Your privacy is fundamental to how naga138 operates. This Privacy Policy explains what personal data we collect, why we collect it, how it is used and protected, and the rights available to you as a registered user of our platform.
These six principles summarise the most important aspects of how naga138 handles your personal data. The full policy below contains the complete legal detail.
All personal data held by naga138 is stored using AES-256 encryption at rest. Data in transit is protected by TLS 1.2 or higher across all platform endpoints, including web, mobile, and API connections.
Naga138 does not sell, rent, or trade your personal data to any third party for marketing purposes. Data shared with third-party service providers is strictly limited to what is necessary for platform operations.
We collect only the data necessary to operate your account, verify your identity, process transactions, and meet our legal obligations. We do not collect surplus personal information beyond what each purpose requires.
Access to personal data within naga138 is restricted to authorised personnel on a strict need-to-know basis. All internal access to user data is logged, monitored, and subject to regular audit.
You may request access to, correction of, or deletion of your personal data at any time. Naga138 will respond to all verified data rights requests within 30 days of receipt, in line with applicable data protection regulations.
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable laws including anti-money laundering and regulatory record-keeping obligations.
This Privacy Policy ("Policy") describes how Naga138 ("we", "us", "our") collects, uses, processes, stores, and discloses personal data in connection with your use of the naga138 online platform — including our website, mobile applications, and all associated services (collectively, "the Platform").
Naga138 is committed to protecting the privacy and personal data of all users, including registered players across Malaysia — from Kuala Lumpur and Petaling Jaya to Penang, Johor Bahru, Shah Alam, and beyond. This Policy is designed to be transparent, straightforward, and compliant with applicable personal data protection legislation.
This Policy should be read alongside our Terms & Conditions and Responsible Gambling Policy. By registering an account or continuing to use the Platform, you acknowledge that you have read and understood this Policy and consent to the data practices described herein.
For the purposes of this Policy, the following definitions apply:
This Policy applies to all personal data processed by naga138 in connection with:
This Policy applies to all Users of the Platform regardless of the device used to access it (desktop browser, Android app, or iOS app) and regardless of the User's location within Malaysia or elsewhere.
When you register an account on the Platform, we collect: your full legal name, date of birth, residential address, email address, Malaysian mobile phone number, and preferred currency (MYR). This information is required to create and administer your account.
Prior to processing withdrawals or as otherwise required, we collect KYC documentation, which may include: a copy of your Malaysian identity document (MyKad, driver's licence, or passport), a proof of address document (utility bill, bank statement, or government correspondence dated within 3 months), and in some cases, a photograph or selfie for identity confirmation purposes.
We collect and retain records of all financial transactions conducted through the Platform, including: deposit amounts, withdrawal amounts, payment method identifiers (e.g., masked bank account numbers, e-wallet identifiers), transaction timestamps, and betting and gaming activity records.
We automatically collect certain technical information when you access the Platform, including: IP address, device type and operating system, browser type and version, session timestamps, geolocation data (at the city or country level, where available), and platform navigation data.
Where you contact our support team via live chat or email, we retain records of those communications, including the content of messages, timestamps, and any attachments submitted, for quality assurance, training, and dispute resolution purposes.
Where you have opted in to receive marketing communications, we retain a record of that consent and your stated preferences regarding communication channel and frequency.
| Data Category | Examples | Primary Purpose |
|---|---|---|
| Identity | Name, DOB, address, IC number | Account creation, KYC compliance |
| Contact | Email, mobile number | Account communications, support |
| Financial | Transaction history, payment method refs | Payment processing, AML monitoring |
| Technical | IP address, device ID, browser data | Security, fraud prevention, analytics |
| KYC Documents | MyKad copy, proof of address | Regulatory identity verification |
| Communications | Live chat logs, email correspondence | Support quality assurance, disputes |
| Marketing | Consent records, channel preferences | Promotional communications (opt-in only) |
Naga138 collects personal data through the following means:
Naga138 processes personal data on the following legal grounds:
Naga138 uses the personal data we collect for the following purposes:
To create, maintain, and manage your registered account, including processing login authentication, updating account preferences, and communicating account-related notifications.
To verify your identity and age in compliance with our KYC obligations, and to ensure that all accounts are operated by persons who meet the eligibility criteria set out in our Terms & Conditions — including the minimum age requirement of 21 years.
To process deposits via Malaysian payment methods (FPX, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, BTC, USDT), to execute withdrawal requests, and to maintain accurate financial records of all Platform transactions.
To detect, investigate, and prevent fraudulent activity, money laundering, account takeover attempts, bonus abuse, and other prohibited conduct. This includes automated risk scoring systems and real-time transaction monitoring.
