Contents
- 1. Introduction
- 2. Definitions
- 3. Data We Collect
- 4. How We Collect Data
- 5. Data Processing & Legal Basis
- 6. How We Use Your Data
- 7. Data Sharing & Disclosure
- 8. Data Retention
- 9. Cookies & Tracking
- 10. Data Security
- 11. Your Rights
- 12. Minors & Age Verification
- 13. International Transfers
- 14. Changes to This Policy
- 15. Contact & Data Requests
1 Introduction
This Privacy Policy ("Policy") is issued by the operator of nfast11 (hereinafter "nfast11", "the Platform", "we", "us", or "our") and applies to all personal data collected from individuals ("you", "your", "the User", "the Player") who access, register with, or use any service provided through https://nfast11.cam and any associated subdomains or mobile web interfaces.
nfast11 operates an online casino and sports betting platform serving players in Malaysia and other eligible jurisdictions. In the course of providing our services — including account registration, payment processing, identity verification, sports betting markets, casino games, and customer support — we necessarily collect and process personal data. We take this responsibility seriously.
This Policy sets out in plain language exactly what data we collect, the legal basis on which we process it, how long we keep it, who we share it with, and what rights you hold over your own information. We encourage you to read it in full. If you have any questions that this Policy does not address, please contact us at the details provided in Section 15.
2 Definitions
The following defined terms are used throughout this Policy:
- "Personal Data" means any information that can be used, alone or in combination with other data, to identify a natural person — including your name, email address, mobile number, residential address, identification document number, financial transaction details, and device identifiers.
- "Processing" means any operation performed on Personal Data, including collection, recording, storage, organisation, adaptation, retrieval, use, disclosure, transmission, erasure, or destruction.
- "Data Controller" means the entity that determines the purposes and means of processing Personal Data — in this case, the operator of nfast11.
- "Data Processor" means a third party that processes Personal Data on behalf of nfast11 under a data processing agreement.
- "KYC" means Know Your Customer — the identity and age verification process required by nfast11's licensing obligations and internal compliance framework.
- "Cookies" means small text files placed on your device by the Platform to recognise your browser across sessions and to support certain platform functionality.
- "Third-Party Service Providers" means companies engaged by nfast11 to perform specific functions, including payment processors (GrabPay, Touch 'n Go eWallet, Boost, DuitNow, FPX, Maybank, CIMB, Public Bank), game software licensors, fraud detection providers, and analytics platforms.
3 Data We Collect
nfast11 collects the minimum data necessary to provide a safe, compliant, and functional service. The categories of Personal Data we collect are set out in the table below:
| Category | Examples | Purpose |
|---|---|---|
| Identity Data | Full legal name, date of birth, nationality, MyKad or passport number, selfie/photo | KYC age & identity verification; fraud prevention |
| Contact Data | Email address, Malaysian mobile phone number, residential address | Account registration; transaction notifications; support communications |
| Financial Data | Deposit/withdrawal amounts and dates; e-wallet identifiers (GrabPay, Touch 'n Go, Boost); bank account references; cryptocurrency wallet addresses | Payment processing; AML compliance; withdrawal verification |
| Gaming & Betting Data | Game history, bet records, wagering amounts, session duration, win/loss records, bonus usage | Service delivery; responsible gambling monitoring; dispute resolution |
| Technical Data | IP address, device type and OS, browser type, session tokens, geolocation (city-level) | Security; fraud detection; platform performance optimisation |
| Communications Data | Live chat transcripts, support ticket content, email correspondence | Customer support; complaint handling; service quality improvement |
| Preference Data | Responsible gambling settings (deposit limits, self-exclusion status), promotional preferences, notification settings | Personalisation; responsible gambling compliance; marketing (where consented) |
We do not collect sensitive special-category Personal Data (such as racial or ethnic origin, health data, religious beliefs, or biometric data) except where strictly required for KYC identity verification purposes and only to the minimum extent necessary.
4 How We Collect Your Data
nfast11 collects Personal Data through the following channels:
- Direct Provision by You: When you register an Account, complete identity verification, make a deposit or withdrawal, contact our support team, or respond to a survey or promotion.
- Automated Technical Collection: When you browse or use the Platform, our servers and analytics tools automatically collect Technical Data including your IP address, device identifiers, browser fingerprint, pages visited, and session duration. This collection occurs regardless of whether you are logged into an Account.
- Payment Providers: When you deposit or withdraw funds via GrabPay, Touch 'n Go eWallet, Boost, DuitNow, FPX, or a Malaysian bank account, we receive transaction confirmation data and account reference information from the relevant payment provider.
- Third-Party Identity Verification Providers: Where we engage third-party KYC/AML service providers, these providers may supply us with identity verification results and risk scores derived from cross-referencing your submitted documentation against public and commercial databases.
