Privacy Policy NX500 — Our Commitment to Protecting Your Personal Data

1 Introduction & Scope of Privacy Policy

NX500 is an online casino entertainment platform operating under an official licence, committed to protecting the privacy of all its users. This Privacy Policy applies to all personal information collected through the nx500.my website, the NX500 mobile app for Android and iOS, and any other communication channels we operate, including our support email and live chat service.

This document is designed to ensure that you, as a member NX500 fully understand:

• What types of personal information we collect from you;
• How and why that information is used;
• Who your information may be shared with and under what circumstances;
• The security measures we take to protect your data;
• Your rights regarding the personal data we hold;
• How to contact us if you have any privacy concerns or questions.

This Privacy Policy is to be read together with Terms & Conditions NX500 and forms the complete agreement between you and our platform regarding the use of your personal data.

2 Types of Personal Data We Collect

NX500 only collects data that is strictly necessary to deliver quality services to you. Below are the categories of data we collect and how they are sourced:

3 How & Why We Use Your Data

Every piece of information we collect serves a clear and specific purpose. NX500 uses your personal data solely for the following purposes:

• Service Provision: To allow you to register, log in, access games, make deposits and withdrawals, and enjoy all NX500 platform features smoothly and securely.
• Identity Verification (KYC): To verify that you meet the mandatory 18+ age requirement, confirm your identity before large withdrawals are processed, and comply with anti-money laundering (AML) regulations.
• Account Security: To detect and prevent unauthorised access, fraud, multiple account creation, and suspicious activity that could compromise your account or funds at NX500.
• Transaction Processing: To process deposits via Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, or FPX, and to handle withdrawal of winnings to your Malaysian e-wallet or bank account accurately and promptly.
• Customer Support: To help you resolve any issues, answer your queries, and provide relevant assistance relating to your NX500 account or gameplay.
• Platform Improvement: To analyse aggregated usage patterns (non-individually identifiable) in order to improve the design, features, and overall experience of the NX500 platform.
• Responsible Gaming: To monitor gameplay patterns and identify early signs of problem gambling, enabling us to offer appropriate assistance or control tools to members who may need them.
• Service Communications: To send you important account-related notifications — including transaction confirmations, security alerts, and policy updates that affect NX500 services.
• Marketing (With Consent): To send you NX500 promotional information and bonuses — but only if you have given your consent to receive marketing communications. You may withdraw this consent at any time.

4 Data Sharing & Disclosure to Third Parties

NX500 does not sell, rent, or disclose your personal data to third parties for their own marketing purposes. However, there are limited situations in which we may need to share your information with certain parties:

• Payment Service Providers: When you make a deposit or withdrawal, the necessary transaction information is shared with legitimate payment gateway providers such as the FPX system, and operators including Touch 'n Go eWallet, DuitNow, GrabPay, Boost, and ShopeePay. All these providers are subject to their own strict privacy policies and security standards.
• Game Providers: Third-party game providers such as Pragmatic Play and Evolution Gaming may receive session data required to deliver their games. This data is limited to the technical information needed for game functionality and does not include your detailed personal financial information.
• Legal Requirements: NX500 will disclose your information when required by Malaysian law, court order, or a legitimate request from a relevant regulatory authority. We will endeavour to notify you of any such disclosure unless prohibited by law.
• Protection of NX500 Rights: In cases involving fraud, serious breaches of terms, or security threats, we may share necessary information with legal teams, authorities, or relevant security partners.
• Business Transfers: If NX500 is involved in a merger, acquisition, or asset sale, member data may be transferred as part of that transaction. You will be notified should this occur, and your rights regarding your data will not be affected.

In all of the sharing scenarios above, NX500 only share the minimum information necessary for the relevant purpose, and we ensure that all recipient parties are bound by appropriate confidentiality and security obligations.

5 Data Retention & Security Measures

Your personal data security is our highest priority NX500. We apply multiple layers of technical and organisational safeguards to keep your information secure at all times:

• Data Encryption in Transit: All communications between your device and NX500's servers are encrypted using TLS 1.3 with 256-bit SSL encryption. This means that even if someone were to intercept the connection, they would be unable to read its contents.
• Encryption of Data at Rest: Sensitive data such as passwords is never stored in readable form. We use secure hashing techniques to protect member passwords. Sensitive financial information is encrypted before being stored in our database.
• Strict Access Controls: Only authorised NX500 staff who require access to specific data in order to carry out their duties may access member information. All access is logged and regularly monitored to identify any unauthorised activity.
• 24/7 Security Monitoring: NX500's cybersecurity team monitors our systems around the clock to detect and respond to any threats or unauthorised access attempts.
• Regular Security Testing: We conduct regular penetration testing and security audits to identify and address any vulnerabilities in our systems before they can be exploited.

Data Retention Period

Once the relevant retention period has expired, data will be securely deleted or anonymised from NX500's systems.

6 Cookies & Tracking Technologies

Platform NX500 uses cookies and similar tracking technologies to enhance your experience and ensure the platform operates correctly. The following are the types of cookies we use:

• Essential Cookies: These cookies are essential for core nx500 platform functions such as login sessions, account security, and transaction processing. The platform will not function properly without these cookies and they cannot be disabled.
• Performance & Analytics Cookies: We use analytics tools to understand how members interact with the NX500 platform — which pages are most visited, how long play sessions last, and where members commonly encounter issues. This data is collected in aggregate and cannot be used to identify any individual.
• Functional Cookies: These cookies store your preferences — such as display language, in-game sound settings, and your last-used display options on NX500 — so you don't have to reconfigure them every time you log in.
• Security Cookies: Used to detect suspicious login attempts, ensure your session remains secure, and protect against cyberattacks such as cross-site request forgery (CSRF).

