nk888 Privacy Policy

For the purposes of this Privacy Policy, the following terms carry the meanings set out below unless the context expressly requires otherwise:

• "nk888", "we", "us", "our" — refers to the Company operating the nk888 platform at https://nk888.games and all associated services.
• "Platform" — the nk888 website, mobile-optimized browser interface, games lobby, sportsbook, live casino, account portal, and all related services made available at https://nk888.games.
• "Personal Data" — any information that identifies or could reasonably be used to identify a living individual, including name, email address, phone number, device identifier, IP address, and financial account details.
• "Member", "you", "your" — any natural person who has registered an account on the Platform or who accesses the Platform as a visitor.
• "Processing" — any operation performed on Personal Data, including collection, storage, retrieval, use, disclosure, erasure, or destruction.
• "KYC" — Know Your Customer: the identity and document verification process applied to Members before withdrawal requests are processed.
• "Cookies" — small text files placed on your device by the Platform to store session state, preferences, and analytics data.
• "Third-Party Processor" — an external service provider engaged by nk888 to perform specific data-processing functions on our behalf, subject to a binding data-processing agreement.

nk888 collects Personal Data across several categories, each serving a defined and lawful purpose. The table below summarizes the categories of data we collect and the primary reason for each category:

nk888 collects Personal Data through the following channels:

• Direct provision by you: When you register an account, complete the KYC process, make a deposit or withdrawal request, contact our support team, or respond to a promotional survey, you provide data directly to us.
• Automated collection: As you navigate and use the Platform, our servers and analytics systems automatically record Technical Data and Usage Data. This includes IP address logging, session recording, and browser-fingerprinting for fraud-prevention purposes.
• Cookies and similar technologies: The Platform places first-party and select third-party cookies on your device to maintain your login session, remember your language and currency preferences, and collect aggregated analytics. See Section 7 for full details.
• Third-party sources: Where permitted by applicable law, nk888 may receive data about you from payment processors (e.g., confirmation of a BCA or OVO transaction), KYC verification service providers, and fraud-intelligence databases to supplement the information you have provided directly.
• Public sources: In specific AML-compliance circumstances, nk888 may cross-reference publicly available sanctions lists or politically exposed persons (PEP) databases against the identity data you have submitted.

nk888 processes Personal Data only where a valid legal basis exists. The primary legal bases we rely upon are:

• Contractual necessity: Processing is required to perform our contract with you — i.e., to operate your account, process transactions, verify your identity, and deliver the games and betting services you have signed up for.
• Legal obligation: Certain processing activities are mandated by applicable law, including anti-money-laundering (AML) regulations, counter-terrorism financing (CTF) requirements, and record-keeping obligations imposed by our international gaming licence. We are legally required to conduct KYC checks and retain transaction records for a prescribed minimum period.
• Legitimate interests: nk888 has a legitimate interest in processing data for fraud prevention, platform security, network integrity monitoring, and improvement of our services, provided such interests are not overridden by your fundamental rights and freedoms.
• Consent: Where we rely on consent as a legal basis — for example, for sending optional promotional communications — we will obtain your explicit consent before doing so. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

The Personal Data we hold about you is used exclusively for the following purposes:

• Account management: Creating, maintaining, and securing your nk888 Member account, including processing login credentials and two-factor authentication.
• Transaction processing: Executing deposits received via BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, and USDT, as well as processing withdrawal requests back to your verified payment method.
• Identity and age verification: Confirming that you are a real person, that you are at least 21 years of age, and that your identity documents are valid and consistent with the information provided at registration.
• Fraud prevention and platform security: Detecting and preventing unauthorized account access, bonus abuse, multiple-account registration, chip-dumping, and money-laundering activity through automated monitoring and manual review.
• Responsible gaming: Monitoring usage patterns to identify signs of problem gambling behavior and, where appropriate, proactively offering support tools such as deposit limits, cool-off periods, or self-exclusion options.
• Customer support: Responding to your inquiries, resolving disputes, processing complaints, and maintaining a record of our communications for quality assurance.
• Legal and regulatory compliance: Fulfilling our obligations under applicable AML, CTF, and data-retention laws, and cooperating with authorized regulatory bodies, law enforcement agencies, and financial intelligence units when lawfully required.
• Platform improvement: Analyzing aggregated and anonymized usage patterns to enhance platform performance, game selection, user-interface design, and the overall player experience.
• Marketing communications (with consent only): Sending you tailored promotional offers, seasonal bonuses (including offers aligned with Indonesian holidays such as Idul Fitri and Indonesian Independence Day on 17 August), and product updates — only where you have explicitly opted in to such communications and have not subsequently withdrawn consent.