- Cookies and Tracking Technologies: As described in Section 9, cookies and similar technologies are used to recognise your browser, maintain your session, and collect usage analytics data.
5 Data Processing & Legal Basis
nfast11 processes your Personal Data on the following legal grounds, depending on the specific processing activity:
- Contractual Necessity: Processing required to provide the services you have contracted for — including account creation, game play, deposits, withdrawals, and customer support. Without this processing, we cannot deliver the Platform's core services.
- Legal Obligation: Processing required to comply with nfast11's international licensing conditions, anti-money laundering (AML) requirements, Know Your Customer (KYC) obligations, and age verification mandates. This includes retaining transaction records for regulatory audit purposes.
- Legitimate Interest: Processing that serves nfast11's legitimate business interests — including fraud detection, platform security, responsible gambling monitoring, service improvement, and internal analytics — where those interests do not override your fundamental rights and freedoms.
- Consent: Where you have given your express consent — specifically for the receipt of optional promotional communications, personalised bonus offers, and non-essential cookies. You may withdraw this consent at any time without affecting the lawfulness of processing that occurred prior to withdrawal.
6 How We Use Your Data
nfast11 uses your Personal Data for the following specific purposes:
- Account Administration: To create, maintain, and manage your Account, including processing deposits and withdrawals in MYR via your chosen payment method, applying VIP tier benefits, and managing bonus entitlements.
- Identity Verification & Compliance: To verify your identity, confirm your age (21+), confirm your eligibility to use the Platform, and satisfy our AML, KYC, and licensing compliance obligations.
- Service Delivery: To provide access to casino games (including live dealer tables powered by Evolution Gaming and Pragmatic Play), sports betting markets (EPL, Liga Super Malaysia, UFC, and others), and all other Platform features.
- Payment Processing: To process and record all financial transactions — deposits via GrabPay, Touch 'n Go eWallet, Boost, DuitNow, FPX, or cryptocurrency; and withdrawals to verified Malaysian bank or e-wallet accounts.
- Responsible Gambling: To monitor your gaming activity for patterns that may indicate problem gambling behaviour; to administer your self-imposed deposit limits, loss limits, session reminders, and self-exclusion requests; and to comply with our responsible gambling obligations under our licence.
- Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, money laundering, bonus abuse, identity fraud, and unauthorised account access — including by cross-referencing your data with fraud detection databases.
- Customer Support: To respond to your queries, complaints, and support requests received via live chat, email, or other channels.
- Marketing Communications (Consent-Based): Where you have consented, to send you promotional offers, personalised bonus recommendations, and Platform news via email or in-app notification. You may opt out at any time.
- Platform Improvement: To analyse aggregated usage patterns, improve Platform performance, develop new product features, and optimise the mobile web experience for Malaysian users.
- Legal Proceedings: To establish, exercise, or defend legal claims, or to respond to lawful requests from regulatory or law enforcement authorities.
7 Data Sharing & Disclosure
nfast11 does not sell your Personal Data to third parties under any circumstances. We do not monetise your data through data broker relationships or behavioural advertising networks. We share your Personal Data only in the following limited circumstances:
- Payment Service Providers: Transaction data is shared with the relevant payment provider (e.g., GrabPay, Touch 'n Go eWallet, Boost, DuitNow, FPX, Maybank, CIMB, Public Bank) to process deposits and withdrawals. These providers process your data under their own privacy policies and applicable financial regulations.
- KYC & Identity Verification Providers: Identity documents and verification data are shared with contracted third-party KYC service providers solely for the purpose of verifying your identity and age in compliance with our licensing obligations. These providers act as Data Processors under binding data processing agreements with nfast11.
- Game Software Providers: Limited technical session data (e.g., session tokens, wager amounts) is shared with game providers (Evolution Gaming, Pragmatic Play, Playtech, and others) to deliver their game products within the Platform environment.
- Fraud Detection & AML Partners: Technical and transaction data may be shared with contracted fraud detection and AML screening services to identify and prevent financial crime. These providers operate under strict confidentiality obligations.
- Regulatory and Law Enforcement Authorities: We may disclose Personal Data where required to do so by law, court order, regulatory direction, or other binding legal instrument. We will notify you of such disclosures where we are legally permitted to do so.
- Corporate Transactions: In the event of a merger, acquisition, restructuring, or sale of all or part of nfast11's business, your Personal Data may be transferred to the acquiring entity as part of that transaction, subject to equivalent data protection commitments.
- Professional Advisers: Lawyers, auditors, and insurance providers engaged by nfast11 may access Personal Data to the extent necessary to carry out their professional functions, subject to professional confidentiality obligations.
