Privacy Policy —
How n1gang Protects Your Data

Introduction

This Privacy Policy ("Policy") describes how n1gang ("we", "us", "our", "Company") collects, uses, stores, shares, and protects personal data belonging to individuals ("you", "User", "Member") who access or use the n1gang online gambling platform available at https://n1gang.cam ("Platform").

We are committed to handling your personal data responsibly and in accordance with internationally recognised data protection principles. This Policy is designed to be transparent — we want you to understand exactly what information we hold about you and how it is used at every stage of your relationship with n1gang.

This Policy applies to all personal data collected through your use of the Platform, including during account registration, identity verification (KYC), deposit and withdrawal transactions, customer support interactions, and promotional activities. It should be read alongside our Terms & Conditions, which govern the overall use of our services.

By registering an account with n1gang or continuing to use the Platform after this Policy has been updated, you acknowledge that you have read and understood its contents. If you do not agree with any part of this Policy, please discontinue use of the Platform and contact us to request Account closure.

Definitions

For clarity throughout this Policy, the following terms carry the meanings set out below:

• "Personal Data" — Any information that identifies or can reasonably identify a natural person, either directly (e.g., full name, identification number) or indirectly (e.g., device ID, IP address combined with other data).
• "Processing" — Any operation or set of operations performed on personal data, including collection, recording, storage, adaptation, retrieval, use, disclosure, restriction, or deletion.
• "Data Controller" — The entity that determines the purposes and means of processing personal data. For users of the n1gang Platform, the Data Controller is n1gang.
• "Data Processor" — A third party that processes personal data on behalf of n1gang under a contractual arrangement and in accordance with our documented instructions.
• "KYC Data" — Identity and age verification documents submitted by a Member, including government-issued identification, proof of address, and payment method verification materials.
• "Cookies" — Small text files placed on your device by the Platform to facilitate functionality, session management, analytics, and personalisation.
• "Third Parties" — Any entity other than n1gang and the Member, including payment processors, fraud prevention providers, regulatory bodies, and analytics services.
• "Sensitive Data" — A subset of personal data afforded higher protection, including identification document numbers, financial account details, and data that could reveal vulnerability to problem gambling.

Data Controller

n1gang is the Data Controller in respect of personal data collected and processed through the Platform. This means we are responsible for determining how and why your data is processed, and we are accountable for ensuring that our processing activities comply with applicable data protection obligations.

Where we engage third-party service providers to process data on our behalf — for example, payment processors such as those facilitating Touch 'n Go eWallet, GrabPay, Boost, DuitNow, or FPX transactions — those providers operate as Data Processors under written agreements that require them to handle your data only as instructed by n1gang and to maintain appropriate security standards.

Any enquiries regarding our data processing activities or requests to exercise your data rights should be directed to our support team using the contact details in Section 15 of this Policy.

Data We Collect

The categories of personal data that n1gang collects from Members and users of the Platform are as follows:

We do not collect sensitive personal data relating to racial or ethnic origin, political opinions, religious beliefs, or health information, except where health-related information is voluntarily disclosed in the context of responsible gambling (for example, when a Member requests self-exclusion citing problem gambling). Such disclosures are handled with the highest degree of confidentiality and used only to provide appropriate support.

How We Collect Data

n1gang collects personal data through the following primary channels:

• Direct submission: Information you provide when registering an account, completing KYC verification, submitting a deposit or withdrawal request, contacting support, or responding to surveys or promotions.
• Automated technical collection: Data collected automatically when you access the Platform, including IP addresses, device identifiers, cookies, browser fingerprints, and behavioural interaction logs generated during your session.
• Payment processors: Transaction confirmation data and payment method identifiers received from third-party providers such as Touch 'n Go eWallet, GrabPay, Boost, Maybank, CIMB, Public Bank, DuitNow, FPX, and USDT TRC20 network confirmations.
• Third-party identity verification services: Results of identity and age verification checks performed using our approved KYC partners, which may include document authentication and fraud screening outputs.
• Fraud prevention and AML screening: Data from external watchlists, sanctions databases, and adverse media monitoring tools used as part of our anti-money-laundering and know-your-customer obligations.

