Privacy Policy naga1001 – Our Commitment to Protecting the Personal Data of Malaysian Players

This Privacy Policy is published by naga1001, an online Sports Betting and casino platform operating under the domain naga1001.best. This document explains in detail how naga1001 collects, processes, stores, and protects your personal information as a user or member of our platform.

Naga1001 is committed to complying with Malaysia's Personal Data Protection Act 2010 (PDPA) and all related regulations in force in Malaysia across every aspect of member personal data handling. We understand that your trust in naga1001 depends not only on the quality of our games and services, but also on how responsibly we manage your personal information.

By registering an account with naga1001 or using any of our services, you consent to the collection and use of your personal information as described in this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of the naga1001 platform and contact us to close your account.

Naga1001 collects your personal information through several means — information you provide directly during registration and platform use, as well as information collected automatically through platform technology. Below is a full breakdown of the data categories we collect:

Naga1001 does not collect sensitive information such as biometric data, health information, or data relating to religious beliefs unless specifically required by law and with your explicit consent.

Naga1001 uses the personal information collected solely for the following legitimate purposes necessary for platform operations:

• Account management: Creating and maintaining your naga1001 account, verifying your identity, processing deposits and withdrawals via Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, and FPX, and providing access to all platform services.
• Legal compliance: To fulfil Malaysian legal requirements, including the Anti-Money Laundering, Anti-Terrorism Financing and Proceeds of Unlawful Activities Act 2001 (AMLATFPUAA), which requires us to verify member identities and maintain transaction records.
• Fraud prevention and security: Detecting and preventing fraudulent activity, multi-account usage, money laundering, and other security threats against the naga1001 platform and its members.
• Responsible gaming: Monitoring gameplay patterns to identify signs of problem gambling and providing appropriate support to members who may need assistance.
• Customer support: Handling member enquiries, complaints, and support requests more effectively using relevant account history as context.
• Service communications: Sends important notifications relating to your account, such as deposit confirmations, withdrawal approvals, changes to terms, or critical security information.
• Marketing (with consent): Sending members information about naga1001 promotions, bonuses, and the latest offers, where members have consented to receive marketing communications. You may withdraw this consent at any time.
• Platform improvements: Analysing how members use the naga1001 platform to improve its design, speed, and overall user experience.

Naga1001 does not share your personal information with third parties except in the following limited circumstances, and always with appropriate contractual safeguards in place:

• Payment service providers: Transaction information required for processing is shared with Malaysian payment service providers such as Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, and FPX solely for the purpose of processing your deposits and withdrawals. These providers are bound by strict confidentiality agreements.
• Game service providers: Game data required for gameplay is shared with third-party game providers (such as Evolution, Pragmatic Play, and PG Soft) to enable access to their games. These providers receive only the minimum data necessary for game operations.
• Relevant authorities: naga1001 will disclose personal information to Malaysian authorities when required by law, court order, or official request from a law enforcement agency. We will notify you of such requests unless prohibited from doing so by law.
• Technical service providers: Limited information may be shared with technical infrastructure providers (cloud computing, cybersecurity) that support naga1001's platform operations. All such providers are bound by data processing agreements compliant with Malaysia's PDPA.

Naga1001 invests seriously in security infrastructure to protect members' personal data from unauthorised access, loss, damage, or disclosure. Below are the key security measures we have in place:

• 256-bit SSL/TLS encryption: All communications between your browser or app and naga1001's servers are encrypted using 256-bit SSL/TLS protocols. This ensures that no third party can read or tamper with your data in transit.
• Encryption of stored data: Sensitive information including payment details and passwords is stored in encrypted format — passwords are never stored in plain text. Even in the event of a data breach, this information cannot be read without the encryption key.
• Two-factor authentication (2FA): naga1001 offers two-factor authentication for member accounts — an additional layer of security that ensures only you can log in to your account, even if your password becomes known to someone else.
• 24/7 security monitoring: naga1001's systems are continuously monitored by a cybersecurity team to detect suspicious activity, intrusion attempts, or anomalies that may indicate a threat to member data.
• Internal access controls: Access to member personal data within naga1001 is restricted to staff who require it to perform their duties, based on the principle of minimum access rights. Access logs are maintained and audited on a regular basis.
• Regular penetration testing: naga1001 conducts regular security testing and vulnerability assessments by independent security experts to identify and address any system weaknesses before they can be exploited.

