Privacy Policy

Privacy Policy 23naga –
Data Protection Malaysian Player Privacy

At 23naga, your privacy is not merely a legal obligation — it is a core value we uphold. This document transparently explains how we collect, use, store, and protect your personal information.

Updated: January 2026
256-bit SSL Encryption
Bahasa Melayu
Section 01

Introduction & Our Privacy Commitment

Welcome to the 23naga Privacy Policy page. We understand that entrusting your personal information to any online platform is a decision that should not be taken lightly. That is why we have taken the time to write this policy in a clear, honest, and straightforward way — free from the confusing legal jargon that often gets in the way.

23naga operates in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and relevant international data protection standards. This policy outlines our practices regarding the collection, use, storage, protection, and sharing of our platform users' personal information.

By using the 23naga platform, you agree to the practices described in this Privacy Policy. If you disagree with any part of this policy, please discontinue use of our platform. This Privacy Policy should be read together with Terms and Conditions us.

Our commitment: 23naga will never sell, rent, or trade your personal information to any third party for their own marketing or commercial purposes, under any circumstances.

Section 02

Personal Information We Collect

We only collect information that is strictly necessary to operate our platform safely and efficiently. Below are the categories of information we collect and the reasons for doing so:

Account Registration Information

  • Full name as it appears on your official identification document
  • Date of birth for age verification (18+ required)
  • Email address for account communications and notifications
  • Mobile phone number for two-factor authentication and support
  • Password (stored in an unreadable hashed format)

Identity Verification Information (KYC)

  • A copy of your MyKad, passport, or valid identity document
  • Proof of residential address such as a utility bill or recent bank statement
  • Bank account or e-wallet information for withdrawal processing

Financial Transaction Information

  • Deposit and withdrawal records including amounts, dates, and payment methods
  • Betting history and gaming activity for risk control purposes
  • Payment card or account details used (full numbers are not stored)

Technical & Usage Information

  • IP address, device type, and operating system
  • Web browser type and version in use
  • Navigation patterns and in-platform activity
  • Session log data including login and logout times
  • Geolocation data (country only, not precise location)
Data Category Purpose of Collection Mandatory / Optional
Registration Information Account management & communications Mandatory
KYC Documents Identity verification & AML compliance Mandatory
Transaction Data Payment processing & fraud prevention Mandatory
Technical Data Security, risk control & platform improvement Automatic
Communication Preferences To send promotions & relevant notifications Options
Section 03

How We Use Your Information

Every piece of information we collect is used for a clear and legitimate purpose. We do not use your data for any purpose other than those stated below without first obtaining your consent.

  • Account management: To create, verify, and manage your user account on the 23naga platform
  • Transaction processing: To process deposits, withdrawals, and settle financial transactions accurately and securely
  • KYC Verification: To verify your identity in compliance with anti-money laundering legal requirements
  • Platform security: To detect and prevent fraud, hacking, and suspicious activity that could compromise your account
  • Customer support: To provide accurate and effective technical support when you contact our team
  • Service communications: To send important notifications related to your account, security, and policy changes
  • Relevant marketing: To inform you about relevant promotions and offers (if you have agreed to receive them)
  • Platform improvements: To analyze usage patterns in aggregate in order to improve the user experience
  • Responsible gaming: To detect gaming patterns that may require early intervention for your well-being

Automated Processing: Some decisions on the 23naga platform, such as risk assessments and fraud detection, are carried out automatically using our systems. You have the right to request a manual review if you believe an automated decision is unfair.

Section 04

Information Sharing & Disclosure

23naga does not sell or trade your personal information. However, there are certain situations where we need to share information with specific parties to keep the platform running properly and securely:

Trusted Third-Party Service Providers

We share the minimum necessary information with service providers who help us operate the platform, including:

  • Payment processors and financial gateways used for deposit and withdrawal transactions
  • Third-party KYC and identity verification service providers
  • Cloud service providers for secure data storage
  • Game software providers such as live casino and slot suppliers

All these third-party providers are bound by strict confidentiality agreements and may only use your data for the specified purposes.

Legally Mandated Disclosure

We may be required to disclose your information to government authorities or law enforcement if:

  • Required by court order or applicable law
  • Required for investigations into money laundering or financial fraud activity
  • Required by the relevant regulatory authority

Note: In all sharing situations mentioned, 23naga only discloses information that is strictly necessary and nothing more. We will inform you of any such disclosure where permitted by law.

Section 05

Our Data Security Measures

The security of your data is the highest priority at 23naga. We continuously invest in the latest security technologies and procedures to ensure your personal information is always protected against unauthorized access, breaches, or misuse.

  • 256-bit SSL Encryption: All data transmitted between your browser and our servers is protected with banking-grade industry-standard encryption
  • Data encryption at rest: Sensitive data such as financial information and KYC documents are stored in encrypted format
  • Strict access controls: Only authorized staff with a genuine work-related need may access user data
  • 24/7 security monitoring: Our systems are continuously monitored to detect any anomalies or unauthorised access attempts
  • Periodic security audits: The 23naga platform undergoes independent security audits on a regular basis to identify and address any vulnerabilities
  • Incident response plan: We have clear procedures in place to respond to any data breach should one occur

Data Breach Notification: In the event of a data breach that may affect your information, 23naga will notify you via your registered email within the timeframe required by applicable law.

Section 06

Cookies & Tracking Technologies

The 23naga platform uses cookies and similar technologies to enhance the user experience, maintain session security, and analyze usage patterns. Below are the types of cookies we use:

Essential Cookies

These cookies are mandatory for the platform to function properly. Without them, key features such as secure login and session management will not work. These cookies cannot be disabled.

Performance & Analytics Cookies

We use analytics cookies to understand how users interact with our platform. This data is collected in aggregate and anonymized form to help us improve the overall user experience.

Functional Cookies

These cookies store your preferences such as selected language, display settings, and login details for your convenience. They help us deliver a more personalized experience.

Cookie Controls: You can manage or delete cookies through your web browser settings. However, disabling certain cookies may affect the functionality of some sections of the 23naga platform.

Section 07

Data Retention Period & Deletion

23naga does not store your data indefinitely. We have a clear data retention policy based on operational needs and legal obligations:

  • Active account data: Retained for as long as your account is active on the platform
  • Financial & transaction records: Retained for a minimum of 7 years in accordance with Malaysian financial legal requirements
  • KYC documents: Retained for 5 years after account closure in accordance with AML compliance requirements
  • Support communication logs: Retained for 2 years for reference and dispute resolution purposes
  • Technical log data: Retained for 90 days for security analysis

Once the relevant retention period has ended, your data will be securely deleted or anonymised so that it can no longer be linked to you. You may request account deletion at any time by contacting our support team, subject to any applicable legal retention obligations.

Section 08

Your Rights as a User

Under Malaysia's Personal Data Protection Act 2010 and 23naga's internal policies, you have several important rights regarding your personal data. We respect and facilitate the exercise of these rights:

Right of Access

You have the right to request a copy of all personal information we hold about you. This request will be processed within 30 working days.

Right to Rectification

If your information is inaccurate or out of date, you may request that we update or correct it. We encourage you to keep your profile information current at all times.

Right to Erasure

You may request deletion of your data subject to legal retention obligations. Requests will be assessed on a case-by-case basis and we will inform you of the outcome.

Right to Object to Processing

You may object to the use of your data for direct marketing purposes at any time. Simply update your communication preferences in your account settings or contact our customer support.

Right to Data Portability

You have the right to receive a copy of your personal data in a machine-readable format for transfer to another platform should you choose to do so.

Right to Restrict Processing

In certain circumstances, you may request that we restrict the processing of your data while a related issue is being resolved, without needing to delete that data.

To exercise any of the above rights, contact the 23naga customer support team via Live Chat or email. We will respond to your request within a reasonable timeframe and will not charge any fees for legitimate requests.

Section 09

Cross-Border Data Transfers

As an online platform, some of the service providers we use may operate outside Malaysia. This means your data may be transferred to and processed in other countries.

When such data transfers occur, 23naga ensures that:

  • Transfers are only made to countries with an equivalent or higher level of data protection
  • Appropriate data transfer agreements have been signed with the relevant service providers
  • The same protection standards as described in this policy are upheld by all parties involved
  • Only the minimum data required will be transferred for each stated purpose
Section 10

Minors & Age Verification

The 23naga platform is strictly for users aged 18 and above only. We do not intentionally collect or process any personal information from individuals under the age of 18.

We carry out an age verification process during registration and during KYC processing to ensure compliance with this age requirement. If we find that information has been collected from someone under the age of 18, we will take immediate steps to delete that information and close the account in question.

Child-Related Complaints: If you believe that a minor under the age of 18 has registered or used this platform, please contact our support team immediately so that appropriate action can be taken.

Section 11

Privacy Policy Amendments

23naga reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or platform improvements.

When material changes are made to this policy, we will:

  • To update the "Last Updated" date at the top of this page
  • To send notifications to your registered email address for significant changes
  • To display clear notices on the platform during the transition period

Continued use of the 23naga platform after any amendments are published will be considered your acceptance of the updated policy. We encourage you to review this page periodically.

Section 12

How to Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, we encourage you to reach out to us directly. Our team is available to assist you 24 hours a day, 7 days a week.

You can reach us via:

  • Live Chat: Available directly on the 23naga platform — the fastest way to get an immediate response
  • Support Email: [email protected] — for written enquiries requiring record reference

For privacy rights requests in particular, please clearly state the type of request (e.g., "Data Access Request" or "Data Deletion Request") so we can route your application to the correct team more quickly.

Response Time: 23naga is committed to responding to all privacy-related enquiries within 5 working days. More complex requests may take up to 30 working days to be fully resolved.

Privacy Commitment

Six Ways 23naga Protects Your Data

Your privacy is not just words — it is a daily practice we uphold in every aspect of 23naga platform operations.

End-to-End Encryption

Every bit of data that travels between your device and the 23naga servers is protected by 256-bit SSL encryption — the same standard used by Malaysia's major banks to secure online transactions.

Strictly Limited Data Access

Only 23naga staff with a genuine operational need are granted access to user data. All access is logged and monitored, and staff undergo regular data protection training.

Independent Security Audit

The 23naga platform undergoes periodic security assessments by independent third parties. This ensures our privacy practices consistently meet or exceed current industry standards.

Minimum Data Collection

We only collect what is truly necessary — nothing more. Every piece of data we request has a clear justification, and you will know what it is used for before providing it to us.

Immediate Incident Notification

In the event of any security incident that may affect your data, 23naga has a clear notification procedure to inform you promptly and take corrective action.

Scheduled Data Deletion

Data that is no longer needed is securely deleted according to a pre-set schedule. We do not retain your data longer than required by operational or legal needs.

Your Data is Safe With Us

Play at 23naga with With Full Confidence

Your privacy is protected. Your transactions are secure. Your games are fair. That is the 23naga promise to every Malaysian player who trusts us with their time and money.

By registering, you agree to 23naga's Privacy Policy and Terms & Conditions.

Bahasa Melayu