Privacy Policy Nagawing — Your Data Security Is Our Priority

To provide you with the best and safest gaming experience, nagawing collects several categories of information. We only collect what is strictly necessary and nothing more.

1.1 Information You Provide Directly

• Registration information: Full name, email address, phone number, date of birth, and the password you choose when opening your nagawing account.
• Identity verification documents (KYC): Copies of your MyKad, passport, or other identity documents requested during the verification process.
• Financial information: Bank account number, account holder name, and related information required to process deposits and withdrawals.
• Support communications: Live chat transcripts, emails, and any other communications between you and the nagawing support team.

1.2 Information Collected Automatically

• Technical data: IP address, browser type, operating system, screen resolution, and device information you use to access nagawing.
• Gaming activity data: Betting records, game history, wins and losses, and overall platform usage patterns.
• Session data: Login time, session duration, pages visited, and actions taken while logged into your account.
• Cookie data: Information collected through cookies and tracking technology as further described in Section 6.

Nagawing uses the information collected for the following purposes. Each purpose is lawful, necessary, and proportionate to the information collected:

Nagawing will not use your data for any purposes beyond those stated above without obtaining your consent first.

Nagawing does not sell your personal data to anyone. However, there are certain situations where we need to share your information with trusted third parties to enable us to deliver better services:

• Payment providers: FPX, Touch 'n Go, GrabPay, and payment card processors only receive the information required to complete your transaction.
• Technical service providers: Companies that assist nagawing with platform operations, server hosting, and analytics are all bound by strict confidentiality agreements.
• Game providers: Third-party game developers whose games are available on nagawing may receive game activity data required for technical operations.
• Legal authority: When required by law, court order, or a valid official investigation, nagawing will comply with lawful disclosure requests.

The security of your data is nagawing's top priority. We implement comprehensive technical and organizational security measures to protect your personal information from unauthorized access, loss, misuse, or disclosure.

• Data encryption in transit: All communications between your browser or app and nagawing's servers are secured by TLS 1.3 protocol with AES-256 encryption.
• Data encryption at rest: Sensitive data such as banking information and KYC documents are stored in encrypted format on protected servers.
• Access controls: Our role-based access control (RBAC) system ensures that only authorised staff can access member data, and only to the extent required for their specific responsibilities.
• Regular security audits: The nagawing infrastructure undergoes regular penetration testing and security audits conducted by independent third parties.
• Retention period: Active account data is retained for the duration of the account's activity. Following account closure, data may be retained for up to 7 years to meet legal and financial requirements.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding the personal data we hold. Nagawing is committed to respecting and facilitating the exercise of these rights:

• Right of access: You may request a copy of the personal data we hold about you at any time.
• Right to rectification: If any of your data is inaccurate or incomplete, you have the right to request that we correct it.
• Right to erasure: Under certain circumstances, you may request that we delete your personal data, subject to applicable legal obligations.
• Right to object: You may object to the processing of your data for direct marketing purposes at any time.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the validity of prior processing.

To exercise any of the above rights, please contact the nagawing support team via live chat in your account or by email at [email protected]. We will process your request within 14 business days.

Nagawing uses cookies and similar technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit the nagawing website.

• Essential cookies: Required for core platform functions such as login sessions and security. Cannot be disabled.
• Performance cookies: Collecting information on how you use nagawing to help us improve platform performance and user experience.
• Functional cookies: Saving your preferences such as language and other settings to provide a more personalised experience.
• Analytics cookies: Used to understand aggregate usage patterns for platform improvement purposes.

You can manage your cookie preferences through your browser settings. However, disabling certain cookies may affect the functionality of the nagawing platform. For more information, please refer to your browser's settings documentation.

The nagawing platform is exclusively for individuals aged 18 and above. We do not knowingly collect or process personal data from individuals under the age of 18.

If we find that we have collected personal data from someone under the age of 18, we will take immediate steps to delete that data and close the relevant account. Parents or guardians who believe their child has registered on nagawing are encouraged to contact our support team immediately.

In the course of platform operations, your personal data may be transferred to and stored on servers located outside Malaysia. Such transfers will only occur under the following circumstances:

• The recipient country has a level of data protection equivalent to or higher than Malaysia.
• Appropriate safeguards have been implemented, including contractual agreements that guarantee the security of your data.
• The transfer is necessary for the performance of a service contract between you and nagawing.

Nagawing ensures that all international data transfers comply with Malaysia's PDPA requirements and applicable data protection laws.

The nagawing platform may contain links to third-party websites in certain contexts, such as links to payment providers during the deposit process. This Privacy Policy applies solely to the nagawing platform and does not cover the privacy practices of those third-party websites.

We encourage you to read the privacy policy of every website you visit. nagawing is not responsible for the content, privacy practices, or security policies of any third-party websites.

Nagawing reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technological developments. When we make significant changes, we will:

• Updating the "last updated" date at the top of this page.
• Displaying a clear notice on the nagawing platform about the changes.
• In the event of significant changes, contacting you via your registered email to notify you of those changes.

Continued use of the nagawing platform after changes are published will be deemed acceptance of the updated terms. If you disagree with any changes, you have the right to close your account and stop using the platform.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how nagawing handles your personal data, please contact us through the following channels:

• Privacy email: [email protected] (mark the subject: "Data Privacy Inquiry")
• Live Chat: Available 24/7 via the chat icon within your nagawing account
• Response time: We are committed to responding to all privacy-related enquiries within 3 business days