8 Data Retention
nfast11 retains your Personal Data only for as long as is necessary for the purposes for which it was collected, or as required to satisfy applicable legal, regulatory, or licensing obligations. The following indicative retention periods apply:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account & Identity Data | Duration of Account plus 5 years after closure | Licensing obligation; AML compliance; dispute resolution |
| Financial Transaction Records | 7 years from transaction date | AML regulatory requirement; audit trail |
| KYC Verification Documents | Duration of Account plus 5 years after closure | Licensing and AML compliance |
| Game & Betting Records | Duration of Account plus 3 years after closure | Dispute resolution; responsible gambling monitoring |
| Customer Support Communications | 3 years from the date of the communication | Complaint handling; legal claims |
| Technical & Log Data | 12 months on active systems; archived up to 3 years | Security; fraud investigation |
| Marketing Preference Data | Until consent is withdrawn or Account is closed | Consent; legitimate interest |
Upon expiry of the applicable retention period, Personal Data will be securely deleted or irreversibly anonymised in accordance with our internal data disposal procedures. Anonymised or aggregated data that cannot be used to identify you may be retained indefinitely for statistical and analytical purposes.
9 Cookies & Tracking Technologies
nfast11 uses cookies and similar browser-based tracking technologies to support the operation of the Platform and to understand how it is used. The following categories of cookies are employed:
- Strictly Necessary Cookies: These cookies are essential for the Platform to function. They maintain your login session, remember your Account preferences, and enable secure transactions. These cookies cannot be disabled without impairing core Platform functionality.
- Analytics Cookies: These cookies collect aggregated, anonymised data about how users navigate the Platform — including pages visited, time on site, and device type. This information is used to improve the Platform's performance and user experience. Analytics cookies are not linked to your identity.
- Functional Cookies: These cookies remember your preferences and settings — such as your preferred language, notification settings, and responsible gambling configurations — to provide a personalised experience across sessions.
- Marketing Cookies (Consent Required): Where you have consented, marketing cookies may be used to track which promotional communications you have interacted with and to avoid showing you the same offer repeatedly. These cookies will not be placed without your prior consent, which you may withdraw at any time.
You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will affect Platform functionality. For full information on managing cookies in your browser, consult your browser's help documentation.
10 Data Security
nfast11 implements a range of technical and organisational security measures designed to protect your Personal Data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include:
- 256-bit SSL/TLS encryption for all data transmitted between your device and our servers
- Encrypted storage of sensitive Personal Data and financial records at rest
- Two-factor authentication (2FA) available to all Account holders — strongly recommended
- Role-based access controls limiting staff access to Personal Data to those with a specific operational need
- Regular security audits and penetration testing of the Platform's infrastructure
- Segregated storage of player funds from operational accounts, with independent reconciliation
- Incident response procedures for the identification, containment, and reporting of personal data breaches
While we maintain industry-standard security practices, no internet-based platform can guarantee absolute security. You are responsible for maintaining the security of your own Account credentials. We strongly recommend enabling 2FA and using a unique, strong password for your nfast11 Account. If you suspect any unauthorised access, contact support immediately.
11 Your Rights
Subject to applicable law and the limitations described below, you have the following rights in relation to your Personal Data held by nfast11. To exercise any of these rights, please contact us using the details in Section 15.
nfast11 will respond to all verified rights requests within 30 days of receipt. Where a request is complex or involves a large volume of data, this period may be extended by a further 30 days, in which case we will notify you of the extension and the reasons for it.
We may ask you to verify your identity before processing a rights request to prevent fraudulent or unauthorised access to another person's data.
Right of Access
You have the right to request a copy of the Personal Data we hold about you, along with information about how it is being processed. We will provide this in a structured, commonly used format.
Right to Rectification
If any Personal Data we hold about you is inaccurate or incomplete, you have the right to request that we correct it without undue delay. You can also update basic contact details directly from your Account settings.
Right to Erasure
You may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected. This right does not apply where we are required to retain the data for legal or regulatory compliance purposes.
Right to Restriction
In certain circumstances, you have the right to request that we restrict the processing of your Personal Data — for example, while you contest its accuracy or where you object to processing based on legitimate interest.
Right to Data Portability
Where processing is based on your consent or on contractual necessity, and carried out by automated means, you have the right to receive your Personal Data in a structured, machine-readable format.
Right to Object
You have the right to object to processing based on legitimate interest, including profiling for marketing purposes. You may also withdraw consent for marketing communications at any time. We will cease that specific processing upon receipt of your objection, unless we can demonstrate compelling legitimate grounds.
12 Minors & Age Verification
nfast11 is strictly prohibited from processing the Personal Data of individuals under the age of 21 years in connection with gambling services. The Platform is not directed at minors, and we do not knowingly collect, store, or process the Personal Data of any person below the minimum age requirement.
