NagaWin Privacy Policy – Malaysia User Data Protection

1. Introduction

Welcome to the nagawin Privacy Policy page. We understand that your personal information is a valuable asset, and we take our responsibility to protect it seriously. This policy is written in plain, straightforward language — not confusing legal jargon — so you know exactly what happens with your data.

Nagawin operates as an online betting platform serving users in Malaysia. In the course of these operations, we collect certain personal information necessary to provide our services, process financial transactions, and comply with applicable legal requirements. All our data processing activities are conducted in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA).

By registering and using the NagaWin platform, you agree that your information will be processed as described in this Privacy Policy. If you do not agree with any part of this policy, please contact our support team before continuing to use the platform.

2. Types of Data We Collect

Nagawin collects several categories of personal information to enable us to provide safe, fair, and efficient services. The data we collect falls into three main categories:

2.1 Identity & Account Information

This is the basic information required to create and verify your account:

• Full name as it appears on your identity document
• Malaysian Identity Card number (MyKad) or passport number
• Date of birth (for 18+ age verification)
• Current residential or mailing address
• Active mobile phone number
• A valid and active email address
• Photo of identity document (for KYC process)

2.2 Financial & Transaction Information

To enable deposits and withdrawals to be processed securely:

• Bank account details (account number and bank name)
• E-wallet details used (Touch 'n Go eWallet, GrabPay, and others)
• Deposit and withdrawal transaction history
• Records of betting activity and bonus eligibility fulfilment

2.3 Technical & Usage Data

The following information is collected automatically when you use the platform:

• IP address and geographic location information (state/city level)
• Device type, operating system, and web browser version
• Session data including login times, session duration, and pages visited
• Cookie data and device identifiers
• Technical error logs for troubleshooting purposes

3. How We Use Your Data

Every piece of data we collect has a specific and legitimate purpose. nagawin does not collect data for the sake of collecting it — every piece of information is used for a clear purpose that benefits you as a user.

3.1 Service Provision

Your information is used to create and manage your nagawin account, process deposits and withdrawals securely, verify your identity through KYC, and grant you access to all games and features available on our platform. Without this essential information, we are unable to provide a safe and responsible service.

3.2 Security & Fraud Prevention

Technical and transaction data is used by our automated monitoring systems to detect suspicious activity, prevent money laundering, and protect your account from unauthorised access. These systems run 24 hours a day in the background to keep your account secure at all times.

3.3 Legal Compliance

As a responsibly operated platform, nagawin is required to maintain certain records and provide information to relevant authorities when required by law. This includes reporting suspicious transactions to the appropriate agencies.

3.4 User Experience Improvement

Aggregated usage data (collected without identifying individuals) helps us understand how users interact with the platform, enabling us to improve the interface, introduce new features, and ensure optimal platform performance for all users in Malaysia.

4. Sharing Information with Third Parties

Nagawin does not share your personal information with third parties except in the limited, defined situations outlined below. Every third party we work with is bound by strict data protection agreements.

• Payment Processors: Required financial information is shared with licensed payment processors to enable deposits and withdrawals to be processed securely.
• KYC Services: Identity documents are shared with licensed third-party identity verification service providers for verification purposes only.
• Game Providers: Minimum required information (player ID, credit balance) is shared with licensed game providers to enable gameplay sessions.
• Authorities: Information will be disclosed to law enforcement agencies or regulatory authorities when legally required by court order or official directive.

5. Your Data Security

Protecting your data is a top technical and operational priority at nagawin. We continuously invest in security infrastructure to ensure your information remains protected against both external and internal threats.

5.1 Data Encryption

All data transmitted between your device and nagawin's servers is protected with 256-bit SSL/TLS encryption — the same standard used by leading banking institutions. Sensitive data stored in our database is also encrypted using modern encryption algorithms that cannot be broken without the correct key.

5.2 Access Controls

Access to user personal data within our organisation is strictly limited on a need-to-know basis. Staff may only access data required to perform their duties, and all access is logged and regularly audited. Two-factor authentication (2FA) is mandatory for all staff with access to user data systems.

5.3 Continuous Monitoring

Nagawin's security systems operate 24/7 to monitor any suspicious activity, intrusion attempts, or anomalies in data access patterns. In the event of any data security breach affecting your information, we will notify you within the timeframe required by law.

6. Cookies & Tracking Technologies

Nagawin uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device by your web browser when you visit our website.

6.1 Types of Cookies We Use

• Essential Cookies: Required for core platform functions such as maintaining your login session and account security. These cookies cannot be disabled.
• Performance Cookies: Helps us understand how users interact with the platform so we can improve performance and usability.
• Functional Cookies: Remembers your preferences such as language, display settings, and other choices to deliver a more personalized experience.
• Analytics Cookies: Used to collect aggregated usage data that helps us make data-driven decisions for platform improvements.

You can manage your cookie settings through your web browser settings at any time. However, disabling essential cookies may affect platform functionality and your ability to log in to your NagaWin account.

7. Your Rights as a User

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and NagaWin's internal policies, you have the following rights regarding your personal data. We are committed to facilitating the exercise of these rights without unnecessary barriers.

8. Data Retention Period

Nagawin does not retain your personal data longer than necessary. Retention periods depend on the type of data and applicable legal requirements:

• Active Account Data: Retained for the duration your account is active and for 5 years after account closure for audit and legal compliance purposes.
• Financial Transaction Records: Retained for 7 years in accordance with Malaysia's accounting and anti-money laundering (AML) legal requirements.
• KYC Documents: Retained for 5 years after the business relationship ends, or longer if required by the authorities.
• Technical & Security Logs: Retained for 12 months for security incident investigation purposes.
• Marketing Data: Retained until you withdraw consent or request deletion.

Once the retention period expires, your data will be securely deleted or permanently anonymised so it can no longer be linked back to your identity.

9. Changes to This Privacy Policy

Nagawin reserves the right to modify or update this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or technological developments. We are committed to notifying you of any material changes.

If significant changes are made to how we process your data, we will notify you via in-platform notification or email at least 14 days before the changes take effect. For minor changes that do not materially affect your privacy rights, we will update the "Last Updated" date at the top of this document.

10. Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, our team is ready to assist. We take every privacy-related inquiry seriously and are committed to providing thorough, timely responses.

• Data Protection Officer: [email protected]
• General Support: [email protected]
• Live Chat: Available 24/7 directly within the nagawin platform
• Email Response Time: Within 3 business days for privacy-related enquiries

If you are dissatisfied with our response, you have the right to file a complaint with the Malaysia Department of Personal Data Protection or the relevant regulatory authority.