Official Privacy Document

Privacy Policy Naga11
Your Personal Data Protection in Malaysia

Your privacy is not merely a legal obligation to us — it is a core value we uphold. This document clearly sets out what data we collect, why we need it, how it is used, and your rights as a Naga11 player in Malaysia.

Latest Version: January 2026 Malaysia PDPA 2010 Bahasa Melayu (ms-MY)
Naga11's Privacy Commitment
  • Data protected by 256-bit SSL encryption
  • Compliant with the Personal Data Protection Act 2010
  • Data is never sold to any third party
  • You have the right to access and delete your data
  • Regular independent security audits

Naga11's Six Pillars of Data Protection

The core principles governing how we handle every piece of information you entrust to us.

Principle 1
Purpose Limitation
Naga11 only collects personal data that is strictly necessary for clearly stated purposes. We do not collect excessive information or data that is irrelevant to the services you use.
Principle 2
Multi-Layer Security
All data is stored on servers protected with industry-grade encryption. Internal access to user data is restricted to authorised personnel only and is subject to regular audits.
Principle 3
Full Transparency
We are fully transparent about every type of data collected, the purpose of collection, and how it is used. No hidden agendas, no use of your data without your knowledge.
Principle 4
Control in Your Hands
You have full rights to access, amend, transfer, or request deletion of your personal data. Requests can be submitted to Naga11's privacy team at any time.
Principle 5
Retention Period Limit
Your personal data will not be retained longer than necessary for the purpose it was collected. Upon account closure, data will be deleted or anonymised in accordance with our data retention policy.
Principle 6
PDPA 2010 Compliance
All of Naga11's data protection practices are in full compliance with Malaysia's Personal Data Protection Act 2010 (PDPA). Our compliance team ensures this policy is kept up to date in line with legislative changes.

01
Introduction & Scope of Naga11's Privacy Policy
Who this policy applies to and why it matters

This Privacy Policy ("Policy") is issued by Naga11 ("we", "Company", "Platform") and applies to all users who access or use the naga11.ws platform, the Naga11 mobile app, or any services provided by us to users in Malaysia.

We understand that your personal data is a trust you place in us. Naga11 takes this responsibility very seriously. Every decision about how we handle your data is made with your interests as a player first, and with your privacy protected at every step.

Legal Basis

This Privacy Policy is prepared in accordance with the requirements of Personal Data Protection Act 2010 (PDPA) Malaysia and the highest international data protection principles. We are committed to ensuring that your data is processed lawfully, fairly, and transparently at all times.

By registering for or using the services Naga11, you agree to the data protection practices set out in this Policy. If you do not agree with any part of this Policy, you are advised not to use our platform. If you have any questions about this Policy, please contact us at privasi@naga11.ws.


02
Types of Personal Data Collected
What information Naga11 collects from you

Naga11 collects various categories of personal data from you depending on the services you use and how you interact with our platform. Below is a detailed explanation of each data category:

Categories of Data Collected
Data CategoryExampleBasis
Identity Data
To verify your identity
Full name, MyKad number, date of birth, gender, selfie photo Legal Obligation
Contact Data
To communicate with you
Email address, Malaysian phone number, residential address Contractual Agreement
Financial Data
For deposit & withdrawal processing
Bank name, account number (last 4 digits), eWallet ID (Touch 'n Go, GrabPay, DuitNow) Contractual Agreement
Transaction Data
Financial activity records
Deposit history (MYR), withdrawals, betting history, wins and losses Legitimate Interest
Technical Data
For platform security & improvement
IP address, device type, operating system, web browser, approximate location data Legitimate Interest
Usage Data
To understand how you use the platform
Games played, sports followed, session duration, clicks and navigation within the platform Consent
Communication Data
Support interaction records
Live Chat records, support emails, help tickets, call recordings (where applicable) Legitimate Interest

Naga11 does not collect sensitive data such as medical information, religious beliefs, or political views unless specifically required by law. We also do not store full credit or debit card numbers — payment information is processed directly through licensed and secure payment gateways in Malaysia.


