At ns8, protecting the personal data of our players is a fundamental responsibility — not an afterthought. This Privacy Policy explains exactly what information we collect, why we collect it, how it is used, and the rights you have over your own data.
These six principles underpin everything we do with your personal data. They summarise our approach — the full policy detail follows below.
We collect only the personal data that is genuinely necessary to operate your account, process payments, and comply with legal obligations. We do not collect data speculatively or beyond operational need.
All personal data transmitted between your device and the ns8 platform is protected by 256-bit TLS 1.3 encryption — the same standard applied by major financial institutions in Malaysia and internationally.
Your personal data is never sold to third parties. Data is shared only with service providers essential to platform operations — such as payment processors and KYC verification partners — under strict contractual data protection obligations.
You have the right to access, correct, export, restrict processing, and request deletion of your personal data at any time, subject to our legal retention obligations. We respond to all data requests within the timeframes prescribed by applicable law.
ns8 processes personal data in accordance with applicable data protection legislation, including the requirements imposed by our international gaming licence. Our data handling practices are reviewed regularly by our compliance team.
Personal data is retained only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable legal, regulatory, or licensing obligations. Upon expiry of the retention period, data is securely deleted or anonymised.
This Privacy Policy ("Policy") is issued by ns8 ("ns8", "we", "us", "our"), the operator of the online gaming platform accessible at https://ns8.cam. It applies to all personal data collected from individuals ("you", "Player", "User") who access or use the ns8 website, mobile application, or any associated service.
ns8 is committed to the responsible, transparent, and lawful handling of personal data. This Policy explains what personal data we collect, the purposes for which it is processed, the parties with whom it may be shared, how long it is retained, and the rights you hold in respect of your own data.
By registering an account with ns8 or by continuing to use the Platform after this Policy has been made available to you, you acknowledge that you have read and understood its contents. This Policy should be read alongside our Terms & Conditions, which govern your overall use of the Platform.
The following terms carry the meanings set out below throughout this Privacy Policy:
The data controller responsible for the personal data collected through the ns8 platform is the licensed operator of ns8, operating under an internationally recognised gaming licence. Enquiries regarding data protection matters — including subject access requests, correction requests, and data deletion requests — should be directed to our Data Protection contact as specified in Section 15 of this Policy.
ns8 has designated internal responsibility for data protection compliance. Where processing activities are carried out by third-party data processors, ns8 ensures that appropriate data processing agreements are in place that bind those processors to obligations equivalent to those applicable to ns8.
ns8 collects personal data through several channels: directly from you during account registration and use; automatically through your interaction with the Platform; and from third parties such as payment service providers and KYC verification partners.
| Category | Specific Data Elements | Collection Method |
|---|---|---|
| Identity Data | Full legal name, date of birth, gender, nationality, Malaysian NRIC or passport number | Registration & KYC submission |
| Contact Data | Email address, mobile number, residential address (including city and postcode) | Registration form |
| Financial Data | Bank account details, e-wallet identifiers (Touch 'n Go, Boost, GrabPay), DuitNow registered number, FPX transaction references, USDT wallet address | Payment processing |
| Transaction Data | Deposit and withdrawal history, transaction amounts in MYR, payment method used, timestamps | Platform activity |
| Gaming Activity | Game history, betting records, wagering amounts, session duration, win/loss records, bonus claims | Platform activity |
| Technical Data | IP address, browser type and version, device type and operating system, session identifiers, time zone | Automatic collection |
| Communication Data | Live chat transcripts, email correspondence, customer support interaction records | Customer interactions |
| Responsible Gaming Data | Self-exclusion elections, deposit limit settings, session reminder configurations, problem gambling risk flags | Account settings & monitoring |
ns8 does not knowingly collect sensitive personal data (such as racial or ethnic origin, religious beliefs, or health information) except where required by responsible gaming obligations (e.g., noting a Player's self-reported gambling harm status) or by applicable legal requirements.
ns8 processes personal data only where a recognised lawful basis exists. The primary lawful bases applicable to our processing activities are as follows:
Processing necessary for the performance of the contract between you and ns8 — including account creation, identity verification, processing deposits and withdrawals via Maybank, CIMB, DuitNow, FPX and other Malaysian payment methods, and the provision of gaming services.
Processing required for compliance with applicable legal and regulatory obligations, including anti-money laundering (AML) obligations, Know Your Customer (KYC) requirements, licensing conditions, and financial reporting obligations.
Processing carried out in pursuit of ns8's legitimate business interests, including fraud detection and prevention, platform security monitoring, responsible gaming oversight, business analytics, and service improvement — provided that such interests are not overridden by your fundamental rights and freedoms.
For certain optional processing activities — such as direct marketing communications, promotional newsletters, and the use of non-essential cookies — ns8 relies on your freely given consent. You may withdraw consent for such processing at any time without affecting the lawfulness of processing that occurred prior to withdrawal.
ns8 uses the personal data we hold for the following purposes:
ns8 does not sell, rent, or trade your personal data to any third party. Data is shared only in the circumstances described below, and only to the extent necessary for the specified purpose:
Your financial data is shared with payment processors and financial institutions — including operators of Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and licensed banks including Maybank, CIMB, Public Bank, and Hong Leong — solely for the purpose of processing your deposits and withdrawals. These providers process data as independent data controllers or as our data processors, subject to their own applicable privacy policies and contractual data protection obligations.
Identity documents submitted for KYC verification are processed by our licensed third-party identity verification partners. These partners act as data processors under our instruction and are bound by contractual obligations consistent with applicable data protection requirements.
ns8 may disclose personal data to regulatory bodies, licensing authorities, financial intelligence units, or law enforcement agencies where required or permitted to do so by applicable law, including in response to lawfully issued requests, court orders, or AML reporting obligations.
