nagabet Privacy Policy

1. Who We Are

This Privacy Policy is issued by nagabet ("nagabet", "we", "us", "our"), the operator of the online gaming platform accessible at nagabet.lat. nagabet provides online casino, live dealer, sportsbook, and slots services primarily to players located in Malaysia and other permitted jurisdictions.

For the purposes of applicable data protection law, nagabet is the data controller in respect of the personal data of its registered players and website visitors. This policy sets out our practices with respect to the collection, use, storage, disclosure, and protection of personal data.

If you have any questions regarding how nagabet handles your personal data, you may contact our Data Protection team via the live chat function available on the nagabet platform or at the email address stated in Section 12 of this policy.

2. Data We Collect

nagabet collects personal data about you in three principal ways: data you provide directly to us, data collected automatically when you use our platform, and data received from third parties in connection with the operation of our services.

Data you provide directly:

• Account registration data: full legal name, date of birth, residential address (including city — for example Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya), email address, and contact phone number
• Identity verification documents: government-issued photo ID (Malaysian MyKad, passport, or driving licence) and proof of address
• Payment information: bank account details, e-wallet identifiers (Touch n Go eWallet, Boost), and FPX transaction references — note that nagabet does not store full payment card numbers
• Communications you send to nagabet support via live chat or email, including the content of those communications
• Responsible gaming preferences: deposit limits, session limits, and self-exclusion requests

Data collected automatically:

• Device and browser information: IP address, browser type and version, operating system, device identifiers
• Usage data: pages visited, features used, game sessions, bet history, login timestamps, and session duration
• Cookies and similar tracking technologies (see Section 6)
• Geolocation data at the country and region level, derived from IP address, for regulatory compliance purposes

Data received from third parties:

• Identity verification results from third-party KYC (Know Your Customer) service providers
• Payment confirmation data from payment processors and financial institutions
• Fraud and AML (anti-money laundering) screening results from compliance data providers

3. How We Use Your Data

nagabet processes personal data for the following purposes:

• Account management: To register and maintain your nagabet account, verify your identity, process your transactions, and provide access to all platform features
• Payment processing: To process MYR deposits and withdrawals via your chosen payment method and to maintain accurate financial records
• Regulatory compliance: To fulfil nagabet's obligations under applicable gaming regulations, including age verification, KYC, AML monitoring, and responsible gaming requirements
• Security and fraud prevention: To detect, investigate, and prevent fraudulent transactions, account takeovers, and other forms of platform abuse
• Customer support: To respond to your support queries, resolve disputes, and improve the quality of our support services
• Platform improvement: To analyse aggregated usage patterns and player behaviour data to improve nagabet's features, game offerings, and user experience
• Marketing communications: To send promotional offers, bonus notifications, and platform updates to players who have opted in to receive such communications
• Responsible gaming: To monitor play patterns that may indicate problem gambling behaviour and to administer self-exclusion and limit-setting tools

4. Legal Basis for Processing

nagabet processes personal data on one or more of the following legal bases, depending on the purpose of the processing:

• Contractual necessity: Processing required to fulfil our obligations under the Terms and Conditions you accepted upon registering your nagabet account — including account management, payment processing, and provision of gaming services
• Legal obligation: Processing required to comply with applicable gaming regulations, anti-money laundering law, age verification requirements, and financial reporting obligations
• Legitimate interests: Processing conducted in furtherance of nagabet's legitimate business interests, including fraud prevention, platform security, and service improvement, where such interests are not overridden by your data protection rights
• Consent: Processing based on your freely given, specific, and informed consent — primarily in relation to marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing based on consent prior to its withdrawal

5. Sharing Your Data

nagabet does not sell personal data. We share personal data only in the following circumstances and only to the extent necessary:

• Service providers: Third-party providers engaged by nagabet to deliver specific services, including payment processors, identity verification providers, IT infrastructure providers, customer support platforms, and fraud detection services. All such providers operate under data processing agreements and may only use your data as directed by nagabet
• Gaming software providers: Game content providers (such as live dealer studios and slot game developers) may receive limited session data necessary to deliver their games through the nagabet platform
• Regulatory and legal authorities: nagabet may disclose personal data to relevant regulatory bodies, law enforcement agencies, or courts where required by applicable law, court order, or where we have a good faith belief that disclosure is necessary to prevent fraud or protect the rights of nagabet or third parties
• Business transfers: In the event of a merger, acquisition, or sale of all or part of nagabet's business assets, personal data held by nagabet may be transferred to the acquiring entity, subject to equivalent data protection obligations

nagabet does not transfer personal data to countries outside of Malaysia's regulatory framework without ensuring appropriate safeguards are in place, including standard contractual clauses or equivalent mechanisms recognised under applicable data protection law.

