Section 01
Introduction
This Privacy Policy ("Policy") describes how NH88 ("we", "us", "our", "the Operator"), the entity operating the online gaming platform atnh88.cam, collects, uses, stores, discloses, and protects the personal data of individuals ("you", "Member", "User") who access or use any part of the NH88 platform and associated services.
NH88 is committed to protecting the privacy of all Members. This Policy applies to all personal data processed in connection with the creation and management of your NH88 account, the execution of financial transactions — including deposits via Touch'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong Bank, DuitNow, and FPX — participation in gaming activities, and all communications between you and NH88.
Acceptance: By creating an NH88 account, making a deposit, placing a wager, or otherwise using the platform, you acknowledge that you have read, understood, and agreed to this Privacy Policy. If you do not agree with any part of this Policy, you must discontinue use of the platform and close your account. This Policy is incorporated by reference into NH88's Terms & Conditions.
This Policy should be read alongside the Terms & Conditions and the Responsible Gambling Policy. In the event of a conflict between this Policy and those documents on a data protection matter, this Privacy Policy shall prevail.
Section 02
Definitions
The following terms carry the meanings set out below throughout this Policy:
| Term |
Meaning |
| "Personal Data" |
Any information that identifies or could reasonably be used to identify a living individual, including name, email address, device identifiers, and financial account details. |
| "Processing" |
Any operation performed on Personal Data, including collection, recording, storage, adaptation, retrieval, use, disclosure, erasure, or destruction. |
| "Data Controller" |
NH88, the entity that determines the purposes and means of processing your Personal Data. |
| "Data Processor" |
A third-party service provider that processes Personal Data on behalf of NH88 and under NH88's documented instructions. |
| "Sensitive Data" |
A subcategory of Personal Data warranting heightened protection, including government-issued identification numbers (e.g., MyKad IC number), biometric data, and financial account credentials. |
| "Cookie" |
A small text file placed on your device by the NH88 platform for purposes described in Section 8 of this Policy. |
| "Member" |
An individual who has completed registration and holds active NH88 account. |
Section 03
Data We Collect
NH88 collects the following categories of Personal Data in the course of providing its services:
3.1 Identity and Registration Data
- Full legal name as it appears on government-issued identification
- Date of birth (used for age verification — NH88 is strictly21+ only)
- Gender (optional, where provided)
- Nationality and country of residence
- Malaysian IC (MyKad) number or passport number, collected during KYC verification
- Username selected during account registration
3.2 Contact Data
- Email address (primary and, where provided, secondary)
- Malaysian mobile telephone number (for account verification and support contact)
- Residential address — street, city (Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, or other), postcode, state
3.3 Financial and Transaction Data
- Payment method details (e-wallet account references, bank account numbers — truncated for security, not stored in full)
- Deposit and withdrawal transaction history, including amounts MYR, timestamps, and payment method used
- Account balance history
- Bonus and promotional credit history
- Source of funds documentation (where requested for high-value accounts)
3.4 Technical and Usage Data
- IP address and approximate geolocation derived from IP
- Device type, operating system, and browser version
- Session data including login timestamps, duration, and activity logs
- Game participation records, including titles played, stakes and outcomes
- Sports betting records, including markets, odds accepted, and settlement results
- Platform navigation behaviour, clicks, and feature usage patterns
3.5 Communications Data
- Records of live chat interactions with NH88 support agents
- Email correspondence content
- Complaint and dispute records
- KYC correspondence and verification outcomes
Minimisation Principle: NH88 does not collect Personal Data beyond what is necessary for the specified purposes set out in Section 5 of this Policy. Where optional data fields are provided during registration or account management, completion is voluntary unless otherwise indicated as mandatory for compliance purposes.
