Privacy Policy Nanaatoto

Nanaatoto operates with full responsibility toward its members' personal data. We comply with the applicable data protection laws in Malaysia, including the Personal Data Protection Act 2010 (PDPA). This policy is written in plain language so you know exactly what happens with your information — no confusing legal jargon, no hidden terms.

1 . Information We Collect

We collect information from you in several different ways depending on how you interact with the nanaatoto platform. Generally, the information we collect falls into two main categories: information you provide directly, and information collected automatically when you use our platform.

Information you provide directly:

• Full name as stated on your identification card or passport.
• Identification card number (MyKad) or passport number.
• Date of birth for age verification.
• Email address and active mobile phone number.
• Current residential address.
• Bank account information including bank name and account number for deposit and withdrawal purposes.
• KYC documents uploaded during the identity verification process.

Information collected automatically:

• IP address and estimated geographic location.
• Device type, operating system and web browser version used.
• Activity log records including pages visited, time of visit, and actions taken.
• Login and logout session data.
• Records of deposit transactions, withdrawals, and wagering history.
• Cookie and similar tracking technology information.

2. How We Use Your Data

The information we collect is used solely for legitimate operational purposes and service improvement at nanaatoto. Below is a summary of how your data is used:

Beyond the purposes above, we may also use your data to send promotional information and the latest offers — but only if you have given consent to receive marketing communications during registration or through your account settings. You may withdraw this consent at any time.

3. Sharing Information with Third Parties

Nanaatoto does not sell, rent, or trade members' personal data to any third party for their own commercial purposes. This is a core principle we do not compromise on. However, there are limited circumstances where your information may be shared:

• Service providers: Technical partners who help us operate the platform, including payment service providers, server infrastructure, and identity verification systems. All parties are bound by strict confidentiality agreements.
• Legal requirement: If required by Malaysian law, a court order or a directive from a lawful regulatory authority.
• Fraud prevention: Information required to investigate or prevent fraudulent activity, money laundering, or other financial crimes.
• Business transfers: In the event of a merger, acquisition or asset sale, where member data may be transferred to a successor entity — with prior notice given to members.

4. Data Security & Technical Protection

We invest seriously in security infrastructure to ensure your personal data is always protected. The technical measures we employ include:

• 256-bit SSL/TLS Encryption for all data transmitted between your browser and our servers.
• Data encryption at rest — sensitive information such as passwords and bank account numbers is stored in encrypted form using the latest hashing algorithms.
• Two-factor authentication (2FA) available to all member accounts as an additional layer of protection.
• Real-time threat monitoring that automatically detects and responds to suspicious login activity.
• Data segregation — sensitive financial data is stored separately from platform activity data.
• Regular penetration testing conducted by independent third parties to identify and address security vulnerabilities.

5. Cookies & Tracking Technologies

The nanaatoto platform uses cookies and similar tracking technologies to enhance your experience while browsing our website. Cookies are small text files stored on your device when you visit our website.

Types of cookies we use:

• Essential cookies: Required for core platform functions such as login sessions and security. These cookies cannot be disabled.
• Performance cookies: Helps us understand how members interact with the platform through anonymized statistical data.
• Functional cookies: Saves your preferences such as language, display settings, and login details for your convenience.
• Analytics cookies: Used to analyze aggregated usage patterns for platform improvement purposes.

You can manage or delete cookies through your web browser settings at any time. Please note that disabling essential cookies may affect certain features of the nanaatoto platform. We do not use third-party cookies for advertising purposes.

6. Data Retention & Deletion Period

We retain your personal data for as long as your account is active or as needed to provide services to you. When you close your account, we will initiate the data deletion process according to the following schedule:

• Identity & KYC Data: Retained for 7 years after account closure to meet anti-money laundering (AML) compliance requirements.
• Financial transaction records: Retained for 7 years as required by accounting and tax legislation.
• Platform activity log: Retained for 2 years for security and investigation purposes if required.
• Customer Support Communication Data: Retained for 3 years for reference and dispute resolution.
• Marketing information: Deleted within 30 days after account closure or after you withdraw your marketing consent.

7. Your Rights as a Member

As a nanaatoto member, you have the following rights regarding your personal data under the Personal Data Protection Act 2010 and our privacy policy:

To exercise any of the rights above, please contact our customer support team via live chat or official email. We will process your request within 14 working days from the date of receipt of a complete request.

8. Children's Privacy

The nanaatoto platform is exclusively for users aged 21 years and above. We do not intentionally collect, process or store any personal data from individuals under the age of 21.

9. Privacy Policy Amendments

Nanaatoto reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or service improvements. The "updated" date at the top of this page will always show the date of the latest revision.

For material amendments — particularly those involving changes to how we use or share your personal data — we will notify you via an in-account notification or email at least 14 days before the amendment takes effect. Continued use of the platform after the effective date constitutes acceptance of the revised policy.

10. Contact Us About Privacy

If you have any questions, concerns or complaints regarding how we handle your personal data, or if you wish to exercise any of your data rights, please contact our data protection team through the following channels:

• Live chat: Available 24 hours a day, 7 days a week via the chat icon at the bottom corner of the platform.
• Email: [email protected] (response within 1–3 business days).
• Telegram: Through official nanaatoto support channels.

When submitting a data-related request, please include your registered full name and account number to help us identify and process your request more efficiently. All privacy-related communications are handled with complete confidentiality by our team.