Privacy Policy
How Naga3388 Protects Your Data

This Privacy Policy ("Policy") describes how Naga3388 ("Naga3388", "we", "us", "our"), the operator of the online gaming platform at naga3388.cam (the "Platform"), collects, processes, stores, and shares personal information relating to users of our services ("Players", "you", "your").

We are committed to handling your personal data responsibly and in compliance with applicable data protection legislation. This Policy is intended to give you a clear and complete understanding of your privacy rights and our data practices, written in plain language rather than obscured in legal boilerplate.

This Policy applies to all personal data collected through: the Platform website at naga3388.cam; any mobile-optimised version of the Platform; interactions with our customer support team via live chat or email; and financial transaction processing carried out in connection with your account.

By creating an account on the Platform or continuing to use our services, you acknowledge that you have read and understood this Policy. If you do not agree with any aspect of this Policy, you should discontinue use of the Platform and contact us to request account closure.

The following defined terms are used throughout this Policy:

• "Personal Data" — Any information that identifies or can reasonably be used to identify a living individual, directly or in combination with other information. This includes name, email address, device identifiers, and IP addresses.
• "Processing" — Any operation performed on personal data, including collection, recording, storage, retrieval, use, disclosure, erasure, and destruction.
• "Data Controller" — The entity that determines the purposes and means of processing personal data. For the purposes of this Policy, Naga3388 acts as Data Controller in respect of all personal data collected from Players.
• "Data Processor" — A third party that processes personal data on behalf of the Data Controller, subject to written data processing agreements. Payment processors, KYC verification providers, and cloud hosting providers may act as Data Processors.
• "KYC" — Know Your Customer; the regulatory process of verifying a user's identity and source of funds, required before processing withdrawals above specified thresholds.
• "AML" — Anti-Money Laundering; regulatory obligations requiring the monitoring and reporting of potentially illicit financial activity.
• "Cookies" — Small data files placed on your device by the Platform to maintain session state, support security features, and collect aggregate analytics data.

Naga3388 collects personal data across several categories, depending on how you interact with the Platform. The table below summarises the categories of data we hold and the primary purpose of collection:

We do not collect sensitive special-category personal data such as health information, political opinions, religious beliefs, or biometric data, except where expressly required by applicable law.

Naga3388 collects personal data through the following means:

• Direct Collection: Information you provide when registering an account, completing KYC verification, making deposits or withdrawal requests, contacting support, or participating in promotions.
• Automated Technical Collection: Information collected automatically when you access the Platform, including IP address, device identifiers, browser fingerprint, and session behaviour, via server logs and session management technology.
• Cookies and Similar Technologies: Persistent and session cookies used to maintain login state, detect suspicious activity, and collect anonymised usage analytics. See Section 10 for full cookie details.
• Third-Party Verification Services: Identity and document verification data returned by licensed KYC providers when you submit verification documents. These providers act as Data Processors under written agreements with Naga3388.
• Payment Processors: Transaction confirmation data (reference numbers, amounts, timestamps) returned by payment providers including FPX, DuitNow, and cryptocurrency network confirmations. Full payment card or bank account details are never stored on Naga3388 servers.

Naga3388 processes personal data for the following defined purposes only:

1. Account Administration: Creating, maintaining, and managing your player account, including login authentication, account settings management, and correspondence relating to your account.
2. Identity and Age Verification: Confirming that you meet the minimum age requirement of 21 years and that your identity information is genuine and consistent with our KYC obligations.
3. Financial Transaction Processing: Processing deposits in MYR, executing withdrawal requests, maintaining accurate transaction records, and reconciling account balances.
4. Anti-Money Laundering Compliance: Monitoring transaction patterns for indicators of money laundering, terrorist financing, or other illicit financial activity as required by applicable regulations.
5. Fraud Prevention and Security: Detecting and preventing unauthorised account access, bonus abuse, collusion, and other prohibited conduct described in our Terms & Conditions.
6. Responsible Gambling Monitoring: Where you have activated self-management tools such as deposit limits or self-exclusion, processing data necessary to enforce those tools consistently across your account.
7. Customer Support: Responding to your enquiries, resolving disputes, and maintaining records of support interactions for quality assurance purposes.
8. Platform Improvement: Analysing aggregated, anonymised usage patterns to improve platform performance, game selection, and user experience for Malaysian players.
9. Legal Compliance: Meeting obligations under applicable laws and responding to lawful requests from regulatory authorities or law enforcement bodies.

Naga3388 does not process your personal data for direct marketing, profiling for advertising purposes, or sale to data brokers at any time.

Each processing activity carried out by Naga3388 is grounded in one or more of the following legal bases:

• Contractual Necessity: Processing required to perform the contract between Naga3388 and you (as established by our Terms & Conditions), including operating your account, processing transactions, and delivering gaming services.
• Legal Obligation: Processing required to comply with applicable law, including AML regulations, KYC requirements, and obligations to cooperate with regulatory or law enforcement enquiries.
• Legitimate Interests: Processing necessary for Naga3388's legitimate business interests, including fraud prevention, platform security, and anonymised analytics, where those interests are not overridden by your data protection rights.
• Consent: Where we rely on consent as a legal basis (for example, for optional marketing communications), we will obtain your explicit consent and you may withdraw it at any time by contacting our support team.

