Naga888 Privacy Policy — How We Handle Your Personal Data

1 Introduction

This Privacy Policy describes how Naga888 ("Naga888", "we", "our", "us") collects, uses, stores, and protects personal information in connection with the Naga888 website, mobile experience, games, payment services, promotions, and customer support operations. It applies to all persons who visit, register, deposit, wager, or otherwise interact with Naga888.

By creating a Naga888 account, depositing funds using a Malaysian payment method, or accessing any part of the platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree, please discontinue use of Naga888. Questions or requests regarding personal data should be directed to Naga888 support as described in Section 13 below.

2 Definitions

"Personal Data" means any information that identifies or can reasonably identify a living individual — including name, identity document number, date of birth, email address, telephone number, IP address, payment details, and device identifiers. "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, or deletion.

"Account" means a registered profile maintained by an eligible player on Naga888. "Payment Data" means transaction records, payment instrument details, and clearing information associated with MYR deposits or withdrawals, including records relating to DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, or any supported cryptocurrency transaction. "KYC" means know-your-customer and identity verification obligations.

3 Personal Data We Collect

3.1 Registration and Account Information

When a player creates a Naga888 account, we collect full name, date of birth, email address, phone number, country of residence, and chosen username. This information is necessary to establish the account, confirm eligibility, and personalise the service.

3.2 Identity and KYC Documents

To satisfy verification requirements, we may request a government-issued identity document (such as a Malaysian MyKad, passport, or driving licence), proof of residential address (such as a recent utility bill from Kuala Lumpur, Penang, Johor Bahru, Shah Alam, or another Malaysian city), and proof of ownership of a payment method. Documents are reviewed solely for the stated verification purpose.

3.3 Payment and Transaction Data

Naga888 records all MYR deposits, withdrawals, bonus activations, and wagering transactions associated with an account. Payment instrument identifiers provided during a deposit or withdrawal are stored to facilitate processing, prevent fraud, and satisfy financial record-keeping obligations. Full payment card numbers, banking login credentials, and equivalent sensitive authentication data are not retained by Naga888.

3.4 Technical and Device Data

We automatically receive technical information from each device used to access Naga888, including IP address, browser type and version, operating system, screen resolution, device identifiers, referring URL, and pages visited. This data supports platform security, fraud detection, and performance optimisation.

3.5 Support and Communication Records

Live chat transcripts, WhatsApp message summaries, email correspondence, and support ticket records may be retained to maintain service quality, train support staff, investigate disputes, and fulfil regulatory obligations.

3.6 Responsible Gambling Data

Where a player configures deposit limits, session time reminders, cooling-off periods, or a self-exclusion, Naga888 retains a record of that election. This data is processed solely to honour and administer the player's responsible gambling choices.

4 How We Use Your Personal Data

The table below summarises the primary purposes for which Naga888 processes personal data and the legal basis applicable to each purpose.

5 Data Sharing and Disclosure

Naga888 does not sell personal data. We share personal data only in the following circumstances:

• Payment processors and financial institutions — to complete MYR deposits and withdrawals and comply with anti-money laundering requirements. Examples include DuitNow-connected banks, FPX-participating institutions, and supported e-wallet operators.
• Identity and KYC verification providers — to authenticate documents and conduct age and identity checks as required by our operating obligations.
• Game and technology providers — licensed game studios, live casino operators, and sports data providers may receive pseudonymised session data necessary to deliver and certify game results.
• Customer support platforms — communication tools used to manage live chat, WhatsApp, and email support may process message content within our secure environment.
• Security and fraud-prevention services — specialised providers that help detect and investigate suspicious account activity, unauthorised access, or payment manipulation.
• Regulatory and law enforcement authorities — where disclosure is required by a binding legal obligation, court order, or regulatory direction. Naga888 will notify the relevant player to the extent permitted by law.
• Group companies or successors — in a corporate restructuring, merger, or acquisition affecting Naga888, personal data may be transferred as part of that transaction subject to equivalent privacy protections.

