Privacy Policy

1. Data Controller

nagabet (referred to as "nagabet", "we", "us", or "our") is the data controller responsible for the personal data of Members who access and use the nagabet platform at nagabet.vu. As data controller, nagabet determines the purposes and means by which personal data is processed in connection with the provision of our online casino, sportsbook, and related services.

If you have any questions regarding this Privacy Policy or the manner in which nagabet processes your personal data, please contact our Data Protection Officer via the contact details provided in Section 15 of this Policy.

2. Personal Data We Collect

nagabet collects and processes the following categories of personal data in connection with your use of the platform:

• Identity Data: Full legal name, date of birth, gender, nationality, and government-issued identification document details (such as MyKad number or passport number) collected during account registration and KYC verification.
• Contact Data: Email address, mobile telephone number, and residential address including postcode and state within Malaysia or other jurisdiction of residence.
• Financial Data: Payment method details (e-wallet identifiers such as Touch 'n Go and Boost account references, bank account numbers for FPX transactions, and related transaction metadata). nagabet does not store full card numbers. All financial data is handled via PCI-DSS compliant processors.
• Transaction Data: Records of all deposits, withdrawals, wagers, wins, losses, bonus claims, and account balance movements.
• Technical Data: IP address, browser type and version, device type and operating system, session duration, page navigation data, and login timestamps.
• Usage Data: Information about how you interact with the nagabet platform, including games played, bet history, session frequency, and feature usage patterns.
• Communications Data: Records of your interactions with nagabet's support team via live chat, email, or other channels, including the content of those communications.
• Responsible Gaming Data: Records of self-exclusion requests, deposit limit settings, cooling-off periods, and any responsible gaming tools activated on your account.

3. How We Collect Your Data

nagabet collects personal data through the following means:

• Direct collection: Information you provide when registering an account, completing KYC verification, making deposits or withdrawal requests, contacting support, or updating your account profile.
• Automated collection: Technical and usage data collected automatically as you browse and interact with the nagabet platform, via cookies, server logs, and analytics tools. See Section 9 for details on cookies.
• Third-party sources: Identity and address verification data from third-party KYC and identity verification providers; fraud and sanctions screening data from compliance service providers; payment transaction data from payment processors.

4. Legal Bases for Processing

nagabet processes your personal data on the following legal bases, depending on the purpose of the processing:

• Contractual necessity: Processing required to enter into and perform the Member agreement with you — including account creation, transaction processing, and customer support.
• Legal obligation: Processing required to comply with applicable anti-money laundering, counter-terrorism financing, age verification, and other regulatory obligations.
• Legitimate interests: Processing necessary for nagabet's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and improvement of our services, where those interests are not overridden by your fundamental rights.
• Consent: Processing for marketing communications and non-essential cookies, where you have given explicit opt-in consent that can be withdrawn at any time.

5. How We Use Your Personal Data

nagabet uses the personal data we collect for the following purposes:

• To create, maintain, and administer your nagabet Account.
• To process deposits, withdrawals, and gaming transactions in MYR.
• To conduct identity verification and KYC checks as required by our licensing authority and applicable law.
• To prevent, detect, and investigate fraud, money laundering, bonus abuse, and other prohibited activities.
• To provide customer support and respond to your enquiries.
• To enforce our Terms & Conditions and other applicable policies.
• To personalise your gaming experience, including recommending games and promotions relevant to your preferences.
• To administer bonuses, promotions, and the VIP loyalty programme.
• To monitor responsible gaming indicators and, where appropriate, proactively reach out to Members who may benefit from responsible gaming tools.
• To improve the nagabet platform through analytics, testing, and product development.
• To send service communications such as transaction confirmations, security alerts, and policy updates.
• To send marketing communications to Members who have opted in to receive them.

6. Disclosure of Personal Data

nagabet does not sell your personal data. We may share your data with the following categories of recipients where necessary and lawful:

• Payment processors and e-wallet providers (including Touch 'n Go, Boost, and FPX-connected banks such as Maybank, CIMB, and Public Bank) to process financial transactions.
• Identity verification and KYC providers for the purpose of regulatory compliance and fraud prevention.
• IT and platform infrastructure providers who process data on our behalf as data processors under appropriate contractual safeguards.
• Gaming content providers to the extent required to deliver specific games or live casino services to your Account.
• Regulatory and licensing authorities as required by our gaming licence obligations.
• Law enforcement and government bodies where disclosure is required or permitted by applicable law, including in response to lawful orders, warrants, or regulatory investigations.
• Professional advisors including lawyers, auditors, and accountants subject to confidentiality obligations.

All third parties who receive or process personal data on nagabet's behalf are subject to contractual data processing obligations consistent with applicable data protection law. nagabet remains responsible for ensuring appropriate protection of your data throughout the processing chain.

7. International Data Transfers

The nagabet platform is operated by an entity domiciled outside Malaysia. Your personal data may therefore be transferred to, stored in, or processed in jurisdictions outside Malaysia, including the jurisdiction in which nagabet holds its gaming licence.

