🔐 OFFICIAL DOCUMENT

Naga Win Privacy Policy – Personal Data Protection for Malaysian Members

Your privacy is not merely a legal obligation to us — it is a moral responsibility. This page clearly and transparently explains how Naga Win collects, uses, stores, and protects your personal information.

Updated: 1 January 2026
Compliant with Malaysia's PDPA 2010
Military-Grade Encryption

All data transmitted between your device and Naga Win's servers is protected by 256-bit SSL encryption — the same standard used by Malaysia's leading banks.

Full Data Control

You have the right to access, correct, transfer, or request the deletion of your personal data at any time through your account settings or by contacting our support team.

No Sale of Data to Third Parties

Naga Win has never and will never sell, rent, or trade members' personal data to any third party for marketing purposes without your consent.

Malaysia PDPA Compliance

This privacy policy is prepared in accordance with the requirements of Malaysia's Personal Data Protection Act (PDPA) 2010, ensuring that your legal rights as a user are fully protected.

Secure & Properly Stored Servers

Your data is stored in certified data centres equipped with 24/7 intrusion detection systems, automatic backups, and strict physical and digital access controls.

Data Breach Notification

In the event of any security incident affecting your data, Naga Win is committed to notifying you within 72 hours of becoming aware of the incident.

This Privacy Policy ("Policy") describes Naga Win's ("we", "platform") practices regarding the collection, use, disclosure, and protection of your personal information. It applies to all users accessing the nagawin.wine website and our mobile application. By using our services, you acknowledge that you have read and understood this Privacy Policy.

1Introduction

Naga Win understands that your trust is our most valuable asset. Whether you are registering an account, making a deposit via Touch 'n Go eWallet or Maybank2u, or simply browsing our platform to check the latest Malaysia Super League match odds, you are entrusting us with part of your personal information — and we take that trust very seriously.

This Privacy Policy is prepared in accordance with Malaysia's Personal Data Protection Act (PDPA) 2010 and internationally recognised data protection principles. We are committed to ensuring that every action we take in relation to your data is lawful, fair, transparent, and purpose-driven.

Naga Win has appointed a Data Protection Officer responsible for ensuring full compliance with this policy across all levels of platform operations. If you have any questions or concerns about how we handle your data, our Data Protection Officer is reachable at any time via privacy@nagawin.wine.

2Information We Collect

Naga Win collects information in two main ways: information you provide directly, and information collected automatically when you use our platform.

A. Information You Provide Directly
Data CategoryExamplePrimary Purposes
Identity InformationFull name, date of birth, IC/passport numberAccount verification & KYC
Contact InformationEmail address, phone number, mailing addressCommunication & security
Financial InformationBank account numbers, e-wallets (Touch 'n Go, GrabPay)Transaction processing
Account InformationUsername, password (encrypted), game preferencesAccount Management
CommunicationLive chat support transcripts, emails sent to usCustomer Support
B. Information Collected Automatically
  • Technical Data: IP address, browser type and version, device type, operating system, and time zone settings.
  • Usage Data: Pages you visit, time spent on each page, bets placed, game types played, and sports most frequently browsed.
  • Location Data: General location based on your IP address (not GPS), used for geo-access control and fraud detection purposes.
  • Cookie Data: Session information, your preferences, and analytics data collected through cookies and similar technologies (further detail in Section 7).

3How We Use Your Data

Naga Win only uses your personal data for legitimate and specific purposes. We will not use your data for any other purpose without first obtaining additional consent from you. The following are the primary purposes for which data is used:

  • Account Management: Creating and managing your account, processing registration, and verifying your identity in accordance with anti-money laundering (AML) requirements.
  • Transaction Processing: Processing deposits via DuitNow, FPX, Boost, ShopeePay, and other methods, as well as managing withdrawals to your bank account or e-wallet.
  • Service Provision: Enabling you to access all features on the Naga Win platform, including Sports Betting, table games, slots, and Live Casino.
  • Security & Fraud Prevention: Detecting and preventing fraudulent activity, multi-account usage, or any form of platform abuse.
  • Service Communications: Sending important notifications regarding your account, changes to our terms, or technical issues that require your attention.
  • Marketing (with consent): Sending you information about Naga Win's latest promotions, bonuses, and offers — only if you have agreed to receive them.
  • Platform Improvements: Analysing usage patterns in aggregate (not at the individual level) to improve the user experience and develop new features.
  • Legal Compliance: Meeting legal obligations, complying with court orders, and cooperating with competent authorities when required.

