🔒 NAGA WIN OFFICIAL PRIVACY POLICY
Updated: 1 January 2026 In compliance with Malaysia's PDPA 2010

Naga Win Privacy Policy – Malaysian Players' Personal Data Protection Guaranteed

Your privacy is more than a legal obligation to Naga Win — it is a moral responsibility we take seriously. This policy transparently explains how we collect, use, store, and protect your personal information in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA). Please read it carefully before using our platform.

Naga Win's 7 Data Protection Principles

Naga Win adheres to the seven data processing principles set out in Malaysia's Personal Data Protection Act 2010.

🎯
General Principles

Your personal data is only processed with your consent or on a valid legal basis. We do not process data without a clear and legitimate purpose.

Section 5 PDPA
📌
Purpose Limitation Principle

Data is collected only for specific, explicit, and legitimate purposes — namely account operations, transaction processing, and Naga Win service improvement.

Section 6 PDPA
✂️
Purpose Limitation Principle

Personal data will not be disclosed to third parties for any purpose other than the original purpose for which it was collected, except with your consent or as required by law.

Section 7 PDPA
Data Quality Principle

Naga Win ensures that stored data is accurate, complete, and up to date. You may update your personal information at any time through your account settings.

Section 8 PDPA
🔒
Security Principle

Appropriate technical and organisational security measures are in place to prevent unauthorised access, loss, damage, or disclosure of personal data.

Section 9 PDPA
👁️
Transparency Principle

Naga Win is transparent about its data processing policies and practices. You have the right to know what data we hold about you and how it is used.

Section 10 PDPA
🤝
Access & Correction Principle

You have the right to access the personal data Naga Win holds about you and to request corrections for any inaccuracies within a reasonable timeframe.

Section 12 PDPA
1

Introduction & Scope of This Policy

Naga Win ("we", "our platform") values the privacy of every user who registers and uses the nagawin.run platform. This Privacy Policy outlines our practices for collecting, using, storing, and disclosing your personal information in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and related legislation.

This policy applies to all individuals who use the Naga Win platform, including unregistered visitors, registered members, participants in any promotion or contest, and anyone who contacts our support team. It covers all methods of accessing the platform — whether via the website, mobile app, or any other channel we may make available in the future.

By registering a Naga Win account, you confirm that you have read, understood, and agreed to this Privacy Policy. If you do not agree, please discontinue use of our platform. For privacy-related enquiries, contact us at support@nagawin.run.

This policy should be read together with Terms and Conditions Naga Win. In the event of any overlap or conflict between the two documents regarding privacy matters, this Privacy Policy shall take precedence.

2

Types of Personal Data We Collect

Naga Win collects various types of data depending on how you interact with our platform. Below are the categories of data we collect and the purposes for which they are collected:

Data CategoriesExample InformationPurpose of Collection
Identity DataFull name, date of birth, gender, identity card number (MyKad)Identity verification (KYC), legal compliance
Contact DataEmail address, phone number, residential addressAccount communications, transaction notifications, customer support
Financial DataBank account number, eWallet details (TnG, GrabPay, DuitNow), transaction historyProcessing deposits and withdrawals, AML compliance
Game DataBetting history, wins, losses, game preferencesAccount management, risk analysis, responsible gambling
Technical DataIP address, device type, operating system, web browser, approximate locationAccount security, fraud detection, platform improvement
Behavioural DataPages visited, time spent, product preferences, click patternsPersonalising your experience, usage analytics

We do not collect data beyond what is necessary for the stated purposes. Should you decline to provide certain mandatory data (such as KYC information), we may be unable to process your withdrawals or grant full access to all platform features.

3

How We Use Your Data

The personal data you provide to Naga Win is used for the following purposes, all of which are lawful under Malaysian law:

  • Account Management: Registering, verifying, and maintaining your account; processing deposits and withdrawals via Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, and FPX
  • Service Delivery: Enabling you to play slots, live casino, Sports Betting, badminton, e-sports, and all other games on the Naga Win platform
  • Legal Compliance: To fulfil obligations under PDPA 2010, anti-money laundering laws (AMLA), KYC requirements, and directives from relevant authorities
  • Platform Security: Detecting and preventing fraud, account misuse, collusion, and multiple account usage
  • Service Communications: Sending transaction notifications, security alerts, terms updates, and important account information
  • Responsible Gambling: Monitoring gameplay patterns to identify signs of problem gambling and recommend appropriate support tools
  • Service Improvement: Analysing usage patterns to improve the platform's interface, performance, and overall user experience
  • Marketing (with consent): Sending information about promotions, welcome bonuses, VIP rewards, and special offers where you have consented to receive them
Note: You may opt out of marketing communications at any time by clicking the "unsubscribe" link in any promotional email or by contacting the Naga Win support team. Opting out will not affect the receipt of important transactional emails.
4

