Privacy Policy Nagabet – Data Protection
Your Privacy in Malaysia

Welcome to nagabet's Privacy Policy page. nagabet understands how important your privacy is to you, especially when it involves personal information and online financial transactions. This document is written in plain, straightforward language – not filled with confusing legal jargon – so you know exactly how we handle your data.

This Privacy Policy applies to all users who access, register for, or use nagabet's services through the nagabet.run website or any related platform. By using nagabet's services, you agree to the data collection and usage practices described in this document.

Nagabet operates in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA), the principal legislation governing the handling of individuals' personal data in Malaysia. We take our compliance obligations seriously and review our policies regularly to ensure they remain aligned with the latest legal requirements.

Nagabet only collects personal data that is necessary to provide you with a safe, seamless and quality service. We do not collect information that is irrelevant or excessive beyond what our services genuinely require.

2.1 Information You Provide Directly

• Registration information: Full name, Malaysian mobile number (for SMS verification), email address, and encrypted password.
• Identity verification information (KYC): National identity card number (MyKad) or passport, along with supporting documents when required for identity verification on withdrawals that exceed certain thresholds.
• Financial information: Your bank account number or e-wallet details (Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow) used for deposits and withdrawals. We do not store credit or debit card details directly – this is handled by our approved payment processors.
• Customer support information: Records of communications between you and the nagabet support team via live chat or email.

2.2 Automatically Collected Information

• Usage data: Pages you visit, games you play, session times and duration, and actions you take on the nagabet platform.
• Technical data: IP address, browser type, operating system, device model, screen resolution and language settings.
• Location data: General location based on your IP address for geographical compliance and account security purposes. We do not collect precise GPS location.
• Cookie and tracking technology data: As detailed in Section 6 (Cookie Policy).

Nagabet uses the personal data collected solely for legitimate purposes that are necessary for platform operations and to deliver a better service to you.

• Account management: To create, verify and manage your nagabet account, including processing logins, two-factor authentication and account recovery.
• Transaction processing: To process deposits via DuitNow, FPX (Maybank2u, CIMB Clicks), Touch 'n Go eWallet, GrabPay, Boost, and ShopeePay, as well as withdrawals of winnings to your Malaysian bank account.
• Fraud prevention & security: To detect and prevent fraudulent activity, money laundering, multi-account use, and any other misuse of the nagabet platform.
• Legal compliance (KYC/AML): To meet Malaysian legal compliance requirements relating to customer identification and anti-money laundering.
• Customer support: To identify you when you contact nagabet support and to provide effective, personalised assistance.
• Service improvement: Aggregated usage data (not individually identifiable data) is used to analyse usage trends, identify technical issues, and improve the overall nagabet user experience.
• Important communications: To send account-related notifications, transaction updates, security alerts, and changes to our terms. These are not marketing communications and cannot be fully unsubscribed from.
• Marketing communications (with consent): If you have consented to receive marketing communications, we may send you information about nagabet promotions, new bonuses and special offers. You may unsubscribe from marketing emails at any time.

Nagabet does not sell your personal data. However, there are limited circumstances where nagabet may need to share your data with carefully selected third parties, solely to ensure our services operate as intended.

4.1 Approved Service Providers

Nagabet works with third-party service providers that have signed strict data protection agreements. These include:

• Payment processors: To process deposits and withdrawals through Malaysia's payment networks (DuitNow, FPX, e-wallet) – only the information necessary to complete the transaction is shared.
• Game provider: Companies such as Pragmatic Play, Evolution Gaming, and others that provide games to the nagabet platform may receive session data necessary for the operation of those games.
• Analytics services: Aggregated and anonymised data is used for platform performance analytics.

4.2 Disclosures Required by Law

Nagabet may be required to disclose your personal data to Malaysian authorities where mandated by law, court order, or a legitimate regulatory body. This includes investigations related to fraud, money laundering, or other criminal offences.

Protecting your personal data is more than a legal obligation to nagabet — it is a moral responsibility we take seriously. We invest in the latest security technology and procedures to ensure your data remains safe at all times.

• Encryption in transit: All communications between your device and the nagabet platform are secured with TLS 1.3 protocol using AES-256 encryption, ensuring no third party can intercept your data in transit.
• Encryption at rest: Sensitive data such as passwords and financial information is stored in encrypted format using industry-recognised cryptographic algorithms. Your password cannot be read by anyone, including nagabet staff.
• Role-based access control: Only nagabet staff who require access to specific data to perform their duties are authorised to do so, with every access recorded in an audit log.
• Periodic security testing: nagabet conducts regular penetration testing and vulnerability assessments to identify and address potential security weaknesses before they can be exploited.
• Two-factor authentication (2FA): Nagabet encourages all members to enable two-factor authentication to add an extra layer of security to their accounts.
• Suspicious activity monitoring: nagabet's automated monitoring system continuously tracks accounts for unusual activity, such as logins from new locations or repeated failed access attempts.

Nagabet uses cookies and similar tracking technologies to enhance your experience on our platform, analyse performance, and ensure account security. Cookies are small text files stored on your device by your browser.

You can manage and delete cookies through your browser settings. However, disabling necessary cookies may affect certain features of the nagabet platform, such as the ability to remain logged in.

Nagabet does not retain your personal data longer than necessary for the stated purposes or as required under Malaysian law.

• Active account data: For as long as your nagabet account is active and following account closure, certain records are retained in accordance with legal compliance requirements.
• Financial transaction records: Retained for a minimum of 7 years in accordance with Malaysian tax legislation and financial compliance requirements.
• KYC records (identity verification): Retained for a minimum of 6 years after the business relationship ends, in accordance with Malaysia's Anti-Money Laundering Act requirements.
• Customer support communication logs: Retained for 3 years for reference and dispute resolution purposes.
• Platform activity logs: Technical data such as access logs is retained for 12 months for security and debugging purposes.

Once the relevant retention period expires, data is securely deleted or permanently anonymised so it can no longer be linked back to you.

As a data subject in Malaysia, you have certain rights under the Personal Data Protection Act 2010 regarding your personal data held by nagabet. Nagabet respects and facilitates the exercise of these rights.

The nagabet platform is intended solely for individuals aged 18 and above. nagabet does not knowingly collect, process, or store any personal data from anyone under the age of 18.

Should nagabet discover that personal data of a minor has been collected without proper age verification, we will take immediate steps to delete that data and close the account in question.

Nagabet encourages parents and guardians to install appropriate parental control software on devices shared with their children and to review browsing history regularly. If you believe your child has registered a nagabet account, please contact us immediately at support@nagabet.run so we can take the appropriate action.

Nagabet reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, Malaysian legal requirements, or new technological developments.

• Any changes to this Privacy Policy will be published on this page with an updated "Last Updated" date at the top.
• For significant changes that materially affect your privacy rights, nagabet will provide more prominent notice, such as via email to registered members or an in-platform notification.
• Continued use of the nagabet platform after changes are published will be deemed acceptance of those changes. If you do not agree with the changes made, you may close your nagabet account.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how nagabet handles your personal data, please reach out to us through the following channels: