Privacy Policy Naga33 – Protecting Your Personal Data

1. Introduction

Naga33 ("we", "Platform") take our responsibility to protect the privacy and personal data of every member who uses our online casino platform seriously. This Privacy Policy sets out in detail how we collect, use, store, and protect your personal information when you register for or use Naga33's services.

This document has been prepared in compliance with Personal Data Protection Act 2010 (PDPA) Malaysia and forms part of Naga33's commitment to operating with full transparency toward all members in Malaysia. By registering an account or using any part of the Naga33 platform, you acknowledge that you have read and understood this Privacy Policy.

This Privacy Policy applies to all information collected through the Naga33 website, mobile platform, and any of our official communication channels, including email, Live Chat, and customer support WhatsApp.

2. Personal Data We Collect

Naga33 collects your personal data through several different methods — some provided directly by you during registration, some collected automatically during your use of the platform, and some received from legitimate third parties. The following table details the types of data we collect:

Naga33 not collect sensitive data such as your medical information, religious beliefs, or political views. We only collect data that is relevant and necessary for the lawful and secure operation of the platform.

3. How We Use Your Personal Data

Naga33 uses the personal data we collect solely for legitimate purposes necessary to deliver a safe, fair, and responsible platform experience. The following outlines the specific purposes for which your data is used:

• Account Management: To create, verify, and manage your account on the Naga33 platform, including the Know Your Customer (KYC) process and age verification.
• Transaction Processing: To securely and accurately process your deposits and withdrawals via Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, and FPX.
• Service Delivery: To give you seamless access to all games — Live Casino, Sports Betting for the Malaysia Super League and EPL, badminton, Virtual Sports, Blackjack, Roulette, and more.
• Platform Security: To detect and prevent fraudulent activity, money laundering, and platform abuse, including monitoring for unusual transaction patterns.
• Customer Support: To handle your enquiries, complaints, and support requests via Live Chat, email, and WhatsApp efficiently and effectively.
• Legal Compliance: To fulfil our legal obligations under PDPA 2010 and other applicable regulations, including the retention of records for prescribed periods.
• Product Improvement: To analyse usage patterns in aggregate (not at an individual level) for the purpose of improving user experience and developing new platform features.
• Marketing Communications: To send you information about Naga33's promotions, bonuses, and offers – only if you have given your consent to receive them. You may unsubscribe at any time.

4. Sharing of Data with Third Parties

Naga33 does not sell your personal data to any third party. However, in the course of legitimate platform operations, there are specific situations where we may need to share your data with trusted parties. All such data sharing is subject to strict confidentiality agreements and is limited to the stated purposes:

• Payment Service Providers: Transaction information that must be shared with licensed Malaysian payment gateways (Touch 'n Go, GrabPay, DuitNow, etc.) to process your deposits and withdrawals. These providers maintain their own privacy policies in compliance with Bank Negara Malaysia regulations.
• Game Providers: Game session information that must be shared with licensed live casino providers (such as Evolution Gaming, Pragmatic Play Live, and SA Gaming) solely for the purpose of facilitating gameplay and ensuring its fairness.
• Identity Verification Services: For KYC purposes, your identity information may be verified through licensed third-party verification services that comply with PDPA.
• Relevant Authorities: Naga33 will disclose your personal data to law enforcement authorities when required to do so by law or a valid court order. We will notify you of any such disclosure where permitted by law.
• Professional Advisors: Lawyers, accountants, or auditors bound by professional confidentiality obligations, in the context of legitimate business advisory services.

In all instances of data sharing, Naga33 ensures that recipients adhere to data protection standards equivalent to or higher than our own. We do not share your data with any third party for marketing purposes without your explicit consent.

5. Data Retention & Security

Naga33 stores your personal data on servers protected by multi-layered security infrastructure. The technical and organisational security measures we implement include:

• Data encryption in transit using 256-bit TLS/SSL protocols for all communications between the platform and your device.
• Data encryption at rest for all sensitive information, including financial details and identity information.
• Role-based access control (RBAC) ensuring that only staff who require access to specific data are permitted to do so, with full audit logs maintained.
• Round-the-clock security monitoring by our in-house cybersecurity team to detect any unauthorised access attempts.
• Periodic penetration testing conducted by independent security experts to identify and address vulnerabilities before they can be exploited.
• Rigorous data backup procedures to ensure service continuity and data recovery in the event of an emergency.

