Nagawin77 Privacy Policy – User Data Protection in Malaysia

01Introduction & Scope of Nagawin77's Privacy Policy

This Privacy Policy ("Policy") is published by nagawin77 ("we", "platform", "nagawin77") and applies to all users, registered members and visitors of the nagawin77 website and mobile application. This Policy outlines our commitment to protecting your privacy and explains in detail how your personal data is handled.

Nagawin77 is an online sports betting and entertainment platform operating in Malaysia, covering football betting (Malaysia Super League, EPL, and international leagues), badminton, Live Casino, slots and jackpots, digital lottery, e-sports, and virtual sports. To deliver all of these services, we need to collect and process certain personal data to ensure a safe, seamless, and personalised experience for every member.

We view privacy not merely as a legal requirement but as a core value in how nagawin77 operates. Every decision involving user data is made with the interests and safety of our members as the top priority.

02Types of Personal Data We Collect

Nagawin77 collects your personal data through several means — directly from you during registration or platform use, automatically via tracking technologies, and in certain cases, from legitimate third-party sources. Below is a detailed breakdown of the types of data we collect:

Identity Data:

• Full name as shown on your Malaysian identity card or passport
• National identification number (MyKad) or passport number for identity verification purposes
• Date of birth (to verify you are 18 years of age or older)
• Current residential address in Malaysia
• Mobile phone number (used for 2FA verification and account-related communications)
• Registered email address

Financial & Transaction Data:

• Payment method details — Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow account numbers, or FPX Maybank2u / CIMB Clicks information (stored in encrypted form)
• Deposit and withdrawal history, including amounts, dates and methods
• Betting records and gaming activity — including Live Casino, slots, lottery, and e-sports
• Account balance and internal transaction records

Technical & Usage Data:

• The IP address of your device when accessing nagawin77
• Device type, operating system, and browser version used
• Cookie and login session data
• Pages visited, session duration, and navigation patterns within the platform
• City-level geolocation information (not precise location) for security purposes

03How Nagawin77 Uses Your Personal Data

Nagawin77 uses your personal data solely for legitimate and necessary purposes in order to provide you with the best possible service. Every use of data has a clear justification, and we do not process data beyond what is required. The following are the primary purposes for which your data is used:

1. Account Management & Identity Verification
Identity data is used to verify your identity during registration, process login requests, recover locked accounts, and ensure compliance with the minimum age requirement of 18 years. This verification protects you and all nagawin77 members from fraud and unauthorised access.

2. Financial Transaction Processing
Financial data is used to process deposits via Touch 'n Go, GrabPay, DuitNow, Boost, ShopeePay, and FPX, as well as withdrawals of winnings to the same account. Transaction records are retained for legal compliance purposes and to resolve any transaction disputes that may arise.

3. Service Delivery & Personalised Experience
Game activity data is used to provide relevant game recommendations, display your betting statistics and records, and improve the overall nagawin77 platform experience based on member usage patterns.

4. Security & Fraud Prevention
Technical data such as IP addresses and login patterns are actively used to detect suspicious activity, unauthorised login attempts, and potential fraud or money laundering. This helps protect the interests of all nagawin77 members.

5. Legal & Regulatory Compliance
Nagawin77 is obligated to retain transaction records and member identity information for specified periods to meet applicable Malaysian legal requirements. This data may be disclosed to the relevant authorities when ordered by a court or competent regulatory body.

6. Service-Related Communications
We use your email address and phone number to send account-related notifications (such as deposit confirmations and security alerts) and promotional communications (provided you have not opted out of marketing communications). You can manage your communication preferences at any time through your nagawin77 account settings.

