Nagabet Privacy Policy – How We Protect the Personal Information of Malaysian Users

1Introduction and Scope of This Policy

This Privacy Policy ("Policy") describes Nagabet's ("we", "Platform") practices regarding the collection, use, processing, storage, and disclosure of personal information of users who register and use our online betting platform in Malaysia.

This Policy applies to all users who access Nagabet through our official website or mobile app. By using the Nagabet platform, you consent to the practices described in this Policy.

We comply with Malaysia's Personal Data Protection Act 2010 (PDPA) and relevant international data protection standards. Our commitment is to ensure your data is handled responsibly, securely, and transparently at all times.

2Types of Personal Data We Collect

Nagabet collects various categories of personal data depending on how you interact with our platform. Generally, the data we collect can be divided into three main categories:

Data you provide directly:

• Registration information — full name, date of birth, MyKad or passport number, nationality.
• Contact information — email address, mobile number, residential address.
• KYC verification documents — copy of MyKad, selfie photo, proof of address (if requested).
• Financial information — bank account number, account holder name, bank name.
• Communications with the support team — messages, emails, live chat logs.

Data collected automatically:

• Technical data — IP address, device type, device model, operating system, web browser version.
• Session data — login time and duration, in-platform activity, pages visited.
• Transaction data — records of all deposits, withdrawals, and bets placed.
• Location data — general location information based on IP address (not precise GPS).

3How We Collect Your Data

Your personal data is collected through several different channels when you interact with the Nagabet platform:

• Account registration — information you provide when creating a new account.
• KYC Process — identity verification documents you upload to verify your account.
• Platform usage — wagering activity, game preferences and in-platform interactions.
• Financial Transactions — information provided during deposits and withdrawals.
• Cookies and tracking technologies — data collected automatically as you browse our platform.
• Support communications — information you share when contacting our support team.
• Authorised Third Parties — identity verification from accredited KYC providers.

4How We Use Your Personal Data

Nagabet uses your personal data for the following purposes, all of which are closely related to the operation of the platform and the protection of our users:

1. Account management — creating, verifying and managing your user account.
2. Transaction processing — processing deposits, withdrawals and all other financial transactions securely and accurately.
3. Identity verification (KYC) — ensuring you meet legal requirements and protecting the platform against fraud.
4. Security and Fraud Prevention — detecting, investigating and preventing suspicious or unauthorised activity.
5. Legal compliance — fulfilling legal obligations including anti-money laundering (AML) requirements.
6. Service communications — sending important notifications related to your account, security and service updates.
7. Customer Support — providing technical assistance and resolving disputes effectively.
8. Service improvement — analysing aggregated usage data to improve the user experience.
9. Responsible Gaming — monitoring wagering patterns to identify users who may need assistance.

5Data Sharing With Third Parties

Nagabet do not sell, rent or trade your personal data to third parties. However, we may share your data in the following limited circumstances:

• Authorised service providers — payment processing companies, KYC verification providers and IT service providers that assist us in operating the platform. All such parties are bound by strict data protection agreements.
• Game providers — data required to allow you to play third-party games within our platform. Data shared is limited to technical requirements only.
• Authorities — when required by law, court order or a valid criminal investigation under Malaysian law.
• Business merger — in the event of a merger, acquisition or asset sale, where users will be notified in advance.

6Data Security Measures

The security of your personal data is Nagabet's top priority. We continuously invest in the latest security infrastructure to ensure your information remains protected at all times.

Technical security measures we have implemented:

• 256-bit SSL encryption for all data transmitted between your device and our servers.
• Data-at-rest encryption — sensitive data stored in our databases is encrypted to industry standards.
• Multi-layered access control — only authorised staff have access to user data, and all access is logged and audited.
• 24/7 security monitoring — a threat detection system operating around the clock to identify suspicious activity.
• Regular security testing — penetration testing and independent security audits are conducted periodically by third parties.
• Secure Data Centres — data is stored in high-grade data centres with strict physical and environmental controls.
• Two-factor authentication (2FA) — available to all user accounts for additional login protection.

7Cookies and Tracking Technologies

Nagabet uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

Types of cookies we use:

• Essential cookies — required for core platform functions such as login sessions and security preferences. These cookies cannot be disabled.
• Performance cookies — collecting information on how users use the platform to help us improve our services.
• Functional cookies — storing your preferences such as language, display settings and game choices.
• Session cookies — temporary cookies that are automatically deleted when you close your browser.

You can manage or delete cookies through your web browser settings. Please note that disabling certain cookies may limit the functionality of the Nagabet platform.

8User Rights Regarding Personal Data

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by Nagabet:

9Data Retention Period

Nagabet retains your personal data only for as long as necessary to fulfil the purposes stated in this Policy or as required by applicable Malaysia law.

• Active account data — retained for the duration your account remains active on nagabet.
• KYC and identity verification data — retained for a minimum of 7 years after account closure in accordance with AML legal requirements.
• Financial Transaction Records — retained for 7 years in accordance with accounting and tax legal requirements.
• Support communication logs — retained for 3 years for reference and dispute resolution purposes.
• Technical data and access logs — retained for 12 months for security purposes.

Once the retention period expires, data will be securely deleted using methods that ensure it cannot be recovered.

10Children's Data Protection

The nagabet platform is strictly for individuals aged 18 and above. We do not knowingly collect personal data from anyone under the age of 18.

Parents or guardians who find that their child has registered an account on Nagabet should contact our support team immediately at [email protected] for immediate action.

11Amendments to This Privacy Policy

Nagabet reserves the right to update or amend this Privacy Policy from time to time to reflect changes in data processing practices, new legal requirements, or improvements to our services.

When a material amendment occurs, we will:

• Updating the "Last Updated" date at the top of this page.
• Sending email notifications to all registered users regarding important changes.
• Displaying an in-platform notice for at least 7 days before changes take effect.

Continued use of the Nagabet platform after the effective date of any amendment constitutes your acceptance of the amended Policy. We encourage you to review this page periodically.

12Contact Our Data Protection Officer

If you have any questions, concerns or complaints regarding this Privacy Policy or how we handle your personal data, please contact us through the following channels: