.
• Consent: Processing based on your explicit, freely given consent, such as receiving promotional marketing emails or SMS messages. This consent may be withdrawn at any time without detriment to your Account.
• Legitimate Interests: Processing necessary for purposes of NusaBet88's legitimate business interests, provided those interests are not overridden by your fundamental rights. This includes fraud prevention, platform security, and network integrity.

Where we rely on legitimate interests as our legal basis, we conduct a balancing assessment to ensure that our interests do not unduly override your rights and freedoms. You may request a copy of that assessment by contacting us at the details provided in Section 16.

We may share your personal data with the following categories of third parties:

• Payment Processors: Companies that facilitate financial transactions on the Platform, including Touch 'n Go eWallet, Boost, GrabPay, DuitNow operators, FPX-affiliated banks, Maybank, CIMB, and Public Bank. These parties receive only the transactional data necessary to process your payment.
• Identity Verification Providers: Third-party KYC and identity verification services used to authenticate your identity and comply with AML regulations. These providers are bound by strict data processing agreements.
• Cloud Infrastructure Providers: Hosting and cloud service providers who store Platform data on secure servers. These providers act as data processors under binding contractual terms.
• Fraud Prevention Agencies: Organisations and databases used to verify the legitimacy of transactions and detect money laundering, fraud, or abuse patterns.
• Regulatory and Law Enforcement Authorities: Government agencies, financial regulators, or law enforcement bodies where disclosure is required by applicable law, court order, or regulatory mandate.
• Analytics Providers: Anonymised and aggregated data may be shared with analytics services to improve Platform performance. No personally identifiable data is transmitted in this context.

All third-party processors engaged by NusaBet88 are subject to binding contractual obligations that require them to process data only for the specified purpose, maintain appropriate security standards, and comply with applicable data protection law.

NusaBet88 retains personal data for no longer than is necessary for the purposes for which it was collected, subject to any longer retention period required or permitted by applicable law. Our general retention periods are as follows:

• Account Data: Retained for the duration of your active Account, plus a minimum of five (5) years following Account closure, to comply with AML and regulatory record-keeping requirements.
• Financial Transaction Records: Retained for a minimum of seven (7) years from the date of each transaction, in accordance with applicable financial record-keeping obligations.
• KYC Documents: Retained for a minimum of five (5) years following Account closure or the completion of the last transaction to which they relate.
• Customer Support Records: Retained for three (3) years from the date of the interaction, unless a dispute or legal claim arises, in which case records are retained until that matter is fully resolved.
• Marketing Preferences: Retained until you withdraw consent or request deletion, after which only a suppression record is maintained to prevent re-contact.

Upon expiry of the relevant retention period, personal data is securely deleted or anonymised so that it can no longer be associated with any identifiable individual.

NusaBet88 implements comprehensive technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include but are not limited to:

• SSL/TLS Encryption: All data transmitted between your device and the Platform is protected using industry-standard Transport Layer Security (TLS) encryption. The nusabet88.buzz domain operates exclusively over HTTPS.
• Password Hashing: Account passwords are stored using one-way cryptographic hashing algorithms. Plain-text passwords are never stored on our servers.
• Two-Factor Authentication (2FA): Players are encouraged to enable 2FA on their Accounts to provide an additional layer of access security.
• Access Controls: Internal access to personal data is restricted on a strict need-to-know basis. Staff with access to personal data undergo background checks and receive ongoing data protection training.
• Intrusion Detection: Real-time monitoring systems flag and respond to anomalous login patterns, suspicious transactions, and potential security incidents.
• Data Backup: Regular encrypted backups of critical data are maintained to ensure business continuity and data recovery in the event of a system failure.

The NusaBet88 Platform uses cookies and similar tracking technologies to enhance your experience, ensure the security of your session, and analyse usage patterns. A cookie is a small text file placed on your device by a web server. Cookies cannot run programs or deliver viruses to your device.