04Personal Data Sharing & Disclosure

Nagawin77 does not sell or rent your personal data to any third party for their own marketing purposes. This is an absolute commitment we uphold without exception. However, in certain limited and necessary circumstances, nagawin77 may share your data with the following parties:

• Payment Service Providers: Transaction data is shared with payment processors such as Touch 'n Go, GrabPay, DuitNow and FPX providers solely for the purpose of processing your transactions. These providers are bound by strict confidentiality agreements and are not permitted to use your data for any other purpose.
• Licensed Game Providers: For Live Casino, slots, and e-sports provided by licensed third-party suppliers, the minimum technical data required to run a game session is shared within a secure, encrypted environment.
• Security & Anti-Fraud Services: Nagawin77 engages third-party cybersecurity services to help detect and prevent fraud. These providers receive only the technical data necessary for that purpose and are bound by strict data processing agreements.
• Statutory Authorities: Nagawin77 may disclose your personal data to the police, courts or Malaysian regulatory authorities when required by a valid court order or applicable legal obligation. In every such case, we will disclose only the minimum data necessary and nothing more.
• Business Transfers: In the event that nagawin77 undergoes any restructuring, merger, or business transfer in the future, user data may be transferred as part of the business assets. You will be notified in advance, and your rights under this Privacy Policy will continue to be upheld by the new entity.

05Data Security Measures We Implement

Protecting your personal data from unauthorised access, loss, theft, or disclosure is a core priority at nagawin77. We continuously invest in security infrastructure to ensure the highest achievable level of data protection. Below are the key security measures we have in place:

• Data Encryption in Transit: All communications between your browser or application and nagawin77's servers are secured by TLS 1.3 with 256-bit SSL encryption. This means no other party can read your data as it travels over the internet.
• Data Encryption at Rest: Sensitive data such as passwords (stored as irreversible hashes), financial details and identification numbers are stored in fully encrypted databases.
• Strict Access Controls: Access to members' personal data is limited to staff on a need-to-know basis, with role-based access controls (RBAC) ensuring each staff member can only access the data necessary for their specific responsibilities.
• Two-Factor Authentication (2FA): We offer and actively encourage the use of 2FA for all member accounts. For internal systems, 2FA is mandatory for all staff with access to user data.
• 24/7 Security Monitoring: Our automated monitoring system tracks suspicious activity, unauthorised access attempts and data anomalies in real time, 24 hours a day, 7 days a week.
• Regular Security Audits: Nagawin77 conducts regular penetration testing and security audits by independent experts to identify and address any vulnerabilities before they can be exploited.
• Data Backups: Data is backed up regularly to a separate, secure server location, ensuring swift recovery in the event of an unexpected system failure.

While nagawin77 takes all reasonable steps to protect your data, no security system is entirely infallible. We encourage you to take your own protective measures as well, including using a strong password, enabling 2FA and never sharing your login credentials with anyone.

06Personal Data Retention Period

Nagawin77 does not retain your personal data for longer than necessary. Retention periods are determined based on the original purpose of collection and applicable legal compliance requirements:

• Active account data: Retained for the duration of your membership and for a period of 7 years following account closure, in line with Malaysia's financial record-keeping requirements under applicable law.
• Financial transaction records: Retained for a minimum of 7 years after each transaction, in accordance with Malaysian accounting and tax legal requirements.
• Security and access logs: Retained for 12 months for security investigation and fraud detection purposes.
• Session data and cookies: Session cookies are deleted when you close your browser. Persistent cookies for preference purposes are retained until you delete them or they expire (typically after 12 months).
• Marketing data: Retained until you opt out of marketing communications, after which it is deleted or anonymised within 30 days.

Once the applicable retention period has elapsed, personal data will be securely deleted or anonymised so that it can no longer be linked to you. The deletion process employs methods that ensure the data cannot be recovered.

07Your Rights Under PDPA 2010

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and our own policies, you hold important rights regarding your personal data that nagawin77 is committed to facilitating:

• Right of Access: You have the right to request a copy of the personal data we hold about you. We will provide this data in a readable format within 14 business days of receiving your complete request.
• Right to Rectification: If your personal data is inaccurate or incomplete, you have the right to request a correction. The correction will be carried out within 7 business days.
• Right to Erasure ("Right to be Forgotten"): You may request the deletion of your personal data under certain circumstances — for example, when the data is no longer needed for the purpose it was originally collected, or when you withdraw your consent. Such requests are subject to legal data retention obligations, which may prevent immediate deletion in some cases.
• Right to Object to Marketing: You may opt out of or withdraw consent to receive marketing communications at any time via the unsubscribe link in any email, or through the notification settings in your nagawin77 account.
• Right to Data Portability: In certain circumstances, you have the right to receive your personal data in a structured, machine-readable format for transfer to another service provider.
• Right to Restrict Processing: Under certain circumstances, such as during a complaint investigation, you have the right to request that we restrict how we process your personal data while a resolution is pending.

