Privacy Policy Nagabet –
Malaysian Player Data Protection

This Privacy Policy is published by Nagabet Entertainment Group ("Nagabet", "we", "us") and describes how we manage the personal data of users on the nagabet.world platform, including all subdomains, mobile applications, and related services.

We understand that sharing personal information with any online platform requires a great deal of trust. Nagabet takes this responsibility seriously. This document is written in plain, easy-to-understand language — not confusing legal jargon — so you truly know what happens with your data.

By registering for or using the services Nagabet, you agree to the collection and use of data as described in this policy. If you do not agree, please stop using our platform and contact us to close your account and delete your data.

2.1 Data You Provide Directly

When you register or use the services of Nagabet, you provide us with the following data:

• Identity information: Full name as per MyKad, date of birth, identification card number
• Contact information: Email address, Malaysian phone number, residential address
• Financial information: Bank account name, account number (for withdrawals), eWallet details (Touch 'n Go, GrabPay, ShopeePay, Boost, DuitNow)
• Verification documents: MyKad copy, bank statement, utility bill (for KYC process)
• Account information: Username, password (stored in encrypted hash format)

2.2 Automatically Collected Data

When you use the Nagabet, our systems automatically collect:

Nagabet use collected data solely for legitimate, stated purposes. The following are the primary purposes for which your data is used:

• Account management: Creating and managing your nagabet account, processing logins, and ensuring account security
• Transaction processing: Processing deposits via Touch 'n Go eWallet, GrabPay, DuitNow, FPX, and other Malaysian payment methods; processing withdrawals to your bank account or eWallet
• Identity verification (KYC): To comply with anti-money laundering (AML) legal requirements and verify player identity
• Customer support: Responding to enquiries, resolving complaints, and providing technical assistance
• Platform security: Detecting and preventing fraud, multi-accounting, and suspicious activity
• Product improvements: Analysing usage patterns to improve game quality and user experience
• Marketing communications: To send relevant promotional information and offers (subject to your consent)
• Legal compliance: Meeting applicable Malaysian legal reporting and compliance requirements

Nagabet does not sell your personal data. However, in the course of operating the platform, we may share data with certain third parties in the following circumstances:

4.1 Service Providers

We work with service providers that help us operate the platform, including payment processors (Touch 'n Go, GrabPay, DuitNow, FPX), licensed game providers (Pragmatic Play, Evolution Gaming, Habanero), and server hosting providers. All third parties are bound by strict data protection agreements.

4.2 Legal Requirements

We may disclose your data to Malaysian authorities where required by law, court order, or to assist in criminal investigations such as fraud or money laundering. Such disclosures are made only to the extent required by law.

4.3 Nagabet & User Protection

If we believe disclosure of data is necessary to protect rights, property, or safety Nagabet, our users or the general public, we may share relevant information with the appropriate parties.

Nagabet implement a range of technical and organisational security measures to protect your personal data from unauthorised access, loss, destruction, or disclosure:

• 256-bit SSL Encryption: All data transmitted between your device and nagabet servers is encrypted using TLS 1.3 protocol
• Secure password storage: Passwords are stored in bcrypt hash format, which is irreversible — even Nagabet staff cannot read your password
• Two-factor authentication (2FA): Available to all accounts as an additional layer of security
• 24/7 Monitoring: Our security system monitors suspicious activity around the clock using artificial intelligence
• Internal access controls: Only relevant staff may access user data, strictly on a need-to-know basis
• Security audits: Regular security audits are conducted by independent third parties to identify and address vulnerabilities

While we take these measures, no system is 100% foolproof. In the event of a data breach that affects you, Nagabet will notify you within 72 hours via your registered email.

Nagabet uses cookies and similar tracking technologies to enhance your experience on our platform. Below are the types of cookies we use:

You can manage your cookie settings through your web browser. Please note that disabling essential cookies may affect the functionality of the Nagabet platform.

As a data subject under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by Nagabet:

To exercise any of the rights above, contact the Nagabet Data Protection Officer by email at privacy@nagabet.world or via live chat on the platform. We aim to respond to all requests within 14 working days.

Nagabet retain your personal data only for as long as necessary for the stated purposes or as required under Malaysian law:

• Active account data: For as long as your account is active and for a period of 7 years after account closure (anti-money laundering requirements)
• Transaction records: 7 years in accordance with Malaysian financial reporting and legal compliance requirements
• Support communication records: 2 years from the date of last communication
• Analytics cookie data: Maximum 13 months
• Security logs: 12 months for fraud detection and investigation purposes

Once the retention period expires, data is securely deleted or anonymised in accordance with procedures established by the Nagabet.

Primary server Nagabet is based in Malaysia. In some circumstances, data may be processed by service providers operating outside Malaysia (for example, international game providers such as Evolution Gaming, which operates from studios across multiple countries).

When this occurs, Nagabet ensure that:

• Data transfers only take place to countries or organisations that provide an equivalent level of data protection
• Appropriate data transfer agreements (including Standard Contractual Clauses) are in place
• Data transfers are limited strictly to what is necessary for service operations

Platform Nagabet may contain links to or integrations with third-party services such as payment providers (Touch 'n Go, GrabPay, DuitNow, FPX) and game providers. This Privacy Policy does not cover the privacy practices of those third parties.

We encourage you to read the privacy policy of each third-party service you use within the Nagabet platform. Nagabet is not responsible for the privacy practices or content of third-party websites or services.

Services Nagabet is intended solely for individuals aged 21 years and above. We do not knowingly collect personal data from minors.

If you become aware that someone under the age of 21 has registered for or is using the Nagabet, please contact us immediately at privacy@nagabet.world. We will take immediate steps to close the account and delete the relevant data.

Nagabet reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, technology, Malaysian legal requirements, or other legitimate reasons.

When we make material changes, we will:

• Updating the "Last Updated" date at the top of this document
• Sending email notifications to all registered members
• Displaying a clear notice on the Nagabet platform's main page

Continued use of the platform Nagabet after the effective date of such amendments will be considered acceptance of the updated policy. If you do not agree with the changes, you have the right to close your account and request deletion of your data.

If you have any questions, concerns or requests regarding this Privacy Policy or the handling of your personal data by Nagabet, please reach us through any of the following channels:

• Nagabet Data Protection Officer: privacy@nagabet.world
• General Support: support@nagabet.world
• Live Chat: Available 24/7 within the Nagabet platform
• Response time: Within 14 working days for all privacy inquiries

You also have the right to lodge a complaint with Malaysia Personal Data Protection Department (under the Ministry of Communications and Digital) if you believe your privacy rights have been violated by Nagabet.