Data Retention & Security Measures

Naga Win employs multiple layers of technical and organisational security measures to protect your personal data against unauthorised access, loss, damage, alteration, or disclosure:

  • 256-bit SSL Encryption for all data transmitted between your device and Naga Win's servers
  • Data encryption at rest — all sensitive data is stored in encrypted format within secure databases
  • Role-based access control — only authorised staff may access personal data, and only to the extent required for their duties
  • 24/7 Monitoring by automated security systems to detect suspicious activity
  • Regular security audits by an independent third party to assess the effectiveness of our protection measures
  • Incident response protocol to address any data breach promptly and decisively

Naga Win servers are housed in certified, secure data centres. We use automated backup systems to prevent data loss. However, no security system can be guaranteed to be 100% secure. In the event of a data breach involving your personal data, Naga Win will notify you within the timeframe prescribed by Malaysian law.

If you suspect your account has been accessed without authorisation: Contact the Naga Win support team immediately via Live Chat or email at support@nagawin.run. We will freeze your account right away while an investigation is carried out.
5

Data Disclosure to Third Parties

Naga Win does not sell, rent, or trade your personal data to third parties for their marketing purposes. However, we may share your data with the following parties under limited circumstances and for legitimate purposes:

  • Malaysian Payment Providers: Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, FPX (Maybank2u, CIMB Clicks) — to process your financial transactions
  • Game Providers: Pragmatic Play, PG Soft, Habanero, Microgaming, and others — data is limited to technical game operation purposes only
  • Technical Service Providers: Hosting, analytics, and cybersecurity providers that support the operation of our platform
  • Malaysian Authorities: Bank Negara Malaysia, PDRM, Suruhanjaya Syarikat Malaysia (SSM), or any relevant authority when required by law or court order
  • Audit & Compliance Firms: For external audit purposes, security assessments, and legal compliance

All third parties with whom we share data are required to uphold data protection standards equivalent to or higher than our own. Legally binding data protection agreements are in place with all service providers that handle the personal data of Naga Win members.

6

Cross-Border Data Transfers

Some third-party service providers used by Naga Win may operate or store data outside Malaysia. Where cross-border data transfers are required, Naga Win ensures that:

  • The recipient country provides a level of data protection that is adequate or equivalent to Malaysia's
  • Appropriate data transfer agreements have been established with recipient parties
  • Adequate technical safeguards are in place for all data transfers
  • Transfers are carried out only to the extent necessary for the stated service purposes
Your rights: You may request information about which third parties your data has been shared with by contacting the Naga Win support team. Such requests will be processed within 21 business days.
7

Cookies & Tracking Technologies

The Naga Win platform uses cookies and similar tracking technologies to enhance the user experience and analyse platform usage. The following are the types of cookies we use:

Cookie TypesPurposeDuration
Essential CookiesEnables core platform functions such as login, game sessions, and account security. Cannot be disabled.Session / 30 days
Performance CookiesCollects anonymised data on how visitors use the platform to help us improve performance.90 days
Functional CookiesSaving your preferences such as language, region, and display settings for a more personalised experience.1 year
Analytics CookiesHelping us understand usage patterns, popular pages, and user flows for continuous improvement.90 days

You can manage or delete cookies through your web browser settings. However, disabling certain cookies may affect platform functionality. Essential cookies cannot be disabled as they are required for the basic operation of the Naga Win platform.

8

Sensitive Data & KYC Process

As a platform subject to Malaysia's anti-money laundering laws, Naga Win is required to carry out Know Your Customer (KYC) procedures for certain users. Documents that may be requested include:

  • Copy of Malaysian identity card (MyKad) — front and back
  • Selfie with MyKad (for digital identity verification)
  • Latest bank statement or eWallet transaction slip (for payment method verification)
  • Proof of residential address (utility bill or bank statement dated within the last 3 months)

All KYC documents you submit are handled with the highest level of security. They are stored in encrypted systems, accessible only by specially trained compliance personnel, and will not be shared with any third party unless required by Malaysian law.

