Privacy Policy nplay –
Malaysia User Data Protection

Nplay (nplay.win) respects the privacy of all members and users of our platform. This Privacy Policy explains how we collect, use, store, share, and protect your personal information when you use the nplay platform, whether through the website or mobile app.

We provide this document in both Bahasa Melayu and English to ensure Malaysia members can fully understand their rights and how we handle their personal data. Privacy is not merely a legal obligation for nplay — it is part of our commitment to building an honest and transparent relationship with every member.

By registering or using the nplay platform, you agree to the data collection and usage practices described in this Privacy Policy. If you do not agree, please stop using the platform and contact us to close your account and delete your data.

Nplay collects various types of personal data depending on how you interact with our platform. Below are the categories of data we collect and their sources:

We do not collect sensitive data such as medical information, religious beliefs, or political views unless required by law. All financial data is transmitted through encrypted channels and is not stored in plain text format.

The personal data we collect is used for the following purposes, strictly within the context of operating the nplay platform:

• Account management — processing your registration, identity verification (KYC), login, and day-to-day account management.
• Processing financial transactions — processing deposits and withdrawals, verifying bank account ownership, and identifying any suspicious activity.
• Providing gaming services — personalising your gaming experience, saving your preferred settings, and displaying your game history.
• Customer support — understanding the context of your enquiry or complaint so that the support team can assist more effectively.
• Platform security — detecting and preventing fraud, account abuse, and unauthorised access to nplay systems.
• Legal compliance — fulfilling reporting and compliance requirements mandated by the relevant authorities.
• Platform improvement — analysing usage patterns in aggregate (without identifying individuals) to develop new features and improve the user experience.

Nplay does not use members' personal data for third-party marketing, off-platform advertising, or any purpose not stated above without obtaining explicit consent from the member concerned.

Nplay does not sell or disclose members' personal data to third parties for marketing or commercial gain. However, there are specific situations where data sharing is necessary for platform operations:

• Payment service providers — information required to process deposits and withdrawals is shared with approved payment gateway providers, who are subject to strict data protection agreements.
• Game providers — minimum technical data required to run games from providers such as Evolution Gaming, Pragmatic Play, and other partners is shared strictly as required by technical necessity.
• Legal compliance — nplay may be required to disclose personal data to government authorities or law enforcement when mandated by a valid court order or legislation.
• Technical service providers — companies assisting us with technical infrastructure operations are bound by confidentiality agreements and may only use data for specified purposes.

Nplay implements appropriate technical and organisational security measures to protect your personal data from unauthorised access, loss, damage, or disclosure. The security measures we employ include:

• 256-bit SSL encryption for all data transmitted over the network.
• Passwords are stored using one-way hashing methods that cannot be reversed.
• Role-based access control — nplay staff can only access data relevant to their responsibilities.
• 24/7 security monitoring and intrusion detection system.
• Regular security audits conducted by the internal security team.
• Secure data backups and a disaster recovery plan.

While we take all reasonable steps to protect your data, no system can be guaranteed 100% secure against all threats. We encourage you to take your own protective measures as well, such as using a strong password and never sharing your login credentials with anyone.

Nplay uses cookies and similar tracking technologies to enhance the user experience and analyse platform usage. The types of cookies we use include:

• Essential cookies — Required for the platform to function properly, including maintaining your login session. These cookies cannot be disabled without affecting core platform functionality.
• Performance cookies — Collects information about how you use the platform (pages visited, time on platform) to help us improve our services. This data is collected in aggregate and does not identify you individually.
• Functional cookies — Remembers your preferences such as language, display settings, and other preferences to provide a more personalised experience.

You can manage cookie settings through your web browser. However, disabling certain cookies may affect specific features on the nplay platform. Note that browser cookie settings do not apply to the nplay mobile app, which has its own data storage mechanism.

As an nplay member, you have the following rights regarding your personal data. All requests will be processed within 30 calendar days from the date of receipt:

To exercise any of the above rights, contact the nplay support team via live chat on the platform or through our official email. We may require identity verification before processing your request to ensure that only you can access or request changes to your data.

The nplay platform is intended for users aged 18 and above. We do not knowingly collect personal data from individuals under the age of 18. If we discover that a minor's personal data has been collected without our knowledge, we will delete that data immediately and close the relevant account.

In the course of operating the nplay platform, member personal data may be stored or processed on servers located outside Malaysia. Where cross-border data transfers occur, nplay ensures such transfers are protected by appropriate mechanisms, including:

• Data transfer agreements that meet recognised data protection standards.
• Standard contractual clauses requiring data recipients to protect your data to the same standard we uphold.
• Transfers only to countries or regions with adequate data protection standards.

Nplay retains your personal data for as long as your account is active or as long as necessary for service purposes. After an account is closed, certain data may be retained for a longer period based on the following requirements:

• Financial transaction records — retained for the period prescribed by legal requirements relating to financial reporting and anti-money laundering.
• Customer support communication records — retained for a reasonable period for reference and compliance purposes.
• Technical and log data — retained for a shorter period, typically not exceeding the time required for security and technical troubleshooting purposes.

Once the retention period expires, your personal data will be securely deleted or anonymised using appropriate procedures.

Nplay reserves the right to update or amend this Privacy Policy from time to time to reflect changes in platform practices, legal requirements, or other reasons. Where significant amendments are made, we will notify members via in-platform notifications or email at least 14 days before the changes take effect.

The date of the latest update will always be displayed at the top of this document. Your continued use of the nplay platform after the effective date of any amendment constitutes your acceptance of the updated policy.

If you have any questions, concerns, or complaints about how nplay handles your personal data, you can reach us through the following channels:

• Live Chat — The fastest way to get a response. Available 24 hours a day, 7 days a week in Malay, Chinese, and English.
• Email — Send detailed enquiries to our privacy team at [email protected].

We are committed to responding to all privacy-related enquiries within 5 business days. For formal data rights requests (access, correction, deletion), we will process them within 30 calendar days.