nk44 Privacy Policy

1.Introduction & Scope

nk44 ("we", "us", "our") operates the online gaming platform accessible at nk44.net, including its associated mobile applications for Android and iOS (collectively, the "Platform"). We are committed to protecting the personal data of all individuals who interact with the Platform, whether as registered Members or as visitors browsing publicly accessible areas of the site.

This Privacy Policy ("Policy") describes what personal data nk44 collects, the purposes for which it is processed, with whom it may be shared, how long it is retained, and the rights available to individuals in relation to their data. This Policy applies to all processing activities carried out by nk44 in connection with the Platform and its Services.

This Policy should be read in conjunction with the nk44 Terms & Conditions. By registering an Account or using the Platform, you confirm that you have read and understood this Policy and consent to the processing of your personal data as described herein.

2.Data Controller

For the purposes of applicable data protection legislation, the data controller responsible for the personal data collected through the nk44 Platform is the nk44 operating entity, whose details are available upon written request submitted to [email protected].

Where nk44 engages third-party service providers to process personal data on its behalf — such as payment processors, KYC verification services, or cloud infrastructure providers — those parties act as data processors under nk44's instruction and are contractually bound to process data only for the purposes specified by nk44, in accordance with applicable data protection law.

3.Personal Data We Collect

nk44 collects personal data in the following categories, depending on the nature of your interaction with the Platform:

nk44 does not knowingly collect special categories of sensitive personal data (such as data concerning racial or ethnic origin, health, biometric data for identification purposes, or political opinions) unless specifically required for identity verification under applicable regulatory requirements, in which case such data is processed strictly for that purpose and retained only as long as required.

4.How We Collect Your Data

nk44 collects personal data through the following channels:

• Direct submission: Information you provide when registering an Account, completing KYC verification, making deposits or withdrawals, updating your profile, or contacting customer support.
• Automated technical collection: Data collected automatically when you access the Platform, including through cookies, web beacons, pixel tags, server logs, and similar technologies. This includes IP addresses, device identifiers, session data, and usage patterns.
• Third-party sources: Identity and fraud screening data from KYC/AML service providers; transaction verification data from payment processors; geolocation data from IP intelligence services; publicly available sanctions and politically exposed persons (PEP) database checks required under anti-money laundering regulations.
• Responsible gaming systems: Data generated by nk44's internal responsible gaming monitoring tools, including deposit and loss limit configurations set by Members and self-exclusion requests.

5.Legal Basis for Processing

nk44 processes personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing required to perform the Agreement between nk44 and the Member — including Account registration, payment processing, bet settlement, and customer support.
• Legal obligation: Processing required to comply with anti-money laundering (AML), counter-terrorism financing (CTF), and Know Your Customer (KYC) obligations under nk44's operating licence and applicable law; also includes responding to lawful requests from regulatory or law enforcement authorities.
• Legitimate interests: Processing necessary for nk44's legitimate business interests, including fraud prevention and detection, platform security, responsible gaming monitoring, internal analytics and reporting, and IT infrastructure management — where such interests are not overridden by the data subject's rights and interests.
• Consent: Processing based on consent freely given by the Member, such as the use of non-essential cookies and the sending of marketing communications. Consent may be withdrawn at any time via Account Settings, without affecting the lawfulness of prior processing.

6.How We Use Your Data

nk44 uses the personal data collected for the following purposes:

• To create and manage your nk44 Account and verify your identity and eligibility.
• To process deposits, withdrawals, and in-platform financial transactions.
• To provide access to the Platform's gaming services — sportsbook, live casino, slots, and other products.
• To verify compliance with the 21+ age restriction and other eligibility requirements.
• To comply with AML, CTF, and KYC obligations, including transaction monitoring and sanctions screening.
• To detect, investigate, and prevent fraud, cheating, collusion, and other prohibited conduct.
• To operate nk44's responsible gaming programme, including monitoring for indicators of problematic gambling behaviour and enforcing Member-set limits and self-exclusion requests.
• To respond to customer support enquiries and resolve disputes.
• To send service-related communications — including Account notifications, transaction confirmations, and security alerts — via email and/or SMS.
• To send marketing communications about nk44 promotions, new products, and platform updates, where you have opted in to receive such communications.
• To improve the Platform's functionality, performance, and user experience through usage analytics and internal reporting.
• To maintain the security and integrity of the Platform's technical infrastructure.

7.Cookies & Tracking Technologies

nk44 uses cookies and similar tracking technologies on the Platform. Cookies are small text files stored on your device by your browser that help us recognise you across sessions and personalise your experience.

• Strictly necessary cookies: Required for the Platform to function correctly — including session management, login authentication, and security functions. These cannot be disabled without preventing use of the Platform.
• Functional cookies: Used to remember your preferences — such as language settings, preferred game categories, and Account display options — to provide a more personalised experience.
• Analytics cookies: Used to collect aggregated, anonymised data about how Members interact with the Platform, helping nk44 understand usage patterns and improve its services.
• Marketing cookies: Used to deliver relevant promotional content within the Platform and to measure the effectiveness of promotional campaigns. These are only placed with your consent.

You may manage your cookie preferences at any time via your browser settings. Please note that disabling certain cookies may affect the functionality of the Platform.