Section 04
How We Collect Data
NH88 collects Personal Data through the following channels and mechanisms:
- Direct Submission: Information you voluntarily provide during account registration, KYC verification, support interactions, or completion of platform forms
- Automated Technical Collection: Device identifiers, IP addresses, session logs, and navigation data collected automatically when you access the platform, via server logs and first-party cookies
- Payment Processor Confirmations: Transaction reference data and payment status confirmations received from our approved payment processing partners (Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong Bank, DuitNow, FPX, and crypto processors for Elite VIP members)
- Identity Verification Partners: KYC outcome data and document authenticity results from third-party identity verification service providers acting as Data Processors under instruction from NH88
- Fraud Prevention Systems: Device fingerprint data and cross-reference signals from fraud prevention tools used to detect multi-accounting and suspicious activity
- Customer Support Platforms: Chat transcripts and case records generated through our multilingual support infrastructure (English, Bahasa Melayu, Mandarin)
Section 05
Purposes of Processing
NH88 processes your Personal Data exclusively for the following defined purposes:
| Purpose |
Description |
Data Categories Used |
| Account Administration |
Creating, maintaining, and closing your NH88 account; verifying identity; enforcing eligibility requirements |
Identity, Contact, KYC |
| Payment Processing |
Facilitating MYR deposits and withdrawals via supported payment methods; reconciling transactions |
Financial, Identity |
| Gaming Services |
Delivering live casino, slots, sports betting, crash, and lottery game services; recording game outcomes |
Usage, Financial |
| Regulatory Compliance |
Meeting KYC/AML obligations; age verification (21+); producing records for regulatory review on request |
Identity, Financial, KYC |
| Fraud Prevention |
Detecting and preventing multi-accounting, bonus abuse, money laundering, and other prohibited conduct |
Technical, Financial, Identity |
| Customer Support |
Responding to enquiries, resolving complaints, and providing multilingual assistance |
Communications, Identity |
| Platform Improvement |
Analysing aggregated usage patterns to improve platform stability, speed, and game offering |
Technical (anonymised) |
| Responsible Gambling |
Monitoring play patterns for problem gambling indicators; enforcing self-exclusion and deposit limits |
Usage, Financial |
| Direct Communications |
Sending transactional notifications, account alerts, and — where consent has been given — promotional offers |
Contact, Usage |
Section 06
Legal Bases forProcessing
NH88 relies on the following legal bases to process your Personal Data, consistent with internationally recognised data protection principles:
- Contractual Necessity: Processing required to fulfil the agreement between you and NH88, including account management, payment processing, and the provision of gaming services. Without this processing, NH88 cannot provide you with a functional account.
- Legal Obligation: Processing required to comply with applicable regulatory requirements, including anti-money laundering (AML) rules, Know Your Customer (KYC) obligations, age verification mandates, and responses to lawful requests from competent authorities.
- Legitimate Interests: Processing for fraud prevention, platform security, responsible gambling monitoring, and internal analytics — provided that such processing does not override your fundamental rights and interests.
- Consent: Where NH88 sends optional marketing communications, including promotional bonus offers and platform updates, by email or in-app notification. You may withdraw your marketing consent at any time by contacting support or updating your account communication preferences without affecting the lawfulness of prior processing.
Section 07
Data Sharing
NH88 does not sell, rent, trade, or otherwise disclose your Personal Data to unaffiliated third parties for their own commercial or marketing purposes. Personal Data is shared with third parties only in the following defined circumstances:
7.1 Data Processors
NH88 engages the following categories of third-party Data Processors who handle Personal Data strictly under written data processing agreements and in accordance with NH88's instructions:
- Payment Processing Partners: Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong Bank, DuitNow, FPX, and crypto processor partners for Elite VIP members — the sole purpose of executing approved financial transactions
- KYC and Identity Verification Providers: Third-party services that validate MyKad, passport, and proof-of-address documents as part of the KYC process
- Fraud Prevention Services: Providers supplying device fingerprinting, IP intelligence, and behavioural analytics tools used to detect suspicious platform activity
- Customer Support Infrastructure: Hosted live chat and ticketing platform providers through which multilingual support in English, Bahasa Melayu, and Mandarin is delivered
- IT and Hosting Providers: Cloud infrastructure and data centre operators hosting the NH88 platform and its databases under strict security and confidentiality agreements
7.2 Legal Disclosures
NH88 may disclose Personal Data to competent governmental, regulatory, or law enforcement authorities where required to do so by applicable law, court order, or binding regulatory direction. NH88 will, where legally permissible, notify affected Members of such disclosures.