03
Basis & Purpose of Data Processing
Why Naga11 needs your data and the legal basis for doing so

Naga11 only processes your personal data where a valid legal basis exists. We have identified four primary legal bases applicable to our operations:

  • Contractual Agreement: To fulfil our obligations to you – including processing deposits, managing withdrawals, administering your account, and providing the betting services you have requested.
  • Legal Obligation: To comply with Malaysian legal requirements including age verification (KYC), anti-money laundering (AML), tax reporting, and other regulatory obligations.
  • Legitimate Interest: To carry out legitimate business operations — including fraud detection, platform security, usage analysis for improvement, and customer support.
  • Consent: For marketing communications, targeted promotional notifications, and optional analytics – you may withdraw this consent at any time via your account settings.

All data processing carried out by Naga11 is for the purposes explicitly stated and will not be used for any other purpose without notifying you in advance.


04
Data Sharing & Disclosure to Third Parties
Who may access your data and under what circumstances

Naga11 does not sell your personal data to any third party. This is a non-negotiable commitment. However, in the course of normal business operations, there are situations where we may need to share your data with certain parties:

  • Malaysian Payment Providers: Licensed payment gateways that process your transactions – Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, Maybank2u, CIMB Clicks, and other Malaysian banks used for deposits and withdrawals.
  • KYC Service Providers: Third-party identity verification companies that assist us in verifying member identities in accordance with legal requirements.
  • Game Providers: Casino and sports gaming software providers that supply games within the naga11 platform – only the minimum data necessary to run the games is shared.
  • Malaysian Government Authorities: Law enforcement agencies, regulatory bodies, or courts where required by Malaysian law or court order.
  • Professional Advisors: Lawyers, auditors, and consultants bound by professional confidentiality obligations.
International Data Transfers

In some cases, your data may be processed outside Malaysia by our international service providers. When this occurs, Naga11 ensures that protections equivalent to Malaysia's PDPA 2010 are applied through binding data processing agreements.

All third parties that receive data from Naga11 bound by strict confidentiality and data protection agreements. They are only permitted to use data for agreed purposes and may not use your data for any other reason.


05
Naga11 Data Security Measures
The technical and organisational infrastructure that protects your data

Naga11 continuously invests in the latest security infrastructure to protect your personal data from unauthorised access, disclosure, alteration, or destruction. The following are the key security measures we have in place:

  • 256-bit SSL/TLS Encryption: All communications between your browser or app and Naga11's servers are protected by the same bank-grade encryption used by financial institutions.
  • Data-at-Rest Encryption: Sensitive data stored in our databases is encrypted using AES-256 standards.
  • Layered Access Control: Internal access to user data is restricted through a role-based access control (RBAC) system. Only staff who genuinely require access to carry out their duties are granted permission.
  • Real-Time Monitoring: An intrusion detection system (IDS) and 24/7 monitoring ensure that any suspicious activity is detected and addressed promptly.
  • Regular Security Audits: Penetration testing and security audits are conducted on a regular basis by independent cybersecurity firms.
  • PCI DSS Compliance: All payment card information is processed in compliance with the Payment Card Industry Data Security Standard (PCI DSS).
In the Event of a Data Breach

While we take all reasonable steps to protect your data, no system can guarantee absolute security. In the event of a data breach that may affect your rights or freedoms, Naga11 will notify the relevant authorities and you within 72 hours, in accordance with data protection best practices.


06
Cookie Policy
How Naga11 uses cookies and how you can manage them

Platform Naga11 uses cookies and similar tracking technologies to enhance the user experience, ensure security, and understand how our platform is used. Cookies are small text files stored on your device.

Types of Cookies Used
Cookie TypePurposeDuration
Required for core platform functionality – login, sessions, and security. Cannot be disabled. Session / 30 days
Storing your preferences – language, display settings, and favourite sports categories. 1 year
Helps us understand how users interact with the platform for continuous improvement. 2 years
Used to display promotions and offers relevant to your interests. Requires consent. 90 days

You can manage and delete cookies through your web browser settings. However, disabling essential cookies may affect platform functionality. Naga11. For more information on how to manage cookies in popular browsers, please refer to your browser's help documentation.