Personal data may be disclosed to lawyers, auditors, or other professional advisers retained by ns8 where necessary for the conduct of legal proceedings, regulatory investigations, or statutory audits, subject to appropriate confidentiality obligations.
In the event of a merger, acquisition, or transfer of all or part of the ns8 business to a successor entity, personal data held by ns8 may be transferred to the acquiring entity as part of that transaction, subject to equivalent data protection obligations being maintained.
ns8 operates as an internationally licensed gaming platform, and certain data processing activities may involve the transfer of personal data to jurisdictions outside Malaysia. Where such transfers occur, ns8 ensures that appropriate safeguards are in place to maintain an equivalent level of data protection, including:
Players who require further information about the specific safeguards in place for international data transfers may contact our data protection team using the details in Section 15 of this Policy.
ns8 retains personal data for no longer than is necessary to fulfil the purposes for which it was collected, subject to any overriding legal, regulatory, or licensing obligations that require longer retention. The following general retention periods apply:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account & Identity Data | Duration of account + 5 years post-closure | Licensing & AML obligations |
| Financial & Transaction Data | 7 years from transaction date | AML / financial reporting law |
| KYC Documents | 5 years post account closure | Regulatory requirement |
| Gaming Activity Records | Duration of account + 3 years | Licensing obligation |
| Customer Support Records | 3 years from interaction date | Legitimate interest / dispute resolution |
| Marketing Consent Records | Duration of consent + 2 years | Proof of consent requirement |
| Technical / Log Data | Up to 12 months | Security monitoring |
Upon expiry of the applicable retention period, personal data is securely deleted or permanently anonymised so that it can no longer be attributed to any identified individual. Where data is retained in anonymised or aggregated form for analytical purposes, it is no longer considered personal data for the purposes of this Policy.
ns8 implements appropriate technical and organisational security measures designed to protect your personal data against accidental loss, unauthorised access, disclosure, alteration, and destruction. Key security measures in place include:
Despite these measures, no data transmission over the internet or electronic storage system can be guaranteed as absolutely secure. You are responsible for maintaining the security of your account credentials. If you suspect that your account has been compromised, contact ns8 support immediately via live chat.
ns8 uses cookies and similar tracking technologies on the Platform for the following purposes:
These cookies are essential for the Platform to function correctly. They enable core features such as session authentication, game state preservation, and security token management. Strictly necessary cookies cannot be disabled without impairing Platform functionality. No consent is required for strictly necessary cookies.
Functional cookies remember your preferences — such as language settings, preferred game categories, and deposit method selections — to personalise your Platform experience. These cookies are set only with your consent.
Analytics cookies collect aggregated, anonymised data about how players interact with the Platform — including page visit frequency, session duration, and feature usage. This data is used solely to improve Platform performance and user experience. Analytics cookies are set only with your consent.
You may manage non-essential cookies through the cookie preference centre accessible on the Platform. You may also control cookies through your browser settings; however, disabling certain cookies may affect Platform functionality. Withdrawing cookie consent does not affect personal data processing carried out on other lawful bases.
Subject to applicable data protection law and any overriding legal obligations, you have the following rights in respect of the personal data ns8 holds about you. To exercise any of these rights, please contact our data protection team using the details in Section 15.
Request a copy of all personal data we hold about you. We will respond within 30 days of a valid request.
Request correction of any inaccurate or incomplete personal data we hold. Minor corrections may be made directly in your account settings.
Request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
Request that we limit processing of your data in certain circumstances — for example, while the accuracy of data is being contested.
Request that certain personal data you provided to us be delivered to you or a third party in a commonly used, machine-readable format.
Object to processing based on legitimate interests or for direct marketing purposes. Objection to direct marketing will always be honoured promptly.
Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.
You have the right to lodge a complaint with the relevant data protection supervisory authority if you believe your rights have been infringed.
ns8 does not knowingly collect personal data from individuals under the age of 21. The Platform is strictly for adults aged 21 and above, in accordance with the age eligibility requirements set out in our Terms & Conditions and applicable licensing obligations.
If ns8 becomes aware that personal data has been collected from an individual who is under 21 years of age, that data will be immediately deleted and the associated account closed without notice. Any funds deposited in connection with an under-age account will be handled in accordance with our Terms & Conditions and applicable legal requirements.
If you believe that an individual under the age of 21 may have registered with ns8, please contact our support team immediately via live chat or at [email protected].
ns8 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, our data processing practices, or Platform functionality. The "Last Updated" date at the top of this Policy will be revised accordingly.
Where amendments are material — meaning they significantly affect the way in which we process your personal data or the rights available to you — ns8 will provide notice via a Platform notification or by email to the address associated with your account, where reasonably practicable, prior to the changes taking effect.
Your continued use of the Platform following the effective date of any amended Privacy Policy constitutes your acknowledgement of the updated terms. If you do not accept the amended Policy, you should cease using the Platform and request account closure.
For all data protection enquiries, subject access requests, correction or deletion requests, and formal complaints regarding ns8's handling of your personal data, please use the following contact channels:
For additional information about our platform policies, please refer to our Terms & Conditions, Responsible Gambling page, and FAQ.
If you have questions about how your personal data is handled, our support team is available 24/7 via live chat. You can also visit our FAQ for quick answers to common privacy and account queries. Play with confidence — your data is protected.
For players aged 21 and above only. Gambling involves financial risk. Please play responsibly.