Data Retention Period: Naga33 retains your personal data for as long as your account remains active and for any additional period required by law following account closure. Financial records are generally kept for seven (7) years in accordance with Malaysian legal requirements. Data that is no longer needed will be securely deleted using verified erasure methods.

6. Cookies & Tracking Technologies

Naga33 uses cookies and similar tracking technologies to enhance your experience on the platform. Cookies are small text files stored on your device when you visit our website. The following are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as login session management and security. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies: Collects information on how users interact with the platform (pages visited, time spent, errors encountered) to help us improve performance and user experience. All data is collected in aggregate and without individual identification.
• Functional Cookies: Saving your preferences such as language, display settings, and game choices to make your experience more seamless on future visits.
• Analytics Cookies: We use reputable third-party analytics tools to understand overall platform usage patterns. Data collected is anonymised and cannot be used to identify any individual.

You can manage cookie settings through your web browser preferences. However, disabling certain cookies may affect the functionality or user experience of the Naga33 platform. By continuing to use our platform after receiving the cookie notice, you consent to the use of cookies as described above.

7. Your Rights as a Data Subject

Under the Personal Data Protection Act 2010 (PDPA) of Malaysia, you as a data subject have the following rights in relation to the personal data Naga33 holds about you:

• Right of Access: You have the right to request and obtain a copy of the personal data we hold about you. We will fulfil such requests within 30 business days.
• Right to Rectification: You have the right to request correction of any personal data that is inaccurate or incomplete. Updates can be made directly through your account settings or by contacting customer support.
• Right to Erasure: In certain circumstances, you have the right to request the deletion of your personal data. Such requests will be assessed against Naga33's legal obligations and legitimate interests in retaining certain records.
• Right to Restriction of Processing: You have the right to request that we restrict the processing of your data under certain circumstances, such as when you are disputing the accuracy of that data.
• Right to Data Portability: You have the right to receive your personal data in a machine-readable format for the purpose of transferring it to another platform, where this is technically feasible.
• Right to Object: You have the right to object to the processing of your data for direct marketing purposes at any time. Such requests will be acted upon immediately.

To exercise any of the rights above, please submit a written request to support@naga33.net stating the right you wish to exercise and the relevant details. We may need to verify your identity before processing the request. We will respond within 30 business days from the date of receipt of a complete request.

8. Protection of Children's Data

The Naga33 platform is exclusively for users aged 18 and above only. We do not knowingly collect or process personal data from individuals under the age of 18.

Should we discover that personal data of an individual under the age of 18 has been collected without our knowledge, we will take immediate steps to delete that data and close the associated account. If you believe we may have collected data from someone under the age of 18, please contact us immediately at support@naga33.net.

9. Changes to This Privacy Policy

Naga33 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, new legal requirements, or technological developments. The latest version of this policy will always be available on this page with a clearly marked "Last Updated" date.

For material changes — that is, changes that significantly alter the way we collect, use, or share your data — we will notify you through:

• Email to your registered address at least 14 days before the changes take effect.
• In-platform notifications when you log in to your Naga33 account.
• A clear update on this Privacy Policy page with a summary of the changes made.

Your continued use of the Naga33 platform after the effective date of any changes constitutes your acceptance of the updated Privacy Policy. If you do not agree with the changes, you have the right to close your account before they take effect.

10. Contact Us – Data Protection Officer

If you have any questions, concerns, or complaints regarding this Privacy Policy or how Naga33 handles your personal data, you may reach us through the following channels:

• Email: support@naga33.net (for privacy enquiries, please include "Privacy Enquiry" in the email subject line)
• Live Chat: Available 24 hours a day, 7 days a week, directly within the Naga33 platform
• WhatsApp: Available during our customer support operating hours

Naga33's support team, operating in both Bahasa Malaysia and English, will respond to privacy-related enquiries within 3 business days. For formal requests relating to data subject rights (access, correction, deletion), a response will be provided within 30 business days of receiving a complete request.

If you are not satisfied with how we handle your privacy-related complaint, you have the right to escalate the matter to the Department of Personal Data Protection under Malaysia's Ministry of Communications and Digital, which is the authority responsible for enforcing PDPA 2010.