Naga138 Official Privacy Policy

Privacy Policy Naga138 – Malaysian Player Data Protection

Naga138 is committed to protecting the privacy and personal data of all our players in accordance with Malaysia's Personal Data Protection Act (PDPA) 2010. This document transparently explains how we collect, use, store, and protect your information. We have nothing to hide — that is our promise to every Naga138 player.

Last Updated: 1 January 2026 Bahasa Melayu (ms-MY) PDPA 2010 Compliant
Our Privacy Commitment

Six Privacy Guarantees Naga138 Makes to Malaysian Players

This is more than just a legal document — these are the concrete steps we take every day to protect your data.

256-bit SSL Encryption
All data transmitted between your device and Naga138 servers is encrypted using 256-bit SSL — the same standard used by Malaysian online banking platforms such as Maybank2u and CIMB Clicks. No third party can read your data in transit.
Comply with Malaysian PDPA 2010
The Naga138 Privacy Policy is built in full compliance with Malaysia's Personal Data Protection Act (PDPA) 2010. You have the right to access, correct, or request deletion of your personal data at any time.
No Sale of Data to Third Parties
Naga138 never sells, rents, or trades players' personal data to any third party for marketing purposes. Your data belongs to you — we use it solely to operate the platform and enhance your gaming experience.
Secure Servers & Regular Backups
Naga138 player data is stored on servers protected by multi-layer firewalls with strict access controls. Data backups are performed automatically on a daily basis to keep your data safe even in the event of unexpected technical disruptions.
Cookie Controls in Your Hands
You can manage your browser cookie settings at any time. Naga138 only uses cookies essential to platform functionality and, with your consent, analytics cookies to understand how players use our platform for improvement purposes.
48-Hour Privacy Complaint Response
If you have any concerns or complaints regarding the privacy of your data at Naga138, our team is committed to responding within 48 business hours. Reach us by email at support@naga138.site or via 24/7 live chat.

Naga138 ("we", "our platform") operates a website and online casino service accessible at https://naga138.site. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you register for and use the Naga138 platform.

By registering an account or continuing to use the Naga138 platform, you agree to the collection and use of information as described in this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of the platform and contact us to close your account.

This Privacy Policy applies to all Naga138 players based in Malaysia and is subject to the Malaysian Personal Data Protection Act (PDPA) 2010. Last updated: 1 January 2026.
1

Information We Collect

Naga138 collects personal information from you through various means when you register, use the platform, and interact with our services. We only collect information that is necessary to provide our services safely and effectively.

1.1 Information You Provide Directly

When you register a Naga138 account or use our services, you provide the following information:

Type of Information Example Purpose of Collection
Identity Information Full name, date of birth, MyKad number Identity verification (KYC), fraud prevention
Contact Information Email address, phone number Account communications, security notifications
Financial Information Bank account number, eWallet details (TnG, GrabPay) Processing deposits and withdrawals
Verification Documents Copy of MyKad, bank statements KYC processing, AML compliance
Login Information Username, password (encrypted) Account security and access

1.2 Information Collected Automatically

When you browse and use the Naga138 platform, our systems automatically record certain technical information:

  • IP address: Used for location verification, fraud detection, and account security
  • Browser type and version: To optimise how the platform displays on your device
  • Device information: Operating system, screen resolution, device type (mobile/desktop)
  • Activity log data: Pages visited, access times, button clicks, bets placed
  • Game session data: Game records for dispute resolution and audit purposes
  • Cookie data: Browser preferences and login session information (see Section 5)

1.3 Information From Third-Party Sources

In certain cases, we may receive information about you from trusted third-party sources, including:

  • Payment service providers (Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, FPX) — for transaction verification
  • Identity verification service provider — for the KYC process
  • Anti-money laundering (AML) screening list — for compliance verification
Naga138 never purchasing personal data lists from data brokers or third parties unrelated to our services. All information we hold about you comes directly from your interactions with our platform or from the verification requirements of financial transactions.
2

How We Use Your Data

Naga138 uses your personal data only for legitimate purposes that are necessary to operate our online casino platform safely and effectively. We do not use your data for any other purpose without your explicit consent.

