Privacy Policy NagaWin

1 Introduction

NagaWin ("we", "our platform") is committed to protecting the privacy and security of every member's personal data on the nagawin.my platform and our mobile app. This Privacy Policy is drafted in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and international data protection best practices.

This document transparently explains the types of information we collect, the purposes for collection, how we protect it, and the rights you hold over your own personal data. We believe transparency is the foundation of trust, and member trust is something we take seriously.

By registering an account or using any NagaWin service, you agree to the terms set out in this Privacy Policy. If you do not agree, please stop using the platform and contact us to request account deletion.

2 Information We Collect

NagaWin collects various types of information depending on how you interact with our platform. Generally, there are two main categories of data we manage:

A. Information You Provide Directly

• Registration Information: Full name, date of birth, gender, mobile number, email address, and account password.
• Identity Verification (KYC) Information: A copy of your identity card (MyKad), passport, or other valid identification document, along with proof of current residential address.
• Financial Information: Bank account number, bank name, and e-wallet details (Touch 'n Go, GrabPay) registered for deposit and withdrawal purposes.
• Communications: The content of messages, complaints, or feedback you send to our support team via Live Chat or email.

B. Information Collected Automatically

• Technical Data: IP address, device type, operating system, browser type and version, screen resolution.
• Usage Data: Pages visited, session duration, games played, betting records and in-platform transactions.
• Location Data: General geographic location based on IP address for regional compliance and security purposes.
• Cookie Data: Session information, user preferences, and analytics data collected through cookies and similar technologies.

3 How We Use Your Data

Every piece of information we collect is used for specific and legitimate purposes. We do not use your data for any purpose other than those stated below:

• Account Management: Creating, verifying, and maintaining your member account, including registration processing and KYC identity verification.
• Transaction Processing: Processing deposits and withdrawals securely, verifying payment method ownership, and maintaining transaction records.
• Platform Security: Detecting and preventing fraud, money laundering, unauthorized access, and any suspicious activity on the platform.
• Customer Support: Responding to inquiries, resolving complaints, and providing technical assistance to members.
• Legal Compliance: Meeting reporting and compliance obligations under applicable Malaysian laws, including PDPA 2010.
• Service Improvement: Analyzing usage patterns to improve platform functionality, user experience, and game offerings.
• Marketing Communications: Sending information about promotions, bonuses, and platform updates — only to members who have agreed to receive such communications.
• Responsible Gaming: Monitoring wagering patterns to identify signs of problem gambling and provide timely early intervention.

4 Sharing Information with Third Parties

NagaWin takes a careful and limited approach to sharing member data. We only share your personal information in the following situations:

• Payment Service Providers: Required transaction data is shared with payment processors such as FPX, Touch 'n Go, and GrabPay solely for the purpose of securely processing your transactions.
• Game Providers: Minimum required information is shared with game software providers to allow you to access and play games on the platform.
• Cloud Services & Infrastructure: Data is stored on secure cloud servers. Our infrastructure providers are bound by strict confidentiality agreements.
• Legal Requirements: We will disclose information if required by a court order, law enforcement investigation, or legitimate regulatory compliance requirement.
• Rights Protection: In cases where disclosure is required to protect the rights, property, or safety of NagaWin, our members, or the public.

All third parties we work with are bound by strict data protection obligations and are only permitted to use your information for agreed purposes. We never sell or rent member personal data to any party for third-party advertising or marketing purposes.

5 Data Security

NagaWin continuously invests in the latest security infrastructure to ensure your data is always protected from unauthorized access, loss, or misuse.

• 256-bit SSL Encryption: All communications between your device and nagawin servers are secured with the same high-level encryption used by banking institutions.
• Secure Data Storage: Personal and financial data is stored in protected databases with layered access controls and continuous monitoring.
• Two-Factor Authentication (2FA): Members are encouraged to enable 2FA to add an extra layer of security to their accounts.
• Regular Security Audits: Our platform undergoes regular penetration testing and security audits by independent parties to identify and address any vulnerabilities.
• 24/7 Monitoring: Our threat detection system operates 24/7 to detect any suspicious activity in real time.

6 Cookies & Tracking Technologies

NagaWin uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

We use several types of cookies for different purposes:

• Essential Cookies: Required for core platform functions such as login authentication and session security. These cookies cannot be disabled.
• Performance Cookies: Collecting information about how you use the platform (pages visited, time on page) to help us improve our services. All data is collected anonymously.
• Functional Cookies: Remembering your preferences such as language, display settings, and login details to deliver a more personalized experience.
• Analytics Cookies: Used to understand overall platform usage patterns for ongoing development and improvement.

You can manage your cookie settings through your web browser at any time. Please note that disabling certain cookies may affect the functionality of some parts of our platform.

7 Your Rights Over Personal Data

As a nagawin member, you have certain rights regarding your personal data under Malaysia's Personal Data Protection Act 2010. We fully respect and support the exercise of these rights:

To exercise any of the above rights, contact our privacy team via Live Chat or email at [email protected]. We will respond to your request within 14 business days.

8 Data Retention & Deletion

NagaWin retains members' personal data only for as long as necessary to fulfill the original purpose of collection or as required by law. The following are our general data retention guidelines:

• Active Account Data: Retained for the duration your account is active, plus the mandatory retention period following account closure.
• Financial Transaction Records: Retained for a minimum of 7 years in accordance with Malaysian legal requirements relating to financial records and anti-money laundering.
• Security Logs: Retained for 12 months for fraud detection and security investigation purposes.
• Support Communication Data: Retained for 3 years from the date of last interaction.
• Marketing Data: Deleted within 30 days after you withdraw consent to receive marketing communications.

When data is no longer needed and there is no legal obligation to retain it, we will securely delete or anonymise the information using industry-recognised procedures.

9 Children's Privacy

The nagawin platform is strictly for adults aged 18 and above. We do not knowingly collect any personal information from individuals under the age of 18.

If we discover that personal data of a minor under age has been collected without our knowledge, we will take immediate steps to delete that information and close the relevant account. Parents or guardians with concerns about this matter are encouraged to contact us promptly.

10 Changes to This Privacy Policy

NagaWin reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or platform improvements. Any material changes will be communicated to members via a prominent notice on our website or by email at least 14 days before the changes take effect.

The "Last Updated" date at the top of this document will be updated whenever changes are made. We encourage you to review this page periodically. Your continued use of the nagawin platform after any changes take effect constitutes your acceptance of the revised Privacy Policy.

11 Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please contact us through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week — the fastest way to get an immediate response.
• Privacy Email: [email protected] — dedicated to data protection and privacy-related enquiries.
• General Support Email: [email protected]
• FAQ: Visit page FAQ us for answers to common enquiries.

Our privacy team is committed to responding to all data-related inquiries within 14 business days. For more urgent matters, please use Live Chat so we can assist you faster.