You can manage your cookie settings through your web browser or app. However, disabling essential cookies may affect your ability to use certain features of the platform. NX500 in full.

7 Your Rights Regarding Personal Data

As a member NX500 and under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights in relation to your personal data:

To exercise any of the rights above, please contact the NX500 privacy team by email at [email protected] with the subject line "Personal Data Rights Request". We will process your request within 30 business days. In complex cases, this period may be extended with prior notice to you.

8 Account Security & Your Responsibilities

Even though NX500 invest heavily in security technology to protect our platform, the security of your account also depends on your own actions. We recommend the following steps:

• Use a Strong and Unique Password: Choose a long password that combines uppercase letters, lowercase letters, numbers, and symbols. Avoid using your date of birth, name, or any information that can be easily guessed. Do not reuse your NX500 password on other platforms or services.
• Keep Your Login Credentials Confidential: Never share your NX500 password or OTP with anyone — including individuals claiming to be NX500 staff. The NX500 team will never ask for your password through any channel.
• Log Out After Every Session: Especially if you access NX500 on a public or shared device, always ensure you log out fully after each session and clear your browser cache.
• Report Suspicious Activity Immediately: If you notice any unauthorised activity on your NX500 account — such as logins from an unrecognised location, transactions you did not make, or changes to your account details — contact our support team immediately via live chat or at [email protected].
• Update Your Contact Information: Ensure the phone number registered to your NX500 account is active and reachable at all times, as it is used for OTP verification during login and important withdrawal requests.

NX500 shall not be liable for any losses arising from a member's failure to keep their login credentials secure, provided that NX500 has duly fulfilled its own security obligations.

9 Financial Data & Transaction Security

Financial transaction processing at NX500 is one of the most sensitive areas from a privacy and security standpoint. We take the following measures to protect your financial information:

• Secure Payment Gateway: All deposits made via Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, and FPX (Maybank2u, CIMB Clicks, and other banks) are processed through certified payment gateways that comply with PCI DSS (Payment Card Industry Data Security Standard).
• Withdrawal Identity Verification: For withdrawals exceeding a certain threshold, NX500 may require additional identity verification. This is a protective measure to ensure that only you are able to withdraw funds from your NX500 account.
• Anti-Fraud Transaction Monitoring: NX500's automated monitoring system analyses transaction patterns in real time to detect suspicious or unusual activity. Transactions flagged as suspicious will be held for manual review by our security team before being processed.
• Complete Transaction Records: You can view your full transaction history under the "History" section of your NX500 account at any time. If you notice any unrecognised transactions, please contact our support team immediately.

10 Communications from NX500

NX500 sends members two types of communications — service communications and marketing communications:

• Service Communications (Mandatory): This includes transaction confirmation notifications, account security alerts, login OTPs, important updates to our Terms & Conditions or Privacy Policy, and other communications directly related to your use of NX500's services. These communications cannot be disabled as they are essential to the security and functioning of your account.
• Marketing Communications (Optional): This includes information on NX500's latest promotions, new bonuses, newly launched games (such as premium slots or new Live Casino tables), and exclusive member offers. You may opt out of marketing communications by clicking the "unsubscribe" link in any marketing email, or by contacting our team.

NX500 will never send marketing communications via unknown phone numbers or through unofficial channels. If you receive any communication claiming to be from NX500 that appears suspicious, please contact our support team to verify it before taking any requested action.

11 Changes to This Privacy Policy

NX500 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or relevant technological developments. We are committed to notifying you of any significant changes.

When we make significant changes to this Privacy Policy, we will:

• Updating the "Last Updated" date at the top of this document;
• Displaying an in-platform notification on NX500 upon your next login;
• Sending notifications via your registered phone number for significant changes that affect your rights.

Continued use of the platform NX500 after any changes to this Privacy Policy take effect will be considered your acceptance of the updated policy. We recommend reviewing this page periodically to stay informed about how we handle your personal data.

12 How to Contact Us Regarding Privacy

If you have any questions, concerns, or complaints regarding this Privacy Policy or how NX500 handles your personal data, please reach out to us through any of the following channels:

• Privacy Email: [email protected] — Use the subject line "Privacy Enquiry" or "Data Rights Request" to ensure your email is routed to the right team.
• Live Chat: Available on the NX500 platform, 24 hours a day, 7 days a week, including public holidays.
• WhatsApp: The NX500 Malaysia support number is available for enquiries related to privacy and account security.

Our team will acknowledge receipt of your enquiry within 24 hours and provide a full response within 30 business days. For more complex enquiries requiring further investigation, we will keep you updated on progress regularly until the matter is resolved.

We value all feedback from our members. NX500 and are committed to addressing every privacy concern seriously and transparently. Your privacy is the foundation of the trust you place in us, and we do not take this responsibility lightly.

This Privacy Policy is governed by and interpreted in accordance with the laws of Malaysia, including the Personal Data Protection Act 2010 (PDPA). Any disputes relating to this Privacy Policy will be resolved under the jurisdiction of the relevant Malaysian courts.