This Privacy Policy explains how Nagahoki88 collects, uses, stores, shares, and protects the personal data of registered players and visitors to our platform. We take your privacy seriously, and this document sets out your rights and our obligations under applicable international data protection frameworks.
Nagahoki88 ("the Company", "we", "us", or "our") is the operator of the online casino and sports betting platform accessible at nagahoki88.cam ("the Platform"). In the course of providing our services to registered players ("you", "the User", or "the Player") across Malaysia — including users based in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and other locations — we collect and process personal data.
This Privacy Policy ("the Policy") describes in clear, structured terms what personal data we collect, the purposes for which we process it, the legal bases on which that processing rests, how long we retain it, whom we share it with, and the rights you hold over your own information.
The Company operates under international online gambling licensing frameworks and adheres to internationally recognised data protection standards, including principles consistent with the General Data Protection Regulation (GDPR) and equivalent frameworks, even where local Malaysian law does not impose identical requirements.
For the purposes of this Policy, the following terms carry the meanings assigned to them below:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information that identifies or could reasonably be used to identify a natural person, directly or indirectly, including name, email address, device identifiers, and payment details. |
| "Processing" | Any operation performed on Personal Data, including collection, storage, use, transfer, disclosure, anonymisation, and deletion. |
| "Data Controller" | The Company, as the entity that determines the purposes and means of processing Personal Data collected through the Platform. |
| "Data Processor" | A third-party service provider that processes Personal Data on behalf of the Company pursuant to a written data processing agreement. |
| "Consent" | A freely given, specific, informed, and unambiguous indication of agreement to the processing of Personal Data for a stated purpose. |
| "Cookies" | Small text files placed on a User's device by the Platform to store session information, preferences, and analytical data. |
| "KYC Data" | Identity and age verification documents submitted by a Player to satisfy the Platform's Know Your Customer obligations, including government-issued identification and proof of address. |
We collect the following categories of Personal Data from Users of the Platform:
We collect Personal Data through the following means:
We process your Personal Data only where we have a valid legal basis for doing so. The table below sets out our processing purposes alongside their corresponding legal bases:
| Processing Purpose | Legal Basis |
|---|---|
| Account creation and platform access | Performance of a contract (providing platform services to the registered user) |
| Age and identity verification (KYC) | Legal obligation (compliance with AML and age-restriction requirements under our operating licence) |
| Processing deposits and withdrawals | Performance of a contract; compliance with payment regulatory requirements |
| Fraud prevention and AML monitoring | Legitimate interests of the Company; legal obligation |
| Responsible gambling monitoring and intervention | Legitimate interests; legal obligation under licensing framework |
| Customer support and dispute resolution | Performance of a contract; legitimate interests |
| Marketing and promotional communications | Consent (opt-in only; withdrawable at any time) |
| Platform analytics and performance improvement | Legitimate interests (improving services for all users) |
| Legal compliance and regulatory reporting | Legal obligation |
All Personal Data collected by the Company is processed in accordance with the principles of data minimisation, purpose limitation, and storage limitation. We do not process Personal Data in ways that are incompatible with the purposes for which it was originally collected.
Gameplay and financial data are processed in real time to facilitate bet settlement, wallet balance updates, and promotion eligibility calculation. Transaction records are processed automatically and subject to periodic manual review by our compliance team where flagged by automated risk systems.
Responsible gambling data — including deposit patterns, session lengths, and self-imposed limits — is processed to monitor for indicators of problem gambling behaviour. Where our systems identify a potential concern, our responsible gambling team may make proactive contact with the relevant Player to offer support tools.
KYC data is processed by our compliance team and, where applicable, by approved third-party identity verification providers. Original KYC documents are not retained longer than necessary for the purpose for which they were submitted (see Section 9).
Nagahoki88 does not sell, rent, or trade your Personal Data to third parties for their own marketing purposes. We share your data only in the following circumstances, and only to the extent necessary for the relevant purpose:
The Platform uses cookies and similar tracking technologies (including web beacons and local storage identifiers) to deliver, improve, and secure our services. The following categories of cookies are used:
| Cookie Type | Purpose | Required? |
|---|---|---|
| Strictly Necessary | Maintain login sessions, balance updates, and security tokens required to operate the Platform. | Yes — cannot be disabled without impairing core functionality. |
| Functional | Remember your language preference, display settings, and responsible gambling limit selections between sessions. | Optional — disabling will reset preferences on each visit. |
| Analytics | Measure aggregate page usage, game category popularity, and platform performance to inform product improvements. Data is anonymised and aggregated. | Optional — can be disabled via cookie preferences. |
| Security | Detect bot activity, brute-force login attempts, and session hijacking patterns. Required for platform integrity. | Yes — cannot be disabled. |
You may manage your cookie preferences through your browser settings. Note that disabling strictly necessary or security cookies will significantly impair your ability to use the Platform. We do not use third-party advertising cookies or retargeting pixels on the Platform.
