Official Policy

Privacy Policy Nagawinn – Malaysian User Data Protection

Your privacy is our priority. This policy explains in detail how Nagawinn collects, uses, stores, and protects your personal information — with full transparency and no confusing language.

Last updated: 1 June 2026  |  Version 3.1
Data Protected
256-bit SSL
Not Sold
No Third Parties
Your Rights Are Clear
Access & Deletion
Plain Language
No Jargon

Simple Summary: nagawinn collects data necessary to operate the platform securely. We do not sell your data to advertisers. Your data is only shared when required for platform operations or as mandated by law. You have the right to access, correct, or request deletion of your data at any time.

1 Introduction & Scope of This Policy

This Privacy Policy explains how nagawinn ("Platform", "We", "Company") collects, processes, stores, and protects the personal information you provide when using our platform — including the nagawinn.app website, Android app, and iOS app.

We take your privacy seriously. This document is written in plain, easy-to-understand language — not filled with confusing legal jargon. Our goal is for you to truly understand what we do with your data, and why.

By registering for or using the nagawinn platform, you agree to the data handling practices described in this Privacy Policy. If you do not agree, please discontinue use of the platform.

2 Types of Personal Data We Collect

Nagawinn only collects data that is strictly necessary to operate the platform securely and deliver the best service. Below is a summary of the data we collect by category:

Data Category Example Information Purpose of Collection
Identity Verification Full name, MyKad number, date of birth KYC verification, fraud prevention
Contact Information Email address, phone number Account communications, notifications
Financial Data Bank account number, bank name, transaction history Deposit & withdrawal processing
Technical Data IP address, device type, web browser, operating system Security, fraud detection
Usage Data Game logs, session duration, games played Platform improvement, responsible gaming
Location Data Country, state (from IP) Geo-restriction compliance

2.1 Data We Do Not Collect

Nagawinn does not store credit/debit card details directly — all card transactions are processed through PCI-DSS certified third-party payment processors. We also do not collect biometric data (except fingerprint/facial recognition used on your own device via the operating system).

3 How We Use Your Data

Every use of your personal data at Nagawinn has a legitimate and specific purpose. We do not use your data in ways you would not expect.

3.1 Platform Operations Purpose

  • Creating and managing your user account
  • Processing deposits and withdrawals securely
  • Verifying identity through the KYC process
  • Detecting and preventing fraudulent activity and money laundering
  • Complying with legal and regulatory obligations

3.2 Service Improvement Purpose

  • Analyzing usage patterns to improve the platform experience
  • Personalizing game recommendations based on your gaming history
  • Monitoring responsible gaming and identifying players who may need assistance
  • Testing and developing new features

3.3 Communications

Nagawinn sends the following communications to users:

  • Required: Transaction notifications, security alerts, terms updates
  • Options: Promotions, bonus offers, platform news (you may unsubscribe at any time)

Your Controls: You can manage your marketing communication preferences at any time through your account settings. Unsubscribing from marketing emails does not affect essential operational communications.

4 Data Sharing with Third Parties

Nagawinn does not sell, rent, or trade your personal data to any party for marketing purposes. Data sharing only occurs in the following situations:

4.1 Operating Partners

Required data may be shared with service providers that help nagawinn operate, including:

  • Payment processors and financial institutions for transaction settlement
  • Third-party identity verification (KYC) service providers
  • Cloud infrastructure provider (servers that store data)
  • Customer support service provider

All of these operational partners are bound by strict data protection agreements and may only use your data for the specified purposes.

4.2 Legal Requirements

Nagawinn may be required to disclose user data to legal authorities when mandated by applicable Malaysian law, in response to a valid court order, or as part of an official investigation.

Important Note: Every instance of data sharing with third parties is conducted on a minimum-necessity basis — only data genuinely required for that purpose is shared.

5 Security Measures & Data Encryption

Nagawinn invests seriously in security infrastructure to ensure your personal data is always protected from unauthorized access, loss, or misuse.

5.1 Encryption

  • 256-bit SSL/TLS: All communications between your device and Nagawinn's servers are fully encrypted
  • Data encryption at rest: Data stored in our databases is encrypted using AES-256 standards.
  • Password Hashing: Your password is never stored in plain text — it is saved as an irreversible hash

5.2 Access Controls

  • Staff access to user data is restricted based on a "need-to-know" principle.
  • All internal access is logged and audited regularly
  • Two-factor authentication is mandatory for all staff accounts

5.3 Continuous Monitoring

Nagawinn's security systems operate 24 hours a day to detect and respond to any threats or suspicious activity in real time.