2.1 Primary Purposes of Data Use

  • Account management: Registering, verifying, and maintaining your player account
  • Transaction processing: Processing deposits and withdrawals via DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, Maybank2u (FPX), and CIMB Clicks (FPX)
  • Service provision: Allowing you to access and play all games on the platform — slots, live casino, baccarat, poker, table games, and virtual sports
  • Platform security: Detecting and preventing fraud, unauthorised account access, and illegal activity
  • Customer support: Responding to enquiries, resolving complaints, and assisting with technical issues
  • Legal compliance: Meeting Malaysian legal requirements including PDPA 2010 and AML regulations

2.2 Secondary Purposes (With Your Consent)

With your explicit consent, we also use your data to:

  • Sending you information on promotions, bonuses, and exclusive offers that may be of interest to you
  • Personalising content and game recommendations based on your play history
  • Conducting customer satisfaction surveys to improve our services
  • Notifying you about platform updates, new games, and the latest features

You may withdraw consent for marketing communications at any time through your account settings or by contacting our support team.

2.3 Legal Basis for Data Processing

Naga138 processes your personal data on the following grounds as provided under Malaysia's PDPA 2010:

  • Contract performance: Data is required to provide the services you have requested
  • Legitimate interest: For security, fraud prevention, and platform improvement purposes
  • Legal obligation: To comply with Malaysian legal and regulatory requirements
  • Consent: For marketing communications and other optional purposes
3

Sharing Your Data With Third Parties

Naga138 does not sell, rent, or share players' personal data with third parties for their own marketing purposes. That said, to operate the platform effectively, we do need to share certain data with trusted service providers under strict contractual terms.

3.1 Third Parties That Receive Your Data

Third-Party Category Purpose Data Shared
Payment Providers
TnG, GrabPay, DuitNow, FPX
Processing deposits and withdrawals Transaction details, payment account information
Game Providers
Pragmatic Play, PG Soft, etc.
Providing gaming services Anonymous player ID, game session data
KYC/AML Providers Identity verification, AML checks Identity information, submitted documents
Infrastructure Providers Server hosting, CDN, cybersecurity Technical data (IP, system logs)
Relevant Authorities Malaysian legal compliance Data as required by law

3.2 Data Sharing Conditions

All data sharing with third parties is subject to the following conditions:

  • Third parties are required to sign legally binding data protection agreements
  • They may only use your data for the stated purposes and are not permitted to use it for their own ends
  • They are required to meet data security standards equivalent to or higher than those of Naga138
  • Naga138 conducts regular reviews of third-party providers to ensure ongoing compliance
Where we are required to disclose your data under Malaysian law or a court order, we will do so and will endeavour to notify you in advance where permitted by law.
4

Data Security

Naga138 implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction.

4.1 Technical Security Measures

  • 256-bit SSL/TLS Encryption: All communications between your browser and Naga138's servers are fully encrypted
  • Data encryption at rest: Sensitive information such as passwords and financial details is encrypted in the database using strong hashing algorithms
  • Multi-layer firewall: Naga138 servers are protected by a firewall system and active intrusion detection, running 24 hours a day
  • Strict access controls: Only authorised Naga138 staff with a legitimate business need have access to player data
  • Continuous monitoring: Our systems are monitored 24/7 for suspicious or unusual activity
  • Daily backups: Data is automatically backed up daily to a secure, separate location

4.2 Organisational Security Measures

  • Mandatory data security training for all Naga138 staff
  • Mandatory non-disclosure agreements (NDA) for all employees and contractors
  • Background checks for staff with access to player data systems
  • Documented incident response procedures for handling data breaches

4.3 Data Breach Notification

In the event of a data breach that materially affects your personal information, Naga138 will:

  • Notifying you via your registered email within 72 hours of the date we become aware of the breach
  • Providing information about the nature of the breach, the data involved, and the steps we have taken
  • Recommending steps you can take to protect yourself
  • Reporting to relevant authorities as required under PDPA 2010
While we take all reasonable steps to protect your data, no system can be guaranteed 100% secure. You can also help by using a strong password and never sharing your login credentials with anyone.
5

Cookies & Tracking Technologies

The Naga138 platform uses cookies and similar tracking technologies to keep the platform running properly, enhance the user experience, and understand how players interact with our platform.

5.1 Types of Cookies We Use

Cookie Type Purpose Can It Be Disabled?
Essential Cookies Session login, security, core platform functionality No — required for the platform to function
Preference Cookies Remembering your language and display preferences Yes — this can be disabled in your browser settings
Analytics Cookies Understanding how players use the platform (non-identifiable data) Yes — with your consent
Marketing Cookies Showing you relevant promotions Yes — with your consent

5.2 Managing Cookie Settings

You can control and manage cookies in several ways:

  • Browser settings: All major browsers (Chrome, Firefox, Safari, Edge) allow you to manage, block, or delete cookies through the settings menu
  • Naga138 account settings: Log in to your account and go to the Privacy Settings section to manage your cookie preferences
  • Private/Incognito Mode: Using private mode will prevent persistent cookies from being stored on your device after the session ends

Please note that disabling essential cookies may affect the functionality of the Naga138 platform and your gaming experience.