While naga1001 takes all reasonable steps to protect your data, no system can be guaranteed 100% secure. In the event of a security incident involving your personal data, naga1001 will notify you within the timeframe required by applicable Malaysian law and take immediate action to minimise the impact of the incident.

Naga1001 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit the naga1001 platform. Below are the types of cookies we use:

• Essential cookies: Required for core naga1001 platform functions such as login, session security, and navigation. These cookies cannot be disabled without affecting platform functionality.
• Preference cookies: Stores your preferences such as language, display settings, and login information to streamline your experience on future visits.
• Analytics cookies: Helps naga1001 understand how members use the platform — most frequently visited pages, session duration, and navigation patterns. This information is used in aggregate form and does not identify any individual.
• Security cookies: Helps detect and prevent fraudulent activity, bots, and unauthorised access attempts to naga1001 member accounts.

You can manage cookie settings through your web browser. However, disabling essential cookies may affect the functionality of the naga1001 platform. For more information on managing cookies in popular browsers, please refer to your browser's help documentation.

Naga1001 retains your personal information for as long as necessary to fulfil the original purpose for which it was collected and to comply with applicable Malaysian legal requirements. The following outlines our data retention guidelines:

• Active account data: Retained for the duration your naga1001 account remains active and for 7 years following account closure, in accordance with Malaysian financial compliance legal requirements.
• Financial transaction records: Retained for a minimum of 7 years from the transaction date, as required by AMLATFPUAA and Malaysian tax laws.
• Security logs: Retained for 12 months for fraud detection and security incident investigation purposes.
• Customer support communication data: Retained for 3 years for reference and dispute resolution purposes.
• Analytic cookie data: Deleted or anonymised after 13 months.

Once the retention period has lapsed and there is no longer any legal requirement to retain the data, naga1001 will securely delete or anonymise your personal data using methods that comply with industry standards.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by naga1001:

To exercise any of the above rights, please contact the naga1001 support team via Live Chat or email at support@naga1001.best stating the type of request and the relevant details. naga1001 will process your request within 14 business days. In certain cases, we may require identity verification before proceeding.

Please note that these rights are subject to limitations where they conflict with our legal obligations — for example, we are unable to delete transaction records that Malaysian financial laws require us to retain. In such cases, we will explain the reasons for the limitation to you.

The naga1001 platform is exclusively for individuals aged 18 and above. naga1001 does not knowingly collect or process personal information from individuals under the age of 18.

If naga1001 discovers that personal information belonging to an individual under the age of 18 has been collected without proper age verification, we will take immediate steps to delete that information and close the relevant account. Any deposits made by an underage individual will be refunded to the original payment method in full, with no deductions.

Naga1001 reserves the right to amend this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements, or changes to the services we offer. All amendments will be published on this page with an updated "Last Updated" date.

For material amendments — such as changes to how we use your personal information or the addition of new data categories — naga1001 will endeavour to notify you via email or in-platform notification at least 14 days before the changes take effect. This gives you sufficient time to review the updates and, if necessary, close your account before they come into force.

Your continued use of the naga1001 platform after any amendment to this Privacy Policy takes effect constitutes your acceptance of the revised Policy. We encourage you to review this page periodically to stay informed of how naga1001 protects your personal information.

If you have any questions, concerns, or complaints regarding how naga1001 handles your personal information, or if you wish to exercise any of the privacy rights set out in this Privacy Policy, please contact us through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week, directly within the naga1001 platform. This is the fastest channel for general privacy-related enquiries.
• Privacy Email: support@naga1001.best — for official privacy rights requests, privacy concern reports, or formal complaints. Please include "Privacy Request" in the subject line of your email.

Naga1001 is committed to addressing all privacy-related enquiries and complaints seriously and within a reasonable timeframe. Formal requests relating to privacy rights (access, correction, deletion) will be processed within 14 business days from the date a complete request is received.

If you are not satisfied with naga1001's response to your privacy complaint, you have the right to lodge a complaint with the Malaysian Personal Data Protection Commissioner under the provisions of the Personal Data Protection Act 2010.