07
Your Rights Under PDPA 2010
Controls you have over your personal data

Under Malaysia's Personal Data Protection Act 2010 and our privacy policy Naga11, you have the following rights regarding your personal data:

Right of Access
You have the right to request and receive a copy of the personal data we hold about you. Requests will be processed within 21 business days.
Right to Rectification
If your data is inaccurate or out of date, you have the right to request that we correct or update it without undue delay.
Right to Erasure
In certain circumstances, you may request the deletion of your personal data. This right is subject to our legal data retention obligations.
Right to Restriction
You may request that we restrict the processing of your data in certain situations, such as when you are disputing the accuracy of your data.
Right to Data Portability
You have the right to receive your data in a structured, machine-readable format for transfer to another platform.
Right to Object
You may object to the processing of your data for direct marketing purposes at any time, and such requests will be honoured immediately.
How to Exercise Your Rights

To exercise any of the above rights, please contact the Naga11 Data Protection Officer (DPO) by email at privacy@naga11.ws with the subject line "Data Rights Request – [Request Type]". Include a copy of your MyKad for identity verification. All requests will be processed within 21 working days.


08
Data Retention Period
How long Naga11 retains your data

Naga11 does not retain your personal data for longer than necessary. Retention periods are determined by the original purpose of collection, legal requirements, and legitimate business interests.

Data Retention Schedule
Data TypeRetention PeriodReason
Identity Data (KYC)5 years after account closureAML & legal requirements
Transaction Records7 yearsMalaysian tax & audit requirements
Support Chat Records3 yearsDispute resolution & improvement
Gaming / Betting Data5 yearsRegulatory requirements
Technical Logs90 daysSecurity & debugging
Marketing DataUntil consent is withdrawnConsent-based

Once the retention period has expired, data will be securely deleted or fully anonymised so that it can no longer be linked to your identity. The data deletion process adheres to internationally recognised security standards.


09
Children's Privacy & Protection of Young Players
Special protection policy for minors

Service Naga11 no is intended for individuals aged 21 and above. We take the protection of minors very seriously and have specific measures in place to prevent underage access.

  • All registrants must confirm that they are 21 years of age or older at the time of registration.
  • A rigorous KYC process, including identity document verification (MyKad), allows us to confirm the true age of every member.
  • If Naga11 finds that personal data of individuals under the age of 21 has been collected without valid consent, we will take immediate steps to delete that data and close the account in question.
  • Parents or guardians who believe their child or ward has registered on the Naga11 platform may contact us immediately for prompt action.
Report Underage Access

If you suspect that someone under the age of 21 is using the platform Naga11, please report it to us immediately at privacy@naga11.ws or via Live Chat. We will respond promptly to investigate and take appropriate action.


10
Privacy Policy Changes & How to Contact Us
How we notify you of changes and how to raise a complaint

Naga11 reviews and updates this Privacy Policy from time to time to reflect changes in law, technology, or our business practices. When material changes are made to this policy, we will notify you via:

  • An email notification sent to the email address registered to your account.
  • Clear in-platform notifications when you log in to your Naga11 account.
  • Updates the "Last Updated" date at the top of this document.

Continued use of the platform after the effective date of any changes constitutes acceptance of the updated policy. We recommend reviewing this page periodically.

If you have any enquiries, concerns, or complaints regarding how Naga11 handles your personal data, please contact our Data Protection Officer:

Naga11 Data Protection Officer (DPO)
Privacy Email
privacy@naga11.ws
General Support Email
support@naga11.ws
Response Time
Within 21 working days for data rights enquiries; 48 hours for general privacy complaints.

This Privacy Policy was last updated on January 2026. The latest version is always accessible at naga11.ws/privacy-policy.


🐉 Privacy Protected, Experience Perfected
Join Naga11 with Full Confidence
Your data is protected by industry-leading technology and is fully compliant with PDPA 2010. Focus on your betting experience – leave the security of your information to us.
256-bit SSL PDPA 2010 Compliant Data Not Sold 21 years age limit

Naga11 Related Documents

Please also read the other policies governing the use of our platform.

Bahasa Melayu