We retain Personal Data only for as long as is necessary for the purposes for which it was collected, subject to any legal obligations that require longer retention periods. The following retention periods apply:
| Data Category | Retention Period |
|---|---|
| Account registration data | Duration of active account, plus 5 years following account closure. |
| KYC and identity documents | 5 years from the date of verification, or longer if required under our AML compliance obligations. |
| Financial transaction records | 7 years from the date of each transaction, in line with standard financial record-keeping requirements. |
| Betting and gameplay history | 5 years from the date of each session or transaction. |
| Support and complaint records | 3 years from the date of resolution. |
| Analytics and technical logs | 13 months on a rolling basis (anonymised after 30 days). |
| Self-exclusion records | Permanent — retained indefinitely to prevent re-registration by excluded players. |
Upon expiry of the applicable retention period, Personal Data is either securely deleted or irreversibly anonymised such that it can no longer be attributed to an identifiable individual.
The Company implements appropriate technical and organisational measures to protect your Personal Data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security framework includes, but is not limited to, the following:
In the event of a personal data breach that poses a risk to your rights and freedoms, the Company will notify affected Users without undue delay and, where required, report the breach to the relevant supervisory authority within the timeframe prescribed by applicable law.
As an internationally operated platform, some of your Personal Data may be transferred to, processed in, or stored in countries outside Malaysia. This may include countries where the Company's servers are hosted, where our licensed Data Processors operate, or where our technical service providers are based.
Where such transfers occur, the Company ensures that appropriate safeguards are in place to protect your data, including: contractual clauses that impose data protection obligations equivalent to those described in this Policy, transfers to jurisdictions with adequacy determinations under applicable frameworks, and binding corporate rules where applicable.
By using the Platform and consenting to this Privacy Policy, you acknowledge and agree to the transfer of your Personal Data to jurisdictions outside Malaysia under the safeguards described herein.
Subject to applicable law and certain limitations arising from our legal obligations (particularly under AML and gaming licensing frameworks), you hold the following rights in respect of your Personal Data held by nagahoki88:
To exercise any of the above rights, please contact our support team using the details in Section 16. We may require identity verification before processing a data subject request to protect against unauthorised disclosure.
The Platform is strictly intended for users aged 21 years and above. We do not knowingly collect Personal Data from individuals below this age. The Company enforces age verification at account registration through our KYC process, which requires submission of a valid government-issued identification document confirming date of birth.
If we become aware that Personal Data has been collected from a person under the age of 21 without verification of parental or guardian consent, we will take immediate steps to delete that data and close the associated account. If you have reason to believe that a minor has registered an account on the Platform, please contact us immediately using the details provided in Section 16.
The Platform may contain links to third-party websites or integrate third-party services (such as game studio content from our licensed software partners). This Privacy Policy applies only to data processed by the Company through the Platform. It does not govern the data practices of any third-party website or service provider that you access via a link from our Platform.
We encourage you to review the privacy policies of any third-party services you use in connection with the Platform, including payment method providers such as Touch 'n Go eWallet, Boost, GrabPay, and DuitNow, as each of these services operates under its own data protection framework.
The Company reserves the right to amend this Privacy Policy at any time to reflect changes in applicable law, our business practices, or the services we offer. Where amendments are material, we will notify registered Users via email or through a prominent in-platform notice prior to the changes taking effect.
The "Last Updated" date at the top of this Policy reflects the most recent revision. Your continued use of the Platform following the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. We encourage you to review this page periodically.
The current version of this Policy is always available at nagahoki88.cam/privacy-policy. Prior versions may be requested from our support team for reference.
If you have any questions, concerns, or requests relating to this Privacy Policy, wish to exercise a data subject right, or need to report a potential privacy issue, please contact us using the details below. All privacy-related requests will be acknowledged within 2 business days and resolved within 30 calendar days where possible.
Six core data protection principles that govern how nagahoki88 handles every piece of personal information we collect from Malaysian players.
All data transmissions between your device and our servers are protected by 256-bit SSL/TLS encryption. Stored passwords are hashed and salted — never readable in plain text.
Your personal data is never sold, rented, or shared with advertisers or data brokers. We share your data only with payment processors and compliance partners under strict contractual obligations.
Request access, correction, deletion, or export of your personal data at any time. We will respond to all data subject requests within 30 calendar days of verified receipt.
We hold your data only as long as legally required or operationally necessary. Analytics data is anonymised within 30 days. Closed account data is deleted after defined retention windows.
Independent cybersecurity firms conduct full penetration testing and vulnerability assessments on the Platform annually. Results inform our security roadmap for the following year.
In the unlikely event of a data breach that poses risk to your rights, we will notify you without undue delay and report to relevant supervisory authorities as required by applicable law.
If any part of our Privacy Policy is unclear, or if you'd like to submit a data access, correction, or deletion request, our support team is available 24/7. You can also review our full Terms and Conditions or visit our FAQ page.
🔞 21+ Only · Please Gamble Responsibly · Responsible Gambling →