To respond to your queries, complaints, and support requests submitted via live chat or email, and to maintain records of those interactions for quality assurance and dispute resolution purposes.
To fulfil obligations imposed by applicable laws and regulatory authorities, including the filing of required reports, responding to lawful requests from regulatory bodies or law enforcement agencies, and maintaining mandatory records.
To monitor gaming behaviour for indicators of problem gambling, to apply self-exclusion or account restriction measures where requested or required, and to enforce the Platform's responsible gambling policies.
To analyse aggregated and pseudonymised usage data to improve Platform performance, user experience, and product features. Individual user profiles are not constructed for this purpose without separate consent.
Where you have provided explicit consent, to send you information about promotions, bonus offers, and Platform updates. You may opt out of marketing communications at any time by contacting our support team or updating your account preferences.
Naga138 does not sell, rent, or trade your personal data to third parties for commercial gain. We may share your personal data in the following limited circumstances:
Cookies are small text files placed on your device when you access the Platform. They allow the Platform to recognise your device across sessions, maintain login state, remember preferences, and collect analytics data. Cookies do not access other data stored on your device and cannot run programs or deliver viruses.
You may configure your browser to refuse non-essential cookies or to alert you when cookies are being placed. Please note that disabling certain cookies may affect the functionality of the Platform, including the ability to maintain a logged-in session. Instructions for managing cookies vary by browser — consult your browser's help section for guidance.
Naga138 implements a comprehensive set of technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, destruction, or accidental loss. These measures include:
Notwithstanding these measures, no method of data transmission over the internet or electronic storage system is entirely secure. Naga138 cannot guarantee absolute security and accepts no liability for unauthorised access to personal data resulting from circumstances beyond our reasonable control.
Naga138 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, subject to any overriding legal, regulatory, or contractual retention requirements. The following general retention principles apply:
Where data is no longer required, it is securely deleted or anonymised in accordance with our internal data deletion procedures. Anonymised or aggregated data that cannot be linked to an individual may be retained indefinitely for analytics and reporting purposes.
In operating the Platform and fulfilling its contractual and legal obligations, naga138 may transfer personal data to data processors and service providers located outside Malaysia. Where such transfers occur, naga138 ensures that adequate safeguards are in place to protect your personal data, including standard contractual clauses or equivalent data protection mechanisms approved under applicable law.
Naga138 does not transfer personal data to jurisdictions that do not provide an adequate level of data protection without first implementing appropriate safeguards as described above.
As a user of the Platform, you have the following rights in relation to your personal data. To exercise any of these rights, please contact our support team via the contact details in Section 17.
You may request a copy of the personal data naga138 holds about you, together with information about how it is used.
You may request correction of any inaccurate or incomplete personal data held about you on the Platform.
You may request deletion of your personal data where it is no longer necessary, subject to overriding legal retention obligations.
You may request that we restrict the processing of your data in certain circumstances, for example while a rectification request is pending.
Where processing is based on consent or contract, you may request a copy of your data in a structured, machine-readable format.
You may object to processing based on legitimate interests or for direct marketing purposes. Marketing objections will be actioned promptly.
The Platform is strictly intended for persons aged 21 years and above. Naga138 does not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from a person under the minimum age, we will take immediate steps to delete that data and close the associated account.
If you believe a person under 21 has registered an account or submitted personal data on the Platform, please contact our support team immediately so that appropriate action can be taken.
The Platform may reference third-party services (such as payment processors or identity verification providers) in the course of its operation. Naga138 is not responsible for the privacy practices of any third-party service accessed in connection with the Platform. Users are encouraged to review the privacy policies of any third-party service providers they interact with separately.
Data shared with third-party processors engaged by naga138 is governed by written data processing agreements, as described in Section 8 of this Policy. Naga138 is not responsible for how third parties that are not processors (e.g., external sites accessed independently by users) handle personal data.
Naga138 may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or Platform functionality. Where changes are material, we will notify registered Users via the email address held on their account at least 14 days before the changes take effect, or by displaying a prominent notice on the Platform.
The "Last Updated" date at the top of this page indicates when the most recent version was published. Continued use of the Platform following the effective date of any updated Policy constitutes your acceptance of the revised terms. If you do not agree to the updated Policy, you may request account closure in accordance with the Terms & Conditions.
If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data, please contact the Naga138 privacy team through the following channels:
When submitting a data rights request, please include your full registered name, account username, and a clear description of the data or request in question. Naga138 will verify your identity prior to processing any request that involves access to, modification of, or deletion of personal data.
Naga138 handles your personal data with care, transparency, and respect. If you have questions about your data before registering, our 24/7 support team is ready to answer them. For players aged 21 and above only.
🔞 Gambling can be addictive. Play responsibly. 21+ only.