7.3 Corporate Transactions
In the event of a merger, acquisition, restructuring, or sale of all or part of NH88's business operations, Member Personal Data may be disclosed to the acquiring entity — subject to confidentiality obligations and continued processing in accordance with this Policy or a materially equivalent successor policy.
No Advertising Data Sharing: NH88 does not share Member Personal Data with advertising networks, social media platforms, or data brokers. No third-party marketing pixels or advertising cookies are loaded on the NH88 platform.
Section 08
Cookies & Tracking Technologies
NH88 uses cookies and similar technologies (local storage, session tokens) to operate the platform, maintain session continuity, and improve user experience. The following cookie categories are in use:
Essential
Strictly Necessary Cookies
Required for core platform functionality — login session management, account security tokens, and payment process continuity. These cookies cannot be disabled without preventing basic platform operation. No consent is required for essential cookies.
Functional
Functional Preference Cookies
Store your platform preferences — including selected language (English, Bahasa Melayu, Mandarin), game view settings, and responsible gambling limit reminders — so they persist across sessions without requiring re-entry.
Analytics
First-Party Analytics Cookies
NH88 uses its own first-party analytics tools — not third-party services such as Google Analytics — to understand platform usage patterns, identify technical issues, and measure feature adoption. Data is aggregated and does not identify individual Members.
Security
Fraud Detection & Security Cookies
Device fingerprinting tokens and risk-scoring signals used by NH88's fraud prevention systems to detect multi-account creation, suspicious login patterns, and bot activity. These tokens do not track you across external websites.
You may control non-essential cookies through your browser settings. Note that disabling functional cookies may impair your platform experience. NH88 does not deploy any third-party advertising or social media tracking cookies.
Section 09
Data Retention
NH88 retains Personal Data for as long as necessary to fulfil the purposes for which it was collected and to comply with applicable legal and regulatory obligations. The following retention schedules apply as general guide:
- Active account data: Retained for the duration of your active NH88 membership plus a post-closure period as required by applicable anti-money laundering regulations (typically 5–7 years from account closure)
- Transaction records: Financial transaction logs are retained for a minimum of 7 years from the date of each transaction to meet regulatory recordkeeping requirements
- KYC documentation: Identity verification documents are retained for the duration required by applicable AML and KYC regulations, typically no less than 5 years from the date of submission
- Support communications: Live chat transcripts and email correspondence are retained for up to 3 years from the date of the interaction, unless the record relates to an unresolved dispute
- Technical and usage logs: Server and session logs are retained for up to 24 months and are then deleted or fully anonymised
- Marketing consent records: Records of your consent to or opt-out from marketing communications are retained for as long as your account remains active and for 3 years following account closure
Deletion Requests: Where you request deletion of your Personal Data and there is no overiding legal or regulatory basis for continued retention, NH88 will delete or irreversibly anonymise the relevant data within 30 calendar days of receiving and verifying your request. Certain data categories cannot be deleted where retention is mandated by applicable law — in such cases, NH88 will inform you of the specific obligation preventing deletion.
Section 10
Data Security
NH88 implements a comprehensive set of technical and organisational security measures designed to protect your Personal Data against unauthorised access, accidental loss, destruction, or alteration. Key measures in place include:
- AES-256 encryption for all Personal Data stored in NH88's databases
- TLS 1.3 encryption for all data transmitted between your device and NH88's servers
- Two-factor authentication (2FA) available on all Member accounts and mandatory for staff accounts with access to Member data
- Role-based access controls (RBAC) restricting database access to authorised personnel on a need-to-know basis
- Regular third-party penetration testing and vulnerability assessments
- Continuous automated monitoring for anomalous data access patterns
- Physical security controls at all data centre locations
- Staff training on data protection obligations and incident response procedures
In the event of a data breach that poses a material risk to Member rights and interests, NH88 will notify affected Members without undue delay and, where applicable, report the breach to the relevant regulatory authority within the required timeframe.
