Naga33 Privacy Policy – Malaysia Personal Data Protection

1. Introduction

Naga33 is a licensed online Sports Betting and casino platform operating at naga33.my, serving users across Malaysia. We understand that your personal data is sensitive and important. The trust you place in us when you register and use the Naga33 platform is something we do not take lightly.

This Privacy Policy sets out Naga33's privacy practices in full and in plain terms — what we collect, why we need it, who we share it with (if anyone), how long we retain it, and what choices you have. We aim to use straightforward language because we believe you deserve to know exactly how your data is handled, rather than getting lost in confusing legal jargon.

This policy applies to all information collected through naga33.my, email communications and all interactions with our support team. It also applies to members from across Malaysia — whether you are in Kuala Lumpur, Johor Bahru, Kota Kinabalu, Kuching, Penang or any other state.

2. Personal Data We Collect

Naga33 collects several categories of data from members. Below is a detailed breakdown of the types of data we collect and the reasons for doing so:

3. How We Collect Data

Your personal data is collected in several ways depending on how you interact with the Naga33 platform:

• During account registration: You provide your identity and contact information directly when completing the Naga33 registration form. This includes your name, Malaysian phone number, and password.
• During the KYC (Know Your Customer) process: When you are required to verify your identity prior to a withdrawal or upon reaching certain thresholds, you will need to upload an identification document such as your MyKad. This data is processed under strict security safeguards.
• During financial transactions: Information related to deposits and withdrawals is collected automatically each time you carry out a transaction using Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay or FPX via Maybank2u or CIMB Clicks.
• During your use of the platform: Naga33's systems record your betting activity — Liga Super football bets, badminton in-play betting, poker games, slots sessions, and so on — as part of normal platform operations.
• Via cookies and tracking technologies: Your web browser automatically sends technical data such as your IP address and device information to our servers whenever you visit naga33.my. See Section 7 for more information about cookies.
• Through customer support communications: When you contact the Naga33 CS team via live chat, email, or WhatsApp, your conversation is recorded for quality assurance and reference purposes.

Naga33 does not purchase or obtain your personal data from third-party data brokers or external sources without your knowledge.

4. Purposes for Using Personal Data

Naga33 uses your personal data for the following purposes. Each purpose has a valid legal basis as stated:

• Member account management — creating, managing, and maintaining your Naga33 account, processing logins, and verifying your identity. (Basis: Contract performance)
• Financial transaction processing — processing deposits via your preferred Malaysian payment method and managing withdrawal of winnings to your digital wallet or bank account. (Basis: Contract performance)
• Regulatory and legal compliance — fulfilling legal obligations including requirements under the Anti-Money Laundering Act (AMLA), KYC verification, and reporting to regulatory bodies when required. (Basis: Legal obligation)
• Fraud detection and prevention — monitoring account activity to identify and prevent fraud, bonus abuse, multiple account registrations, and other prohibited activities. (Basis: Legitimate interests)
• Platform and service improvements — analysing usage patterns to improve the interface, new features, and the overall Naga33 user experience. Data used for this purpose is anonymised wherever possible. (Basis: Legitimate interests)
• Service communications — sending important notifications related to your account, such as deposit confirmations, withdrawal outcomes, security changes and policy updates. (Basis: Contract performance)
• Customer support — enabling Naga33's CS team to reference your account records and interaction history to provide more effective and personalised assistance. (Basis: Legitimate interests)
• Marketing communications (with consent) — sending promotional information, bonuses, and special offers from Naga33 if you have given your consent to receive such communications. You may withdraw this consent at any time. (Basis: Consent)

5. Sharing Data with Third Parties

Naga33 does not sell your personal data. However, there are limited situations where we need to share data with certain parties in order to operate the platform effectively:

• Payment providers: To process your deposits and withdrawals via Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay or FPX, we are required to share the necessary transaction details with the respective payment providers. These providers are bound by their own privacy policies and payment industry security standards.
• Technology service providers: Companies that provide technical infrastructure, cloud hosting, fraud detection systems, and technical support services for the Naga33 platform. All such providers are bound by confidentiality agreements that prohibit them from using your data for any other purpose.
• Regulatory bodies and legal authorities: Naga33 is legally required to disclose certain information to regulatory bodies, law enforcement agencies, or courts when presented with a valid order or legal obligation. This includes reports related to the Anti-Money Laundering Act.
• Audit & compliance firm: Third-party independent auditors conducting annual security and compliance audits may require access to certain data as part of the audit process. Such access is strictly limited, controlled, and subject to confidentiality agreements.

In all of the above cases, Naga33 shares only the minimum data necessary for the stated purpose. We do not grant any third party full access to our member database.

