Privacy Policy — nk44

1 Introduction

nk44 ("nk44", "the Platform", "we", "us", "our") is committed to protecting the privacy and personal data of all users ("User", "Player", "you") who access or interact with the nk44 online casino and sports betting platform at https://nk44.cam/ and any associated mobile-optimised interfaces (collectively, "the Platform").

This Privacy Policy ("Policy") describes in detail the categories of personal data we collect, the purposes for which that data is processed, the conditions under which it may be shared with third parties, and the rights available to you as a data subject. This Policy forms part of the overall agreement between you and nk44 and should be read in conjunction with our Terms & Conditions.

By registering an account with nk44, making a deposit, or otherwise using any feature of the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you do not consent to any part of this Policy, you must not use the Platform.

2 Definitions

In this Privacy Policy, the following terms have the meanings set out below:

• "Personal Data" means any information relating to an identified or identifiable natural person, including name, identification number, location data, online identifiers, or factors specific to the physical, economic, or social identity of that person.
• "Processing" means any operation performed on personal data, including collection, recording, storage, organisation, adaptation, retrieval, use, disclosure, erasure, or destruction.
• "Data Controller" refers to nk44, which determines the purposes and means of processing personal data collected through the Platform.
• "Data Processor" refers to any third party that processes personal data on behalf of nk44 under a written data processing agreement.
• "KYC" means Know Your Customer — the regulatory identity verification process applied to all Players before withdrawal processing is permitted.
• "Cookies" means small text files stored on your device by the Platform to maintain session state, preferences, and analytics data.
• "Sensitive Data" refers to categories of personal data warranting heightened protection, including government-issued identification documents, financial account details, and biometric data submitted for identity verification.

3 Data We Collect

nk44 collects the following categories of personal data from Players and Platform visitors:

3.1 Registration Data

When you create an account, we collect: full legal name, date of birth, Malaysian residential address (or address in your country of residence), email address, phone number, and chosen username. This information is required to create and manage your Account.

3.2 Identity Verification (KYC) Data

To comply with regulatory requirements and to prevent fraud and money laundering, we collect copies of government-issued identity documents such as a Malaysian MyKad, passport, or other acceptable form of photo identification. We may also request proof of address documents (such as a recent utility bill or bank statement) and, where applicable, documentation verifying ownership of the payment method used for deposits.

3.3 Financial Transaction Data

We collect and retain records of all deposits, withdrawals, bonus transactions, and bet settlements associated with your Account. This includes transaction amounts in Malaysian Ringgit (MYR/RM), timestamps, payment method identifiers (such as masked bank account numbers, FPX transaction references, DuitNow QR identifiers, Touch 'n Go eWallet references, or cryptocurrency wallet addresses), and transaction status records.

3.4 Gameplay & Betting Data

We record all gaming and betting activity on the Platform, including game sessions, bet amounts, outcomes, sports betting selections (including EPL, Liga Super Malaysia, and other markets), Mix Parlay combinations, and win/loss records. This data is used for account management, dispute resolution, and responsible gambling monitoring.

3.5 Technical & Device Data

We automatically collect technical information when you access the Platform, including your IP address, device type, operating system, browser type and version, screen resolution, referring URL, and session timestamps. This data is used for security monitoring, fraud detection, and platform performance optimisation.

3.6 Communications Data

We retain records of your communications with nk44 support teams, including live chat transcripts, email correspondence, and any written feedback or complaints submitted through the Platform. These records are retained for quality assurance, dispute resolution, and training purposes.

4 How We Collect Your Data

nk44 collects personal data through the following mechanisms:

• Directly from you during account registration, KYC document submission, deposit and withdrawal requests, bonus claim forms, support interactions, and any other direct communication with the Platform.
• Automatically through cookies, web beacons, server logs, and similar tracking technologies when you access the Platform via a web browser or mobile device.
• From payment processors who provide transaction confirmation data and, where required for fraud prevention, additional account-holder verification signals.
• From identity verification service providers who process KYC documentation on nk44's behalf under data processing agreements.
• From fraud prevention and anti-money laundering (AML) screening services where regulatory obligations require us to conduct enhanced due diligence checks.

