Privacy Policy naga99 —
Your Personal Data Protection

This Privacy Policy ("Policy") describes the practices of Naga99 ("we", "Platform") regarding the collection, use, disclosure, and protection of your personal information when you use our platform, website, and services. This Policy applies to all registered users and visitors of the Naga99 website.

Naga99 recognises that privacy is a fundamental right of every individual. We are therefore committed to ensuring your personal data is handled with full responsibility, transparency, and in compliance with applicable laws in Malaysia, particularly the Personal Data Protection Act 2010 (PDPA).

This Policy should be read together with the Terms and Conditions us. In the event of any conflict between this Policy and the privacy-related Terms and Conditions, this Privacy Policy shall prevail.

Naga99 collects various types of personal data depending on how you interact with our platform. The following are the main categories of data we collect:

We do not collect sensitive data categories such as health information, religious beliefs, or political views unless voluntarily provided by you in an unavoidable context.

Every piece of data naga99 collects is used for legitimate, predefined purposes. We do not process your data beyond the following:

• Account Management: Create, verify, and manage your member account including the mandatory KYC process.
• Transaction Processing: Process deposits, withdrawals, and all financial transactions related to your account securely and accurately.
• Security & Fraud Prevention: Identify and prevent fraudulent activity, money laundering, and any misuse of the platform.
• Legal Compliance: Meet legal obligations including the KYC and AML (Anti-Money Laundering) reporting requirements as prescribed.
• Customer Support: Provide technical support and effectively resolve your enquiries or complaints.
• Service Improvement: Analyse usage patterns to improve platform performance, user interface, and overall experience.
• Marketing Communications: Send information about promotions, bonuses, and exclusive offers — only if you have consented to receive such communications.

Naga99 does not share, sell, or transfer your personal data to third parties for their marketing purposes. However, in the limited situations outlined below, some data may be shared:

• Payment Service Providers: Required transaction details are shared with licensed payment processors (such as banks, FPX, and e-wallet providers) exclusively to process your deposits and withdrawals.
• Game Providers: Usernames and session information are shared with licensed game software providers to enable you to play. These providers are bound by strict confidentiality agreements.
• Legal Authorities: naga99 will disclose required data to authorities, regulatory bodies, or law enforcement when ordered by a court or required by law.
• Identity Verification Services: KYC information is shared with licensed third-party identity verification providers solely to authenticate your documents.

All third parties we work with are bound by comprehensive data protection agreements and are only permitted to use your data for the specific agreed purposes.

Naga99 continuously invests in the latest security infrastructure to protect your personal data from unauthorised access, loss, damage, or accidental disclosure. The security measures we implement include:

• Data Encryption in Transit: All communications are secured with TLS 1.3 protocol and 256-bit SSL certificates that are updated on a regular basis.
• Data Encryption at Rest: Sensitive information such as passwords is stored in hashed form using the bcrypt algorithm. Financial data is encrypted using AES-256.
• Internal Access Control: Only authorised staff with a legitimate business need are permitted to access member personal data. All access is logged and audited regularly.
• Two-Factor Authentication (2FA): Our internal administration system is protected with mandatory two-factor authentication for all staff.
• Regular Security Testing: naga99 conducts regular penetration testing and independent security audits.

The naga99 website uses cookies and similar tracking technologies to enhance your browsing experience and ensure the platform runs smoothly. Cookies are small text files stored on your device by your web browser.

We use three main types of cookies:

• Essential Cookies: Required for basic platform functionality such as maintaining your login session and saving language preferences. These cookies cannot be disabled.
• Performance Cookies: Collect information about how you use the platform to help us identify areas for improvement. All data is collected in aggregate and does not personally identify you.
• Functional Cookies: Allows the platform to remember your preferences such as account settings, display theme, and preferred language to deliver a more personalised experience.

You can manage or delete cookies through your web browser settings at any time. However, disabling essential cookies may affect platform functionality and your gaming experience.

Under Malaysia's PDPA and international best privacy practices, you have the following rights regarding your personal data held by Naga99:

To exercise any of the above rights, please contact our privacy team via live chat on the platform. We will process your request within 30 calendar days of receipt. In complex cases, this period may be extended to 60 days with notice to you.

Naga99 retains your personal data only for as long as necessary to fulfil the purpose of collection or as required by law. Our data retention policy is as follows:

• Active Account Data: Retained for as long as your account is active and for a period of 7 years after account closure, in compliance with Malaysia's financial record-keeping requirements.
• Transaction Records: Retained for a minimum of 7 years from the transaction date as required by Malaysia's financial and tax regulations.
• KYC Records: Retained for 5 years after the business relationship ends, in compliance with applicable AML/CFT requirements.
• Communication Logs: Support chat records and emails are retained for 2 years for dispute resolution and service improvement purposes.
• Marketing Data: If you withdraw your marketing consent, your marketing information will be deleted or anonymised within 30 days.

Once the specified retention period has ended, your data will be securely deleted or permanently anonymised so that it can no longer be linked to you.

Naga99 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements, or service improvements. Each version of the Policy will carry a clear "Updated" date at the top of this document.

When we make significant changes to how we process your data, we will:

• Posting a clear notice on our platform's home page at least 14 days before any changes take effect
• Send notifications to the email address registered to your account
• In cases where changes require fresh consent, we will request your explicit confirmation before proceeding with processing

Continued use of the naga99 platform after any Privacy Policy changes take effect constitutes your acceptance of the updated terms. We encourage you to review this page periodically.

If you have any questions, concerns, or wish to exercise your privacy rights, the naga99 Data Protection Officer (DPO) team is here to help. We are committed to responding to all privacy inquiries within a reasonable working timeframe.

You can reach us through the following methods:

• Live Chat: Available 24/7 via the chat icon in the bottom-right corner of the naga99 platform — this is the fastest way to get a response.
• Privacy Email: [email protected] — for written inquiries that require documentation or a detailed response.
• Help Centre: Visit the FAQ us for answers to frequently asked privacy questions.