nk888 does not sell, rent, or trade your Personal Data to any third party. We may share your data in the limited circumstances described below:

• Third-Party Processors: We engage carefully vetted service providers to perform specific functions on our behalf — including payment gateway operators (to facilitate IDR bank transfers and USDT transactions), KYC verification platforms, cloud infrastructure providers, and analytics services. These processors are contractually bound to process your data only on our documented instructions and to maintain appropriate security standards.
• Game Studio Providers: When you play games supplied by third-party studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Pocket Games Soft, a session token and minimal technical identifiers (not your full profile) are shared with the studio's game server to deliver the game. These studios are subject to independent certification and their own privacy obligations.
• Regulatory and Law Enforcement Authorities: nk888 will disclose Personal Data to competent authorities — including financial intelligence units and law enforcement agencies — when required to do so by a lawful order, warrant, or regulatory obligation. We will notify you of such a disclosure where we are legally permitted to do so.
• Fraud Intelligence Networks: Where permitted by applicable law, nk888 may share identifiers associated with confirmed fraud, money-laundering, or bonus-abuse activity with recognized cross-industry fraud prevention databases to protect the broader ecosystem of legitimate players.
• Business Transfers: In the event of a merger, acquisition, asset sale, or restructuring of the nk888 business, your Personal Data may be transferred to the acquiring entity. We will provide advance notice of any such transfer and the privacy protections that will apply to your data going forward.

The nk888 Platform uses cookies and similar tracking technologies to provide a functional, secure, and personalized experience. The categories of cookies we use are described below:

• Strictly Necessary Cookies: These cookies are essential for the Platform to function. They maintain your authenticated session, store your CSRF security token, and remember your in-session preferences such as selected game currency (IDR or USDT). These cookies cannot be disabled without rendering the Platform non-functional for your session.
• Functional Cookies: These cookies remember your preferences between sessions — for example, your preferred deposit method (BCA, BRI, OVO, DANA) and your display settings. Disabling these cookies will cause the Platform to reset to default preferences on each visit.
• Analytics Cookies: We use first-party analytics to understand how Members navigate the Platform — which game categories (slots, live blackjack, bingo, sportsbook) attract the most engagement, where users encounter friction, and how platform performance can be improved. Analytics data is aggregated and does not identify individual users.
• Security and Fraud-Detection Cookies: These cookies store device fingerprinting data used to detect suspicious login patterns, identify unauthorized account access, and flag activity consistent with bonus abuse or multi-accounting. They are part of our platform integrity infrastructure and cannot be disabled.

You may manage cookie preferences through your browser settings. Most modern browsers allow you to block or delete cookies; however, please note that blocking strictly necessary or security cookies will impair your ability to use the Platform. Browser-level cookie controls are the primary mechanism for managing cookie preferences on nk888; we do not operate a separate cookie-consent banner.

nk888 retains Personal Data for no longer than is necessary to fulfill the purposes described in this Privacy Policy, or as required by applicable regulatory and legal obligations. The principal retention periods are as follows:

• Active account data: Retained for the full duration of your active membership and for five (5) years following permanent account closure, to satisfy AML record-keeping requirements.
• Transaction records (deposits, withdrawals, wager history): Retained for a minimum of five (5) years from the date of each transaction, in accordance with standard financial-record-keeping obligations applicable to internationally licensed gaming operators.
• KYC documents: Retained for five (5) years following account closure or the completion of the KYC process, whichever is later.
• Support and communications records: Retained for three (3) years from the date of the most recent communication in a support thread, or longer if the communication relates to an unresolved dispute or regulatory inquiry.
• Analytics and usage data: Aggregated analytics data is retained indefinitely in anonymized form. Raw session logs are deleted after twelve (12) months.
• Marketing consent records: Retained for the life of your account plus two (2) years, to demonstrate the lawfulness of any marketing communications sent to you.