5 Purposes of Data Processing

The following table summarises the primary purposes for which nk44 processes personal data:

6 Legal Bases for Processing

nk44 processes personal data on the following legal bases:

• Contractual necessity: Processing required to perform the contract between nk44 and the Player — including account operation, payment processing, and withdrawal handling — is necessary for the execution of the agreement entered into upon registration.
• Legal obligation: Certain processing activities — including KYC verification, AML screening, and financial record retention — are required by applicable regulatory frameworks and cannot be declined.
• Legitimate interests: nk44 processes technical and behavioural data for fraud prevention, platform security, and responsible gambling monitoring, where such processing is proportionate to the privacy interests of Players.
• Consent: Where processing is not otherwise justified, nk44 relies on your explicit consent — particularly for marketing communications and non-essential cookies. Consent may be withdrawn at any time without affecting the lawfulness of processing carried out before withdrawal.

7 Data Sharing & Disclosure

nk44 does not sell or rent your personal data to any third party. We may share personal data with the following categories of recipients where necessary and proportionate:

7.1 Payment Service Providers

To process deposits and withdrawals via DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, Bitcoin (BTC), and USDT, we share necessary transaction data with the relevant payment processors and financial institutions. These providers act as data processors under contractual data processing obligations.

7.2 Identity Verification Providers

KYC documentation submitted by Players may be shared with licensed identity verification service providers engaged by nk44 to perform document authentication and AML screening. These providers are bound by strict data processing agreements and may not use your data for any purpose other than the verification services contracted.

7.3 Regulatory and Law Enforcement Authorities

nk44 may disclose personal data to regulatory bodies, law enforcement agencies, or other competent authorities where required by applicable law, court order, or where we have a legitimate obligation to prevent, detect, or report suspected criminal activity including fraud or money laundering.

7.4 Technology and Infrastructure Providers

nk44 uses third-party hosting, cloud storage, and platform infrastructure providers to operate the Platform. These providers may process personal data on our behalf in the course of providing their services and are bound by data processing agreements prohibiting unauthorised use or disclosure.

7.5 Business Transfers

In the event of a merger, acquisition, or sale of all or part of nk44's business, personal data held by nk44 may be transferred to the acquiring entity as part of the transaction, subject to the acquirer's agreement to honour the commitments set out in this Privacy Policy.

8 Cookies & Tracking Technologies

The nk44 Platform uses cookies and related technologies to provide and improve the platform experience. The cookies we use fall into the following categories:

• Strictly Necessary Cookies: Required for core platform functionality including session authentication, account login state, and security token maintenance. These cannot be disabled without impairing your ability to use the Platform.
• Functional Cookies: Used to remember your preferences such as language settings, last-visited game categories, and display options. These improve usability but are not essential to platform operation.
• Analytics Cookies: Used to collect aggregate, anonymised data about how Players navigate and interact with the Platform. This data informs product improvements and does not identify individual users.
• Security and Fraud Prevention Cookies: Used to detect and mitigate fraudulent activity, including bot detection, duplicate account prevention, and suspicious session monitoring.

You may manage or disable non-essential cookies through your browser's privacy or cookie settings. Please note that disabling strictly necessary cookies will impair your ability to log in and use the Platform.

9 Data Security

nk44 implements appropriate technical and organisational security measures designed to protect personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and the nk44 servers;
• Encryption at rest for sensitive data including KYC documentation and financial records;
• Role-based access controls limiting internal access to personal data to authorised personnel with a business need;
• Two-factor authentication requirements for administrative access to data systems;
• Regular security assessments, vulnerability testing, and penetration testing of Platform infrastructure;
• Incident response procedures for the detection, containment, and notification of data breaches.

Despite these measures, no security system is impenetrable. nk44 cannot guarantee the absolute security of data transmitted over the internet and encourages Players to use strong, unique passwords and to enable two-factor authentication on their accounts.