To exercise any of the rights above, please contact our data protection team by emailing support@nagawin77.best with the subject line "Privacy Rights Request", along with your user ID and a clear description of your request. We will not charge for reasonable requests and will respond within the stipulated timeframe.

08Cookies, Tracking & Similar Technologies

Nagawin77 uses cookies and similar tracking technologies to enhance the user experience, maintain session security and understand how our platform is used. Below is an explanation of the types of cookies we use:

• Necessary Cookies: These cookies are required for the core functionality of the nagawin77 platform — including login sessions, security, and page navigation. They cannot be disabled, as the platform will not function properly without them.
• Preference Cookies: Stores your preferences such as interface language and display settings to provide a more comfortable experience on your next visit.
• Analytics Cookies: Collects information on how you use the nagawin77 platform to help us improve its design and functionality. This data is collected in aggregate form without identifying individual users.
• Security Cookies: Used to detect suspicious login attempts, help verify that you are a legitimate user, and protect your account from cyber attacks.

You can control cookie settings through your browser preferences. Please note that disabling certain cookies may affect the functionality or security of the nagawin77 platform. For instructions on managing cookies in your browser, refer to your browser's help documentation.

09Children's Privacy & Underage Users

Nagawin77's services are strictly for individuals aged 18 and above only. We do not knowingly collect, process or store the personal data of children or individuals under the age of 18.

During registration, you are required to confirm that you are 18 years of age or older. Nagawin77 uses an age check based on the date of birth entered at registration and may request verification documents (a copy of your MyKad or passport) to confirm your actual age.

Should we discover that personal data belonging to an individual under 18 years of age has been inadvertently collected by any means, we will take immediate steps to delete that data and close the account in question. Parents or guardians who find that their child has registered a nagawin77 account without permission are advised to contact us promptly at support@nagawin77.best for follow-up action.

10Amendments to This Privacy Policy

Nagawin77 reserves the right to amend this Privacy Policy from time to time to reflect changes in our data processing practices, new legal requirements, or improvements in the way we protect user data. The date of the most recent update is always displayed at the top of this page.

When significant changes occur that affect how we use your personal data or your rights as a user, nagawin77 will:

• Sending an email notification to your registered address at least 14 days before the changes take effect.
• Displaying a prominent notice on the nagawin77 platform throughout the notice period.
• In the event of significant changes, we will seek your renewed consent before continuing to process your data under the updated terms.

For minor changes that do not materially affect your rights (such as language corrections or additional clarifications), we may update this Policy without a separate notice beyond updating the date at the top of this document. You are encouraged to review this page periodically.

Continued use of the nagawin77 platform after an updated Privacy Policy takes effect constitutes your acceptance of the revised privacy terms.

11Contact Our Data Protection Officer

Nagawin77 has appointed a Data Protection Officer (DPO) responsible for ensuring our compliance with PDPA 2010 and facilitating the exercise of members' privacy rights. For any enquiries, concerns or requests relating to this Privacy Policy, you may reach us through:

• Email: support@nagawin77.best — Please include "Privacy Inquiry" in your email subject line. We aim to respond within 1–2 business days.
• Live Chat: Available on the nagawin77 platform, 24 hours a day, 7 days a week. Select the "Privacy & Data" category when starting a chat session.
• WhatsApp: Via the number listed in your account — Malay-language support available at all times.

We are committed to handling every privacy inquiry and complaint seriously, transparently, and in a timely manner. Your trust is nagawin77's most valuable asset, and we take any concerns about your privacy and data security seriously.