1 Introduction & Scope of This Privacy Policy
Naga303 ("we", "Platform") are committed to protecting the privacy of every individual who uses our platform. This Privacy Policy describes our practices regarding the collection, processing, storage, and disclosure of personal information belonging to players who use the Naga303.
This document has been prepared in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and applicable international data protection standards. By registering for or using any of our services Naga303, you acknowledge that you have read and understood this Privacy Policy and agree to the data processing practices described herein.
This Privacy Policy covers only the platforms directly operated by Naga303. It does not cover third-party websites or services that may be linked from our platform.
If you have any questions about how Naga303 handling your personal data before reading this document in full, you are welcome to contact us directly at support@naga303.ws.
2 Personal Information We Collect
Naga303 collects your personal information across various touchpoints — during registration, throughout your use of the platform, during financial transactions, and through your communications with our support team. Below is an overview of the types of data we collect:
| Data Category | Examples of Information | How It Is Collected |
|---|---|---|
| Personal Identity | Full name, date of birth, identity card number (MyKad), gender, nationality | Registration form, KYC process |
| Contact Information | Malaysian mobile number, email address, mailing address | Registration, profile updates |
| Financial Data | E-wallet account numbers (Touch 'n Go, GrabPay), bank account details, deposit and withdrawal history | Payment processing and withdrawal requests |
| Platform Activity Data | Game history, bet types, wager amounts, session duration | Automatically during platform use |
| Technical Data | IP address, device type, operating system, web browser, cookie data | Automatic, standard tracking technology |
| Communications | Support ticket content, live chat logs, emails, feedback | Direct interaction with our team |
We do not collect information that is unnecessary or irrelevant to the purposes stated in this policy. Should you choose not to provide certain information, this may limit your ability to use some of our services Naga303 — for example, you will not be able to make withdrawals without completing the KYC process.
3 How We Use Your Personal Data
Naga303 uses your personal data for the following purposes, all of which have a valid legal basis under Malaysia's PDPA:
- Account management and service delivery — processing registrations, verifying identities, managing player accounts and providing access to all games and services on the Naga303 platform.
- Financial transaction processing — processes deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX, and manages withdrawal requests to players' bank accounts or e-wallets.
- Identity verification and fraud prevention — conducting KYC checks, monitoring suspicious activity, preventing money laundering and ensuring compliance with anti-fraud regulations.
- Customer support — responding to enquiries, resolving complaints and providing technical support to players via Live Chat, Telegram or email in Bahasa Melayu.
- Personalising your gaming experience — suggesting relevant promotions, customising the platform interface and offering tailored deals based on your gaming habits and preferences.
- Responsible gaming — monitors gameplay patterns to identify early signs of problem gambling and reaches out to players who may need assistance.
- Legal compliance — fulfilling reporting obligations to the relevant authorities in accordance with applicable legal requirements.
Marketing Communications: Naga303 will only send you promotional notifications if you have given explicit consent during registration or through your account settings. You may withdraw this consent at any time via the notification settings in your account.
4 Sharing Data with Third Parties
Naga303 does not sell, rent, or trade your personal data to any third party for their marketing or commercial purposes. This is an absolute commitment we do not compromise on.
There are, however, situations where we need to share certain information with carefully selected parties in order to deliver our services to you:
- Payment processor: Information required to process deposits and withdrawals via Malaysian e-wallets (Touch 'n Go, GrabPay, Boost, ShopeePay) or FPX is shared with the relevant payment processors. This data is the minimum necessary and is used solely for transaction purposes.
- Game software provider: Session and game data may be shared with game providers (such as slots providers or live casino platforms) as required for game delivery. These providers are not permitted to use this data for any other purpose.
- IT support service provider: Companies that assist us with hosting, security analytics, and technical infrastructure may have limited access to certain data within the scope of their work.
- Competent authorities: Naga303 will disclose the required information when mandated by law, court order, or lawful directive from a Malaysian law enforcement authority.
All third parties with access to player data Naga303 are bound by strict confidentiality agreements and are required to uphold data protection standards equal to or higher than our own.
5 Data Security & Protection Measures
Naga303 continuously invests in security infrastructure to ensure your personal and financial data remains protected at all times. Our security measures include:
- 256-bit SSL/TLS Encryption for all data transmitted between your device and Naga303's servers — meaning no one can intercept or read your data in transit.
- Encrypted password storage using strong one-way hashing algorithms. We do not store your password in plain text — even our own internal team cannot read your password.
- Two-factor authentication (2FA) available on all accounts as an added layer of protection at login.
- 24/7 security monitoring by our cybersecurity team, who monitors for any unusual activity or unauthorised access attempts.
- Regular penetration testing by independent security auditors to identify and address any system vulnerabilities before they can be exploited.
