Privacy Policy Naga33

Naga33 is Malaysia's leading online entertainment platform, offering premium slot games, live casino with real dealers, and sports betting. We firmly believe that user trust is our most valuable asset, and protecting your personal data is a responsibility we take with the utmost seriousness.

This Privacy Policy is drafted in accordance with the Personal Data Protection Act (PDPA) 2010 of Malaysia and international data protection best practices. It covers all data collected through naga33.bio, the naga33 mobile app, customer support live chat, email communications, and any other interaction channels between you and the naga33 platform.

We encourage you to read this Privacy Policy carefully before using the naga33 platform. Should there be any material changes to this Privacy Policy in the future, naga33 will notify users via in-platform notifications or email at least 7 days before the changes take effect. Continued use of the naga33 platform after such notification constitutes acceptance of the amended policy.

Naga33 only collects personal data that is strictly necessary to provide safe, legally compliant, and high-quality services to Malaysian users. The data collected can be grouped into three main categories:

Naga33 does not collect sensitive data such as health information, religious beliefs, or political affiliations unless specifically required and with your explicit consent. Data belonging to individuals under 18 years of age is not knowingly collected by naga33. Should we discover that a minor's data has been inadvertently collected, immediate steps will be taken to delete it.

Personal data collected by naga33 is used solely for legitimate purposes that have been disclosed to users. naga33 ensures that every use of data is proportionate and does not exceed what is necessary for the stated purpose.

The primary purposes for using your personal data at naga33:

• Account management — to securely create, verify, and maintain your user account.
• Identity verification (KYC) — to comply with legal requirements relating to customer identity verification and anti-money laundering (AML).
• Transaction processing — to accurately and securely process deposits, withdrawals, and all financial transactions on the naga33 platform.
• Service delivery — to enable you to access all games, promotions, and naga33 platform features you are eligible for.
• Customer Support — to effectively handle enquiries, complaints, and technical support requests.
• Security and fraud prevention — to detect and prevent fraudulent activity, unauthorised access, and violations of the terms of use.
• Legal compliance — to fulfil reporting obligations to relevant authorities under applicable Malaysian law.
• Platform improvements — to analyse usage patterns in aggregated form to improve the overall user experience.
• Service communications — to send transaction notifications, security updates, and important information relating to your account.

For marketing purposes such as sending promotional offers and naga33 updates, we will only do so if you have given explicit consent during registration or through your account communication settings. You may withdraw this marketing consent at any time from your account settings page.

Naga33 does not share, sell, or disclose your personal data to third parties except in the situations outlined below and only to the extent necessary for legitimate purposes. All data sharing is governed by confidentiality agreements that bind the relevant third parties to data protection standards equivalent to those of naga33.

Situations where your data may be shared:

• Payment providers — required transaction information is shared with payment processors such as DuitNow, FPX, Touch 'n Go eWallet, and other payment partners to process your deposits and withdrawals.
• Game software providers — required technical data is shared with third-party game platform providers to allow you to access their games through naga33.
• KYC & verification services — identity information is shared with accredited third-party identity verification service providers to meet AML/KYC compliance requirements.
• Legal Authority — naga33 will disclose required data to Malaysian or international authorities when mandated by law, court order, or official investigation.
• Business transfers — in the event of a merger, acquisition, or sale of naga33 assets, user data may be transferred to a successor entity subject to equivalent privacy policies.

Naga33 uses cookies and similar tracking technologies to enhance platform functionality, secure your login sessions, and collect analytics data that helps us continuously improve the overall user experience.

Types of cookies used by naga33:

• Essential Cookies — required for core platform functions including login session authentication, CSRF security, and language preferences. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies — to collect data on how users interact with the naga33 platform in aggregated form, helping us identify and resolve performance issues.
• Functional Cookies — to store your preferences such as display settings, language selection, and personal configurations to deliver a more personalised experience.
• Analytical Cookies — used by naga33 first-party analytics tools to understand platform usage patterns and improve content and functionality.

You can manage your cookie preferences through your web browser settings. However, disabling certain cookies may affect the functionality or performance of the naga33 platform. naga33 does not use third-party tracking cookies for advertising purposes.

Under Malaysia's PDPA and naga33's privacy policy, you hold a comprehensive set of rights regarding your personal data. naga33 is committed to making it easy, fast, and cost-free for you to exercise these rights.

To exercise any of the above rights, please contact the naga33 privacy team by email at [email protected] or via live chat within the platform. naga33 will process your request within 14 working days from the date of receipt of a complete request. No charges apply for reasonable requests.

Naga33 continuously invests in the latest cybersecurity infrastructure to ensure that the personal and financial data of every Malaysian user is protected to a standard on par with leading financial institutions.

Security layers implemented by naga33:

• Data-in-transit encryption — all communications between your device and naga33 servers are protected by TLS 1.3 with regularly renewed 256-bit SSL certificates.
• Data-at-rest encryption — sensitive data stored in naga33 databases is encrypted using AES-256, ensuring data remains unreadable even in the event of a physical breach.
• Internal access controls — naga33 employee access to user data is governed by the principle of least privilege, multi-factor authentication, and comprehensive audit logs.
• 24/7 security monitoring — an intrusion detection system (IDS) and real-time threat monitoring operate around the clock to detect and respond to suspicious activity.
• Regular penetration testing — naga33 conducts regular security testing by independent third parties to identify and address system vulnerabilities before they can be exploited.
• Secure data backup — user data is regularly backed up to encrypted, geographically distributed locations to ensure recovery in the event of a disaster.

Naga33 does not retain your personal data longer than is necessary for the purpose it was collected, or as required by applicable Malaysian law. Our data retention policy balances operational needs, legal compliance, and user privacy rights.

Upon expiry of the retention period, your personal data will be securely deleted or converted into a non-identifiable form (anonymised) in accordance with approved secure deletion procedures.

In certain operational situations, your personal data may need to be processed or stored outside Malaysia — for example, by cloud infrastructure providers or international game software providers used by naga33.

Naga33 ensures that any cross-border data transfer only takes place when:

• The recipient country provides a level of data protection equivalent to or exceeding Malaysia's PDPA.
• Binding data transfer agreements have been signed with recipient parties, including recognised standard data protection clauses.
• The transfer is necessary to fulfil the service contract between you and naga33.
• You have given explicit consent for the transfer in the specific situation.

Naga33 does not transfer data to countries identified as high-risk from a data protection perspective without adequate contractual safeguards. A list of countries and entities that receive naga33 data is available upon request through our privacy team.

Naga33 takes every privacy inquiry and complaint seriously. If you have any concerns, questions, or wish to exercise your user rights as outlined in this Privacy Policy, the naga33 privacy team is ready to assist you.

How to reach the naga33 privacy team:

• Email: [email protected] (please state "Privacy Inquiry" in the email subject line)
• Live Chat: Available 24/7 via the chat icon within the naga33 platform
• Response time: Within 2 working days for general inquiries; within 14 working days for formal user rights requests

If you are not satisfied with naga33's response to your privacy complaint, you have the right to submit a complaint to the Department of Personal Data Protection Malaysia (JPDP), the regulatory body for PDPA in Malaysia.