Your Role in Security: You are responsible for maintaining the confidentiality of your NH88 account credentials. NH88 will never contact you to request your password, PIN, or one-time verification codes. If you suspect unauthorised access to your account, contact our24/7 support team immediately via live chat.
Section 11
Your User Rights
Subject to applicable law and the limitations described below, you have the following rights in relation to your Personal Data held by NH88. To exercise any of these rights, contact our support team via live chat or at the email address provided in Section 15.
NH88 will respond to all valid data subject requests within 30 calendar days. Where the complexity or volume of requests requires an extension, you will be notified within the initial 30-day period. Identity verification is required before any request is actioned to protect against unauthorised data access.
Section 12
Children & Minors
NH88 is an online gaming platform restricted exclusively to individuals aged21 years and above. We do not knowingly collect, process, or retain Personal Data from individuals under the age of 21.
If NH88 discovers or has reasonable grounds to believe that an account has been registered by or is being operated by a person under 21 years of age, the account will be immediately suspended pending investigation. Any funds held in the account will be reviewed and, where attributable to a minor, returned to the original payment source after all costs and administrative charges have been deducted.
Parents and guardians who believe that a minor in their care has registered with or accessed NH88 should contact our support team immediately via live chat or the email address provided in Section 15. NH88 will prioritise such reports and take all necessary remedial action.
Section 13
International Data Transfers
NH88 operates through server infrastructure hosted in data centres that may be located outside Malaysia. In such cases, your Personal Data may be transferred to and stored in jurisdictions that have different data protection standards to those in your home country.
NH88 implements appropriate safeguards for all international transfers of Personal Data, which may include standard contractual clauses approved by competent data protection authorities, binding corporate rules, or transfers to jurisdictions that provide an adequate level of protection as determined by relevant regulatory standards.
NH88 requires all international Data Processors to implement security and confidentiality standards materially equivalent to those described in Section 10 of this Policy.
Section 14
Policy Changes
NH88 reserves the right to update, revise, or supplement this Privacy Policy at any time to reflect changes in data processing practices, applicable law, or platform operations. The "Last Reviewed" date displayed at the top of this document will be updated upon each revision.
Material changes to this Policy — particularly those that alter the purposes for which data is processed, the categories of third parties with whom data is shared, or your rights as a data subject — will be communicated to registered Members via email notification to the address on file and/or via a prominent notice on the platform, in advance of the changes taking effect.
Your continued use of the NH88 platform following the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not accept a revised Policy, you must cease use of the platform and contact NH88 to initiate the account closure process.
Section 15
Contact Us
For all privacy-related enquiries, data subject access requests, consent withdrawals, or complaints regarding NH88's data processing practices, please contact our Data Protection team through any of the channels listed below. All privacy requests are handled by a dedicated internal team separate from general customer support.
- Live Chat: Available 24/7 via the platform — mark your request as "Privacy Request" or "Data Subject Request" for direct routing to the appropriate team
- Email: [email protected] — use the subject line "Privacy Policy Enquiry" or "Data Subject Request"
- Languages: Privacy requests are handled in English, Bahasa Melayu, and Mandarin Chinese
- Response Commitment: All privacy requests will be acknowledged within 5 business days. Substantive responses to data subject requests will be provided within 30 calendar days of identity verification
Identity Verification Required: To protect the security of Member data, NH88 will require verification of your identity before processing any data subject request. This typically involves confirming your registered email address, account username, and one additional piece of identifying information. NH88 will not action requests that cannot be verified to a reasonable standard of certainty.