Privacy Policy Naga Win – Our Commitment to Protecting Malaysian Players' Data

Naga Win ("we", "us", or "the Company") operates an online casino platform at nagawin.bio. As a platform serving over 500,000 players across Malaysia – from Kuala Lumpur to Kota Kinabalu, from Penang to Kuching – we understand how important your trust is to us.

This Privacy Policy transparently explains how Naga Win collect, use, store, and protect your personal information when you use our platform. This document is to be read together with Terms & Conditions and forms part of the agreement between you and Naga Win.

We collect and process your personal data only for legitimate, clearly stated purposes. No hidden follow-ups, no unauthorised data sharing, and no selling of your information to advertisers or third parties for commercial gain.

Naga Win collects several categories of personal data depending on how you interact with our platform:

We do not collect sensitive data such as medical information, religious beliefs, or political views unless you choose to share them voluntarily in your communications with us.

Naga Win collects your personal data through several different methods:

• Account Registration – information you enter when creating a new account.
• Platform Usage – data automatically recorded when you use the platform, such as gameplay activity and navigation.
• Financial Transactions – information related to deposits and withdrawals via Touch 'n Go, GrabPay, DuitNow, Boost, ShopeePay, Maybank2u, CIMB Clicks, or other FPX methods.
• Support Communications – information you share when contacting our support team via live chat or email.
• Tracking Technologies – cookies, web beacons, and similar technologies used to enhance your experience on the platform.
• KYC Verification – identity documents you submit for identity verification purposes.

Naga Win uses your personal data only for the following lawful and necessary purposes:

1. Account Management – to create and manage your player account, verify your identity, and ensure account security.
2. Transaction Processing – processing deposits and withdrawals through your preferred Malaysian payment methods.
3. Service Provision – enables access to all games and features on the Naga Win platform.
4. Customer Support – helps you resolve issues, answer enquiries, and process complaints.
5. Security & Fraud Prevention – detecting and preventing fraudulent activity, money laundering, and security threats.
6. Legal Compliance – fulfilling legal and regulatory obligations, including AML (Anti-Money Laundering) requirements.
7. Platform Improvements – analysing usage patterns to improve performance, interface, and user experience.
8. Marketing Communications – sending promotional information and new offers (only to members who have agreed to receive such communications).

Naga Win will not use your data for any purpose other than those stated above without first obtaining your additional consent.

Naga Win reaffirms: we do NOT sell your personal data to any third party. However, there are limited situations where we may need to share certain information:

• Payment Service Providers – information required to process transactions via Touch 'n Go, GrabPay, DuitNow, and other approved payment providers. These providers are bound by strict confidentiality agreements.
• Game Providers – minimal technical data required for games to function properly. No personally identifiable data is shared without a legitimate reason.
• Regulatory Authority – when required by Malaysian law, a court order, or a lawful request from a law enforcement agency.
• Audit & Compliance – independent auditors and certification bodies that verify our game fairness and legal compliance.

Your data security is our top priority Naga Win. We employ multiple layers of protection to keep your information secure at all times:

• 256-bit SSL Encryption – all data transmitted between your device and our servers is fully encrypted.
• Multi-Layer Firewall – a multi-layered protection system that prevents unauthorised external access.
• 24/7 Security Monitoring – our security team continuously monitors systems to detect any threats.
• Strict Access Controls – only authorised staff with a legitimate business need may access player data.
• Regular Security Audits – independent security assessments are conducted regularly to identify and address vulnerabilities.
• Two-Factor Authentication (2FA) – additional security options available to player accounts seeking an extra layer of protection.

While we take reasonable measures to protect your data, no system can be guaranteed 100% secure against all cyber threats. You also play an important role in keeping your account safe by using a strong password and not sharing your login credentials.

Naga Win retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or to comply with legal and regulatory requirements:

• Active Account Data – retained for as long as your account remains active and for a reasonable period following account closure.
• Financial Transaction Records – retained for a minimum of 7 years in accordance with Malaysian legal requirements on financial records and AML.
• KYC Documents – retained for the duration of the active account and for 5 years following account closure.
• Support Communication Logs – retained for 2 years for reference and dispute resolution purposes.
• Technical Data & Logs – typically retained for no more than 12 months unless required for a security investigation.

When data is no longer required, it will be securely deleted or anonymised in accordance with established data deletion procedures.

As a player Naga Win and data subjects, you have the following rights regarding your personal data:

Platform Naga Win is intended for adults aged 18 and above only. We do not knowingly collect, use, or store the personal data of any individual under the age of 18.

If we discover that personal data has been inadvertently collected from a minor, we will promptly take steps to delete that data and close the account in question. Parents or guardians who believe their child has registered on our platform are urged to contact our support team immediately.

As a digital platform, data processed by Naga Win may be stored or processed on servers located outside Malaysia. In such cases, we ensure that any such data transfers comply with Malaysian data protection laws and that an equivalent level of protection is maintained.

All third parties that receive data from us — including cloud service providers and technology partners — are bound by data processing agreements that require them to uphold high data protection standards.

Naga Win reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or the way we operate our services.

When significant amendments are made, we will notify you via:

• Sent to your registered email address.
• A prominent in-platform notification will appear the next time you log in.
• Update the "Last Updated" date at the top of this page.

Continued use of the platform naga win following notification of the amendment will be considered your acceptance of the updated policy. We encourage you to review this page regularly.

For any enquiries, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact the Data Privacy Officer Naga Win through:

• Privacy Email: privacy@nagawin.bio
• General Support Email: support@nagawin.bio
• Live Chat: available 24/7 within the platform after logging in
• Response Time: 1–3 business days for data privacy-related enquiries

We are committed to addressing any privacy concerns seriously and promptly. If you are not satisfied with our response, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia or any other relevant authority.