Purposes & Legal Basis for Processing

We process personal data only where we have a lawful basis for doing so. The table below outlines our primary processing purposes and the corresponding legal grounds:

Data Sharing & Disclosure

n1gang does not sell your personal data. We share personal data only in the following limited circumstances:

• Payment service providers: Transaction data shared with payment processors to facilitate deposits and withdrawals via Touch 'n Go eWallet, GrabPay, Boost, DuitNow, FPX (Maybank, CIMB, Public Bank, Hong Leong Bank), and USDT TRC20 networks. Each provider operates under data processing agreements requiring appropriate security standards.
• Identity verification providers: KYC data shared with our approved identity verification partners for the purpose of confirming your age and identity as required by our regulatory obligations. These partners are contractually bound to use such data solely for verification purposes.
• Fraud and AML screening services: Data shared with third-party fraud prevention and anti-money-laundering screening tools to detect and prevent financial crime. Results inform risk assessments conducted internally by n1gang.
• Regulatory and law enforcement authorities: Where required by law, court order, or competent regulatory authority, n1gang will disclose personal data to the relevant body. We will notify you of such disclosure where legally permissible to do so.
• Group entities and successors: In the event of a merger, acquisition, or corporate restructuring, personal data held by n1gang may be transferred to successor entities, subject to appropriate safeguards and notification to affected Members.
• Game and platform technology providers: Limited technical and gameplay data shared with our certified game providers solely for the purpose of delivering and auditing game content. No financial or identity data is shared for this purpose.

International Data Transfers

n1gang operates an international platform and may transfer personal data to, or store it in, countries outside Malaysia. This may include countries in which our cloud infrastructure, KYC verification partners, or game technology providers are based.

Where personal data is transferred internationally, we ensure that appropriate safeguards are in place to protect the data to a standard at least equivalent to that required under the data protection framework applicable to our gaming licence. These safeguards may include:

• Standard contractual clauses or data processing agreements with recipient organisations
• Transfers only to jurisdictions with recognised data protection frameworks or equivalent adequacy determinations
• Technical and organisational security measures appropriate to the sensitivity of the data being transferred

Malaysian Members should be aware that data transferred outside Malaysia will be subject to the laws of the destination country. By using the n1gang Platform, you acknowledge and consent to the international transfer of your personal data as described in this section.

Data Retention

n1gang retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. The following retention guidelines apply:

• Account and identity data: Retained for the duration of the active Account relationship and for a minimum of five (5) years following Account closure, to comply with AML record-keeping requirements.
• KYC documents: Retained for a minimum of five (5) years following Account closure or the date of the last transaction, whichever is later, in accordance with AML regulatory obligations.
• Financial transaction records: Retained for a minimum of five (5) years to comply with financial reporting, tax, and anti-money-laundering requirements.
• Gambling activity data: Retained for the duration of Account activity and up to five (5) years following Account closure, for the purpose of dispute resolution, responsible gambling monitoring, and regulatory reporting.
• Support communications: Retained for up to three (3) years from the date of the communication, or longer if the communication relates to an ongoing dispute, complaint, or legal matter.
• Technical / log data: Retained for up to twelve (12) months for fraud detection, security, and platform improvement purposes, after which it is anonymised or deleted.
• Marketing data: Retained until you withdraw consent or request deletion, subject to minimum retention requirements where applicable.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer identify you. Where deletion is not immediately possible due to technical constraints (e.g., data held in backup systems), we ensure the data is isolated and protected from further active processing until deletion is completed.

