N98 Privacy Policy – Protection of Your Personal Data

1Introduction & Scope of This Policy

N98 ("we", "the platform", or "n98") takes seriously our responsibility to protect the privacy of every individual who interacts with our platform. This Privacy Policy has been crafted to provide full clarity on our data handling practices to all current and prospective members of the n98 platform.

This policy precisely outlines the types of personal data we collect from you, the purposes for which it is collected, how we process and protect it, and the rights you hold regarding your personal data.

As a platform serving users in Malaysia, n98 complies with applicable data protection legal requirements and the highest international standards in personal data management. We believe that transparency is the foundation of trust, and your trust is our most valuable asset.

2Personal Data We Collect

N98 collects your personal data through several key channels. The following is a complete overview of the categories of data we collect:

We may also collect data from legitimate third-party sources, such as identity verification agencies and payment service providers, to ensure the accuracy of your information and meet legal compliance requirements.

3How We Use Your Personal Data

N98 uses your personal data responsibly and only for legitimate purposes. The following is a full description of how your data is used:

• Account Management: Creating, verifying, and managing your n98 account, including the KYC and identity verification processes required by law.
• Transaction Processing: Processing deposits, withdrawals, and all financial transactions related to your account securely and efficiently.
• Service Provision: Enabling you to access all games, promotions, and n98 platform features you are eligible for.
• Security & Fraud Prevention: Detecting and preventing fraudulent activity, money laundering, multi-account use, and other security threats to the platform and its members.
• Legal Compliance: Fulfilling legal and regulatory obligations, including reporting to authorities where required.
• Service Communications: Sending important notifications related to your account, service updates, and security alerts.
• Customer support: Providing effective technical support and customer service whenever you need assistance.
• Platform Improvement: Analysing usage patterns to improve the overall user experience, platform performance, and service quality.
• Marketing Communications: Sending relevant promotional information and offers — but only if you have given consent to receive such communications.

N98 will not use your personal data for any purpose other than those stated above without first obtaining your consent.

4Legal Basis for Data Processing

N98 processes your personal data on valid legal grounds. Our data processing relies on one or more of the following bases:

• Contract Performance: Processing required to perform the service agreement between you and n98, including account management and transaction processing.
• Legal Obligations: Processing required to comply with legal obligations applicable to n98, such as anti-money laundering (AML) and KYC requirements.
• Legitimate Interests: Processing required for the legitimate interests of n98 or third parties, such as fraud prevention, platform security, and service improvement, provided these interests do not override your rights and interests.
• Consent: For certain purposes such as marketing communications, we rely on the explicit consent you have provided. You may withdraw this consent at any time without affecting the validity of prior processing.

5Data Sharing & Disclosure

N98 does not sell, rent, or trade your personal data to third parties. However, in certain limited circumstances, we may need to share your data with:

• Trusted Service Providers: Third-party companies that assist us in operating the platform, such as payment processors, identity verification service providers, and IT infrastructure suppliers. All such parties are bound by strict confidentiality agreements and are only permitted to process your data in accordance with our instructions.
• Legal Authorities: Law enforcement agencies, regulatory bodies or courts when required to do so by law, court order, or to protect the legitimate rights of n98 and its users.
• Business Sale or Transfer: Should n98 be involved in a merger, acquisition, or asset sale, user data may be transferred as part of that business transaction. You will be notified in advance in such a situation.

6Security & Data Protection

N98 implements a range of robust technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction. Our key security measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your browser and the n98 platform is protected with 256-bit SSL encryption — the highest security standard used in the banking industry.
• Database-level data encryption: Sensitive data such as financial information and identification numbers are encrypted at the storage level, not only during transmission.
• Strict access controls: Access to user data within n98's internal systems is restricted to staff who genuinely require it to perform their duties, supported by comprehensive logging and audit systems.
• Two-Factor Authentication (2FA): Additional security features are available to protect your account from unauthorised access.
• 24/7 Security Monitoring: Our security team continuously monitors the platform to promptly detect and respond to any security threats.
• Regular security testing: n98 conducts regular penetration testing and security audits to identify and address any vulnerabilities before they can be exploited.

While we take all reasonable measures to protect your data, no system can be guaranteed 100% secure. You also play an important role in your account's security by using a strong password and not sharing your login credentials.

7Data Retention Period

N98 retains your personal data for as long as necessary to fulfil the purpose for which it was collected, or for as long as required by applicable law. In general, our data retention principles are as follows:

• Active account data: For as long as your account remains active on the n98 platform, we retain all data necessary for account management and service delivery.
• After account closure: Financial transaction records and KYC records are retained for the period required by applicable anti-money laundering and tax legislation — typically between five and seven years.
• Communication data: Customer support communication records are retained for as long as necessary for service purposes and the resolution of any disputes that may arise.
• Marketing data: If you withdraw consent to receive marketing communications, we will stop using your data for that purpose within a reasonable timeframe, although we may need to retain a record of your consent for compliance purposes.

Once the retention period expires, your personal data will be securely deleted or anonymised so that it can no longer be linked to your identity.

8Your Rights Regarding Personal Data

As a data subject, you have several important rights regarding your personal data held by n98. We fully respect these rights:

To submit any request relating to the rights above, please contact the n98 support team via live chat within the platform. We will endeavour to process your request within 30 days of receipt, and we may need to verify your identity before processing the request.

9Cookies & Tracking Technologies

N98 uses cookies and similar tracking technologies to enhance your user experience on our platform. Cookies are small text files stored on your device when you visit our website.

Types of cookies we use:

• Essential Cookies: Required for core platform functions such as login sessions and security. These cookies cannot be disabled as they are necessary for the platform to function properly.
• Performance Cookies: Collecting anonymised information about how you use the platform to help us improve performance and user experience.
• Functional Cookies: Saving your preferences such as language and display settings so you do not need to reset them each time you visit the platform.
• Analytics Cookies: Helping us understand aggregate platform usage patterns to make better improvement decisions.

You can control and manage cookies through your browser settings. However, disabling certain cookies may affect the functionality and your experience on the n98 platform.

10International Data Transfers

In operating our services, your personal data may be processed in countries other than Malaysia. When your data is transferred outside Malaysia, n98 ensures that such transfers are carried out securely and in accordance with applicable legal requirements through the following mechanisms:

• Transfers only to countries with adequate or equivalent levels of data protection.
• Use of approved standard contractual clauses to ensure appropriate data protection.
• Ensuring all data recipients outside Malaysia are bound by equivalent data protection obligations.

By using the n98 platform, you understand that your data may be processed in countries with data protection laws that differ from those of Malaysia. However, we always ensure that a comparable level of protection is maintained regardless of the processing location.

11Children's Privacy

The n98 platform is exclusively for individuals aged 18 and above. We do not intentionally collect or process personal data from individuals under the age of 18.

If we become aware that we have collected personal data from individuals under the age of 18, we will take immediate steps to delete that data and close the relevant account. If you believe we may have collected data from a minor, please contact our support team immediately.

12Privacy Policy Amendment

N98 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or new service features we introduce.

When we make material changes to this Privacy Policy, we will:

• Updating the "Last Updated" date displayed at the top of this document.
• Displaying clear notices on the n98 platform regarding such changes.
• Sending notifications to your registered email address for highly material changes.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Continued use of the platform after changes are published constitutes your acceptance of the updated policy.

If you have any questions, concerns or complaints regarding how n98 handles your personal data, please do not hesitate to contact our support team. We are committed to addressing every enquiry seriously and within a reasonable timeframe.