6. Data Storage & Security Measures

Naga33 stores your personal data on secure servers protected by multiple layers of technical and physical safeguards. The following are the key security measures we have in place:

• Data encryption in transit: All data transmitted between your device and Naga33's servers is protected using 256-bit TLS/SSL — the same encryption standard used by financial institutions and banks.
• Data encryption at rest: Sensitive data such as passwords (stored as non-reversible hashes), payment account numbers, and KYC documents are stored in encrypted form.
• Access controls: Access to member data within Naga33's internal systems is restricted to staff who require it to perform their duties, using a role-based access control system.
• Two-factor authentication (2FA): Naga33's internal systems containing member data require two-factor authentication for all staff who access them.
• Regular security audits: Naga33 conducts independent security audits annually and periodic penetration testing to identify and address potential security vulnerabilities.
• 24/7 threat monitoring: Our security monitoring system operates around the clock to detect suspicious activity, unauthorised access attempts, and potential data breaches.

Data Retention Period: Naga33 retains your personal data for as long as your account remains active, and for the period required by law after account closure (typically 7 years for financial records in line with regulatory requirements). Data that is no longer needed will be securely deleted or anonymised.

In the event of a data breach involving member personal data, Naga33 will notify affected members within the timeframe required by applicable law.

7. Cookies & Tracking Technologies

Naga33 uses cookies and similar tracking technologies to enhance your experience on our platform. Below is an explanation of the types of cookies we use:

• Essential Cookies: These cookies are required for the Naga33 platform to function properly. They include session login cookies that keep you logged in as you browse the platform, CSRF security tokens, and language preferences. These cookies cannot be disabled as the platform will not function without them.
• Functional Cookies: These cookies remember your preferences — such as favourite sports, odds display settings and notification preferences — to personalise your experience. They are not used to track your activity on other websites.
• Analytics Cookies: Naga33 uses analytics data (in aggregated and anonymised form) to understand how members use the platform — which pages are visited most frequently, which features are used, and where members encounter difficulties. This information helps us improve the platform.
• Security Cookies: Used to detect suspicious login attempts, identify new devices and help Naga33's fraud detection system function effectively to keep your account secure.

You can manage your cookie preferences through your web browser settings. However, disabling essential cookies may affect the functionality of the Naga33 platform. For guidance on managing cookies in your specific browser, please refer to your browser's help documentation.

8. Your Personal Data Rights

As a Naga33 member and data subject under applicable data protection laws, you have the following rights:

To exercise any of the above rights, please contact the Naga33 support team by email at support@naga33.my or via live chat on the platform. We will respond within 30 working days from the date of your request.

9. Protection of Children's Data

Naga33 is a betting platform restricted to individuals aged 18 and above. We do not knowingly collect or process the personal data of anyone under the age of 18.

If you are a parent or guardian and believe your underage child has registered an account on Naga33, please contact us immediately at support@naga33.my. We will investigate and close the account in question, and delete all associated data in a timely manner.

10. Cross-Border Data Transfers

Naga33 operates as an online platform, and some of our technology service providers may store or process data on servers located outside Malaysia. When such data transfers occur, Naga33 ensures appropriate protections are in place through the following measures:

• Data processing agreements requiring third-party providers to comply with data protection standards equivalent to, or higher than, those required under Malaysian law.
• Use of recognised standard contractual clauses for international data transfers.
• Selection of providers operating in jurisdictions with a recognised level of data protection.
• Regular audits of our service providers' data security practices.

Naga33 endeavours to keep Malaysian member data stored within the Southeast Asian region wherever possible to meet local compliance requirements.

11. Changes to This Privacy Policy

Naga33 may update this Privacy Policy from time to time in response to changes in our services, the technologies we use, legal requirements, or industry practices. Any updates will be reflected in the "Last updated" date displayed at the top of this page.

For significant changes that directly affect your privacy rights — such as changes to the types of data collected, new purposes for data use, or sharing with new categories of third parties — Naga33 will notify you via:

• An in-platform notification the next time you log in;
• Email to the address registered to your Naga33 account;
• A clear notice is displayed on the naga33.my homepage.

Your continued use of the Naga33 platform after the effective date of an updated Privacy Policy constitutes acceptance of those changes. If you do not agree with any changes, you have the right to close your account and request deletion of your personal data.

We encourage you to review this Privacy Policy page periodically to stay informed about how Naga33 protects your privacy.

12. Contact Us About Privacy

If you have any questions or concerns, or wish to exercise your privacy rights in relation to Naga33's Privacy Policy, our team is ready to assist:

• Privacy Email: support@naga33.my — please state "Privacy Request" as the subject to help us process your request faster.
• Live Chat: Available on the Naga33 platform, 24 hours a day, 7 days a week.
• Service Language: Bahasa Melayu and English.
• Response Time: We will respond to privacy-related requests within 30 business days.

Naga33 regards privacy as a fundamental right of every member, and we take every privacy-related enquiry seriously. No question is too small — if anything about how we handle your data is unclear or concerns you, please ask. We want you to fully understand and feel comfortable with how Naga33 manages your personal data.

This Privacy Policy takes effect from 1 January 2026 and supersedes all previous versions. The latest version is always available at naga33.my/privacy-policy.