Cookies & Tracking Technologies

The n1gang Platform uses cookies and similar tracking technologies to provide and improve our services. Cookies are small data files placed on your device when you visit the Platform. The following categories of cookies are used:

• Strictly Necessary Cookies: Required for the Platform to function correctly. These include session management cookies that maintain your logged-in state and security tokens that protect against cross-site request forgery. These cookies cannot be disabled without impairing Platform functionality.
• Functional Cookies: Allow the Platform to remember your preferences — such as language settings, display options, and responsible gambling tool configurations — to provide a personalised experience across sessions.
• Analytics Cookies: Used to understand how Members interact with the Platform — which pages are visited, how long sessions last, and where users encounter friction. This data is aggregated and used to improve Platform performance and user experience.
• Security and Fraud Detection Cookies: Used to identify and prevent fraudulent activity, detect unusual account behaviour, and enforce our one-account-per-person policy.

You may manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect Platform functionality. Your browser's help documentation will provide guidance on managing cookie preferences for your specific browser version.

Security Measures

n1gang employs a comprehensive suite of technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS encryption on all data transmissions between your browser or device and the Platform
• Encryption at rest for sensitive stored data, including KYC documents and financial records
• Access controls limiting internal data access to authorised personnel on a strictly need-to-know basis
• Multi-factor authentication requirements for internal administrative systems
• Regular penetration testing and vulnerability assessments conducted by independent security specialists
• Incident response procedures to detect, contain, and investigate potential data breaches in a timely manner
• Staff training on data protection obligations, security practices, and responsible handling of Member information

In the event of a personal data breach that poses a risk to your rights and freedoms, n1gang will notify you without undue delay and in accordance with our notification obligations under applicable data protection law. The notification will describe the nature of the breach, the categories of data affected, the likely consequences, and the measures taken or proposed to address it.

Your Data Rights

Subject to applicable law and certain conditions, you hold the following rights in relation to your personal data held by n1gang. To exercise any of these rights, please contact us using the details in Section 15.

n1gang will respond to data rights requests within a reasonable period, typically within 30 days. We may need to verify your identity before processing a request. Some rights are subject to limitations under applicable law — for example, we cannot delete data we are legally required to retain for AML purposes. We will clearly explain any such limitation in our response.

Children's Privacy

The n1gang Platform is strictly intended for individuals aged 21 years and older. We do not knowingly collect, process, or store personal data relating to persons under the age of 21.

Age verification is enforced during the account registration and KYC process. If n1gang becomes aware that personal data has been collected from a person under 21, we will immediately suspend the relevant Account, delete the associated personal data, and return any deposited funds.

If you are a parent or guardian and believe that a person under 21 has registered an account with n1gang, please contact us immediately using the details in Section 15 so that we can take appropriate action.

Changes to This Policy

n1gang reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal requirements, or the features of the Platform. Where changes are material, we will provide you with advance notice via email or a prominent in-Platform notification at least 7 days before the updated Policy takes effect.

The effective date displayed at the top of this page indicates when the current version was last reviewed and published. We encourage you to review this Policy periodically to stay informed about how we protect your data.

Your continued use of the Platform after an updated Policy has taken effect constitutes your acceptance of the changes. If you do not agree with the updated Policy, you should cease use of the Platform and request Account closure before the changes take effect.

Contact & Complaints

For any questions, requests, or concerns relating to this Privacy Policy or our data processing practices, please contact the n1gang data protection team through the following channels:

• Live Chat: Available 24/7 via the n1gang Platform. This is the fastest channel for straightforward enquiries.
• Email: [email protected] — please mark the subject line "Privacy Enquiry" or "Data Rights Request" for faster routing to our data protection team. Responses within 24–48 hours under normal circumstances.

When submitting a data rights request or privacy complaint, please include your registered username, the email address on file for your account, and a clear description of your request or concern. Identity verification may be required before we can process your request.

If you are not satisfied with our response to a data-related complaint, you may escalate the matter to the relevant supervisory authority under the data protection framework applicable in your jurisdiction. n1gang will cooperate fully with any regulatory investigation into our data processing practices.