Naga3388 does not sell, rent, or trade your personal data to third parties for their own commercial purposes under any circumstances. We share personal data with third parties only where strictly necessary and under the following controlled conditions:

• Payment Processors: Transaction data shared with FPX, DuitNow, e-wallet operators (Touch 'n Go, Boost, GrabPay), and cryptocurrency network validators solely to execute financial transactions.
• KYC and Verification Providers: Identity document data shared with licensed verification service providers for the purpose of completing mandatory identity checks. These providers are contractually bound to process data only for verification purposes.
• Cloud Infrastructure Providers: Data stored on encrypted cloud servers operated by reputable infrastructure providers. Providers act as Data Processors under data processing agreements that restrict the use of data to infrastructure operation only.
• Regulatory Authorities: Data disclosed to relevant gaming regulators, financial intelligence units, or law enforcement agencies in response to lawful, documented requests and where Naga3388 is legally obligated to disclose.
• Legal and Professional Advisers: Data shared with lawyers, auditors, or compliance consultants where necessary for the conduct of legitimate legal or compliance proceedings, under appropriate confidentiality obligations.

All third-party Data Processors engaged by Naga3388 are subject to written data processing agreements that mandate appropriate technical and organisational data protection measures.

Naga3388 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, taking into account applicable legal retention obligations. The following retention periods apply:

• Account and Identity Data: Retained for the duration of your account and for a period of five (5) years following permanent account closure, to satisfy AML and regulatory audit trail requirements.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, in accordance with anti-money-laundering record-keeping obligations applicable in the jurisdictions in which we operate.
• KYC Verification Documents: Retained for five (5) years following account closure. Uploaded document images are stored in encrypted form and access is restricted to authorised compliance personnel only.
• Support Communications: Live chat transcripts and email correspondence are retained for two (2) years from the date of the interaction, for quality assurance and dispute resolution purposes.
• Technical and Usage Logs: Server logs and session data are retained for ninety (90) days in full detail, and thereafter in anonymised aggregate form for analytics purposes with no fixed expiry.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. If you request account closure, we will process deletion of data that is not subject to mandatory retention obligations within thirty (30) days of the request.

Naga3388 implements technical and organisational security measures designed to protect your personal data against unauthorised access, loss, disclosure, alteration, or destruction. Key security measures include:

• 256-bit TLS encryption for all data transmitted between your device and the Platform;
• Encryption at rest for all databases containing personal and financial data;
• Hashed and salted storage of account passwords — plaintext credentials are never retained;
• Multi-factor authentication available for account login;
• Role-based access controls limiting data access to authorised personnel with a documented operational need;
• Regular penetration testing and vulnerability assessments of Platform infrastructure;
• Segregation of player funds from operational accounts at the banking level.

While we employ robust security practices, no digital platform can guarantee absolute security against all possible threats. You are responsible for maintaining the confidentiality of your own account credentials. Naga3388 will never ask you to share your password via email, chat, or any other channel.

Naga3388 uses cookies and similar technologies on the Platform. We do not use invasive advertising trackers or third-party behavioural profiling cookies. Our cookie use is limited to the following categories:

• Strictly Necessary Cookies: Session cookies required to maintain your login state, preserve your game session, and prevent cross-site request forgery attacks. These cannot be disabled without breaking core Platform functionality.
• Security Cookies: Cookies used to detect and prevent fraudulent login attempts, identify suspicious account activity, and enforce geographic or device-based security rules.
• Analytics Cookies: First-party analytics cookies that collect anonymised, aggregated data about how users navigate the Platform — which pages are visited most frequently, where users encounter errors, and general performance metrics. Individual users are not identified in analytics reports.
• Preference Cookies: Cookies that remember your language preference, display settings, and other non-sensitive personalisation options.

You may manage cookie preferences through your browser settings. Note that disabling strictly necessary or security cookies will impair your ability to use the Platform safely and may result in your session being terminated for security reasons.

As an online platform serving Malaysian players, Naga3388 may transfer personal data to third-party service providers located outside Malaysia, including cloud infrastructure and KYC verification partners whose servers may be located in other jurisdictions.

Where personal data is transferred internationally, Naga3388 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under applicable data protection law. Safeguards may include:

• Data processing agreements incorporating standard contractual clauses;
• Transfer to jurisdictions that provide an adequate level of data protection as recognised by applicable law;
• Contractual obligations on recipients to maintain security measures no less rigorous than those applied by Naga3388.

Subject to applicable law, you have the following rights in respect of your personal data held by Naga3388. You may exercise any of these rights by submitting a written request to our support team at [email protected]. We will respond within thirty (30) calendar days of receipt.

The Platform is strictly intended for use by persons aged 21 years or older. Naga3388 does not knowingly collect personal data from individuals under the age of 21 and does not permit persons under 21 to register accounts or access any Services.

As part of our age verification process, we may request identity documentation confirming date of birth. Accounts where age verification cannot be completed to our satisfaction will be suspended pending resolution, and no withdrawals will be processed from such accounts during suspension.

If we become aware that personal data has been collected from a person under the age of 21, we will take immediate steps to delete that data and close the associated account. Any winnings generated by accounts found to belong to under-21 users will be forfeited in accordance with our Terms & Conditions.

Naga3388 may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or operational requirements. When material changes are made, we will notify registered Players via email to the address associated with their account and by prominent notice on the Platform, at least fourteen (14) days before changes take effect.

The "Last Updated" date at the top of this page reflects the date of the most recent revision. We encourage you to review this Policy periodically. Continued use of the Platform following the effective date of any update constitutes your acknowledgement of the revised Policy.

If you have questions about this Privacy Policy, wish to exercise any of your data rights, or need to report a data protection concern, please contact the Naga3388 data team through the following channels:

• Email: [email protected] — please include "Privacy Request" in the subject line for priority routing
• Live Chat: Available 24/7 via the Platform — for general privacy enquiries and to initiate a formal data rights request
• Response Time: We acknowledge all privacy-related requests within 5 business days and provide a substantive response within 30 calendar days
• Languages: Requests may be submitted in Bahasa Melayu, Mandarin Chinese, or English

For general help with your account, bonuses, or game queries, our FAQ page addresses many common topics and is available at any time.