6. Cookies & Tracking Technologies

nagabet uses cookies and similar tracking technologies on the nagabet.lat website and platform. Cookies are small text files placed on your device that allow us to recognise your browser on subsequent visits and enable certain platform functionality.

nagabet uses the following categories of cookies:

• Strictly necessary cookies: Required for the platform to function — including session authentication, security tokens, and load balancing. These cannot be disabled without impairing core platform functionality
• Functional cookies: Enable personalised features such as remembering your language preference, display settings, and last-visited game category
• Analytics cookies: Used to collect aggregated data about how players use the nagabet platform — helping us identify and fix usability issues and improve the overall experience. Analytics data is processed in aggregate form and does not identify individual players
• Marketing cookies: Used to track the effectiveness of nagabet's promotional campaigns and to deliver relevant offers to players who have opted in to receive marketing. These are only placed where you have given consent

You may manage your cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent you from logging in to your nagabet account or using core platform features.

7. Data Security

nagabet implements technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your browser and the nagabet platform
• Encryption of sensitive data fields (including passwords and payment credentials) at rest using industry-standard algorithms
• Role-based access controls limiting internal access to personal data to authorised staff with a legitimate need
• Regular penetration testing and vulnerability assessments conducted by independent security specialists
• Audit logging of all access to personal data held in nagabet's systems
• Incident response procedures for the detection, containment, and notification of data security incidents

Despite these measures, no data transmission over the internet or electronic storage system can be guaranteed as completely secure. Players are responsible for maintaining the confidentiality of their nagabet login credentials and for notifying nagabet immediately if they suspect unauthorised access to their account.

8. Data Retention

nagabet retains personal data for as long as is necessary to fulfil the purposes described in this policy, subject to any longer retention periods required or permitted by applicable law. The following general retention principles apply:

• Active account data is retained for the duration of your nagabet account and for a period following account closure as required by regulatory and legal obligations — typically not less than five (5) years and not more than seven (7) years
• Transaction records, including deposit and withdrawal history and bet records, are retained for a minimum of five (5) years following the relevant transaction in compliance with applicable financial reporting and AML requirements
• Customer support communications are retained for a period of three (3) years following resolution of the relevant matter
• Marketing preference data is retained until you withdraw consent or request deletion, subject to any overriding legal retention obligations
• Identity verification documents submitted for KYC purposes are retained for the minimum period required under applicable gaming regulations

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with nagabet's data disposal procedures.

9. Your Data Rights

Subject to applicable law and certain exceptions, you have the following rights in respect of the personal data nagabet holds about you:

• Right of access: The right to request a copy of the personal data nagabet holds about you and information about how it is processed
• Right to rectification: The right to request correction of inaccurate or incomplete personal data held by nagabet
• Right to erasure: The right to request deletion of your personal data in certain circumstances, subject to nagabet's legal and regulatory retention obligations
• Right to restrict processing: The right to request that nagabet limits the processing of your data in specific circumstances, such as where you contest its accuracy or have objected to processing
• Right to data portability: The right to receive personal data you have provided to nagabet in a structured, machine-readable format in certain circumstances
• Right to object: The right to object to nagabet processing your personal data on the basis of legitimate interests or for direct marketing purposes
• Right to withdraw consent: Where nagabet processes your data on the basis of consent, you have the right to withdraw that consent at any time

To exercise any of these rights, please contact the nagabet Data Protection team via live chat on the platform or at the contact email address in Section 12. nagabet will respond to verified requests within 30 days. We may need to verify your identity before processing a data rights request.

10. Children's Privacy

The nagabet platform is strictly intended for individuals aged 21 years and above. nagabet does not knowingly collect personal data from individuals under the age of 21. If nagabet becomes aware that a player has provided false information about their age during registration and is in fact under 21, the account will be immediately suspended, any outstanding balance will be reviewed in accordance with applicable regulations, and the personal data will be handled in compliance with applicable law.

If you have reason to believe that a minor has registered an account on the nagabet platform, please contact our support team immediately via live chat so that appropriate action can be taken.

11. Changes to This Privacy Policy

nagabet reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. Material changes will be communicated to registered players via the email address associated with your nagabet account and/or through a prominent notice on the platform prior to the changes taking effect.

We encourage you to review this Privacy Policy periodically. The "Last Updated" date at the top of this page reflects the date of the most recent revision. Your continued use of the nagabet platform following the effective date of any revision constitutes your acknowledgement of the updated policy.

12. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or nagabet's handling of your personal data, please contact the nagabet Data Protection team through any of the following channels:

• Live Chat: Available 24/7 through the nagabet platform
• Email: [email protected]

nagabet aims to respond to all privacy-related enquiries within five (5) business days. For formal data subject access requests or other rights requests, please allow up to 30 calendar days for a full response.