All Account registrations are subject to mandatory age verification as part of our KYC process. Players must provide valid government-issued identification — such as a Malaysian MyKad or international passport — confirming that they are at least 21 years of age. Accounts where age verification cannot be satisfactorily completed will be suspended pending resolution.
If we become aware that we have inadvertently collected Personal Data from a person under the age of 21, we will take immediate steps to delete that data and close the associated Account. Any deposits made by a minor will be returned to their verified source. If you believe a minor has registered on our Platform, please contact us immediately at [email protected].
13 International Data Transfers
nfast11 operates under an international licence and uses cloud infrastructure and third-party service providers whose servers may be located outside Malaysia. As a result, your Personal Data may be transferred to, stored in, and processed in jurisdictions other than your country of residence.
Where Personal Data is transferred outside Malaysia, nfast11 takes appropriate safeguards to ensure that your data receives a level of protection substantially equivalent to that which it would receive within Malaysia. These safeguards may include:
- Standard contractual clauses or equivalent data transfer agreements between nfast11 and the recipient entity
- Transfers only to jurisdictions or recipients that provide an adequate level of data protection as assessed by applicable regulatory standards
- Binding corporate rules where data is transferred within an associated group of companies
You may request further information about the specific safeguards applicable to international transfers of your Personal Data by contacting us using the details in Section 15.
14 Changes to This Privacy Policy
nfast11 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, applicable legal requirements, or the services we offer. Where changes are material — particularly where they affect the nature or scope of how we process your Personal Data — we will provide reasonable prior notice to registered Players via email or through a prominent notice on the Platform.
The "Last updated" date at the top of this page will always reflect the date of the most recent revision. Your continued use of the Platform following the publication of an updated Privacy Policy constitutes your acknowledgment of the revised version. If you object to any changes, you should cease using the Platform and may request account closure in accordance with our Terms and Conditions.
We encourage you to review this Policy periodically. Archived versions of previous Privacy Policies are available upon written request to our Data Protection contact.
15 Contact & Data Requests
If you wish to exercise any of the rights described in Section 11, raise a concern about our data processing practices, request further information about this Policy, or submit a formal data subject access request, please contact us using the following details:
Email: [email protected] (plain text — not a clickable link)
Subject line for data requests: "Data Privacy Request — [Your Account Username]"
Response Time: We will acknowledge your request within 3 business days and aim to resolve it within 30 days of receipt.
Support Hours: 24 hours a day, 7 days a week
When submitting a data subject request, please provide your Account username and the email address registered to your Account so that we can verify your identity and locate your records efficiently. We may request additional verification documentation to protect against fraudulent data requests.
If you are not satisfied with how nfast11 has handled your Personal Data or responded to a privacy concern, you have the right to lodge a complaint with the relevant data protection authority in your jurisdiction. For Malaysian players, this is the Department of Personal Data Protection (JPDP) under the Ministry of Digital, Malaysia.
For general questions about your Account, payments, or Platform features, please visit our FAQ page or contact our 24/7 live support team. For responsible gambling resources and self-exclusion requests, please visit our Responsible Gambling page.
Our Privacy Commitments
How nfast11 Protects Your Data
Six ways nfast11 puts your privacy at the centre of how we operate — not just in the policy document, but in practice.
256-bit SSL Encryption
All data transmitted between your device and nfast11's servers is protected by 256-bit SSL/TLS encryption — the same standard used by Malaysian banks for online transactions. Your Personal Data is never transmitted in plain text.
No Data Selling
nfast11 does not sell, rent, or trade your Personal Data to third-party data brokers, advertising networks, or any other commercial entity. Your data is used only to provide and improve the services you have contracted for.
Your Rights, Respected
You can request access to, correction of, restriction of, or deletion of your Personal Data at any time. We will respond to verified rights requests within 30 days and will never charge a fee for standard rights requests.
Defined Retention Limits
We do not keep your data indefinitely. Every category of Personal Data has a defined retention period mapped to its legal and operational purpose. When that period expires, the data is securely deleted or irreversibly anonymised.
Processor Accountability
Every third-party Data Processor we engage — from KYC providers to payment partners — is bound by a written data processing agreement requiring them to maintain security standards equivalent to our own and to process data only on our documented instructions.
Breach Notification
In the unlikely event of a personal data breach that poses a risk to your rights and freedoms, nfast11 has incident response procedures in place to identify, contain, and notify affected players without undue delay, in accordance with applicable legal requirements.
Play with Confidence on nfast11
nfast11 is built around transparency — in our bonus terms, our withdrawal timelines, and how we handle your personal data. For Malaysian players aged 21 and above who value a platform that respects their privacy.
For players aged 21 and above only. Gamble responsibly. nfast11 operates under international licensing.