NTC88 Privacy Policy

This Privacy Policy (the "Policy") describes how NTC88 (the "Company", "we", "us", or "our"), the operator of the online gaming and sports betting platform accessible at ntc88.cam (the "Platform"), collects, uses, stores, shares, and protects personal data relating to registered users (the "Player", "you", or "your") of the Platform.

NTC88 is committed to handling your personal data with transparency, integrity, and care. This Policy is intended to clearly explain our data practices so that you can make informed decisions about your engagement with the Platform.

By registering an account, accessing the Platform, or continuing to use any services provided by NTC88, you acknowledge that you have read and understood this Policy and consent to the data processing practices described herein. This Policy is incorporated by reference into NTC88's Terms and Conditions, which govern your use of the Platform overall.

For the purposes of this Policy, the following terms shall have the meanings defined below:

• "Personal Data" — any information relating to an identified or identifiable natural person, including name, identification number, contact details, financial data, and online identifiers.
• "Processing" — any operation performed on Personal Data, including collection, storage, use, disclosure, alteration, or deletion.
• "Data Subject" — the individual to whom Personal Data relates; in this context, a registered Player on the Platform.
• "Data Controller" — the entity that determines the purposes and means of processing Personal Data. NTC88 is the Data Controller in respect of all Personal Data collected through the Platform.
• "Third Party" — any entity other than NTC88 and the Data Subject, including payment processors, identity verification providers, and technology service providers engaged to support Platform operations.
• "KYC" — Know Your Customer; the identity verification process conducted by NTC88 pursuant to anti-money laundering and fraud prevention obligations.
• "Consent" — a freely given, specific, informed, and unambiguous indication of the Data Subject's agreement to the processing of their Personal Data.

NTC88, as the operator of the Platform accessible at ntc88.cam, acts as the Data Controller in respect of all Personal Data collected through the Platform. This means that NTC88 is responsible for determining the purposes for which your Personal Data is collected and the manner in which it is processed.

NTC88 operates under international online gaming licensing frameworks. The applicable data protection standards are determined by the licensing jurisdiction governing Platform operations, supplemented by the data handling commitments set out in this Policy.

For all data-related enquiries, rights requests, or complaints, you may contact us directly using the contact details provided in Section 16 of this Policy.

NTC88 collects Personal Data from you directly (when you provide it during registration or account management) and automatically (through your use of the Platform). The categories of data we collect are set out in the table below.

We do not collect special categories of sensitive personal data (such as health information, racial or ethnic origin, or political opinions) except where a player voluntarily discloses such information in the context of a responsible gambling support interaction, in which case it is handled with heightened confidentiality and used solely for the purpose of providing appropriate support.

NTC88 processes your Personal Data for the following purposes:

• Account management: creating, maintaining, and operating your Platform account, including authentication and session management.
• Identity verification (KYC): verifying your identity and age (21+ requirement) in compliance with anti-money laundering and fraud prevention obligations.
• Transaction processing: processing deposits, withdrawals, and associated records in MYR via your nominated Malaysian payment methods (DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong, Touch 'n Go eWallet, Boost, GrabPay).
• Service delivery: providing access to sports betting, live casino, and other Platform features.
• Customer support: responding to your enquiries, resolving account issues, and managing formal complaints.
• Fraud prevention and security: detecting, investigating, and preventing fraudulent activity, money laundering, and abuse of Platform systems.
• Responsible gambling: monitoring account activity for indicators of problem gambling behaviour and facilitating access to self-exclusion, deposit limits, and other player protection tools.
• Legal and regulatory compliance: meeting obligations under applicable licensing conditions, including record-keeping and reporting requirements.
• Platform improvement: analysing aggregate, anonymised usage data to improve Platform performance, user experience, and feature development.
• Communications: sending service-related notifications, account alerts, and — where you have provided consent — promotional communications about NTC88 offers.

NTC88 processes your Personal Data on one or more of the following legal bases:

• Contract performance: processing necessary to deliver the services you have contracted for under the Terms and Conditions — including account management, transaction processing, and service delivery.
• Legal obligation: processing required to comply with applicable legal and regulatory requirements, including KYC obligations, anti-money laundering controls, and licensing conditions.
• Legitimate interests: processing conducted to protect the security and integrity of the Platform, prevent fraud, improve Platform performance, and manage responsible gambling obligations — where such interests are not overridden by your fundamental rights and freedoms.
• Consent: processing carried out based on your explicit and informed consent, including marketing communications and optional data uses. You may withdraw consent at any time without affecting the lawfulness of processing that has already taken place.

NTC88 does not sell, rent, or trade your Personal Data to third parties for commercial purposes. We may share your Personal Data with third parties only in the following circumstances:

• Payment processors and financial institutions: to process deposits and withdrawals via Malaysian payment channels (DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong, Touch 'n Go eWallet, Boost, GrabPay). These processors receive only the transaction data necessary to complete the payment.
• Identity verification providers: third-party KYC and age verification services engaged to validate the identity documents you submit. These providers process your data solely for verification purposes under contractual data processing agreements.
• Technology service providers: hosting, infrastructure, security, analytics, and customer support technology providers who process data on NTC88's behalf under strict contractual data processing obligations and are prohibited from using your data for their own purposes.
• Legal and regulatory authorities: where we are required to disclose Personal Data in response to a valid legal order, court order, regulatory request, or applicable reporting obligation under international licensing conditions.
• Responsible gambling organisations: in limited circumstances where a player's data is required to be shared with a responsible gambling body as part of a self-exclusion or player protection programme, and only to the minimum extent required.

