nft888 is committed to protecting your personal data. This Privacy Policy explains exactly what information we collect, why we collect it, how it is used, and what rights you hold over your data. Please read this document carefully.
Last Updated: 1 January 2026This Privacy Policy ("Policy") describes how nft888 ("nft888", "we", "us", "our") collects, stores, processes, and protects the personal data of users ("Player", "User", "you") who access and use the nft888 online gaming platform at https://nft888.cam ("Platform").
nft888 operates as Malaysia's trusted online casino and sports betting platform, serving registered players across Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and other locations throughout Malaysia. In providing our services — including live dealer casino games, sports betting on Liga Super Malaysia, EPL, UFC, and international events, slot games, instant games, and associated account and payment services — we necessarily process certain personal data.
We are committed to handling your personal data responsibly, transparently, and in accordance with internationally recognised data protection standards. By registering an account with nft888 and using our Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.
For the purposes of this Privacy Policy, the following definitions apply:
nft888 acts as the Data Controller in respect of personal data collected through the Platform. As Data Controller, nft888 is responsible for determining the purposes for which, and the manner in which, your personal data is processed.
nft888 operates under an international online gaming licence. Our data processing activities are subject to the requirements of that licensing jurisdiction, including applicable data protection obligations imposed on licensed gaming operators. Where nft888 engages third-party Data Processors (such as payment service providers, KYC verification partners, and cloud hosting providers), it does so under written data processing agreements that require those processors to handle your data only in accordance with nft888's instructions and applicable data protection law.
nft888 collects personal data through several channels and for several purposes. The categories of data we collect are set out below:
When you create an account on nft888, we collect: full legal name, date of birth, residential address, email address, phone number, and a username selected by you. This information is required to establish and administer your account.
Before processing any withdrawal, nft888 is required to verify your identity. This involves collection of: government-issued photo identification (e.g., Malaysian MyKad, Passport, or Driver's Licence), proof of residential address (e.g., utility bill or bank statement dated within 3 months), and in some cases proof of payment method ownership.
We collect data relating to all deposits and withdrawals processed through your account, including transaction amounts, dates, payment method used (e.g., Touch 'n Go eWallet, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong, Boost, GrabPay, or cryptocurrency), and transaction reference numbers. We do not store full payment card numbers or e-wallet PINs.
We record data relating to your gaming activity on the Platform, including games played, bets placed and settled, wins and losses, session durations, and responsible gambling tool settings (such as deposit limits or self-exclusion periods you have set). This data is retained for regulatory compliance and dispute resolution purposes.
When you access the Platform, we automatically collect certain technical data including: IP address, browser type and version, device type, operating system, screen resolution, referring URL, and session timestamps. This data is used for security monitoring, fraud prevention, and platform performance optimisation.
If you contact our support team via live chat or email, we retain records of those communications including the content of your messages, timestamps, and agent responses. This data is used for quality assurance, dispute resolution, and training purposes.
Where you have opted in to receive marketing communications, we retain your contact details and marketing preference selections. You may withdraw your consent to marketing at any time by updating your account settings or contacting our support team.
The table below summarises the principal purposes for which nft888 processes your personal data:
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Account creation and administration | Registration data, contact details | Contract performance |
| Identity verification (KYC/AML compliance) | KYC documents, financial data | Legal obligation |
| Processing deposits and withdrawals | Financial transaction data, KYC data | Contract performance |
| Fraud detection and prevention | Technical data, transaction data, gaming activity | Legitimate interests |
| Platform security and integrity | IP address, device data, session logs | Legitimate interests |
| Responsible gambling management | Gaming activity, account settings, contact details | Legal obligation / legitimate interests |
| Customer support and dispute resolution | Communications data, account data, transaction data | Contract performance / legitimate interests |
| Marketing communications (where opted in) | Contact details, marketing preferences | Consent |
| Platform analytics and improvement | Technical data, gaming activity data (aggregated/anonymised) | Legitimate interests |
| Regulatory reporting and compliance | KYC data, financial data, gaming activity | Legal obligation |
nft888 processes personal data only where a valid legal basis exists. The legal bases we rely upon are as follows:
nft888 does not sell your personal data. We may share your personal data with the following categories of third parties, strictly on a need-to-know basis and subject to contractual data protection obligations:
In all cases, third-party data sharing is governed by contractual arrangements that restrict the receiving party's use of your data to the specific purpose for which it was disclosed.
nft888 uses cookies and similar tracking technologies to operate the Platform, maintain session security, personalise your experience, and collect anonymised analytics data. The categories of cookies we use are described below:
You may control non-essential cookie preferences through your browser settings. Please note that disabling certain cookies may affect Platform functionality. By continuing to use the nft888 Platform after being notified of our cookie use, you consent to the use of cookies as described in this section.
nft888 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulatory obligations. The general retention periods applicable to the main categories of personal data are as follows:
At the expiry of applicable retention periods, personal data is securely deleted or anonymised in a manner that prevents re-identification.
nft888 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:
Despite our best efforts, no data transmission over the internet or electronic storage system is entirely secure. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, nft888 will notify you and relevant authorities in accordance with applicable legal obligations.
