Privacy Policy Naga15 — Player Data Protection Malaysia

Naga15 ("we", "Platform" or "naga15") is the owner and operator of an online gaming platform accessible at naga15.my and through our mobile app. This Privacy Policy explains how we collect, use, store and protect your personal information ("personal data") when you use our services.

We care about your privacy. We understand that trust is the foundation of the relationship between a gaming platform and its users, and that trust begins with how responsibly and transparently we handle your personal information.

This Privacy Policy is designed to comply with Malaysia's Personal Data Protection Act 2010 (PDPA) and applicable international data protection standards. It applies to all players who register and use the naga15 platform, regardless of their geographical location.

Naga15 collects your personal data through several means depending on how you interact with our platform. The following are the types of data we may collect:

A. Data You Provide Directly

• Registration information: Full name, date of birth, phone number, email address, username and password.
• KYC information: A copy of your identity card (MyKad), identity card number, a verification selfie, and other supporting documents required for identity verification.
• Financial information: Bank account number, bank name, e-wallet details for deposit and withdrawal purposes.
• Support communications: The content of your conversations with our customer support team via live chat, email or any other communication channel.

B. Data Collected Automatically

• Device information: Device type, operating system, app version, unique device identifier.
• Network information: IP address, estimated location, internet service provider name.
• Platform activity data: Game history, wagering records, deposit and withdrawal transactions, login session times and duration.
• Cookie and tracking data: Session cookies, preference cookies, platform usage analytics data.

Naga15 uses the personal data collected for legitimate and necessary purposes in order to operate our platform effectively. We do not use your data for any purposes beyond those stated here without first obtaining your consent.

• Account management: Creating, verifying and managing your player account, including the login process, account security and password recovery.
• Identity verification (KYC): Fulfilling legal obligations to verify player identity prior to processing withdrawals.
• Financial transaction processing: Processing deposits, withdrawals and all financial transactions related to your account.
• Customer support: Providing technical assistance and resolving queries or complaints you submit to our support team.
• Fraud prevention and security: Identifying and investigating suspicious activity, fraud or money laundering that may involve your account.
• Platform improvements: Analysing usage patterns to enhance the user experience, improve existing features and develop new ones.
• Marketing communications: Sending information about relevant promotions, bonuses and special offers (only where you have given consent to receive such communications).
• Legal compliance: Meeting reporting and compliance obligations under applicable Malaysian laws.

Naga15 does not sell, rent or trade your personal data to any third party for their own marketing purposes. However, in the course of operating the platform, we may share your personal data with certain parties in limited and controlled situations as follows:

Authorised Service Providers

We work with third-party service providers who assist us in operating the platform — such as payment processing providers, identity verification companies and cloud service providers. These providers are only permitted to use your data for specific purposes related to the services they provide to us, and they are bound by strict confidentiality agreements.

Game Providers

Game provider companies that host games on the naga15 platform may receive limited technical data (such as game session identifiers) necessary to operate the games properly. These providers do not receive your full personal information.

Legal Obligations

Naga15 may disclose your personal data to Malaysian authorities when required by law, court order or in the context of an official investigation relating to unlawful activity. Such disclosure does not require your prior consent.

Protecting your personal data is naga15's highest priority. We implement multiple layers of technical and organisational security to ensure your data remains safe at all times.

Technical Security

• 256-bit SSL encryption for all data transmitted between your device and our servers.
• Sensitive data stored in our database is encrypted using industry-standard encryption algorithms.
• Two-factor authentication (2FA) for account login as an additional layer of security.
• Web application firewall (WAF) and intrusion detection system (IDS) operating 24 hours a day.
• Regular security audits by independent third parties to identify and address any vulnerabilities.

Organisational Security

• Access to players' personal data is restricted to staff who require it to carry out their duties.
• All staff with access to personal data undergo regular data protection training.
• Clear security incident response procedures to ensure any data breach is handled promptly and effectively.

Naga15 retains your personal data only for as long as necessary for the purposes stated in this Privacy Policy, or for as long as required by applicable Malaysian law.

• Active account data: Retained for as long as your account is active on the naga15 platform.
• Financial transaction data: Retained for a minimum of 7 years in accordance with legal requirements relating to financial reporting and anti-money laundering.
• KYC Data: Retained for the duration of the active account and up to 5 years after account closure, subject to legal compliance requirements.
• Support communication logs: Retained for 2 years for reference and dispute resolution purposes.
• Usage analytics data: Stored in anonymous form with no specific time limit after data is separated from personally identifiable information.

When the retention period expires and there is no legal requirement to continue storing it, your personal data will be securely deleted or anonymised using industry-standard procedures.

The naga15 platform uses cookies and similar tracking technologies to enhance your experience, manage your login sessions, and understand how players use our platform.

Types of Cookies We Use

• Essential Cookies: Required for core platform functions such as login session management and security. These cookies cannot be disabled.
• Preference Cookies: Saving your preferences such as language, display mode and game preferences so you do not need to reconfigure them each time.
• Analytics Cookies: Collecting information about how you use our platform — pages visited, time spent and navigation patterns. This information helps us improve the platform.

You can manage cookies through your browser settings. Disabling certain cookies may affect the functionality of some parts of the platform, including potentially requiring you to log in more frequently.

As a naga15 player residing in Malaysia, you have certain rights under the Personal Data Protection Act 2010 regarding your personal data. We fully respect these rights.

The naga15 platform is strictly for individuals aged 18 and above. We do not intentionally collect or process personal data from individuals under the age of 18. Registration by individuals below this age limit is strictly prohibited.

If we discover that personal data of a child or minor under the age of 18 has been collected without proper age verification, we will take immediate steps to delete that data and close the account in question.

Naga15 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, evolving legal requirements or the addition of new platform features.

When significant changes are made to this Privacy Policy, we will notify you via:

• In-platform notification on naga15 upon your next login.
• Notification email to your registered email address (for changes that materially affect your privacy rights).
• Updates the "Last Updated" date at the top of this page.

Continued use of the naga15 platform after any changes to the privacy policy take effect will be considered your acceptance of the updated policy. If you do not agree with the changes, you may close your account before the changes come into effect.

If you have any questions, concerns or requests regarding this Privacy Policy or how we handle your personal data, the naga15 privacy team is ready to assist you.