Privacy Policy

This Privacy Policy ("Policy") is issued by Nusa188 ("the Company", "we", "us", "our") and applies to all personal data collected, stored, processed, and used in connection with your access to and use of the Nusa188 online betting and casino platform at nusa188.cam and all associated services (collectively, "the Services").

Nusa188 is committed to protecting the privacy and personal data of all Members, visitors, and users of the platform. We comply with applicable data protection obligations governing our operations, including those relating to the collection, use, disclosure, and security of personal data.

This Policy is incorporated by reference into our Terms & Conditions. By creating a Nusa188 account or using any part of the platform, you acknowledge that you have read and understood this Policy and consent to the data practices described herein. If you do not agree with any part of this Policy, you should discontinue use of the Services.

For clarity throughout this Policy, the following terms carry the meanings set out below:

• "Personal Data" — any information that directly or indirectly identifies a living individual, including name, email address, phone number, payment details, device identifiers, and IP addresses.
• "Processing" — any operation performed on personal data, including collection, recording, storage, retrieval, use, disclosure, restriction, deletion, or destruction.
• "Data Controller" — Nusa188, as the entity that determines the purposes and means of processing your personal data.
• "Data Processor" — any third-party service provider that processes personal data on behalf of Nusa188 under a contractual arrangement.
• "Member" / "User" — a natural person who has registered an account on the Nusa188 platform.
• "KYC Data" — documents and information collected as part of the Know Your Customer identity verification process, including identity documents and proof of address.
• "Cookie" — a small text file placed on your device by a website server to store preferences and session data.
• "Sensitive Personal Data" — a subset of personal data warranting heightened protection, including financial information, identity documents, and data relating to health or criminal records.

Nusa188 collects the following categories of personal data depending on your interaction with the platform:

3.1 Registration & Account Data

• Full legal name and date of birth
• Email address and mobile phone number
• Residential address (including city — e.g., Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam)
• Chosen username and encrypted password
• Security questions and answers (if applicable)

3.2 Identity Verification (KYC) Data

• Government-issued photo identification (MyKad, passport, or driving licence)
• Proof of residential address (utility bill, bank statement, or official government correspondence)
• Proof of payment method ownership (where required)
• Source-of-funds documentation (for deposits above applicable thresholds)

3.3 Financial & Transaction Data

• Deposit and withdrawal amounts, dates, and methods (e.g., Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, DuitNow, FPX, USDT TRC20)
• Account balance history and transaction logs
• Partial payment instrument identifiers (e.g., last four digits of bank account where applicable)

3.4 Betting & Gaming Activity Data

• Bet history, stake amounts, odds accepted, and settlement outcomes
• Games played, session duration, and wagering frequency
• Bonus claims, promotional eligibility, and wagering requirement progress
• Responsible gambling tool settings (deposit limits, session timers, self-exclusion status)

3.5 Technical & Device Data

• IP address and approximate geolocation
• Browser type, version, and operating system
• Device identifiers and screen resolution
• Session logs, page visits, and click-path data
• Referring URL and exit URL

3.6 Customer Support Data

• Live chat transcripts and email correspondence
• Details of complaints, disputes, and their resolution
• Any supporting documents you submit in the course of a support interaction

We collect personal data through the following primary channels:

• Direct provision: Data you provide actively when registering an account, completing KYC verification, making a deposit or withdrawal, contacting support, or filling in any platform form.
• Automated collection: Technical data gathered automatically when you visit nusa188.cam, including session data, device identifiers, IP addresses, and cookie data.
• Third-party sources: Where permitted, we may receive data from payment processors (e.g., FPX network, e-wallet providers), identity verification service providers, fraud prevention services, and advertising attribution partners.
• Public sources: Information that is publicly available and relevant to compliance obligations, such as sanctions lists or publicly accessible court records in cases of suspected fraud.

