NS60 Privacy Policy – Personal Data Protection for Malaysian Users

§1 Information We Collect

NS60 collects several categories of information from members and prospective members for the purposes set out in this Privacy Policy. The following are the main data categories we collect, along with specific examples within each category:

§2 How We Use Your Data

NS60 uses members' personal data only for legitimate, necessary purposes directly related to the provision of platform services. The following are NS60's primary uses of personal data:

• Account Management: Creating and managing your NS60 account, processing registrations, verifying identity for KYC purposes, and securing your account against unauthorised access.
• Transaction Processing: Processing deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, Maybank2u, CIMB Clicks, and other Malaysian payment methods; processing withdrawal of winnings; updating account balances; and resolving any financial disputes.
• Provision of Gaming Services: Provides access to over 200 NS60 game titles, saves your game progress and settings, manages bonuses and promotions you have claimed, and personalises game recommendations based on your play history.
• Security & Compliance: Preventing fraud, detecting suspicious activity, fulfilling Anti-Money Laundering (AML) legal obligations, and complying with directives from relevant Malaysian authorities.
• Service Communications: Sending important account-related notifications, promotions you have opted in to receive, service updates, and responses to your customer support enquiries.
• Platform Improvements: Analyses usage patterns on an aggregated and anonymised basis to improve platform performance, develop new features relevant to Malaysian users' needs, and ensure the best possible gaming experience for all NS60 members.

NS60 will not use your personal data for any purpose not stated above without first obtaining your explicit consent through a clear in-platform notification or via email.

§3 Legal Basis for Data Processing

NS60 processes members' personal data on valid legal bases under Malaysia's Personal Data Protection Act 2010 (PDPA). Every data processing activity has a clearly defined legal basis:

• Contract Performance: Processing necessary to deliver NS60 services to you under the agreement between you and NS60 — including account management, transaction processing, and provision of access to games.
• Legal Obligation: Processing required for NS60 to fulfil its legal obligations in Malaysia — including KYC requirements, AML requirements, and directives from legitimate regulatory authorities.
• Legitimate Interests: Processing required for NS60's legitimate interests — including fraud prevention, system security, service improvement, and the protection of the legal rights of NS60 and its other members.
• Consent: For data processing activities not covered by the categories above — such as sending optional marketing communications — NS60 will obtain your explicit consent beforehand and fully respect your right to withdraw that consent at any time.

§4 Data Sharing with Third Parties

NS60 does not sell, rent, or trade members' personal data to any third party for commercial or marketing purposes. This is a core commitment of NS60 that cannot be compromised.

However, in the course of providing platform services, NS60 may need to share personal data with the following categories of third parties within strictly limited and controlled circumstances:

• Payment Service Providers: Malaysian eWallet providers (Touch 'n Go eWallet, GrabPay, Boost, ShopeePay) and banking services (DuitNow, FPX, Maybank2u, CIMB Clicks) receive the transaction information required to process your deposits and withdrawals. These providers are subject to their own strict privacy policies and security requirements.
• Game Providers: Game developers providing titles in the NS60 collection may receive minimal game data necessary to ensure proper game functionality. This data does not include your personal identity information.
• Technology Service Providers: Companies that provide NS60's technical infrastructure — such as cloud computing, analytics, and cybersecurity services — may have limited access to data solely within the scope of their work. All such providers are bound by strict data confidentiality agreements.
• Legal Authorities: NS60 will disclose personal data to Malaysian authorities where required by a valid court order, legal investigation requirements, or a relevant regulatory directive. NS60 will notify affected members of any such disclosure to the extent permitted by law.

§5 Data Security

NS60 implements multiple layers of technical and organisational security measures to protect members' personal data from unauthorised access, alteration, disclosure, or destruction:

• 256-bit SSL Encryption: All data transmissions between members' devices and NS60's servers are encrypted using 256-bit SSL — the same technology used by Malaysia's leading banks, including Maybank and CIMB.
• Stored Data Encryption: Sensitive data stored in the NS60 database — including financial information and identity documents — is encrypted using robust encryption algorithms that render the data unreadable even in the event of an unexpected system breach.
• Internal Access Controls: NS60 staff are granted access only to the data required to carry out their specific roles, in accordance with the principle of least privilege. All access to sensitive data is logged and continuously monitored.
• 24/7 Security Monitoring: NS60's security systems are monitored around the clock by a dedicated cybersecurity team, enabling immediate detection and response to any threats or suspicious activity.
• Regular Security Audits: NS60 conducts regular penetration testing and comprehensive security audits carried out by certified independent cybersecurity experts to identify and address any vulnerabilities before they can be exploited.
• Incident Response Plan: NS60 has a detailed incident response plan in place to address any data breach. Should a breach occur that affects your personal data, NS60 will notify you and the relevant authorities within the timeframe required by Malaysian law.

