Privacy Policy nila88 — Malaysian User Data Protection

Nila88 collects your personal information through several channels when you use our platform. Understanding the types of data we collect helps you make informed decisions about using our services.

Information you provide directly:

• Registration information — full name, identification number (MyKad), date of birth, mobile number, and email address when you open a new account.
• KYC Documents — copies of your MyKad (front and back), proof of address such as a recent bank statement or utility bill, and proof of the payment method used.
• Financial information — bank account number, bank name, and e-wallet details used for fund deposits and withdrawals.
• Communications — messages you send to our customer support team via live chat, email, or any official nila88 communication channel.

Information collected automatically:

• Usage data — game history, bets placed, wins and losses, session duration, and platform usage patterns.
• Device and network data — IP address, browser type, operating system, screen resolution, and device information used to access the platform.
• Location data — approximate location based on IP address for compliance and geographic eligibility verification purposes.
• Cookie data — session information, user preferences, and analytics data collected through cookies and related tracking technologies.

Every piece of information collected by nila88 has a clear and lawful purpose. We do not use your data for any purpose beyond what is stated below without first obtaining your consent.

For marketing communications, you may withdraw your consent at any time by contacting our support team or using the unsubscribe link in our emails. Withdrawing marketing consent will not affect your use of nila88 services.

Nila88 does not sell, rent, or trade your personal information to any third party for their own marketing purposes. However, there are certain circumstances where data sharing is necessary to keep the platform functioning properly or to meet legal obligations.

Third parties that may receive your data:

• Payment service providers — processing deposits and withdrawals requires sharing necessary transaction information with registered and trusted payment providers.
• Game providers — usernames and game records are shared with licensed game providers to enable a seamless gaming experience and result verification.
• Identity verification services — third-party providers that assist with the KYC verification and document validation process in accordance with industry standards.
• Analytics services — anonymised usage data is shared with analytics platforms to help us understand and improve the user experience.
• Regulatory authorities and agencies — nila88 will disclose required information if mandated by a court order, regulatory directive, or applicable law.

All third parties that receive nila88 user data are bound by strict data processing agreements and are required to maintain data protection standards equal to or exceeding those of nila88.

Nila88 uses cookies and similar tracking technologies to enhance your experience, maintain session security, and collect analytics data that helps us continuously improve the platform.

Types of cookies we use:

• Essential cookies (required) — required for core platform functions such as login session management, security, and access control. These cookies cannot be disabled as they are critical to platform operation.
• Optional cookies (non-essential) — stores user preferences such as language, display settings, and game preferences so you do not need to reconfigure them each time.
• Analytics cookies — collects information about how you use the platform, pages visited, and time spent. This data is used in aggregate and does not personally identify individuals.
• Security cookies — helps identify suspicious sessions, unauthorised login attempts, and activity that may indicate a security threat.

You can manage cookie settings through your browser. Please note that disabling certain cookies may affect the functionality of the nila88 platform. For more information on managing cookies in your browser, refer to your browser's help documentation.

Protecting your personal data is nila88's top priority. We continuously invest in security infrastructure and team training to maintain the highest data protection standards at all times.

Technical security measures we implement:

• 256-bit SSL/TLS encryption for all data communications between the platform and users — ensuring no third party can intercept transmitted information.
• Hashed password storage using strong cryptographic algorithms — nila88 staff cannot view your original password.
• Two-factor authentication (2FA) available and strongly recommended for all accounts as an extra layer of protection at login.
• Real-time threat monitoring — our automated system monitors for unusual activity and sends immediate alerts if any suspicious access attempt is detected.
• Independent security audits conducted regularly by independent experts to identify and address any vulnerabilities before they can be exploited.
• Internal access controls — only specifically authorised staff may access user data, and all access is logged for audit purposes.

While we do everything possible to protect your data, please be aware that no system is entirely risk-free. You also play an important role in keeping your account secure by using a strong, unique password and never sharing your login credentials with anyone.

Nila88 retains your personal data only for as long as necessary to fulfil the original purpose of collection or to meet relevant legal obligations. Once the retention period expires, data will be securely deleted or anonymised.

General data retention guidelines we follow:

• Active account data — retained for the duration of your active account and for an additional period after account closure for legal compliance purposes.
• Financial transaction records — retained for a minimum of 7 years in accordance with financial reporting requirements and anti-money laundering legislation.
• KYC Documents — retained for the duration of the active account and up to 5 years after account closure in accordance with regulatory requirements.
• Support communication logs — retained for 2 years for reference purposes and service quality improvement.
• Analytics data — stored in aggregated and anonymised form, with no specific retention limit as it contains no personally identifiable information.

When you request account closure, nila88 will initiate the deletion of unnecessary data within 30 days. Data required to be retained for legal compliance will be anonymized as soon as permitted by law.

As a nila88 user, you have certain rights regarding your personal data, which we take seriously and fully respect. These rights can be exercised by contacting our data protection team.

• Right to access — you may request a copy of all personal data we hold about you, including how it is used and with whom it is shared.
• Right to rectification — if any information we hold is inaccurate or outdated, you have the right to request an immediate correction.
• Right to erasure — in certain circumstances, you may request that your personal data be deleted, subject to applicable legal retention obligations.
• Right to restrict processing — you may request that nila88 restrict how your data is processed while any dispute or review request is being resolved.
• Right to object — you may object to the processing of your data for direct marketing purposes, and we will honour that request without question.
• Right to data portability — you have the right to receive the data you provided to us in a machine-readable format for the purpose of transferring it to another provider.

To exercise any of the above rights, contact the nila88 support team via live chat on the platform. We will process your request within 30 business days and notify you of the action taken.

The nila88 platform is strictly for adult users aged 18 and above. We do not knowingly collect personal information from individuals under the age of 18.

Steps we take to prevent underage use of the platform by minors:

• Mandatory age verification during new account registration.
• KYC checks including date of birth verification via official identification documents.
• Continuous monitoring to identify accounts that may be owned or accessed by underage individuals.

If nila88 discovers that we have unintentionally collected personal information from a minor, we will promptly delete that information and close the associated account. Parents or guardians who believe their child may have registered an account on this platform are urged to contact our support team immediately.

Nila88 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements, or improvements to our services.

When significant changes occur, we will notify you through:

• In-platform notice during your next login session.
• Notification emails are sent to the email address registered to your account.
• Update the "Last Updated" date shown at the top of this document.

Your continued use of the nila88 platform after any policy amendment takes effect will be considered your acceptance of the updated terms. If you do not agree with the changes made, you have the right to close your account before they take effect by contacting our support team.

We encourage you to review this Privacy Policy page periodically to stay informed about how we handle your personal information.

If you have any questions, concerns, or requests regarding this Privacy Policy or how nila88 handles your personal data, our team is ready to assist through the following channels:

• Live Chat 24/7 — the fastest way to get an immediate response. Click the live chat icon on the platform after logging in.
• Support email — [email protected] for enquiries that require more detailed written clarification.

Our data protection team is committed to responding to all privacy-related enquiries within 3 business days. For more complex requests such as data deletion or data copy requests, processing may take up to 30 business days.