Privacy Policy

This Privacy Policy ("Policy") is issued by nick888, the operator of the online gaming platform accessible at nick888.cam ("Platform", "we", "us", "our"). It describes how nick888 collects, uses, stores, discloses, and protects personal data obtained from users ("User", "Player", "you") of the Platform.

By registering an account, accessing the Platform, or otherwise providing your personal information to nick888, you acknowledge that you have read and understood this Policy and that you consent to the processing of your personal data as described herein. If you do not agree with any part of this Policy, you should not use the Platform.

This Policy applies to all personal data collected through the Platform, through communications with our customer support team, through our email correspondence, and through any other interaction you have with nick888. It should be read alongside our Terms & Conditions and our Responsible Gambling Policy.

The following definitions apply throughout this Policy:

• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to name, identification number, contact details, financial information, and device identifiers.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, retrieval, use, disclosure, and deletion.
• "Data Controller" means nick888 as the entity that determines the purposes and means of Processing Personal Data.
• "Data Processor" means any third party that Processes Personal Data on behalf of nick888 in accordance with our instructions.
• "KYC" means Know Your Customer, the identity and age verification process required to operate a lawful online gaming platform.
• "Cookies" means small text files placed on your device by the Platform to facilitate its operation and to track usage patterns for analytics and security purposes.
• "Consent" means a freely given, specific, informed, and unambiguous indication of your agreement to the Processing of your Personal Data for a stated purpose.

nick888 collects the following categories of Personal Data from its users:

3.1 Registration Data

When you create an account, we collect your full legal name, date of birth, email address, mobile phone number, and residential address. This information is necessary to establish and maintain your account and to conduct KYC verification.

3.2 Identity Verification Data

As part of our KYC process, we may collect copies of government-issued identity documents such as your Malaysian Identity Card (MyKad) or passport, as well as proof of residential address (for example, a utility bill or bank statement) and, where applicable, proof of the payment method used for deposits.

3.3 Financial Data

We collect information relating to your deposits, withdrawals, and transaction history on the Platform. We record which payment methods you use — for example, Touch 'n Go eWallet, DuitNow, FPX, Maybank2u, CIMB Clicks, Public Bank Online — and the amounts and timestamps of each transaction. We do not store full bank account numbers or complete card numbers on our servers.

3.4 Gaming Activity Data

We collect records of your gameplay activity, including games played, amounts wagered, game outcomes, session durations, and bonus usage. This data is used for account management, dispute resolution, responsible gaming monitoring, and platform improvement.

3.5 Technical and Device Data

We automatically collect certain technical information when you access the Platform, including your IP address, device type, operating system, browser type and version, screen resolution, and the referring URL. This data assists with fraud prevention, security monitoring, and platform optimisation.

3.6 Communications Data

We retain records of communications you send to our customer support team via live chat, email, or other channels, including the content of those communications and the timestamps. This data is used to manage your support requests and to improve the quality of our support service.

nick888 collects Personal Data through the following means:

• Directly from you: when you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, or respond to a survey.
• Automatically: through Cookies, web beacons, and similar technologies when you access and use the Platform.
• From third-party payment processors: including confirmation data from e-wallet providers such as Touch 'n Go, Boost, and GrabPay, and bank transfer confirmation data from DuitNow and FPX processing partners.
• From identity verification providers: third-party KYC service providers engaged to assist with document verification and fraud screening.
• From fraud prevention databases: industry shared databases used to identify and prevent fraudulent or money-laundering activity.

nick888 processes Personal Data for the following purposes:

nick888 processes your Personal Data on the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing is necessary to perform the contract between you and nick888 — for example, to operate your account, process deposits and withdrawals, and provide access to games.
• Legal obligation: Processing is necessary to comply with legal and regulatory obligations, including KYC requirements, AML obligations, and responses to lawful authority requests.
• Legitimate interests: Processing is necessary for nick888's legitimate business interests — for example, fraud prevention, security monitoring, dispute resolution, and platform improvement — where those interests do not override your fundamental rights and freedoms.
• Consent: Where processing is based on consent (for example, marketing communications or the use of non-essential Cookies), you have the right to withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

nick888 does not sell your Personal Data. We may share your data with third parties in the following limited circumstances:

• Payment processors: We share transaction data with licensed payment processors — including e-wallet providers (Touch 'n Go, Boost, GrabPay), DuitNow operators, and FPX partner banks (Maybank, CIMB, Public Bank, Hong Leong, RHB) — to the extent necessary to process your deposits and withdrawals.
• KYC and identity verification providers: We share identity document data with third-party verification service providers to conduct age and identity checks. These providers are contractually bound to process data only on our instructions.
• Game providers: We share limited account and session data with licensed game providers (such as Evolution Gaming and Pragmatic Play) to the extent necessary to provide live casino and slot game functionality.
• Fraud prevention and security services: We may share data with industry fraud prevention databases and cybersecurity service providers to protect the Platform and its users.
• Legal and regulatory authorities: We may disclose Personal Data to law enforcement agencies, regulators, or courts where required by law or where we reasonably believe disclosure is necessary to protect the rights, property, or safety of nick888, its users, or others.
• Professional advisers: We may share data with legal counsel, auditors, and other professional advisers where necessary in connection with the lawful operation of the business.

nick888 retains Personal Data for as long as is necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements.