Security Assurance: Naga Win does not store identity card images in machine-readable format on the same server as game data. All sensitive documents are kept in separate systems protected by additional encryption.
9

Your Rights Under PDPA 2010

As an individual whose data is processed by Naga Win, you have the following rights under Malaysia's Personal Data Protection Act 2010. Naga Win is committed to respecting and facilitating the exercise of these rights:

  • Right of Access: Request a copy of the personal data we hold about you in a readable format
  • Right to Correction: Request correction of inaccurate or incomplete data
  • Right to Restriction: Request the deletion of your data in certain circumstances (this right is limited to data not required for legal compliance)
  • Right to Object: Object to the processing of your data for direct marketing purposes at any time
  • Right to Withdraw Consent: Withdraw your consent to data processing in cases where consent is the basis for processing
  • Right to Data Portability: Receive your data in a structured format for transfer to another platform (where technically feasible)

To exercise any of the above rights, send a written request to support@nagawin.run with the subject line "Data Privacy Rights Request". Include your full name, account number, and the specific right you wish to exercise. We will process your request within 21 business days. Naga Win will not charge a fee for the first request made each year.

10

Data Retention & Deletion

Naga Win does not retain your personal data for longer than is necessary for the stated purposes or as required by Malaysian law. The following are our data retention guidelines:

Data TypeRetention PeriodReason
Identity & KYC Data7 years after account closureMalaysia AMLA Compliance
Financial Transaction Records7 yearsAccounting & audit requirements
Game History5 yearsDispute resolution, responsible gaming
Communication Logs3 yearsComplaint resolution, customer support
Technical Data (IP Logs)1 yearSecurity, fraud detection
Analytics Cookie Data90 daysPlatform usage analytics

Once the retention period expires, data will be securely deleted using methods that ensure it cannot be recovered. For data retained for legal reasons, we are unable to fulfil deletion requests until those legal obligations have been discharged.

11

Child Protection

The Naga Win platform is strictly for users aged 21 and above. We do not knowingly collect personal data from individuals under the age of 21. Should we discover that a minor's personal data has been collected without the knowledge of a parent or lawful guardian, we will take the following steps immediately:

  • Suspending the account in question immediately
  • Delete all related personal data from our systems as promptly as practicable
  • Returning any remaining balance to the original payment method
  • Reporting the matter to the relevant authorities where necessary

If you are a parent or guardian who believes your child has accessed the Naga Win platform without authorisation, please contact us immediately at support@nagawin.run. We will treat your report as the highest priority.

12

Policy Amendments & Contact Privacy Officer

Naga Win reserves the right to amend this Privacy Policy at any time to reflect changes in our practices, new legal requirements, or technological developments. For any material amendments, we will notify members at least 14 days before the amendment takes effect, via your registered email and in-platform notifications.

The "Updated" date at the top of this Policy reflects the latest version. We recommend reviewing this Policy periodically to stay informed about how we protect your data.

For any questions, concerns, or complaints regarding your data privacy at Naga Win, please contact our Data Privacy Officer:

  • Email: support@nagawin.run (subject: "Privacy Policy Enquiry")
  • Live Chat: Available 24/7 on the Naga Win platform
  • Response time: Within 3 business days for general enquiries; 21 business days for formal data rights requests
  • Service language: Bahasa Malaysia & English
Complaint to the Malaysian Communications and Multimedia Commission (SKMM): If you are dissatisfied with how Naga Win has handled your personal data after contacting us, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia or SKMM through the relevant official channels.

Your Privacy Rights at a Glance

Six key rights you hold as a Naga Win user under Malaysia's PDPA 2010.

Right to Know

You have the right to know what data we collect, how it is used, and who it is shared with. We are fully transparent about our data handling practices.

Right to Data Access

Request a copy of all personal data we hold about you at any time. We will provide a full report within 21 business days.

Right to Rectification

Found an inaccuracy in your account? You can update it yourself or request a correction through our support team, free of charge.

Right to Object to Marketing

Prefer not to receive promotional emails or bonus offers? You can opt out of all Naga Win marketing communications easily and instantly.

Right to Erasure

Under certain circumstances, you may request the deletion of your personal data. This right is subject to data retention obligations under Malaysian law.

Right to Lodge a Complaint

Not satisfied? Contact Naga Win's Privacy Officer or file a complaint directly with the Department of Personal Data Protection Malaysia through the official channels.

🔒 Your Data Is Safe, Your Gaming Experience Is Protected

Naga Win places the privacy and security of your data at the heart of everything we do. Register today and enjoy a responsible, safe, and transparent Malaysian digital entertainment platform.

256-bit SSL
Compliance with PDPA 2010
No Data Selling
24/7 Privacy Officer
Bahasa Melayu