6 Cookies & Tracking Technologies

Nagawinn uses cookies and similar technologies to enhance the user experience and carry out platform analytics. Below are the types of cookies we use:

6.1 Cookie Types

  • Essential Cookies: Required for core platform functions such as login and session security. These cookies cannot be disabled.
  • Preference Cookies: Saving your settings such as language preference and display mode.
  • Analytics Cookies: Helping us understand how users interact with the platform for continuous improvement.
  • Security Cookies: Used to detect suspicious activity and protect your account.

You can manage cookie settings through your web browser. However, disabling essential cookies may affect platform functionality.

7 Data Retention Period

Nagawinn retains your personal data only for as long as necessary to fulfill the purposes stated in this policy, or as required by applicable law.

  • Active account data: Retained for as long as your account is active.
  • Financial transaction records: Minimum 7 years after the transaction (financial compliance requirement)
  • Security logs: 12 months from the date the log was created
  • Marketing data: Until you unsubscribe or request deletion
  • After account closure: Core data is retained for 5 years for legal compliance purposes.

When data is no longer needed and the retention period has expired, it will be securely deleted or anonymised in accordance with established procedures.

8 Your Rights as a User

As a Nagawinn platform user, you have the following rights regarding your personal data. We are committed to making it easy for you to exercise these rights.

Right of Access

Request a copy of all personal data we hold about you in a readable format.

Right to Rectification

Request correction of inaccurate or incomplete data in our records.

Right to Erasure

Request deletion of your personal data, subject to legal retention obligations.

Right to Restriction

Request that we restrict the processing of your data in certain situations while under review.

Right to Data Portability

Receive your data in a structured format that can be transferred to another platform.

Right to Object

Object to the processing of your data for direct marketing purposes at any time.

How to Exercise Your Rights: Contact our privacy team via email at [email protected] or through the live chat in the app. We will respond to requests within 30 business days.

9 Cross-Border Data Transfers

Your personal data may be stored and processed on servers located partially outside Malaysia, depending on the cloud infrastructure we use. In all cases, nagawinn ensures such data transfers comply with data protection standards equivalent to or higher than Malaysia's requirements.

Appropriate data transfer agreements, including standard contractual clauses, are in place to ensure your data is protected when processed outside Malaysia.

10 Children's Privacy

The Nagawinn platform is exclusive to individuals aged 18 and above. We do not accept registrations from underage individuals and do not knowingly collect personal data from children.

If we discover that personal data of individuals under the age of 18 has been collected without our knowledge, we will take immediate steps to delete that data and close the account in question. If you believe your child has registered on our platform, please contact our support team immediately.

11 Amendments to This Privacy Policy

Nagawinn may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or platform operations.

When significant changes occur, we will:

  • Updating the "Last Updated" date at the top of this page
  • Sending notifications to all registered users via email or in-app notifications
  • Displaying clear change notices on the platform for a minimum of 14 days

Continued use of the platform after any amendments take effect will be considered acceptance of the updated policy. We encourage you to review this page periodically.

12 Contact Our Privacy Team

If you have any questions, concerns, or wish to exercise your privacy rights, our team is ready to assist. We are committed to responding to all privacy-related inquiries within a reasonable timeframe.

How to Contact Us

  • Email: [email protected] (mark subject as: "Privacy Inquiry")
  • Live Chat: Available 24/7 via the chat icon within the platform or app
  • Response Time: Privacy inquiries are prioritised and answered within 3–5 business days

Official Complaints: If you are not satisfied with our response, you have the right to lodge a complaint with the relevant data protection authority in Malaysia.

How nagawinn Protects Your Information

Data protection is not merely a legal obligation for us — it is a core part of the trust you place in Nagawinn.

End-to-End Encryption

Every bit of data transmitted between your device and our servers is protected with the same 256-bit SSL encryption used by leading banking institutions.

Data at Rest Encrypted

Data stored in our databases is not kept in plain text. All sensitive information is encrypted using AES-256 before being stored.

Strict Access Control

Only staff who require access to specific data are permitted. All internal access is logged and periodically audited by the security team.

Data Not Sold

Nagawinn never sells, rents, or trades your personal data to advertisers or third parties for marketing purposes.

Full Communication Control

You have full control over the types of communications you receive. Disable any notification category without affecting your account functionality.

Standards Compliance

Nagawinn's data protection practices comply with the latest industry standards and applicable legal requirements for digital financial platforms.

Your Privacy Protected. Our Platform Secured.

Register a nagawinn account and play with peace of mind — knowing your personal data is protected to the highest security standards at all times.

Register a Free Account Terms & Conditions
Bahasa Melayu