Personal Data Protection

Privacy Policy Nusa22 – Our Commitment to Protecting Your Personal Information

At nusa22, your privacy is more than a legal formality — it is a core part of the trust you place in us. This document clearly explains what data we collect, how it is used, and how we ensure it remains secure in our hands.

Updated: 1 January 2026

The Privacy Principles We Uphold

Six data protection commitments at the core of the nusa22 privacy policy.

End-to-End Encryption

All personal data transmitted between your device and nusa22 servers is encrypted using 256-bit SSL standards — the same encryption technology used by leading banking institutions.

Secure Data Storage

Your data is stored on servers protected by strict access controls. Only authorised staff may access user data, and every access is logged for audit purposes.

No Data Sales

Nusa22 does not sell, rent, or commercialise your personal data to third parties for marketing purposes. Your data belongs to you, not to us as a business asset.

Control in Your Hands

You have the right to access, correct, download, or request deletion of your personal data at any time through your account settings or by contacting our support team.

Minimum Collection

We only collect data that is genuinely necessary to provide our services. No data is collected excessively or without a clear and legitimate purpose.

Legal Compliance

The nusa22 privacy policy is drafted in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and relevant international standards for user data handling.

1

Personal Data We Collect

Nusa22 collects personal data only when it is necessary to provide the services you request or to fulfil our legal obligations. The data collected falls into several categories:

Data Category Examples of Information Primary Purpose
Identity Data Full name, date of birth, identification card number KYC verification, fraud prevention
Contact Data Email address, phone number Account communications, notifications
Financial Data Payment methods, transaction history Deposit and withdrawal processing
Technical Data IP address, device type, web browser Account security, platform optimisation
Game Data Game history, betting, wins Responsible gaming monitoring, audits

Note: Nusa22 does not directly collect credit or debit card information. All payment transactions are processed through registered third-party payment providers that comply with PCI-DSS standards.

2

How We Collect Data

Your personal data is collected through various channels when you interact with the nusa22 platform:

  • During Registration: You provide basic information such as name, email, date of birth, and phone number directly
  • During Platform Use: Game activity, game preferences, and usage patterns are recorded automatically
  • During Financial Transactions: Information related to payment methods and transaction history is collected for processing and compliance purposes
  • Via Customer Support: Information you share when contacting our support team via live chat or email
  • Via Cookies and Tracking Technologies: Technical data such as IP addresses, browser type, and pages visited are collected automatically.
  • Via KYC Verification: Identity documents such as a national ID or passport are requested when required for account verification.
3

Purpose of Personal Data Use

The data we collect is used for the following purposes, and only for these purposes:

  • Account Management: Creating, verifying, and maintaining your account at nusa22
  • Transaction Processing: Handling deposits, withdrawals, and all financial transactions on the platform
  • Security & Fraud Prevention: Detecting suspicious activity and protecting the platform from abuse
  • Legal Compliance: Meeting AML (Anti-Money Laundering), KYC, and industry regulatory requirements
  • Service Improvement: Analysing usage patterns to improve user experience and platform performance
  • Communications: Sending important account notifications, relevant promotions, and platform updates
  • Responsible Gaming: Monitoring gaming activity to identify and assist players who may need support

Marketing: You may opt out of marketing communications at any time through the notification settings in your account. Unsubscribe requests will be processed within 5 business days.

4

Data Sharing with Third Parties

Nusa22 does not sell or commercialise your personal data to anyone. However, there are situations where we need to share certain data with trusted third parties for operational purposes:

  • Payment Providers: Transaction information is shared with approved payment providers such as Touch 'n Go, Boost, and banks involved in FPX processing — solely for payment settlement purposes
  • Game Providers: Minimum game data required is shared with third-party game providers to enable access to their games within the nusa22 platform.
  • KYC Services: Identity verification documents may be processed through third-party KYC platforms that comply with strict security standards.
  • Authority: Data may be disclosed to law enforcement authorities when required by court order or applicable legislation.

All third parties we work with are bound by data protection agreements that prohibit them from using your information for any purpose beyond the agreed scope of work.