Nusa188 uses your personal data for clearly defined purposes. The table below maps data categories to their processing purposes:

Nusa188 processes your personal data on the following legal grounds:

• Contractual necessity: Processing required to perform our contractual obligations to you as a Member — including operating your account, settling bets, and processing transactions.
• Legal obligation: Processing required to comply with applicable laws and regulations, including anti-money laundering (AML) obligations, age verification requirements, tax reporting, and regulatory reporting to competent authorities.
• Legitimate interests: Processing carried out in pursuit of Nusa188's legitimate business interests — including fraud prevention, platform security, responsible gambling monitoring, and service improvement — where those interests are not overridden by your rights and interests.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent — primarily for direct marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

Nusa188 does not sell or rent your personal data to third parties. We share data only where necessary and under appropriate safeguards with the following categories of recipients:

• Payment processors: E-wallet providers (Touch 'n Go eWallet, Boost, GrabPay), banking partners (Maybank, CIMB, Public Bank, Hong Leong), FPX network operators, DuitNow infrastructure providers, 7-Eleven CLiQQ, and USDT TRC20 blockchain network — to process your financial transactions.
• Identity verification providers: Third-party KYC and age verification service providers engaged to verify your identity documents and confirm account eligibility.
• Fraud prevention services: Specialist providers who assist us in identifying and preventing fraudulent activity, money laundering, and abuse of the platform.
• Gaming technology providers: Game studios and live dealer platform operators who supply the games available on nusa188.cam — they receive only the minimum data necessary to settle game outcomes and manage your session.
• Regulatory and law enforcement authorities: Where required by applicable law, court order, or regulatory direction — including disclosures relating to AML obligations, tax reporting, or licensed gaming regulatory requirements.
• Professional advisers: Legal counsel, auditors, and compliance consultants engaged by Nusa188 under strict confidentiality obligations.
• Corporate transactions: In the event of a merger, acquisition, or sale of assets, Member data may be transferred to the acquiring entity subject to equivalent data protection obligations.

All Data Processors engaged by Nusa188 are bound by written data processing agreements that require them to process your data only on our documented instructions and to maintain appropriate security measures.

Nusa188 uses cookies and similar tracking technologies on nusa188.cam to provide core platform functionality, enhance your experience, and gather analytics data. The categories of cookies we use include:

• Strictly necessary cookies: Essential to the operation of the platform — including session management, login authentication, and fraud prevention. These cannot be disabled without affecting core functionality.
• Functional cookies: Remember your preferences (such as language settings, preferred payment method, and display options) to personalise your experience.
• Analytics cookies: Collect anonymised or pseudonymised data about how you use the platform — pages visited, session duration, navigation paths — to help us improve the service. No personally identifiable information is shared with analytics providers without your consent.
• Marketing cookies: Used only with your consent to attribute visits to nusa188.cam to marketing channels and to deliver relevant platform communications. These do not result in your data being shared with third-party advertisers.

You can manage or disable non-essential cookies through your browser settings or via the cookie preference centre accessible in the site footer. Note that disabling certain cookies may affect platform functionality.

Nusa188 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, and to comply with applicable legal, regulatory, and audit obligations. The following general retention periods apply:

• Active account data: Retained for the duration of your membership plus a minimum post-closure period required by applicable regulations.
• Financial transaction records: Retained for a minimum of 5 to 7 years following the date of the transaction, in compliance with anti-money laundering and financial record-keeping obligations.
• KYC verification documents: Retained for a minimum of 5 years following account closure or the end of the business relationship.
• Customer support records: Retained for 3 years from the date of the support interaction, unless the record is relevant to an ongoing dispute or regulatory matter.
• Marketing preferences and communications: Retained for the duration of your consent period, or until you withdraw consent, plus a short administrative period.
• Technical and session logs: Typically retained for up to 12 months, after which they are automatically deleted or anonymised.

