Privacy Policy

This Privacy Policy ("Policy") describes how nagabet ("we", "us", "our") collects, processes, stores, shares, and protects the personal data of individuals ("you", "Player", "User") who access or use the nagabet Platform at nagabet.cam and all related sub-domains, mobile interfaces, and services (collectively, the "Platform").

nagabet takes its obligations as a data controller seriously. We are committed to handling personal data responsibly, transparently, and in compliance with applicable international data protection standards, including the principles underlying the General Data Protection Regulation (GDPR) and equivalent frameworks.

This Policy should be read alongside our Terms & Conditions and Responsible Gambling Policy, which together govern your use of the Platform.

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" — any information relating to an identified or identifiable natural person, including name, email address, identification number, location data, IP address, or any combination of data that could identify an individual.
• "Processing" — any operation performed on personal data, including collection, recording, storage, adaptation, use, disclosure, and deletion.
• "Data Controller" — the entity that determines the purposes and means of processing personal data. nagabet is the Data Controller in respect of the personal data of all registered Players.
• "Data Processor" — a third party that processes personal data on behalf of the Data Controller, under a data processing agreement.
• "Consent" — a freely given, specific, informed, and unambiguous indication of the data subject's agreement to the processing of their personal data.
• "KYC" — Know Your Customer; identity and address verification procedures required prior to withdrawal processing.
• "AML" — Anti-Money Laundering; legal and regulatory obligations to detect and prevent money laundering through financial or gambling channels.
• "Cookie" — a small text file stored by a web browser on a user's device, used to recognise returning visitors and track usage behaviour.

nagabet is the Data Controller for all personal data collected through the Platform. As Data Controller, nagabet determines the purposes for which personal data is processed and ensures that appropriate legal bases exist for each processing activity.

Our data controller details are as follows:

• Platform: nagabet.cam
• Licensing Jurisdiction: International gaming jurisdiction (Curaçao)
• Support Contact: [email protected] (plain text — not a clickable link)

nagabet collects personal data through several channels: directly from you when you register or interact with the Platform, automatically through your use of the Platform, and from third parties involved in our service delivery (such as payment processors and identity verification providers).

4.1 Data Provided Directly by You

4.2 Data Collected Automatically

nagabet processes personal data only where a clear lawful basis exists. The table below sets out each primary purpose of processing, together with the lawful basis on which that processing is carried out.

Where processing is based on legitimate interests, nagabet has assessed those interests against the potential impact on your rights and has concluded that our interests do not override your fundamental data protection rights. You retain the right to object to legitimate-interests processing — see Section 10 for details.

nagabet does not sell, rent, or commercially transfer your personal data to third parties. We may, however, share your personal data with the following categories of recipient where necessary and appropriate:

• Payment Service Providers: Banks and e-wallet operators (including FPX, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong Bank, and cryptocurrency network processors) receive financial data necessary to process your deposits and withdrawals.
• KYC and Identity Verification Providers: Third-party identity verification services process your identity documents and biometric data to complete KYC as required by our licensing obligations.
• Game Content Providers: Casino game providers may receive anonymised session data necessary to deliver the game. No personally identifiable information is shared with game providers beyond what is technically necessary.
• Fraud Prevention and AML Services: Specialist third-party services assist us in identifying fraudulent activity and monitoring for money laundering patterns as required by our licence conditions.
• Analytics Providers: Anonymised or pseudonymised usage data may be shared with platform analytics providers to help us understand how the Platform is used and to improve it.
• Legal and Regulatory Authorities: We will disclose personal data to law enforcement, regulatory bodies, or legal authorities where required by law, court order, or in the exercise of or defence against legal claims.
• Corporate Transactions: In the event of a merger, acquisition, or sale of assets, personal data held by nagabet may be transferred to the acquiring entity, subject to equivalent privacy protections.

All third-party Data Processors engaged by nagabet are required to enter into data processing agreements and to process personal data only on our documented instructions, with equivalent security and confidentiality obligations in place.

nagabet uses cookies and similar tracking technologies (including web beacons and local storage) to operate the Platform, recognise returning users, maintain session security, and gather analytics data about Platform usage.

The categories of cookies used are as follows:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session management cookies that keep you logged in, security tokens, and load-balancing cookies. These cannot be disabled.
• Functional Cookies: Remember your preferences such as language settings, display preferences, and last-visited sections. These enhance your user experience but are not strictly required.
• Analytics Cookies: Collect anonymised data about how you interact with the Platform — pages visited, buttons clicked, session duration — to help us improve functionality. These are set only where you have consented.
• Fraud Prevention Cookies: Assist in identifying and preventing fraudulent or abusive behaviour by tracking device and session fingerprinting across interactions.

You can manage cookie preferences through your browser settings. Note that disabling certain cookies (particularly strictly necessary cookies) may impair Platform functionality. Most modern browsers — including those commonly used by players in Kuala Lumpur and across Malaysia on Android and iOS — allow granular cookie management.

As nagabet operates under an international gaming licence and uses globally distributed technology infrastructure, your personal data may be transferred to and stored on servers located outside Malaysia, including in the European Union, the United Kingdom, or other jurisdictions with established data protection frameworks.