Naga Win does not make any significant decisions affecting you (such as account suspension) in a fully automated manner. Every case flagged by our automated systems is reviewed by our human team before any action is taken.

4Legal Basis for Data Processing

Under the Malaysia PDPA and recognised data protection principles, Naga Win processes your personal data on the following legal bases:

Contract Performance

Processing necessary to fulfil the service agreement between you and Naga Win (account management, transactions).

Your Consent

For marketing communications and optional cookies — only with your explicit consent.

Legal Obligation

Compliance with PDPA requirements, AML obligations, and other applicable legal requirements in Malaysia.

Legitimate Interests

To prevent fraud, maintain platform security, and improve our services — provided these interests do not override your rights.

5Information Sharing

Naga Win does not sell, rent, or trade your personal data. However, under certain limited circumstances, we may share your information with the following parties:

  • Payment Service Providers: Financial institutions and e-wallet operators (such as FPX processors, Touch 'n Go, GrabPay, Boost, ShopeePay, Maybank2u, CIMB Clicks) required to securely process your financial transactions.
  • Game Software Providers: Third-party game software providers that power games on our platform (slots, Live Casino) may receive the minimum session data necessary for functionality.
  • Identity Verification Services: KYC (Know Your Customer) service providers to verify your identity during registration or large withdrawal processes.
  • Authorities & Law Enforcement: When required by law, court order, or to protect the legal rights of Naga Win and its users.
  • Analytics & Security Providers: Analytics and cybersecurity services that help us monitor platform performance and detect security threats.

All third parties we work with are required to uphold data protection standards equivalent to or higher than our own, and are not permitted to use your data for any purpose beyond what we have specified.

Important Reminder: Naga Win will not share your health information, full identity document details, or sensitive financial information with any party without a compelling legal requirement or your explicit consent.

6Data Storage & Security

Naga Win implements multiple layers of technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, or disclosure.

Naga Win's Security Layers
1
256-bit SSL Encryption

All data communication between your browser or app and our servers is encrypted using TLS 1.3, ensuring no third party can read your data in transit.

2
Database-Level Data Encryption

Sensitive data such as passwords is stored in an unreadable hashed format (bcrypt). Financial information is stored encrypted using AES-256.

3
Two-Factor Authentication (2FA)

Naga Win offers 2FA via SMS or an authenticator app for all accounts, adding an extra layer of protection even if your password is compromised.

4
24/7 Security Monitoring

Our cybersecurity team continuously monitors platform activity using intrusion detection systems (IDS) and real-time threat intelligence.

5
Internal Access Controls

Only authorised personnel with a legitimate business need may access members' personal data. All access is logged and audited on a regular basis.

Data Retention Period

Naga Win retains your personal data only for as long as necessary for the purposes outlined in this policy, or as required by law. Generally, active account data is kept for the duration the account remains active plus 7 years following account closure, in line with Malaysia's anti-money laundering legal requirements. Data that is no longer needed will be securely deleted or anonymised.

7Cookies & Tracking Technologies

Naga Win uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our platform.

Cookie TypePurposeDurationDeniable?
Mandatory Session Cookies Keeping you logged in during an active session Session only No — the platform cannot function without it
Mandatory Security Prevention of CSRF and security attacks Session only No
Function Preferences Saving your language preferences and favourite sports 1 year Yes
Analytics Usage Understanding how the platform is used (aggregate data) 2 years Yes

You can manage your cookie settings through your browser at any time. However, disabling essential cookies may affect platform functionality. For more information on how to manage cookies in your browser, refer to your browser's help documentation.