As an internationally operated platform, nft888 may transfer your personal data to countries outside of Malaysia, including to our licensing jurisdiction and the locations of our infrastructure, payment, and KYC service providers. Where such transfers occur, nft888 ensures that appropriate safeguards are in place to protect your personal data, including:
Subject to applicable law and the terms of our licensing obligations, you hold the following rights in relation to your personal data held by nft888. To exercise any of these rights, please contact our support team using the details in Section 16.
nft888 will respond to all valid data rights requests within 30 days of receipt. In cases of complex or high-volume requests, we may extend this period by up to an additional 60 days, in which case we will notify you of the extension and the reasons for it.
nft888 does not knowingly collect personal data from individuals under the age of 21. Our Platform is intended solely for adult players who are 21 years of age or older. Age verification is a mandatory part of our registration and KYC processes.
If nft888 discovers or is notified that personal data has been collected from a person under the age of 21, we will immediately suspend the relevant account, delete the collected data, and process any verified real-money balance refund where applicable and legally permissible.
If you are a parent or guardian and believe that your child has registered on the nft888 Platform, please contact our support team immediately at the address provided in Section 16.
The nft888 Platform may contain references to or integrations with third-party services, including licensed game studios and payment service providers. This Privacy Policy applies only to data processing carried out by nft888 as Data Controller. It does not extend to the data practices of third-party service providers, who are governed by their own privacy policies.
nft888 selects third-party service providers with care and requires all processors to maintain data protection standards consistent with this Policy. However, nft888 cannot accept responsibility for the privacy practices of independent third parties. Where you interact directly with a third-party service (for example, an e-wallet provider such as Touch 'n Go or GrabPay), please refer to that provider's own privacy documentation.
nft888 reserves the right to amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, or our data processing practices. Any revised version of this Policy will be published on this page with an updated "Last Updated" date.
Where amendments are material — meaning they significantly affect how we collect or use your personal data — nft888 will make reasonable efforts to notify registered players via email or in-platform notification prior to the changes taking effect. Your continued use of the Platform following publication of an updated Policy constitutes acceptance of the revised terms.
For any questions, concerns, or formal requests relating to this Privacy Policy or the handling of your personal data by nft888, please contact us through the following channels:
When submitting a data rights request, please include your registered email address and sufficient information to allow us to identify your account. We may need to verify your identity before processing your request in order to protect your data from unauthorised disclosure.
For further information about our platform, please also refer to our Terms & Conditions and About Us pages.
nft888 respects your right to control how your personal data is used. Here is a plain-language summary of the rights you can exercise at any time.
Request a copy of all personal data nft888 holds about you, along with information on how and why it is being processed.
Ask us to correct any inaccurate or incomplete personal data held in your account, including contact details, address, and KYC information.
Request deletion of your personal data where it is no longer needed, subject to our legal and regulatory retention obligations under AML and licensing rules.
Request that we pause our processing of your personal data in specific circumstances, such as while a dispute over accuracy is being resolved.
Where applicable, request that your personal data be provided in a structured, machine-readable format so you can transfer it to another service.
Withdraw your consent to marketing communications or any other consent-based processing at any time, without affecting past processing carried out in good faith.
nft888 combines technical security measures with clear policies to ensure your personal data is always handled with the care it deserves.
All data exchanged between your device and nft888 — including login credentials, payment details, and personal information — is protected by bank-grade SSL encryption in transit.
nft888 does not sell, rent, or trade your personal data to third parties for marketing or any other purpose. Data sharing is strictly limited to what is necessary to deliver our services and comply with the law.
Identity verification protects you as much as it protects the platform. KYC prevents fraudulent use of your identity and ensures that only verified account holders can process withdrawals.
Sensitive personal and financial data stored by nft888 is encrypted at rest. Access is restricted to authorised personnel only, using role-based access controls and audit logging.
nft888 retains personal data only for as long as legally required or operationally necessary. Data that has reached the end of its retention period is securely and permanently deleted.
Our support team is available around the clock to help with data rights requests, privacy concerns, and account security questions. Reach us via live chat or at [email protected].
You know how we handle your data. Now discover Malaysia's trusted online casino — live dealer games, sports betting, slots, and fast e-wallet payouts. For players aged 21 and above only.
🔞 For players aged 21 and above only. Please gamble responsibly. Visit Responsible Gambling for self-exclusion and deposit limit tools.