While NS60 takes all reasonable steps to protect your data, no digital security system can be guaranteed to be one hundred percent foolproof. Members also play an important role in data security by keeping their NS60 account passwords and login credentials confidential.

§6 Data Retention Period

NS60 retains members' personal data only for as long as necessary to fulfil the purposes set out in this Privacy Policy, or as required by applicable Malaysian law.

NS60's data retention period guidelines are as follows:

• Active Account Data: For as long as your NS60 account remains active, we retain all data necessary to provide our services. You may update or correct this data at any time through your account settings.
• Financial & Transaction Data: Financial records including deposit history, withdrawals, and transactions are retained for a minimum of seven (7) years from the transaction date, in line with Malaysia's tax legislation and financial compliance requirements.
• KYC & Identity Verification Data: Identity verification documents submitted for KYC purposes are retained for a minimum of five (5) years following account closure, in line with AML compliance requirements and Malaysian financial legislation.
• Gaming Data: Gaming history and related data are retained for the duration of the active account period and for two (2) years following account closure, for the purpose of resolving any disputes that may arise.
• Communication Data: Communication records with the NS60 support team are retained for three (3) years for service quality and dispute resolution purposes.
• Cookie Data: Session cookies expire automatically when you close your browser. Persistent cookies are stored for the duration specified in your cookie settings, typically between 30 days and 12 months depending on the cookie type.

Once the retention period has lapsed and there is no longer any legal or operational requirement to retain the data, NS60 will securely delete or anonymise your data using industry-approved methods.

§7 Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you as a member NS60 have clearly defined rights regarding your personal data. NS60 is committed to respecting and facilitating the exercise of all these rights:

To exercise any of the rights above, submit a written request to NS60 by emailing [email protected], stating the right you wish to exercise and your relevant account details. NS60 will respond within 30 calendar days of receiving your request. For complex or high-volume requests, NS60 reserves the right to extend the response period to 60 days, with prior notice explaining the reason for the delay.

§8 Cookies & Tracking Technologies

NS60 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit NS60.

The types of cookies used by NS60 are as follows:

• Essential Cookies (Required): These cookies are essential for the core functions of the NS60 platform — including maintaining your login session, processing transactions securely, and keeping your account safe. They cannot be disabled, as the NS60 platform will not function properly without them.
• Preference Cookies: These cookies store your preferences and settings — such as display language, game sound settings, and display preferences — to ensure a personalised experience every time you visit NS60.
• Analytical Cookies: NS60 uses analytics cookies to understand how members use the platform — which pages are visited most frequently, the navigation paths taken, and time spent in different sections. This data is analysed in aggregate and anonymised form to help NS60 improve the platform.
• Performance Cookies: These cookies help NS60 identify technical issues, optimise page load times, and ensure games run smoothly across the wide range of devices and internet connections commonly used in Malaysia.

You can control and manage cookies through your browser settings. However, disabling essential cookies may affect the functionality of the NS60 platform. For guidance on managing cookies in popular browsers such as Chrome, Firefox, and Safari, please refer to the respective browser's support documentation.

§9 Cross-Border Data Transfers

In the provision of NS60 platform services, certain personal data may be processed or stored by technology service providers operating outside Malaysia. NS60 takes appropriate measures to ensure that any such data transfers are protected by adequate safeguards:

• NS60 only partners with overseas technology providers that comply with international data protection standards equal to or exceeding Malaysia's PDPA requirements.
• All service agreements with overseas providers include strict data protection clauses, ensuring your data is safeguarded to the standards NS60 sets — regardless of where the processing takes place.
• Sensitive financial data and members' identity documents are stored in infrastructure located in Malaysia or in data centres that comply with data protection standards comparable to Malaysia's PDPA.

NS60 is committed to ensuring that wherever your data is processed, it receives the same high level of protection as it would if processed in Malaysia. You may request further information about the safeguards in place for cross-border data transfers by contacting the NS60 privacy team at [email protected].

§10 Contact Us About Privacy

If you have any questions, concerns, or requests regarding the Privacy Policy NS60 or the way we handle your personal data, the NS60 privacy team is ready to assist you with a prompt and transparent response.

You can reach NS60 through the following channels:

• Dedicated Privacy Email: [email protected] — please include the subject line "Privacy Enquiry" and describe your query clearly. NS60 will respond within 5 business days for privacy-related enquiries.
• Live Chat: Available 24/7 directly on the NS60 platform — for general privacy and data-related enquiries, our support team can provide immediate guidance or direct you to the appropriate channel.
• Data Subject Rights Requests: For formal requests to exercise your data protection rights (access, correction, deletion, etc.), email [email protected] with the subject line "Data Subject Rights Request" and include your NS60 account number for faster processing.

Complaints regarding NS60's handling of personal data may also be filed with Malaysia's Department of Personal Data Protection (JPDP) if you believe NS60 has violated your data protection rights under PDPA 2010. NS60 encourages you to contact us first, as we are committed to resolving any concerns directly, transparently, and fairly.