5.3 Other Tracking Technologies

In addition to cookies, Naga138 uses technologies such as web beacons (invisible pixels) in our marketing emails to determine whether the emails we send have been opened. You can prevent this by disabling automatic image display in your email settings, or by unsubscribing from our marketing emails via the unsubscribe link included in every email.

6

Your Privacy Rights

Under Malaysia's Personal Data Protection Act (PDPA) 2010, you have certain rights regarding your personal data held by Naga138. We fully respect these rights and will comply with every valid request within the stipulated timeframe.

Right of Access
You have the right to request a copy of the personal data we hold about you. Requests will be processed within 21 business days.
Right to Rectification
If your data is inaccurate or out of date, you may request a correction through your account settings or by contacting our support team.
Right to Erasure
You may request the deletion of your personal data, subject to applicable legal and contractual retention requirements.
Right to Object
You may object to the processing of your data for direct marketing purposes at any time, without having to provide a reason.
Right to Restriction
Under certain circumstances, you may request that we restrict the processing of your data while a dispute is being resolved.
Data Portability Rights
You may request your data in a machine-readable format for transfer to another service provider where applicable.

6.1 How to Submit a Privacy Rights Request

To exercise any of the rights above, contact the Naga138 Privacy Officer at:

  • Email: support@naga138.site (with the subject line "PDPA Privacy Request")
  • 24/7 Live Chat on the Naga138 platform

We will verify your identity before processing your request and provide a response within 21 business days of receiving a complete request.

Some deletion requests may not be fully fulfilled where the relevant data is required to meet legal obligations (for example, financial transaction records that must be retained under Malaysian law).
7

Data Storage & Deletion

Naga138 retains your personal data only for as long as necessary for the purposes described in this Privacy Policy, or to meet applicable legal and regulatory requirements in Malaysia.

7.1 Data Retention Period

Data Type Retention Period Reason
Active account information For the duration of the active account Required for service
Financial transaction records 7 years after account closure Malaysian legal requirements (AML)
Gaming session records 2 years Dispute resolution, audits
Support communication logs 3 years Complaint resolution, service records
KYC Documents 5 years after account closure AML/KYC regulatory requirements
Marketing data (with consent) Until consent is withdrawn Based on your consent

7.2 Data Deletion Process

Once the retention period expires or you request deletion (and no legal obligation prevents it), Naga138 will:

  • Permanently deleting data from active systems and databases
  • Ensuring data is purged from all backup copies within 90 days
  • Requesting relevant third-party providers to delete the data as well
  • Providing you with a deletion confirmation upon request

7.3 Data Storage Location

Naga138 player data is stored primarily on servers located in the Asia Pacific region. In certain situations, data may be processed by service providers outside Malaysia — in such cases, we ensure that equivalent protections under PDPA 2010 are applied through binding contractual agreements.

8

Privacy Policy Amendments

Naga138 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, updates to Malaysian law, or improvements to our services.

8.1 Notification of Changes

When we make significant changes to this Privacy Policy, we will:

  • Updating the "Last Updated" date at the top of this page
  • Sending a notification to your registered email address for changes that materially affect your privacy rights
  • Displaying a clear notice on the Naga138 platform for at least 7 days following the publication of any changes

8.2 Acceptance of Changes

Your continued use of the Naga138 platform after any updates to the Privacy Policy are published will be considered your acceptance of the latest version. If you do not agree with the changes, you have the right to stop using the platform and request account deletion by contacting our support team.

8.3 Contact Us Regarding Privacy

If you have any questions, concerns, or complaints regarding this Privacy Policy or how Naga138 handles your personal data, please contact us at:

  • Email: support@naga138.site (subject: "Privacy / PDPA")
  • Live Chat: Available 24 hours a day, 7 days a week, directly from the platform
  • WhatsApp: Contact us via Live Chat for the latest number

Our team is committed to responding to all privacy-related enquiries within 48 business hours. If you are not satisfied with our response, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia.

This version of the Privacy Policy takes effect from 1 January 2026. Previous versions are available upon request via our support email for your reference.
YOUR DATA IS SAFE WITH US

Play With Peace of Mind — Your Privacy Is Protected at Naga138

Naga138 protects your data with 256-bit SSL encryption and is fully compliant with Malaysia's PDPA 2010. Register a free account, enjoy 500+ games, and deposit easily via Touch 'n Go, DuitNow, GrabPay, or FPX — all within a secure and transparent environment.

Welcome Bonus
RM 500
+ 20 Free Spins
Min. Deposit: RM 30
Bahasa Melayu