Where such transfers occur, nagabet implements appropriate safeguards to ensure your data receives a level of protection consistent with applicable data protection standards, including the use of standard contractual clauses, data processing agreements, and transfers to jurisdictions deemed to provide adequate protections by competent authorities.

8. Data Retention

nagabet retains personal data for as long as is necessary for the purposes for which it was collected, subject to the following minimum retention periods:

• Account and identity data: Retained for a minimum of 5 years following Account closure, as required by anti-money laundering regulations.
• Transaction records: Retained for a minimum of 5 years from the date of the transaction.
• KYC documentation: Retained for a minimum of 5 years following the completion of the KYC process or Account closure, whichever is later.
• Responsible gaming records: Self-exclusion and deposit limit records are retained for a minimum of 5 years to prevent circumvention of protective measures.
• Support communications: Retained for 3 years from the date of the communication.
• Marketing consent records: Retained for 3 years from the date consent was given or withdrawn.

After applicable retention periods expire, personal data is securely deleted or anonymised. In some cases, data may be retained beyond these periods where required by ongoing legal proceedings, regulatory investigations, or other lawful purposes.

9. Cookies and Tracking Technologies

nagabet uses cookies and similar technologies (including web beacons and local storage) on the nagabet platform. These technologies are used for the following purposes:

• Strictly necessary cookies: Required for the platform to function, including maintaining your logged-in session, remembering your language preferences, and enabling secure transactions. These cannot be disabled.
• Performance and analytics cookies: Used to collect aggregated, anonymised data about how Members interact with the platform to identify and resolve technical issues and improve user experience.
• Functional cookies: Used to remember your preferences, such as preferred game categories or currency display settings, to personalise your experience.

You may control non-essential cookies through your browser settings. Disabling certain cookies may affect the functionality of parts of the nagabet platform. Note that strictly necessary cookies cannot be disabled as they are essential for the platform to operate.

10. Your Data Subject Rights

Subject to applicable law and nagabet's regulatory obligations, you have the following rights in respect of your personal data:

• Right of Access: You may request a copy of the personal data nagabet holds about you.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to nagabet's legal and regulatory retention obligations.
• Right to Restriction: You may request that nagabet restrict the processing of your personal data in certain circumstances.
• Right to Data Portability: Where processing is based on consent or contractual necessity and carried out by automated means, you may request a copy of your data in a structured, machine-readable format.
• Right to Object: You may object to processing based on legitimate interests where you believe your rights override those interests.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact nagabet's support team via live chat or email at support@nagabet.vu. nagabet will respond to valid requests within 30 days. We may need to verify your identity before processing your request.

11. Children's Privacy

The nagabet platform is strictly intended for persons aged 21 years and above. nagabet does not knowingly collect personal data from individuals under the age of 21. If nagabet becomes aware that personal data has been collected from a person under the minimum age, that data will be deleted and the associated Account closed without delay. If you believe a minor has registered on the nagabet platform, please contact our support team immediately.

12. Marketing Communications

nagabet may send you promotional emails, SMS messages, or in-platform notifications about bonuses, new games, VIP offers, and other relevant promotions, provided you have opted in to receive such communications during registration or via your account settings.

You may withdraw your consent to marketing communications at any time by: updating your communication preferences in your account settings; clicking the unsubscribe link in any marketing email; or contacting nagabet support. Withdrawal of marketing consent will be processed within 5 business days and will not affect your ability to access and use the nagabet platform.

Service communications — such as transaction confirmations, security alerts, policy updates, and responsible gaming notifications — are sent regardless of marketing preferences as they are necessary for the operation of your Account.

13. Security Measures

nagabet implements appropriate technical and organisational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your browser and the nagabet platform.
• Encryption of sensitive data fields — including identity and financial data — at rest in our systems.
• Role-based access controls limiting internal access to personal data to authorised personnel with a legitimate need.
• Regular penetration testing and vulnerability assessments conducted by independent security specialists.
• Incident response procedures including notification protocols in the event of a data breach affecting Member data.

Notwithstanding these measures, no internet-based system is completely immune to security risks. Members are responsible for maintaining the confidentiality of their own account credentials and for notifying nagabet promptly of any suspected unauthorised account access.

14. Changes to This Policy

nagabet reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or regulatory requirements. Material changes will be communicated to Members via the registered email address and/or a prominent notice on the nagabet platform at least 14 days before the changes take effect, except where immediate changes are required by law or to address urgent security concerns.

The "Last updated" date at the top of this Policy reflects the most recent revision. Your continued use of the nagabet platform after any amendment comes into effect constitutes your acknowledgement of the revised Policy.

15. Contact Us

For questions, concerns, or requests relating to this Privacy Policy or nagabet's handling of your personal data, please contact us through the following channels:

• Email: support@nagabet.vu
• Live Chat: Available 24/7 via the nagabet platform
• Response Time: Data subject requests acknowledged within 5 business days; substantive response within 30 days

This Privacy Policy was last reviewed and updated on 1 June 2026 and supersedes all previously published versions.