6 Data Retention Periods

Personal data is retained for as long as it is needed for the purpose for which it was collected, or as required by applicable legal, regulatory, or financial obligations. In general:

• Account and registration data is retained for the duration of account activity and for a minimum period of five years after account closure to satisfy anti-money laundering record-keeping requirements.
• KYC documents and identity verification records are retained for the period required by the applicable licensing authority and relevant financial crime prevention obligations.
• Transaction and payment records are retained for a minimum of six years from the transaction date.
• Support communications are retained for up to two years from the date of the last message, unless a dispute or regulatory matter requires longer retention.
• Responsible gambling elections are retained for the duration of any active restriction and for a period thereafter to prevent inadvertent reactivation.
• Technical and device data collected via cookies or logs may be retained for up to thirteen months unless a shorter period is configured.

When the applicable retention period expires, personal data is securely deleted or anonymised so that it can no longer identify an individual.

7 Security Measures

Naga888 implements technical and organisational measures proportionate to the sensitivity of personal data. These include 256-bit SSL/TLS encryption for all data transmitted between a player's device and Naga888 servers, encryption at rest for stored personal data and payment records, role-based access controls that restrict data access to personnel with a demonstrated operational need, two-factor authentication options for player accounts, daily automated security monitoring and anomaly detection, and regular internal and third-party security audits.

No system can guarantee absolute security. Players should protect their own login credentials, use unique passwords, avoid accessing Naga888 on shared or public devices without adequate precautions, and contact support immediately if they suspect unauthorised activity on their account.

8 Cookies and Tracking Technologies

Naga888 uses cookies and similar technologies to operate essential platform functions, remember login sessions, detect fraud, and analyse aggregate usage patterns. Cookies fall broadly into the following categories:

• Strictly necessary cookies — required for the platform to function. These cannot be disabled without breaking core features such as account login and session management.
• Performance and analytics cookies — collect anonymous aggregate information about page visits, load times, and navigation paths to help improve the Naga888 experience.
• Functional cookies — remember player preferences such as interface language, currency display, and notification settings.
• Security cookies — support fraud detection, bot prevention, and brute-force login protection.

Players may control non-essential cookies through standard browser settings. Disabling certain cookies may affect the availability of some features. Naga888 does not place third-party behavioural advertising cookies without explicit consent.

9 International Data Transfers

Naga888 operates with infrastructure, service providers, and personnel in multiple jurisdictions. Personal data relating to Malaysian players may be processed or stored on servers or by service providers located outside Malaysia. Where such transfers occur, Naga888 applies contractual safeguards that require the recipient to protect personal data to a standard materially consistent with this Privacy Policy and with the applicable data protection framework governing the transfer.

10 Minors and Age Eligibility

Naga888 is strictly for adults aged 21 and above. We do not knowingly collect personal data from persons under that age. Age is verified during the registration and KYC process. If Naga888 becomes aware that personal data has been collected from a person below the minimum age, that data will be deleted and the associated account will be suspended. If you believe personal data belonging to a minor has been processed in error, please contact Naga888 support immediately.

11 Your Rights

Subject to applicable law and any overriding regulatory obligation, players have the following rights with respect to their personal data held by Naga888:

To exercise any of these rights, please contact Naga888 support with your registered username and a clear description of your request. Identity verification may be required before data is released or modified. Naga888 will acknowledge requests promptly and respond within a reasonable period. No fee is charged for standard requests.

12 Changes to This Privacy Policy

Naga888 may update this Privacy Policy periodically to reflect changes in our services, payment integrations, legal obligations, or security practices. The date at the top of this page indicates when the current version was last revised. Material changes will be communicated to registered players through a platform notice or support email before they take effect. Continued use of Naga888 after an updated Privacy Policy becomes effective constitutes acceptance of the revised terms.

Players are encouraged to review this page periodically. Previous versions of this Privacy Policy may be obtained by contacting Naga888 support.

13 Contact Us — Data Enquiries

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact Naga888 using the details below. Do not include passwords, one-time security codes, or full payment card numbers in any correspondence.

• Support Email: [email protected] — displayed as plain text only; this is not a clickable link.
• Live Chat: Available 24 hours a day, 7 days a week via the Naga888 platform. Average response time: 3–5 minutes.
• WhatsApp Support: Available 24/7. Support agents operate in English, Bahasa Melayu, and Chinese.

Naga888 will acknowledge data rights requests within a reasonable period and respond fully once necessary identity verification is completed. If you are not satisfied with our response, you retain the right to escalate your concern to the relevant data protection or regulatory authority applicable in your jurisdiction.