Privacy Policy NH88 — Your Data Protection

1 Introduction

NH88 ("we", "the nh88 platform", or "nh88") is fully committed to protecting the privacy and security of the personal information of every member who uses our platform. This Privacy Policy clearly and transparently describes how we collect, process, store, use, and in certain circumstances disclose your personal information when you use nh88's services.

This Policy applies to all members who register and use the nh88 platform, including access via the website, mobile app, or any other digital channel we operate. By proceeding with registration or use of the nh88 platform, you consent to the collection and use of your personal information as described in this Privacy Policy.

We understand that your trust in nh88 depends largely on how we handle your personal information. We therefore take this responsibility very seriously and continually strive to comply with all applicable data protection laws in Malaysia, including the Personal Data Protection Act 2010 (PDPA).

2 Information We Collect

NH88 collects various types of personal information for lawful and specific purposes. The type of information we collect depends on how you interact with the nh88 platform. Generally, there are two main categories of information we collect:

A. Information You Provide Directly

• Full name as stated in a valid identity document (MyKad or passport).
• Date of birth for age verification purposes.
• An active email address for account communications.
• Mobile phone number registered in Malaysia.
• Payment method information including bank account numbers, e-wallet numbers, or relevant card details.
• Identity verification (KYC) documents such as a copy of your MyKad or passport and proof of address.
• Any additional information you provide when contacting the nh88 support team.

B. Information Collected Automatically

• IP address and approximate geographic location based on IP address.
• Device type, operating system, and web browser version used.
• Log data including access times, pages visited, and session duration.
• Records of all financial transactions including deposits, withdrawals, and wagering history.
• Cookie data and similar tracking technologies to enhance the user experience.
• Platform technical performance data for continuous improvement purposes.

3 How We Use Your Data

NH88 uses collected personal information solely for lawful, specific, and transparent purposes. We will not use your data for purposes not stated in this Privacy Policy without first obtaining your consent. The primary uses of member personal data by nh88 are as follows:

• Account Management: To create, maintain, and manage your member account, including processing registration, identity verification, and account recovery.
• Transaction Processing: To securely and efficiently process all deposits, withdrawals, and other financial transactions made through the nh88 platform.
• Legal Compliance: To fulfil nh88's legal obligations under the PDPA, anti-money laundering (AML) requirements, and any other applicable compliance regulations.
• Platform Security: To detect, prevent, and investigate any fraudulent activity, hacking attempts, or misuse of the nh88 platform.
• Service Improvement: To analyse usage patterns and continuously improve the quality, performance, and user experience of the nh88 platform.
• Communication: To send important notifications relating to your account, platform updates, and relevant promotional information (subject to your communication preferences).
• Responsible Gaming: To monitor gaming patterns and identify members who may require related support responsible gaming.

4 Personal Data Processing Grounds

NH88 processes your personal information on lawful bases as recognised under Malaysia's PDPA. It is important that you understand the legal basis we rely on to process each category of your data:

• Contract Performance: Processing required to fulfil our obligations to you as an nh88 member, including transaction processing and account management.
• Legal Obligation: Processing required to comply with applicable legislation, including KYC and AML requirements mandated by Malaysian law.
• Legitimate Interest: Processing for the purposes of platform security, fraud prevention, and service improvement, which constitute nh88's legitimate interests, provided they do not override your rights and interests.
• Consent: For certain processing activities such as marketing communications, we require your explicit consent, which you may withdraw at any time.

5 Sharing Information With Third Parties

NH88 does not sell, rent, or trade member personal information to any third party for their own marketing purposes. However, in the course of our operations, there are limited situations where we need to share certain information with trusted third parties:

• Payment Service Provider: Transaction information is shared with integrated payment providers such as DuitNow, FPX, TnG eWallet, Boost, and GrabPay solely for the purpose of processing your transactions.
• Identity Verification Service Provider: KYC data is shared with approved third-party identity verification platforms for document verification purposes only.
• Technical Service Providers: Cloud infrastructure providers and technical service providers that assist nh88 in operating the platform may access certain data within the limited scope of their work.
• Regulatory Authorities: NH88 will disclose required information to legal authorities or enforcement agencies where mandated by law or a valid court order.