We use the following categories of cookies:

• Strictly Necessary Cookies: Essential for the Platform to function correctly — including session management, login authentication, and security tokens. These cannot be disabled.
• Functional Cookies: Remember your preferences such as language settings, currency display (MYR), and notification preferences to deliver a personalised experience.
• Analytics Cookies: Collect aggregated, anonymised data on how visitors use the Platform, helping us identify areas for improvement. No personally identifiable information is shared with analytics providers in identifiable form.
• Marketing Cookies: Used only where you have provided explicit consent, to measure the effectiveness of promotional campaigns and display relevant offers. You may opt out of marketing cookies at any time.

You may manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may impact the functionality of the Platform. For detailed instructions on managing cookies in your browser, consult the help documentation provided by your browser provider.

As a data subject whose personal data is processed by NusaBet88, you are entitled to exercise the following rights in relation to your personal data. To exercise any right, please submit a request to our Data Protection contact at [email protected]. We will respond to verified requests within thirty (30) calendar days.

As part of our age verification process, we require all registrants to confirm their date of birth at the point of registration. Where we have reasonable grounds to suspect that a registered player may be under 21, we will suspend the Account and require satisfactory proof of age documentation before reinstating access.

Parents and guardians who believe that a minor may have accessed or registered an Account on the Platform are encouraged to contact us immediately at [email protected] so that we may take prompt action.

The Platform does not contain links to external third-party websites. However, the payment infrastructure that facilitates MYR transactions on the Platform involves third-party payment service providers including, but not limited to, Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and the online banking portals of Maybank, CIMB Bank, and Public Bank.

When you initiate a payment through one of these providers, you are interacting with that provider's own platform and are subject to their respective privacy policies and terms of use. NusaBet88 is not responsible for the privacy practices of third-party payment providers.

Any data processing conducted by third-party payment processors on behalf of NusaBet88 is governed by binding data processing agreements that require such processors to maintain adequate security standards and process data solely for the purposes specified by us.

The infrastructure supporting the NusaBet88 Platform may involve storage or processing of personal data on servers located outside of Malaysia. Where personal data is transferred to a jurisdiction that does not provide the same level of data protection as Malaysia, we implement appropriate safeguards to ensure that your data remains adequately protected.

Such safeguards may include:

1. Contractual clauses obligating the recipient to maintain protection standards equivalent to those applicable in Malaysia.
2. Binding corporate rules where applicable to intra-group transfers.
3. Transfer to jurisdictions recognised as providing an adequate level of protection by applicable regulatory guidance.

You may request information about the specific safeguards applicable to any cross-border transfer of your personal data by contacting us at the details set out in Section 16.

NusaBet88 reserves the right to update, revise, or replace this Privacy Policy at any time to reflect changes in applicable law, our data processing practices, or the features and services offered by the Platform. The "Last Updated" date at the top of this page indicates the date of the most recent revision.

Where changes are material — meaning they significantly alter your rights or our processing activities in ways that may affect you — we will provide advance notice via email to your registered address or through a prominent in-Platform notification, typically no less than fourteen (14) days before the changes take effect.

Your continued use of the Platform following the effective date of any revised Policy constitutes your acceptance of the updated terms. If you do not agree with the changes, you may close your Account in accordance with our Terms and Conditions.

If you have any questions, concerns, or requests in relation to this Privacy Policy, or if you wish to exercise any of the rights described in Section 11, please contact NusaBet88 through the following channels:

• Data Protection Email: [email protected] — please mark your subject line with "Privacy Request" for prioritised handling. This is a plain text email address — not a clickable link.
• Live Chat: Available 24/7 on the Platform in English, Bahasa Melayu, and Mandarin Chinese. For privacy-related queries, please ask to be connected to a Data Protection team member.
• WhatsApp Support: Available during extended hours — channel details are provided in-Platform following login.
• Response Time: We aim to acknowledge all written privacy requests within five (5) business days, and to provide a substantive response within thirty (30) calendar days of receipt of a verified request.

If you are not satisfied with our handling of your privacy concern, you retain the right to lodge a complaint with the relevant data protection supervisory authority in the jurisdiction governing your rights as a data subject.