As a general guideline:

• Account and KYC data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in accordance with standard AML record-keeping obligations.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction.
• Customer support communications: Retained for a minimum of two (2) years from the date of each communication.
• Gaming activity logs: Retained for a minimum of three (3) years to support dispute resolution and responsible gaming monitoring.
• Marketing consent records: Retained until you withdraw consent or close your account, plus an additional period sufficient to demonstrate the consent was validly obtained.

Upon expiry of the applicable retention period, Personal Data will be securely deleted or anonymised in a manner that prevents its subsequent reconstruction.

nick888 implements appropriate technical and organisational measures to protect your Personal Data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers.
• Encryption of sensitive data at rest, including identity documents and financial information.
• Role-based access controls restricting access to Personal Data to authorised personnel only, on a need-to-know basis.
• Multi-factor authentication requirements for internal systems handling Personal Data.
• Regular security assessments and penetration testing of the Platform and its infrastructure.
• Automated monitoring systems to detect and respond to anomalous access patterns and potential security incidents.

nick888 uses Cookies and similar tracking technologies on the Platform to facilitate its operation, improve user experience, and support security monitoring.

10.1 Types of Cookies We Use

• Strictly necessary Cookies: Required for the Platform to function correctly, including session management and login authentication. These cannot be disabled.
• Functional Cookies: Enable the Platform to remember your preferences, such as language settings and display options.
• Analytics Cookies: Collect anonymised information about how users interact with the Platform, helping us understand which features are used most and where improvements can be made.
• Security Cookies: Used to detect fraudulent activity, support authentication processes, and protect user accounts.

10.2 Managing Cookie Preferences

You may control or disable non-essential Cookies through your browser settings. Please note that disabling certain Cookies may affect the functionality of the Platform. Strictly necessary Cookies cannot be disabled as they are essential to the operation of the service.

Subject to applicable law, you have the following rights in relation to your Personal Data held by nick888:

• Right of Access: You may request a copy of the Personal Data we hold about you, together with information about how it is being used.
• Right to Rectification: You may request that we correct any inaccurate or incomplete Personal Data we hold about you.
• Right to Erasure: You may request that we delete your Personal Data where it is no longer necessary for the purpose for which it was collected, subject to our legal retention obligations.
• Right to Restriction of Processing: You may request that we restrict the Processing of your Personal Data in certain circumstances, for example while a dispute is being investigated.
• Right to Data Portability: You may request that we provide your Personal Data in a structured, commonly used, and machine-readable format, where technically feasible.
• Right to Object: You may object to our Processing of your Personal Data where that Processing is based on legitimate interests, including for direct marketing purposes.
• Right to Withdraw Consent: Where Processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of Processing carried out prior to the withdrawal.

To exercise any of these rights, please contact our support team via live chat or by email at [email protected]. We will respond to all data rights requests within 30 days of receipt. In complex cases, this period may be extended by up to two additional months, in which case we will notify you of the extension and the reason for it.

nick888 operates in an international context, and your Personal Data may be transferred to, stored in, or processed in countries outside Malaysia. This includes transfers to the servers and data centres used by our third-party service providers, which may be located in various jurisdictions.

Where we transfer Personal Data outside the jurisdiction in which it was collected, we ensure that appropriate safeguards are in place to protect your data. These safeguards may include contractual data protection clauses, standard contractual clauses, or transfers to countries that have been assessed as providing an adequate level of data protection.

By using the Platform and providing your Personal Data to nick888, you consent to the transfer of your data on the terms described in this section.

The Platform is strictly for users aged 21 years and above. nick888 does not knowingly collect Personal Data from individuals under the age of 21. As part of our KYC process, we verify the age of all registered users, and any account found to belong to an individual under 21 will be immediately closed.

If you believe that a minor has registered on the Platform or provided Personal Data to nick888, please contact our support team immediately. We will investigate the matter promptly and take appropriate action, including deletion of any data collected from the minor.

nick888 reserves the right to update or amend this Privacy Policy at any time. The date of the most recent revision is displayed at the top of this page. Where changes are material, we will notify registered users via the email address associated with their account or through a notice displayed on the Platform.

Continued use of the Platform following notification of any amendment constitutes your acceptance of the updated Policy. If you do not agree with any amendment, you should cease using the Platform and contact our support team to request closure of your account.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the Personal Data we hold about you, please contact our support team through any of the following channels:

• Live Chat: Available 24/7 on the Platform in English, Bahasa Melayu, and Chinese. Average response: 3–5 minutes.
• Email: [email protected] (plain text — this is not a clickable link)

For formal data protection requests (access, rectification, deletion, portability, or objection), please include your full name, the email address registered to your Account, and a clear description of your request. We aim to acknowledge all data rights requests within 5 business days of receipt and to provide a substantive response within 30 days.