5

Data Security Measures We Practise

Your data security is a responsibility we take very seriously. Here are the security layers we have in place:

  • 256-bit SSL Encryption: All data in transit is protected with transport layer encryption that cannot be broken within any practical timeframe
  • Data-at-Rest Encryption: Sensitive data stored in our databases, including identity information, is also encrypted.
  • Layered Access Control: Only staff with specific authorisation may access user data, and every access is automatically audited.
  • Regular Security Scanning: Our systems are periodically audited by independent security parties to detect any potential vulnerabilities
  • Incident Response Plan: The nusa22 security team has clear procedures in place to respond to any data breach that may occur

Security Tips: While we apply robust security measures, you can further protect your account by using a strong password, enabling two-factor authentication (2FA), and ensuring you log out after each session on shared devices.

6

Cookies and Tracking Technologies

Nusa22 uses cookies and similar tracking technologies to enhance your platform experience. Cookies are small text files stored in your browser when you visit our website.

Types of cookies we use:

  • Essential Cookies: Required for core platform functions such as login session verification and security. These cookies cannot be disabled.
  • Functional Cookies: Saving your preferences such as language, theme, and game settings so you don't need to reconfigure them each time.
  • Analytics Cookies: Helping us understand how users interact with the platform so we can make continuous improvements.
  • Marketing Cookies: Used to display relevant promotions to you based on your usage activity. You may decline this type of cookie.

You can manage or delete cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the nusa22 platform.

7

Your Rights as a User

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by nusa22:

Right to Access

Request a copy of the personal data we hold about you.

Right to Rectification

Request correction of inaccurate or incomplete data.

Right to Erasure

Request data deletion under certain circumstances permitted by law.

Right to Object

Opt out of data processing for direct marketing purposes.

Right to Portability

Request your data in a machine-readable format.

Right to Restriction

Request restriction of data processing in certain situations.

To exercise any of these rights, contact our support team via the in-platform live chat. Requests will be processed within 30 business days of receipt.

8

Data Retention & Deletion

Nusa22 retains personal data only for as long as necessary for the stated purposes or as required by law:

  • Active Account Data: Retained for as long as your account is active on the nusa22 platform.
  • Financial Transaction Data: Retained for a minimum of 7 years from the transaction date in accordance with tax and financial legal requirements.
  • Security Log Data: Retained for 2 years for audit and security investigation purposes.
  • Closed Account Data: Basic data is retained for 5 years after account closure for legal compliance purposes, after which it is permanently deleted.

Once the retention period expires, your data will be securely deleted using methods that ensure it cannot be recovered.

9

Links to Third-Party Platforms

The nusa22 platform may contain links or integrations with third-party services such as game providers or payment systems. This privacy policy applies solely to the nusa22 platform and does not cover the privacy practices of those third parties.

We encourage you to read the privacy policy of any third-party services you use through the nusa22 platform. nusa22 is not responsible for the data protection practices of third parties, though we strive to work only with partners that uphold high privacy standards.

10

Changes to This Privacy Policy

Nusa22 reserves the right to update or amend this privacy policy from time to time in response to changes in law, technology, or our operational practices. When material changes are made, we will:

  • Updating the "Last Updated" date at the top of this page
  • Sending notifications to all members via their registered email or in-platform notifications
  • In the event of significant changes, we may request renewed confirmation of your acceptance

Continued use of the nusa22 platform after the effective date of any policy changes is considered acceptance of the amended terms. We encourage you to review this page periodically.

11

Contact Us Regarding Privacy

If you have any questions, concerns, or wish to exercise your privacy rights, the nusa22 team is ready to assist:

  • Live Chat: The fastest method — 24/7 support via the chat icon within the platform.
  • Email: Send your privacy enquiries to [email protected]
  • Response Time: General inquiries are answered within 24–48 hours; data rights requests are processed within 30 days

For formal data rights requests (access, correction, deletion), please clearly state the type of request and provide sufficient identity verification so we can process your request securely and accurately.

Your Data Is Safe at nusa22

We apply industry-grade data protection to keep your personal information secure at all times. Register today and play with complete confidence.

Bahasa Melayu