8.Data Sharing & Third Parties

nk44 does not sell, rent, or trade your personal data to third parties for marketing purposes. We may share your data with the following categories of recipients, strictly as necessary for the purposes described in this Policy:

• Payment service providers: To process deposits and withdrawals — including Touch n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, and crypto transaction processors. These providers receive only the data necessary to complete financial transactions.
• KYC and identity verification providers: To fulfil regulatory identity verification requirements. These providers process identity documents and biometric data under strict contractual and regulatory obligations.
• Game content providers: Certified gaming studios (such as those providing slots and live casino content) may receive technical session data necessary to deliver gameplay and calculate results. Game providers do not receive personally identifiable Member information beyond what is technically required.
• Cloud and IT infrastructure providers: nk44 uses third-party cloud services for hosting, data storage, and platform operations. These providers act as data processors under contractual data processing agreements.
• Regulatory and law enforcement authorities: Where required by law, court order, or legitimate regulatory directive — including AML/CTF reporting obligations — nk44 will disclose Member data to the appropriate authority.
• Fraud prevention and security services: To screen transactions and Account activities against fraud databases and sanctions lists, as required under nk44's operating licence conditions.

9.International Data Transfers

nk44 may transfer personal data to recipients located in countries outside of Malaysia in connection with the cloud infrastructure, payment processing, and game content delivery services described in this Policy. Where such transfers occur, nk44 ensures that appropriate safeguards are in place to protect the data in accordance with applicable data protection law, including:

• Transfers to countries that the relevant regulatory authority has determined to provide an adequate level of data protection.
• Transfers governed by standard contractual data protection clauses or equivalent contractual safeguards.
• Transfers to service providers certified under recognised international data privacy frameworks.

Further information on the safeguards applied to international transfers may be requested by contacting nk44 at the address provided in Section 15.

10.Data Retention

nk44 retains personal data for as long as is necessary for the purposes for which it was collected, or for longer periods where required by law. The following retention guidelines apply:

• Active Account data: Retained for the duration of the Member's Account, plus a minimum of five (5) years following Account closure — in compliance with AML/CTF record-keeping requirements applicable to nk44's operating licence.
• Transaction and financial records: Retained for a minimum of seven (7) years from the date of the transaction, in accordance with applicable financial record-keeping obligations.
• KYC documentation: Retained for a minimum of five (5) years following the end of the business relationship, or longer if required by a specific regulatory directive.
• Customer support records: Retained for two (2) years from the date of the interaction, unless linked to an ongoing dispute or investigation.
• Self-exclusion records: Retained indefinitely to prevent the re-registration of excluded individuals, even where a temporary self-exclusion period has expired.
• Marketing consent records: Retained for the duration of the business relationship, plus three (3) years following withdrawal of consent or Account closure.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised. Anonymised, aggregated data may be retained indefinitely for statistical and analytical purposes as it no longer constitutes personal data.

11.Your Data Rights

Subject to applicable data protection law, nk44 Members have the following rights in respect of their personal data:

• Right of access: You may request a copy of the personal data nk44 holds about you, along with information about how it is processed.
• Right to rectification: You may request correction of inaccurate or incomplete personal data held by nk44. For Account details, many fields can be updated directly in Account Settings.
• Right to erasure ("right to be forgotten"): You may request deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose for which it was collected. This right is subject to overriding legal obligations that require nk44 to retain certain data.
• Right to restriction of processing: You may request that nk44 restricts the processing of your personal data in certain circumstances — for example, while a rectification request is being resolved.
• Right to data portability: You may request that nk44 provides your personal data in a structured, machine-readable format, or transmits it directly to another controller, where technically feasible and where processing is based on consent or contractual necessity.
• Right to withdraw consent: Where processing is based on consent, you may withdraw consent at any time via Account Settings or by contacting nk44 support. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
• Right to object: You may object to processing based on nk44's legitimate interests, including direct marketing. You can opt out of marketing communications at any time via Account Settings or by using the unsubscribe facility in any marketing email.

To exercise any of the above rights, please submit a written request to nk44 via email at [email protected]. nk44 will respond within 30 days of receipt. We may need to verify your identity before processing the request.

12.Security Measures

nk44 implements appropriate technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and nk44's servers.
• Encryption of sensitive data fields — including payment credentials and identity document data — at rest in nk44's database infrastructure.
• Role-based access controls limiting access to personal data to nk44 personnel who require it for their specific job function.
• Regular security assessments and penetration testing of the Platform's technical infrastructure.
• Two-factor authentication available for all Member Accounts, and enforced internally for nk44 staff with access to Member data systems.
• Documented incident response procedures for responding to personal data breaches, including notification obligations to the relevant regulatory authority and affected individuals where required by law.

While nk44 takes all reasonable steps to protect your data, no internet transmission is completely secure. Members are responsible for maintaining the security of their own Account credentials and devices.

13.Children's Privacy

nk44 strictly prohibits use of the Platform by individuals under 21 years of age. nk44 does not knowingly collect or process personal data from anyone below the age of 21. If nk44 discovers that it has inadvertently collected data from an underage individual, that data will be permanently deleted and the associated Account will be immediately closed.

If you believe that nk44 has collected personal data from an individual under 21, please contact us immediately at [email protected] so that we can investigate and take appropriate action.

14.Changes to This Policy

nk44 reserves the right to update or amend this Privacy Policy at any time. Changes will be published on this page with a revised "Last updated" date. For material changes that affect how your personal data is used, nk44 will provide advance notice via your registered email address or via a notification displayed upon next login to the Platform.

Your continued use of the Platform after the effective date of any amendment constitutes your acknowledgement of the revised Policy. We encourage you to review this page periodically to stay informed of how nk44 handles your personal data.

15.Contact & Complaints

For questions, requests, or complaints relating to this Privacy Policy or nk44's handling of your personal data, please contact us via:

• Email: [email protected]
• Live Chat: Available 24/7 via the nk44 Platform after login.

nk44 will acknowledge data-related requests within 5 business days and provide a substantive response within 30 days. If you are not satisfied with nk44's response, you may have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.