1 Information We Collect
To provide a complete and secure platform experience, 23naga collects several categories of information from members. All data collection is carried out transparently and only for the stated purposes.
| Data Category | Information Type | Purpose of Collection |
|---|---|---|
| Identity Data | Full name, MyKad number, date of birth, gender | Account registration & KYC verification |
| Contact Data | Phone number, email address | Account communications & customer support |
| Financial Data | Bank account number, deposit & withdrawal records | Transaction processing & AML compliance |
| Technical Data | IP address, device type, browser, session logs | Account security & fraud detection |
| Activity Data | Betting records, game history, promotional preferences | Account management & responsible gaming |
We do not collect information that is unnecessary for operating the platform. If there is a need to collect a new category of data, you will be notified in advance.
2 How We Use Your Information
Collected information is used solely for the following purposes and will not be used for any other purpose without your consent:
- Account Management — Creates, verifies, and maintains your member account, including processing deposits and withdrawals.
- Identity Verification (KYC) — Verifies that member identities are legitimate to comply with anti-money laundering (AML) legal requirements.
- Customer Support — Handles enquiries, complaints, and assistance requests submitted via live chat or email.
- Platform Security — Detects and prevents fraud, unauthorised access, and suspicious activity that could compromise your account.
- Marketing Communications — Sends information about promotions, special offers, and platform updates — only if you have consented to receive them.
- Responsible Gaming — Monitors gaming patterns to identify early signs of problem gambling and offer appropriate assistance.
- Legal Compliance — Fulfils reporting obligations to relevant authorities in accordance with applicable Malaysian law.
3 Legal Basis for Processing
The processing of your personal data by 23naga is based on valid legal grounds under the Malaysia Personal Data Protection Act 2010 (PDPA):
- Contract Performance — Processing is required to fulfil the service agreement between you and 23naga, including deposit processing, withdrawals, and account management.
- Consent — For marketing communications and non-essential cookie use, we obtain your explicit consent. You may withdraw this consent at any time.
- Legitimate Interest — For platform security, fraud detection, and internal analysis to improve our services.
- Legal Obligation — To fulfil reporting and compliance requirements mandated by Malaysian law.
4 Information Sharing
23naga does not sell, rent, or disclose your personal information to third parties for their own marketing purposes. However, in the following limited situations, information sharing may occur:
- Payment Service Providers — FPX, DuitNow, Touch 'n Go, and GrabPay receive the transaction information necessary to process your payments. These providers are subject to their own privacy policies.
- Game Providers — Game software companies partnering with 23naga receive game session data for technical and compliance audit purposes.
- Law Enforcement Agencies — We will disclose information to authorities where required by a valid court order or official request from a law enforcement agency.
- Identity Verification Services — Trusted third-party KYC partners assist in verifying member identities in accordance with AML requirements. They are bound by strict confidentiality agreements with 23naga.
5 Data Security
We continually invest in our security infrastructure to ensure your personal data is always protected. The technical and organisational security measures we implement include:
- Data Encryption in Transit — All communications between the platform and its servers use TLS 1.3 protocol with 256-bit encryption.
- Data Encryption at Rest — Sensitive information such as passwords and financial data is stored in encrypted format using AES-256 standards.
- Internal Access Controls — Access to member personal data is restricted to staff who require it to perform their duties, based on the principle of least privilege.
- 24/7 Monitoring — Automated monitoring systems run around the clock to detect any suspicious activity or unauthorised access attempts.
- Regular Auditing — Our security infrastructure undergoes regular internal and external audits to identify and address vulnerabilities.
- Two-Factor Authentication (2FA) — Member accounts are protected with 2FA as an additional security layer alongside your password.
6 Cookies & Tracking Technologies
23naga uses cookies and similar tracking technologies to enhance the user experience and ensure the platform functions correctly. There are three categories of cookies we use:
- Essential Cookies — Required for core platform functions such as login sessions and security settings. These cookies cannot be disabled without affecting platform functionality.
- Performance Cookies — Collects information about how you use the platform in aggregate form without personally identifying you. This data helps us improve the platform.
- Functional Cookies — Remembers your preferences such as language, currency, and display settings to provide a more personalised experience.
You can manage or disable cookies through your browser settings. Please note that disabling essential cookies may affect your ability to log in or use certain platform features.
7 Your Rights as a Member
Under the Malaysia Personal Data Protection Act 2010, you have the following rights regarding your personal data held by 23naga:
Right of Access
Request a copy of all personal data we hold about you.
Right to Rectification
Correct any of your personal information that is inaccurate or out of date.
Right to Erasure
Request deletion of your personal data, subject to legal obligations.
Right to Object
Object to the processing of your data for direct marketing purposes at any time.
Right to Restriction
Request restriction of data processing while a dispute is being investigated.
Right to Portability
Receive your personal data in a structured, machine-readable format.
To submit any request relating to the rights above, contact our support team via Live Chat on the platform. Requests will be processed within 14 working days from the date of receipt.
8 Data Retention & Deletion
23naga retains your personal data only for as long as necessary for the purposes stated in this policy or to fulfil applicable legal obligations.
- Active Account — Data is retained for as long as your account remains active and you continue using the platform.
- After Account Closure — Financial records and transactions are retained for 5 years in accordance with AML compliance requirements and Malaysia financial laws.
- Security Log Data — Access logs and security activity are retained for 2 years for the purposes of investigating potential fraud.
- Communication Data — Customer support correspondence is retained for 3 years for reference and service quality assurance.
When the retention period expires, data is securely deleted using methods that ensure it cannot be recovered.
9 Children's Privacy
If you believe that someone under the age of 18 has registered an account on our platform, please contact our support team immediately. We will investigate and, if confirmed, close the account and delete all data associated with that individual.
10 Changes to This Policy
23naga reserves the right to update this Privacy Policy from time to time to reflect changes in our privacy practices, legal requirements, or new platform features. When significant changes are made:
- The "Updated" date at the top of this page will be revised.
- Notifications will be sent to all registered members via email.
- A prominent notice will be displayed on the platform for a minimum of 7 days.
We encourage you to review this page regularly. Continued use of the 23naga platform after changes take effect will be considered acceptance of the latest version of this Privacy Policy.
11 Contact Us
If you have any questions, concerns, or complaints regarding how we handle your personal data, our team is ready to help:
- Live Chat — Available 24 hours a day, 7 days a week via the chat icon at the bottom corner of the platform.
- Email — Send your written enquiries to [email protected] for a more formal written record.
- FAQ — Check FAQ page for answers to the most frequently asked questions.