Upon the expiry of the applicable retention period, Personal Data is securely deleted or rendered permanently anonymous through an irreversible anonymization process, such that it can no longer be associated with any individual.

nk888 implements a comprehensive set of technical and organizational security measures to protect your Personal Data against unauthorized access, accidental loss, destruction, or disclosure. Key measures include:

• Encryption in transit: All data transmitted between your browser and our servers is encrypted using TLS 1.3. Our platform enforces HTTPS-only access; unencrypted HTTP connections are automatically redirected.
• Encryption at rest: Sensitive data fields — including financial account numbers, KTP/passport identifiers, and KYC document files — are encrypted at rest using AES-256 encryption.
• Access controls: Internal access to production systems and Member personal data is restricted using role-based access control (RBAC). Only authorized personnel with a documented business need may access identifiable Member data, and all such access is logged and audited.
• Penetration testing: nk888 commissions periodic external penetration tests and vulnerability assessments of its platform infrastructure. Critical findings are remediated on a priority basis before production deployment.
• Incident response: In the event of a confirmed data breach that is likely to result in a risk to the rights and freedoms of affected Members, nk888 will notify affected Members without undue delay and, where required, report the breach to the relevant supervisory authority within 72 hours of becoming aware of it.

Subject to applicable law and the limitations set out below, you have the following rights in respect of the Personal Data nk888 holds about you:

To exercise any of the above rights, please contact our support team at support [at] nk888.games or via the in-platform live chat. We will respond to all rights requests within thirty (30) calendar days of receipt. Where a request is complex or we receive a high volume of requests, we may extend this period by a further two months, in which case we will notify you of the extension and the reason for it.

Please note that certain rights are subject to limitations. For example, we are unable to erase Personal Data that we are legally required to retain under AML or financial-record-keeping regulations, and we cannot provide data portability for data we have anonymized. We will explain any applicable limitation clearly when responding to your request.

nk888 maintains a zero-tolerance policy toward underage gambling. As part of the registration process, we collect date-of-birth information and conduct age verification checks. Where KYC documents indicate that a Member is under the age of 21, the account will be immediately closed, all funds will be returned to the payment source (where feasible), and no winnings derived from play will be paid out.

If you are a parent or guardian and you believe that a minor under your care has registered an account on nk888 without your knowledge, please contact us immediately at support [at] nk888.games. We will investigate and close the account promptly, deleting any Personal Data collected from the minor to the extent permitted by law.

nk888 operates on a globally distributed cloud infrastructure. This means that your Personal Data may be processed on servers located in jurisdictions outside Indonesia. When we transfer Personal Data to third countries, we ensure that appropriate safeguards are in place to maintain the protection of your data at a standard equivalent to the protections described in this Privacy Policy.

Safeguards we rely upon for international transfers include: contractual clauses that impose data-protection obligations on the receiving party; transfers to countries or entities that have received an adequacy determination from a relevant data-protection authority; and intra-group data-sharing agreements where applicable.

If you would like further information about the specific safeguards in place for any particular international transfer of your Personal Data, please contact us using the details in Section 15.

The nk888 Platform does not contain links to third-party websites for commercial or advertising purposes. Any third-party content displayed on the Platform — such as game interfaces served by Pragmatic Play, Evolution Gaming, or other studio providers — is delivered within our platform environment and is subject to the respective studio's own privacy documentation.

nk888 is not responsible for the privacy practices or content of any third-party systems or services that you access independently outside of the Platform. We encourage you to review the privacy policies of any third-party services you use in connection with your online activity.

nk888 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data-processing practices, applicable law, or platform functionality. When a material change is made, we will:

• Update the "Last Reviewed" date shown in the page header;
• Publish a notice on the Platform homepage summarizing the key changes; and
• Where practicable, send an email notification to the address registered on your nk888 account.

Your continued use of the Platform following the publication of a revised Privacy Policy constitutes your acknowledgment of the updated terms. If you do not agree with any amendment, you should cease using the Platform and contact our support team to close your account.

The version of this Privacy Policy currently published at https://nk888.games/privacy-policy is the governing version. Previous versions are available on request by contacting our support team.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way nk888 processes your Personal Data, please reach out through the following channels:

• In-Platform Live Chat: Available 24 hours a day, 7 days a week — the fastest route for urgent privacy or account-related queries.
• Email: support [at] nk888.games — please allow up to 48 hours for a response to written inquiries. For formal data-rights requests, please include "Data Rights Request" in your subject line together with your registered account username.
• Support Hours: 24/7 WIB (UTC+7). Indonesian-speaking agents are available during peak WIB evening hours to assist players across Jakarta, Surabaya, Bandung, B ali, Semarang, Medan, Yogyakarta, and beyond.

We are committed to resolving all privacy-related concerns promptly and fairly. If you are not satisfied with our response to a complaint, you may have the right to escalate the matter to a competent data-protection authority or supervisory body in your jurisdiction.