Where personal data is transferred internationally, nagabet ensures that appropriate safeguards are in place, including:

• Transfer to countries that provide an adequate level of data protection as recognised under applicable frameworks;
• Use of Standard Contractual Clauses (SCCs) or equivalent approved transfer mechanisms with Data Processors in non-adequate jurisdictions;
• Binding confidentiality and security obligations in all third-party data processing agreements.

By using the Platform, you acknowledge that your personal data will be processed in accordance with this Policy regardless of where the processing takes place.

nagabet retains personal data for as long as necessary to fulfil the purposes for which it was collected, to comply with legal and regulatory obligations, and to resolve disputes or enforce agreements. The following retention guidelines apply:

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where data must be retained beyond the standard period due to an active legal proceeding or regulatory investigation, we will retain the minimum data necessary for that purpose only.

Subject to applicable data protection law and certain limited exceptions, you have the following rights in respect of your personal data held by nagabet. These rights may be exercised by contacting us at [email protected].

We will respond to all data subject requests within thirty (30) calendar days. In complex cases, this may be extended by a further two months with notification. Where we cannot fulfil a request — for example, because the data must be retained to comply with a legal obligation — we will explain the reason clearly.

If you are dissatisfied with our response to any data rights request, you have the right to lodge a complaint with the relevant supervisory authority in your jurisdiction.

nagabet implements a multi-layered approach to data security designed to protect your personal data against unauthorised access, loss, alteration, disclosure, or destruction. Our security measures include:

• Transport Encryption: All data transmitted between your device and nagabet servers is encrypted using industry-standard TLS 1.2 or higher (256-bit SSL). This applies to all Platform interactions including login, deposit, and withdrawal requests.
• At-Rest Encryption: Sensitive personal data, including identity document data and financial records, is encrypted at rest using AES-256 encryption.
• Password Security: Account passwords are stored using one-way cryptographic hashing and are never accessible in plain text — not even by nagabet staff.
• Two-Factor Authentication (2FA): Players are encouraged to enable 2FA on their accounts for additional login security.
• Access Controls: Access to personal data within nagabet's systems is restricted to authorised personnel only, on a strict need-to-know basis, with all access logged and audited.
• Security Monitoring: nagabet operates continuous automated monitoring for anomalous activity, intrusion attempts, and data access irregularities.

In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, nagabet will notify affected players without undue delay and will take immediate remedial action. Breaches meeting the relevant reporting threshold will be disclosed to the applicable supervisory authority within the timeframes required by law.

nagabet is an adult gambling platform. The Platform is strictly prohibited to individuals under the age of 21 years. nagabet does not knowingly collect, process, or retain personal data from persons below this age.

All new registrants are required to verify their age as part of the KYC process. Where nagabet discovers that a person under 21 has provided personal data and created an account — whether through misrepresentation or otherwise — we will immediately:

• Close the account and void any open bets or casino wagers;
• Refund any remaining real money balance (excluding bonus funds and any winnings derived from them);
• Delete all personal data associated with the underage account, save where retention is legally required for fraud investigation purposes.

If you are the parent or guardian of a minor who you believe has accessed the Platform, please contact us immediately at [email protected]. We take underage access extremely seriously and will act swiftly upon any such report.

nagabet may send you promotional communications — including bonus offers, VIP programme updates, new game announcements, and seasonal promotions — by email or in-platform notification, where you have provided explicit consent to receive such communications during registration or subsequently through your account settings.

You may withdraw consent to marketing communications at any time by:

• Clicking the unsubscribe link in any marketing email;
• Updating your communication preferences in your account settings; or
• Contacting our support team at [email protected] with a request to unsubscribe.

Withdrawal of consent to marketing does not affect the lawfulness of any processing carried out prior to withdrawal. Please note that opting out of marketing does not prevent you from receiving transactional communications relating to your account, such as deposit confirmations, withdrawal receipts, or security alerts — these are sent on the basis of contractual necessity and cannot be opted out of while your account remains active.

The nagabet Platform does not contain links to third-party websites for advertising or affiliate purposes. All navigation and linked content on the Platform is internal to nagabet.

However, certain third-party services are integrated into the Platform to support its core functionality — including payment gateways (such as FPX, DuitNow, Touch 'n Go eWallet, and Boost), game content providers, and KYC verification services. These third parties operate under their own privacy policies and data protection obligations.

nagabet is not responsible for the privacy practices of third-party service providers beyond the contractual data processing obligations we impose on them. We encourage all players to review the privacy policies of any payment service they use in connection with the Platform.

nagabet reserves the right to update this Privacy Policy from time to time to reflect changes in our data processing practices, technology, legal obligations, or Platform features. All updates will be published on this page with a revised "Last Updated" date.

Where changes are material — particularly changes that expand how we use your personal data or affect your rights — we will notify registered players by email to the address on file and/or through a prominent notice on the Platform prior to the changes taking effect.

Your continued use of the Platform following the publication of an updated Privacy Policy constitutes your acknowledgment of and agreement to the revised terms. If you do not accept a material change, you should cease using the Platform and request account closure in accordance with the process described in our Terms & Conditions.

For any questions, concerns, or requests relating to this Privacy Policy or nagabet's handling of your personal data, please contact us through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week, directly through the Platform — the fastest channel for urgent data requests.
• Email: [email protected] (plain text — not a clickable link). Responses within 24–48 business hours.

When submitting a data subject request by email, please include your registered username and a brief description of your request to allow us to locate your records efficiently. We may require identity verification before acting on sensitive requests such as data erasure or access.