All third-party processors engaged by NTC88 are bound by contractual data processing agreements that restrict their use of your Personal Data to the specific purpose for which it was shared, require appropriate security measures, and prohibit onward transfer without NTC88's authorisation.

As an internationally licensed Platform, NTC88 may process and store your Personal Data in jurisdictions outside Malaysia. Where Personal Data is transferred to servers or service providers located in other countries, NTC88 ensures that appropriate safeguards are in place to maintain the security and integrity of the data.

Such safeguards may include: contractual obligations on recipient entities requiring data protection standards equivalent to those applied by NTC88, technical encryption measures applied to data in transit and at rest, and access controls restricting use of transferred data to the specific purpose for which the transfer was made.

NTC88 retains your Personal Data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal, regulatory, or licensing obligations. The following indicative retention periods apply:

Upon expiry of the applicable retention period, Personal Data is securely deleted or rendered permanently anonymous so that it can no longer be attributed to any identifiable individual.

NTC88 implements technical and organisational security measures designed to protect your Personal Data against unauthorised access, accidental loss, disclosure, alteration, or destruction. Key measures include:

• 256-bit SSL/TLS encryption applied to all data transmitted between your device and the Platform.
• Encryption at rest for all stored Personal Data, including KYC documents and financial records.
• Role-based access controls ensuring that internal personnel can access Personal Data only to the extent required by their specific job function.
• Audit logging on all access events involving sensitive Personal Data, with regular review by our security team.
• Multi-factor authentication options available to all registered players to protect Account access.
• Regular security assessments and penetration testing to identify and remediate potential vulnerabilities in our systems.
• Incident response procedures to detect, contain, and notify affected parties in the event of a confirmed data security incident.

NTC88 uses cookies and similar tracking technologies on the Platform to support core functionality, maintain session security, and improve the overall player experience. The categories of cookies we use are as follows:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication tokens, security cookies, and load-balancing cookies. These cannot be disabled without impairing core Platform functionality.
• Functional Cookies: Remember your preferences such as language settings, display preferences, and last-viewed sections of the Platform. These improve convenience but are not required for basic operation.
• Analytical Cookies: Used to collect aggregated, anonymised data about how players interact with the Platform — such as pages visited, session duration, and feature usage. This information is used to identify usability improvements and optimise Platform performance. NTC88 does not share analytical data with third-party advertising networks.

NTC88 does not use third-party advertising cookies or behavioural tracking cookies that share your data with external advertising platforms. You may configure your browser to block or delete cookies; however, disabling strictly necessary cookies will impair your ability to use the Platform.

As a Data Subject whose Personal Data is processed by NTC88, you hold the following rights. To exercise any of these rights, please contact us using the details provided in Section 16 below.

NTC88 will respond to all verified data subject requests within 30 days of receipt. Where a request is complex or numerous, this period may be extended by up to a further 60 days, and you will be notified of the extension and the reasons for it.

The Platform is strictly intended for individuals who are at least 21 years of age. NTC88 does not knowingly collect Personal Data from persons under the age of 21. Age verification is a mandatory component of our KYC process, and any Account found to have been registered by a person under 21 will be immediately suspended and its associated Personal Data reviewed for appropriate deletion or return in accordance with applicable obligations.

If you have reason to believe that a person under the age of 21 has registered an Account on the Platform or has provided Personal Data to NTC88, please contact us immediately at [email protected] so that we may take appropriate action.

The Platform may contain links or references to third-party websites or services, including payment gateway interfaces operated by Malaysian banks or e-wallet providers such as Maybank2u, CIMB Clicks, Touch 'n Go eWallet, and DuitNow. NTC88 is not responsible for the privacy practices or content of any third-party website. Once you navigate away from the Platform to a third-party site, this Policy no longer applies.

We encourage you to review the privacy policies of any third-party services you interact with in connection with your use of the Platform, particularly those handling your financial data.

NTC88 reserves the right to amend this Privacy Policy at any time to reflect changes in our data practices, applicable regulations, or operational requirements. Where changes are material, we will notify registered users by posting a prominent notice on the Platform and/or sending a notification to the email address associated with your Account.

The "Last Updated" date at the top of this page will be revised to reflect the date of the most recent changes. Your continued use of the Platform following publication of an updated Policy constitutes your acceptance of the revised terms. If you do not agree with any change to this Policy, you should cease using the Platform and request Account closure.

For all data protection enquiries, rights requests, or complaints regarding our privacy practices, please contact NTC88 using the following details:

• Email: [email protected]
• Subject Line for Privacy Requests: "Data Privacy Request — [Your Username]"
• Live Chat: Available 24/7 through the Platform
• Response Time: All privacy-related requests acknowledged within 5 business days; substantive response provided within 30 days

NTC88 takes all privacy complaints seriously. If you are unsatisfied with our response to a privacy complaint, you may escalate the matter through the dispute resolution mechanism available under the applicable international licensing framework.