All third parties with whom we share data are bound by strict confidentiality agreements and are only permitted to use the information for the specified purposes. NH88 conducts thorough due diligence on all third-party partners to ensure they comply with data protection standards equal to or exceeding those of nh88.

6 Cookies & Tracking Technologies

The nh88 platform uses cookies and similar tracking technologies to enhance user experience, maintain session security, and analyse platform usage for continuous improvement. Cookies are small text files stored on your device when you visit the nh88 platform.

Nh88 uses several types of cookies:

• Essential Cookies: Required for core platform functions such as login authentication, session management, and security. These cookies cannot be disabled without affecting platform usability.
• Performance Cookies: Collects anonymous information about how members use the nh88 platform to help us identify and resolve technical issues.
• Functional Cookies: Saves your preferences such as language and display settings to provide a more personalised experience.
• Analytics Cookies: Helps us understand aggregate usage patterns to make better decisions in nh88 platform development.

You can manage or disable cookies through your web browser settings. Please note, however, that disabling essential cookies may affect the functionality and security of your nh88 account.

7 Data Security

NH88 implements comprehensive technical and organisational security measures to protect member personal information from unauthorised access, disclosure, alteration, or destruction. nh88's security approach is layered and thorough:

• Data encryption in transit using SSL/TLS protocol with 256-bit key length.
• Data encryption at rest within the database using industry-recognised encryption algorithms.
• Role-based access control (RBAC) ensuring nh88 staff can only access data required for their specific duties.
• Continuous 24/7 security monitoring by the nh88 security team.
• Regular penetration testing by independent third parties to identify and address security vulnerabilities.
• Two-factor authentication (2FA) is available and strongly encouraged for all nh88 member accounts.
• Encrypted data backups stored at a secure, off-site location.

8 Data Retention Period

NH88 retains your personal information only for as long as necessary to fulfil the purposes stated in this Privacy Policy, or as required by applicable law. Retention periods vary according to data type and compliance requirements:

• Active Account Data: Retained for the duration your account is active and for a reasonable period after account closure for audit and compliance purposes.
• Financial Transaction Records: Retained for a minimum of 7 years in accordance with Malaysia's anti-money laundering legal requirements.
• KYC Documents: Retained for 5 years after account closure or end of business relationship in accordance with compliance requirements.
• Security Logs: Retained for 12 months for security incident investigation and digital forensics purposes.
• Marketing Data: Retained until you withdraw consent or request deletion, whichever comes first.

Once the retention period expires, your personal data will be securely deleted or anonymised so that it can no longer be linked to your identity.

9 Your Rights as a Data Subject

Under Malaysia's PDPA and nh88's privacy policy, you have the following rights regarding the personal information we hold. NH88 is committed to respecting and facilitating the exercise of these rights:

• Access Rights: You have the right to request a copy of the personal information we hold about you. Access requests will be processed within 21 working days.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal information. You may update basic details directly through your nh88 account settings.
• Right to Withdraw Consent: For consent-based processing (such as marketing communications), you may withdraw your consent at any time without affecting the validity of prior processing.
• Right to Object: You have the right to object to the processing of your personal information in certain circumstances, particularly for processing based on legitimate interests.
• Right to Erasure: Under certain circumstances provided for under the PDPA, you may request the deletion of your personal information. Please note that such requests may be subject to statutory retention obligations.

To exercise any of the above rights, please contact the nh88 privacy team via email or live chat. We will verify your identity before processing any request and will respond within the stipulated timeframe.

10 Changes to This Privacy Policy

NH88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our privacy practices, new legal requirements, or changes in nh88 platform operations. The latest version of this Privacy Policy is always available on the nh88 platform with a clear update date.

For significant and material changes that affect your privacy rights, nh88 will notify you via an in-platform notification or email sent to the address registered on your account at least 14 days before the changes take effect.

Your continued use of the nh88 platform after any Privacy Policy amendments take effect constitutes your acceptance of the updated policy. If you disagree with the changes, you have the right to close your account and discontinue use of the nh88 platform.

11 Contact Us About Privacy

If you have any questions, concerns, or complaints regarding this Privacy Policy or how nh88 handles your personal information, our privacy team is ready to assist you.