- Role-based access control — only Naga303 staff who require access to specific data to carry out their authorised duties are permitted to do so, with full audit logs maintained.
While we take all reasonable steps to protect your data, no digital security system can guarantee 100% protection under all circumstances. We therefore also encourage you to use a strong password, never share your login credentials, and notify us immediately if you suspect any unauthorised activity on your account.
6 Cookies, Tracking Technologies & Analytics
Platform Naga303 uses cookies and similar tracking technologies to enhance the user experience, understand usage patterns and ensure the platform functions correctly. The types of cookies we use are as follows:
- Session Cookies: Temporary cookies required to maintain your login session and ensure the platform functions correctly while you are using it. These cookies are automatically deleted when you close your browser.
- Preference Cookies: Saving your personal settings and preferences — such as interface language and game configuration — so you do not have to reconfigure them each time you log in.
- Analytics Cookies: Used internally to understand how players use the platform, which pages are most frequently visited, and where users encounter difficulties — this information helps us improve the platform.
- Security Cookies: Helps us detect suspicious activity, prevent cross-site request forgery (CSRF) attacks and protect your account.
You may manage or delete cookies through your browser settings at any time. However, disabling certain cookies may affect the functionality of the Naga303 platform — particularly session cookies that are required to keep you logged in.
Naga303 does not use cookies to display advertisements from third-party ad networks or sell your browsing habits to outside parties. All analytics data collected is strictly for internal use and platform improvement purposes.
7 Your Personal Data Rights
As a data subject under Malaysia's Personal Data Protection Act 2010 (PDPA), you have certain rights regarding the personal data held by Naga303. We fully respect and uphold these rights:
Right of Access
You have the right to request a copy of all personal data we hold about you in a readable format.
Right to Rectification
You have the right to request correction of inaccurate or incomplete personal data via your profile settings or through customer support.
Right to Erasure
You may request the deletion of your personal data, subject to any applicable legal retention obligations.
Right to Object
You have the right to object to the processing of your data for direct marketing purposes at any time, without providing any reason.
Data Portability
You have the right to receive your personal data in a structured, machine-readable format for transfer to another provider.
Right to Restrict Processing
You have the right to request that Naga303 restrict the processing of your data under certain circumstances as provided by law.
To exercise any of the rights above, please contact our data protection team Naga303 at support@naga303.ws with the subject line "Personal Data Rights Request". We will process your request within 30 business days of receipt.
8 Children's Data Protection
Platform Naga303 is exclusively for users aged 18 years and above. We do not knowingly collect, process, or store any personal data from individuals under the age of 18.
Should we discover that personal data belonging to a minor has been collected without our knowledge, we will take immediate action to delete that data and close the associated account. If you are a parent or guardian and believe that your underage child has registered on Naga303, please contact us immediately at support@naga303.ws.
Naga303 employs a multi-layered age verification process during registration, including date of birth checks and KYC document verification, to prevent minors from accessing our platform.
9 Data Retention & Transfer
Naga303 retain your personal data for as long as necessary to fulfil the purposes outlined in this policy, including compliance with legal, tax, accounting and reporting requirements. As a general rule:
- Active account data is retained for the duration the account remains active and until 5 years following account closure for legal compliance purposes.
- Financial transaction records (deposits, withdrawals) are retained for 7 years in accordance with Malaysian financial and tax regulatory requirements.
- Customer support communication logs are retained for 3 years for reference and dispute resolution purposes.
- Anonymised analytics data is retained indefinitely as it can no longer be linked to any specific individual.
All players' personal data Naga303 stored on servers located in regions with adequate data protection standards. Should any data processing require transfer outside Malaysia, we ensure equivalent protection is provided through appropriate data transfer agreements.
10 Changes to This Privacy Policy
Naga303 reserve the right to review and update this Privacy Policy from time to time to reflect changes in our practices, new legal requirements or technological developments. When material changes are made, we will:
- Updating the "Last Updated" date at the top of this document.
- Displaying a notice on the platform's homepage for a minimum of 14 days following the publication of any changes.
- Sending notifications to active players via their registered email if changes are material and significantly affect their rights.
We encourage you to review this Privacy Policy page periodically. Your continued use of the Naga303 following the publication of any changes will be considered acceptance of the updated policy.
11 How to Contact Us Regarding Privacy
If you have any questions, concerns, or complaints regarding this Privacy Policy or the way Naga303 handles your personal data, you may reach us through the following channels:
- Data protection email: support@naga303.ws (include "Privacy Policy" in the email subject line)
- Live Chat: Available 24/7 directly from the Naga303 platform — select the "Privacy & Data" category
- Telegram: Reach our support agents who are ready to assist in Bahasa Malaysia
We are committed to responding to all privacy-related enquiries within 72 hours on business days. For formal complaints or data rights requests, the processing period is up to 30 business days as provided under Malaysia's PDPA.