10 Data Retention

nk44 retains personal data for the periods necessary to fulfil the purposes for which it was collected, including compliance with legal, regulatory, accounting, and reporting obligations. In general:

• Account and registration data is retained for the duration of the active Account plus five years following account closure;
• KYC identity verification documents are retained for five years from the date of verification, or longer where required by applicable AML regulations;
• Financial transaction records are retained for a minimum of seven years in compliance with financial record-keeping obligations;
• Communications and support records are retained for three years from the date of the last interaction;
• Marketing consent records are retained until consent is withdrawn and for a reasonable period thereafter for compliance evidence purposes.

Upon expiry of the applicable retention period, personal data will be securely deleted or irreversibly anonymised. Anonymised data that no longer relates to an identifiable individual may be retained and used for aggregate analytical purposes without limit.

11 Your Rights as a Data Subject

Subject to applicable law and regulatory obligations, you have the following rights in relation to your personal data held by nk44:

To exercise any of the above rights, please contact nk44 using the details provided in Section 16. We will acknowledge your request within five business days and aim to fulfil it within 30 calendar days. We may require identity verification before processing certain requests to protect against unauthorised access.

12 Children & Minors

The nk44 Platform is strictly for individuals aged 21 years and above. nk44 does not knowingly collect personal data from persons under the age of 21. Where we become aware that personal data has been submitted by a person under 21, we will take immediate steps to close the associated Account, delete the submitted data to the extent not required for fraud or legal reporting purposes, and refund any deposits to the originating payment method.

If you believe that a person under the age of 21 has created an account on the Platform or has submitted personal data without authorisation, please contact our support team immediately using the contact details in Section 16.

13 Marketing Communications

nk44 may send you promotional emails, in-platform notifications, and marketing communications regarding bonuses, new game releases, VIP programme updates, and special offers, subject to your consent. Marketing communications are sent only where you have opted in to receive them, either during registration or through your Account communication preferences.

You may withdraw your consent to receive marketing communications at any time by updating your communication preferences in Account settings, or by contacting our support team. Withdrawal of marketing consent will not affect the lawfulness of processing carried out prior to withdrawal and will not impair your ability to use the Platform.

Please note that transactional communications — including deposit confirmations, withdrawal notifications, security alerts, and account verification emails — are not marketing communications and are sent regardless of marketing consent status, as they are necessary for account operation.

14 Third-Party Services & Links

The nk44 Platform may contain references to third-party payment providers and service partners in the context of describing available deposit methods (including DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, BTC, and USDT processors). When you interact with a third-party payment provider's interface to complete a transaction, your use of that interface is subject to the privacy policy of the relevant third party. nk44 is not responsible for the data practices of third-party payment processors beyond the scope of our data processing agreements with them.

15 Amendments to This Policy

nk44 reserves the right to update or amend this Privacy Policy at any time to reflect changes in data processing practices, legal requirements, or platform operations. Where a material change is made to this Policy, nk44 will notify registered Players by email and/or by a prominent notice on the Platform prior to the change taking effect. The "Last Updated" date at the top of this document indicates the date of the most recent revision.

Continued use of the Platform following notification of an amended Policy constitutes your acceptance of the revised terms. If you do not agree to the revised Policy, you must cease using the Platform and may request Account closure by contacting our support team.

16 Contact & Data Subject Requests

For all privacy-related enquiries, data subject access requests, rectification requests, erasure requests, or concerns about the way nk44 handles your personal data, please contact us through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week, through the Platform interface. Please clearly state that your query relates to a data privacy or personal data request.
• Email (plain text — not a clickable link): [email protected] — please include "Privacy Request" in your subject line to ensure correct routing.

When submitting a data subject request, please include your registered username, email address, and a clear description of the right you wish to exercise or the data you are enquiring about. We may require you to verify your identity before processing the request to protect against unauthorised access to account information.

nk44 will acknowledge all data-related requests within five business days. We aim to fulfil substantive requests within 30 calendar days of verification. Where a request is complex or involves a large volume of data, we may extend this period by a further 30 days and will notify you accordingly.