8Your Rights

As a Naga Win member and under Malaysia's PDPA, you have the following rights regarding your personal data:

Right of Access

Request a copy of the personal data we hold about you.

Right to Rectification

Request that we correct any inaccurate or incomplete data.

Right to Erasure

Request the deletion of your data (subject to legal obligations).

Right to Restriction

Request that we restrict the processing of your data under certain circumstances.

Right to Portability

Request your data in a machine-readable format for portability purposes.

Right to Object

Object to the processing of your data for direct marketing purposes at any time.

To exercise any of these rights, contact our Data Protection Officer at privacy@nagawin.wine. We will respond within 30 calendar days. For complex cases, this period may be extended by up to 60 days, with prior notice to you.

9Cross-Border Data Transfers

In the course of operating the platform, your personal data may be transferred to and processed in countries other than Malaysia, particularly where our service providers are based. When data is transferred outside Malaysia, Naga Win ensures that adequate and equivalent protections are in place, including:

  • Legally binding data processing agreements with all recipients of data transferred overseas.
  • Ensuring that the recipient country has data protection laws deemed adequate.
  • Using recognised standard contractual clauses to safeguard your rights.

10Children's Privacy

The Naga Win platform is strictly for individuals aged 18 and above. We do not knowingly collect personal data from children or minors. Should we discover that a child's data has been collected without our knowledge, we will promptly delete that data and close the account in question.

If you are a parent or guardian and believe your child has registered on Naga Win, please contact us immediately at privacy@nagawin.wine or via our live chat support. We will act promptly.

11Changes to the Privacy Policy

Naga Win reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, new technologies, legal requirements, or other operational reasons. When we make material changes, we will:

  • Updating the "Last Updated" date at the top of this page.
  • Sending notifications to your registered email address for significant changes.
  • A clear notice will be displayed on the platform for at least 30 days following any changes.

We encourage you to review this page periodically. Your continued use of the Naga Win platform after any changes are published constitutes your acceptance of the latest version of this Privacy Policy.

12How to Contact Us

If you have any questions, concerns, or wish to exercise your rights under this Privacy Policy, you can reach Naga Win through:

Privacy Email

Privacy@nagawin.wine
Response within 2–5 business days

Live Chat

Available 24/7 on the platform
For issues requiring an immediate response

You also have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia if you believe that Naga Win has violated your privacy rights and we have failed to resolve your concerns to your satisfaction.

Frequently Asked Questions – Privacy Policy

Absolutely not. Naga Win has never and will never sell, rent, or trade members' personal data to any advertiser or third party for marketing purposes. Your data is used solely to provide platform services and fulfil legal obligations. If you receive any marketing communications from us, it is because you gave explicit consent during registration or updated your account settings accordingly.

You may request data deletion by contacting privacy@nagawin.wine or via live chat support. Please include your username and registered phone number. Note that we may be legally required to retain certain records for a specified period (for example, financial records for 7 years under Malaysian law). Data not subject to such legal requirements will be deleted or anonymised within 30 days of receiving your request.

Yes. When you make a deposit via Touch 'n Go eWallet, GrabPay, or any other payment method, the transaction is processed by licensed payment providers, each with their own security standards. Naga Win does not store your bank card information or full e-wallet account details. We only receive transaction confirmation from the payment provider. All data communication is encrypted with 256-bit SSL.

Yes, you can withdraw your consent at any time in three ways: (1) click the "Unsubscribe" link at the bottom of any of our marketing emails, (2) update your communication preferences in your account settings, or (3) contact our support team. Unsubscribe requests will be processed within 3–5 business days. Please note that this only affects marketing communications — we will still send important service emails relating to your account.
🔒

Your Data Is Safe. Now Let's Play!

You now know how Naga Win safeguards your privacy. Register with confidence and enjoy Malaysia's best betting experience with complete peace of mind.

By registering, you agree to the Terms & Conditions and Naga Win's Privacy Policy.

Bahasa Melayu