Upon expiry of the applicable retention period, personal data is securely deleted, anonymised to a degree where re-identification is not reasonably possible, or returned to you upon verified request where technically feasible.

Nusa188 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• Encryption: All data in transit is protected with 256-bit SSL/TLS encryption. Sensitive data at rest (including passwords and payment identifiers) is stored in encrypted form using industry-standard cryptographic protocols.
• Access controls: Access to personal data within Nusa188 is restricted on a strict need-to-know basis. Staff with access to Member data are subject to confidentiality obligations and regular security training.
• Two-factor authentication (2FA): Available to all Members for additional account protection. Nusa188 internal systems also operate with enforced multi-factor authentication for staff access.
• Penetration testing & audits: The platform undergoes periodic security assessments conducted by qualified independent professionals to identify and remediate vulnerabilities.
• Incident response: Nusa188 maintains a data breach response plan. In the event of a breach that is likely to result in risk to your rights and freedoms, we will notify affected Members and relevant authorities within the timeframes required by applicable law.
• Vendor security: All third-party Data Processors are contractually required to maintain security standards consistent with or exceeding those applied internally by Nusa188.

Subject to applicable law and certain exemptions, you have the following rights in relation to your personal data held by Nusa188. To exercise any of these rights, contact our support team at [email protected]. We aim to respond to all verified requests within 30 calendar days.

The Nusa188 platform is strictly for individuals aged 21 years and above. We do not knowingly collect, store, or process personal data from any person under the age of 21. This age requirement is non-negotiable and applies regardless of local gambling legislation in any jurisdiction.

During the registration process, Nusa188 collects date of birth and conducts automated age checks. Where there is reason to doubt the age stated, we will require documentary age verification (KYC) before the account becomes active.

If Nusa188 discovers — at any point — that an account is held by a person under 21 years of age, the account will be immediately suspended, all bets voided, and any deposited funds returned to the original funding source after identity verification. Any personal data collected from underage individuals will be securely deleted as soon as the matter is resolved.

Parents or guardians who believe a minor has registered an account on Nusa188 should contact us immediately at [email protected].

Nusa188 operates globally and some of our Data Processors — including gaming platform providers, identity verification services, and cloud infrastructure providers — may process your data in jurisdictions outside Malaysia. Where such transfers occur, Nusa188 ensures that appropriate safeguards are in place to protect your data to a standard that is consistent with this Policy and applicable data protection obligations.

These safeguards may include:

• Data processing agreements incorporating standard contractual clauses or equivalent transfer mechanisms
• Transfers to jurisdictions that have been determined to provide an adequate level of data protection
• Binding corporate rules or equivalent internal data governance frameworks where applicable

You may request further information about international transfer safeguards applicable to your data by contacting us at [email protected].

Nusa188 reserves the right to update, modify, or replace this Privacy Policy at any time to reflect changes in our data practices, applicable laws, or business operations. When material changes are made, we will update the "Last Updated" date at the top of this page and, where practicable, notify active Members via on-platform notification or email.

Your continued use of the Nusa188 platform following the effective date of any revised Privacy Policy constitutes your acknowledgment of and agreement to the updated terms. If you disagree with any material changes, you should cease using the platform and close your account.

We recommend that Members review this Policy periodically. The current version of this Policy always supersedes any prior version and is the binding statement of Nusa188's data practices.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by Nusa188, please contact us through any of the following channels:

• Data enquiries email: [email protected]
• Live Chat: Available 24 hours a day, 7 days a week, directly through the Nusa188 platform
• Response time: Live chat — typically under 5 minutes; email — within 24 hours on business days; formal data subject requests — within 30 calendar days

For all data subject rights requests (access, deletion, rectification, portability), please include your full name, registered email address, and a brief description of your request. We may ask for identity verification before processing the request.

For responsible gambling support, deposit limits, self-exclusion, and related matters, please visit our Responsible Gambling page. For general platform questions, visit our FAQ.