nakwin Privacy Policy 🛡️

1. About This Policy

1.1 This Privacy Policy applies to all personal data processed by nakwin in connection with your use of the nakwin platform, including the website at nakwin.app, any mobile-optimised interface, and all customer support interactions.

1.2 This Policy should be read together with the nakwin Terms & Conditions, which govern your use of the nakwin platform as a whole.

1.3 nakwin reserves the right to update this Privacy Policy at any time. Material changes will be communicated to registered players via email or in-platform notification. The most current version of this policy is always available at nakwin.app/privacy-policy.

2. Personal Data We Collect

2.1 nakwin collects personal data from you directly when you register an account, use the platform, contact support, or participate in promotions. We also collect data automatically through your use of the nakwin platform. The categories of personal data we collect include:

2.2 nakwin does not collect sensitive personal data (such as racial or ethnic origin, religious beliefs, health data, or biometric data) unless strictly required by applicable KYC or anti-money laundering regulations.

3. How We Use Your Personal Data

3.1 nakwin uses your personal data for the following purposes:

• Account Management: To register and maintain your nakwin account, verify your identity, and communicate important account information;
• Transaction Processing: To process deposits, withdrawals, and wager settlements in MYR, including verification with payment providers like Touch n Go eWallet, Boost, and Malaysian banks;
• Legal Compliance: To fulfil Know Your Customer (KYC) and Anti-Money Laundering (AML) obligations under applicable regulations;
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, unauthorised account access, and other security threats;
• Responsible Gaming: To monitor gaming behaviour and apply responsible gaming tools including deposit limits, loss limits, and self-exclusion in accordance with our Responsible Gaming Policy;
• Platform Improvement: To analyse usage patterns, troubleshoot technical issues, and improve the nakwin platform based on aggregate player behaviour data;
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates where you have consented to receive such communications;
• Customer Support: To respond to your enquiries, resolve disputes, and provide technical assistance.

4. Legal Basis for Processing

4.1 nakwin processes your personal data on the following legal bases:

• Performance of Contract: Processing necessary to register your account, process transactions, and provide the nakwin platform services you have requested;
• Legal Obligation: Processing required to comply with KYC, AML, and other applicable legal and regulatory requirements;
• Legitimate Interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and aggregate analytics — where such interests are not overridden by your privacy rights;
• Consent: Processing for direct marketing communications, where you have provided explicit consent. You may withdraw consent at any time by contacting nakwin support.

5. Data Sharing & Disclosure

5.1 nakwin does not sell, rent, or trade your personal data to third parties. nakwin may share your personal data with the following categories of recipients only to the extent necessary:

• Payment Processors: E-wallet providers (Touch n Go, Boost, GrabPay) and banking partners (Maybank, CIMB, Public Bank) as required to process your financial transactions;
• Identity Verification Providers: Third-party KYC and AML screening services used to verify your identity and comply with anti-money laundering regulations;
• Game Providers: Software providers whose games are available on the nakwin platform, to the minimum extent required for game operation and dispute resolution;
• IT & Security Providers: Cloud hosting, cybersecurity, and fraud detection service providers operating under data processing agreements with nakwin;
• Legal & Regulatory Authorities: Where nakwin is required by law, court order, or regulatory authority to disclose personal data, including Malaysian authorities under the PDPA or AML legislation.

6. Cookies & Tracking Technologies

6.1 nakwin uses cookies and similar tracking technologies to operate the platform, maintain your login session, prevent fraud, and improve platform performance.

6.2 The categories of cookies used by nakwin include:

• Strictly Necessary Cookies: Essential for platform operation, including session management and security. These cannot be disabled;
• Functional Cookies: Used to remember your preferences, such as language settings and responsible gaming limits;
• Analytics Cookies: Used to collect aggregate data on how players use the nakwin platform, to identify areas for improvement. Data collected is anonymised before analysis.

6.3 You may configure your browser to refuse cookies, but doing so may prevent certain nakwin platform features from functioning correctly, including the ability to maintain a logged-in session.

7. Data Security

7.1 nakwin implements appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and nakwin servers;
• Encryption of sensitive data at rest, including financial account details and identity documents;
• Role-based access controls ensuring nakwin staff access only the personal data required for their specific function;
• Regular security audits and penetration testing of the nakwin platform infrastructure;
• Two-factor authentication (2FA) available for all player accounts.

7.2 Despite these measures, no system is entirely immune to security risks. nakwin will notify affected players and relevant authorities in accordance with applicable law in the event of a data breach that poses a risk to your rights and freedoms.

8. Data Retention

8.1 nakwin retains your personal data for as long as your account is active and for a period thereafter as required by applicable law, including AML and gaming regulatory requirements, which typically mandate retention of transaction records for a minimum of five (5) years.

8.2 Where personal data is no longer required for any legitimate purpose, nakwin will securely delete or irreversibly anonymise it. Gaming activity data may be retained in anonymised, aggregate form for platform analytics purposes indefinitely.

8.3 If you request closure of your nakwin account, nakwin will delete or anonymise your personal data within 90 days, subject to legal retention obligations that require longer retention periods.

9. Your Data Rights

9.1 As a player using nakwin from Malaysia, you have the following rights under the Personal Data Protection Act 2010 (PDPA) and applicable international data protection standards:

• Right of Access: You have the right to request a copy of the personal data nakwin holds about you;
• Right of Correction: You have the right to request correction of inaccurate or incomplete personal data;
• Right to Withdraw Consent: Where processing is based on consent (e.g., marketing communications), you may withdraw consent at any time without affecting the lawfulness of prior processing;
• Right to Limit Processing: You may request that nakwin restrict processing of your personal data in certain circumstances, such as where you contest its accuracy;
• Right of Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to nakwin's legal retention obligations.

9.2 To exercise any of the above rights, please contact nakwin at [email protected]. nakwin will respond to all valid requests within 30 calendar days. Identity verification will be required before processing any data rights request.

10. Children & Age Restriction

10.1 nakwin is strictly for adults aged 21 and above. nakwin does not knowingly collect personal data from any person under the age of 21. If nakwin becomes aware that personal data has been collected from a person under 21, the associated account will be immediately closed, the data deleted, and any balance forfeited.

10.2 If you believe a person under 21 has created an account on nakwin, please contact [email protected] immediately.

11. International Data Transfers

11.1 nakwin may process and store your personal data on servers located outside of Malaysia, including in jurisdictions that may not have data protection laws equivalent to the Malaysian PDPA. Where such transfers occur, nakwin ensures that appropriate safeguards are in place, including contractual data processing agreements that bind recipients to data protection standards no less rigorous than those applied by nakwin.

12. Changes to This Privacy Policy

12.1 nakwin may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or platform functionality. Where changes are material, nakwin will provide notice to registered players via email or in-platform notification at least 14 days before the changes take effect.

12.2 Continued use of nakwin following the effective date of updated Terms constitutes acceptance of the revised Privacy Policy. If you do not accept the revised policy, you must close your nakwin account before the effective date.

13. Contact & Complaints

13.1 For any questions, requests, or complaints relating to this Privacy Policy or nakwin's handling of your personal data, please contact:

• Email: [email protected]
• Live Chat: Available on the nakwin platform, 8AM – 2AM (MYT), 7 days a week

13.2 If you are unsatisfied with nakwin's response to a data protection complaint, you have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.