Nagad88 Privacy Policy — Malaysian Player Data Protection

This Privacy Policy is published by Nagad88, an online casino and Sports Betting platform operating at https://nagad88-bangla.com, and applies to all users and members of the platform in Malaysia. This document explains in detail how Nagad88 ("we", "the platform") collects, stores, uses, processes and protects your personal data ("member", "you") in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA).

By registering a Nagad88 account, browsing our website, or using any of our services, you confirm that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this policy, please discontinue your use of the Nagad88 platform.

This Privacy Policy covers all your interactions with the Nagad88 platform, including account registration, login activity, deposits and withdrawals, slots and Live Casino gameplay, Sports Betting on the Malaysia Super League and EPL, communications with our support team, and your use of any other features or services available through our platform.

Nagad88 acts as the data controller for all personal information collected through this platform. This means we are responsible for determining the purposes and means of processing your personal data, and we are bound by all obligations imposed on data controllers under Malaysia's PDPA.

Nagad88 collects several categories of personal data depending on how you interact with our platform. Below is a detailed explanation of the types of data collected and how they are obtained:

Nagad88 uses collected personal data for specific, legitimate and limited purposes. We do not process your data for any purpose beyond those stated below without first obtaining your additional consent.

Nagad88 processes your personal data based on one or more legal grounds recognised under Malaysia's PDPA 2010. This ensures that every instance of data processing we carry out is lawful and defensible.

• Contract: Processing is required to fulfil the contract between you and Nagad88 — including providing platform services, processing MYR deposits and withdrawals, and managing your member account.
• Legal Obligation: Nagad88 is required under Malaysian law to collect and retain certain records, including for anti-money laundering (AML) purposes under the Anti-Money Laundering Act 2001.
• Legitimate Interest: Nagad88 processes certain data based on the legitimate interests of platform operations — including fraud prevention, system security and product improvement — provided these interests do not override your fundamental rights.
• Consent: For specific purposes such as marketing communications and promotions, Nagad88 will only process your data after obtaining your explicit consent. You may withdraw this consent at any time.

Nagad88 does not sell or rent your personal data to third parties. However, in order to operate the platform lawfully and efficiently, we may need to share certain personal data with the following parties in limited circumstances:

• Platform Service Providers: Gaming providers such as Evolution Gaming, Pragmatic Play and PG Soft receive data necessary to operate your gaming sessions. All providers are bound by confidentiality agreements and are prohibited from using the data for any purpose beyond the services they provide.
• Malaysian Payment Gateway: Payment processors such as DuitNow, FPX, Touch 'n Go eWallet, GrabPay, Boost and ShopeePay receive only the data necessary to process your deposit and withdrawal transactions. This data is transmitted through encrypted channels.
• Malaysian Authorities: Nagad88 will disclose personal data to the relevant authorities when required by Malaysian law, court order or for the purposes of a legitimate financial crime investigation.
• Technical Infrastructure Providers: Cloud and hosting service providers that manage the platform's technical infrastructure may have access to data in the course of routine technical processing, subject to strict confidentiality agreements.

Nagad88 takes data security seriously. We implement multiple layers of technical and organisational safeguards to ensure members' personal data is consistently protected against unauthorised access, loss, alteration or unintended disclosure.

• 256-bit SSL: All communications between your browser and Nagad88's servers are encrypted using Transport Layer Security (TLS) with 256-bit keys — the industry standard for high-grade web security.
• Secure Password Storage: Member passwords are never stored in plain text. We use strong one-way hashing algorithms with random salts, meaning that even in the event of unauthorized database access, passwords cannot be recovered.
• Internal Access Controls: A "least privilege" principle is applied — each Nagad88 staff member may only access the data necessary to perform their role. All access to sensitive data is logged and reviewed on a regular basis.
• 24/7 Monitoring: Our cybersecurity team monitors Nagad88's infrastructure around the clock using intrusion detection systems (IDS) and security information and event management (SIEM) systems.
• Data Segregation: Sensitive data such as payment details is stored separately from general profile data in environments with different access controls, reducing the risk of exposure.
• Regular Backups: Member data is regularly backed up to secure, encrypted locations to ensure swift recovery in the event of a technical incident.

Nagad88 retains your personal data for as long as necessary to fulfil the purposes described in this Privacy Policy, or as required by applicable Malaysian law. We do not retain data longer than necessary.

• Active Account: Personal data is retained for as long as your Nagad88 account remains active. Transaction records and gaming activity are kept for customer support, dispute resolution and AML compliance purposes.
• After Account Closure: Upon account closure, Nagad88 retains the necessary records for a minimum of 7 years in accordance with Malaysian legal requirements for financial records and AML compliance.
• Marketing Data: If you withdraw consent for marketing communications, the relevant data will be removed from our marketing lists within 30 days, though other records required by law will continue to be retained.
• Technical Log Data: Access logs and security logs are typically retained for 12 months for security and audit purposes, after which they are automatically deleted or anonymised.

Once the defined retention period has lapsed and there is no further legal requirement to retain the data, Nagad88 will securely and permanently delete or anonymise the relevant data.

Nagad88 uses cookies and similar tracking technologies to ensure the platform functions correctly, enhance user experience, and analyze how the platform is used. The following are the types of cookies we use:

As a data subject under Malaysia's PDPA 2010, you have several important rights regarding your personal data processed by Nagad88. We respect and facilitate the exercise of these rights:

The Nagad88 platform is intended solely for individuals aged 21 and above. We do not knowingly collect personal data from individuals under the age of 21. If you suspect that a minor has registered an account on Nagad88, please notify us immediately at support@nagad88-bangla.com or via live chat.

Nagad88 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, developments in Malaysian law, or changes in how we operate the platform. The updated version will be published on this page with a new "Last Updated" date.

For material amendments — changes that significantly affect how your data is processed or your rights — Nagad88 will notify you via your registered email or an in-platform notification at least 14 days before the changes take effect. Your continued use of the Nagad88 platform after the effective date of such amendments will be considered your acceptance of the latest version of this Privacy Policy.

We encourage you to review this page periodically. A version history of the Privacy Policy can be requested via our support email if you wish to compare changes made over time.

If you have any questions, concerns or complaints regarding this Privacy Policy or how Nagad88 handles your personal data, our team is here to help. We take all privacy-related enquiries seriously and are committed to providing thorough and satisfactory responses.