Na777 Privacy Policy – Personal Data Protection for Malaysian Players

For ease of understanding, the following are definitions of key terms used in this na777 Privacy Policy:

• "Personal Information" — any data that can be used to identify you directly or indirectly, including your name, phone number, email address, financial information and platform usage data.
• "Processing" — any operation carried out on personal information, including collection, storage, use, sharing, and deletion.
• "Third Party" — any entity other than na777 and you as the user, including payment providers, game providers and technical service providers.
• "Cookies" — small data files stored on your device while browsing na777 to enhance your user experience.

This policy applies to all registered players and anyone browsing na777-khelo.com, regardless of location within Peninsular Malaysia or East Malaysia (Sabah and Sarawak).

Na777 collects your personal data in several ways — directly through registration forms and platform interactions, and automatically through web usage technologies. The following are the categories of data collected:

A. Data You Provide Directly:

• Full name as stated on your Malaysian identity card (MyKad)
• Active Malaysian mobile number (used for OTP verification)
• A valid and active email address
• Payment method details — e-wallet account numbers (Touch 'n Go, GrabPay, DuitNow, Boost, ShopeePay) or bank account numbers (Maybank, CIMB and others) for withdrawal purposes
• Identity verification documents (such as a copy of your MyKad) when requested for account verification
• Your gaming preferences and limits as set by you through na777's responsible gaming tools

B. Data Collected Automatically:

• IP address and network information
• Device type, mobile phone model, operating system, and browser version
• Session data — login time, session duration and pages visited within na777
• Betting and game history — game types, wager amounts, wins, and losses
• Transaction history — all deposits and withdrawals, including timestamps and payment methods
• Geolocation data — at state or city level only, not precise GPS coordinates

Na777 uses your personal data for legitimate and limited purposes only. Below is a complete list of the purposes for which your data is used at na777:

• Account Operations: Creating and managing your na777 account, verifying your identity at login, processing account information changes, and resolving any account-related technical issues.
• Financial Processing: Processing deposits and withdrawals via Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, FPX (Maybank2u, CIMB Clicks) and other local Malaysian payment methods. All transactions are recorded for your account statement purposes.
• Security & Verification: Detecting and preventing fraud, money laundering, multiple account usage and any suspicious activity on the na777 platform. This includes analysis of unusual betting patterns.
• Legal Compliance: To fulfil legal and regulatory obligations — including KYC (Know Your Customer) and AML (Anti-Money Laundering) procedures as required by the relevant regulatory authorities.
• Service Improvement: Analysing aggregated and anonymised usage data to understand how Malaysian players use the na777 platform and to make relevant improvements.
• Service Communications: Sending important notifications such as transaction confirmations, policy updates, security alerts, and essential na777 service information.
• Customer Support: To provide efficient support whenever you contact the na777 support team — a record of your interaction history helps us better understand the context of your issue.
• Responsible Gaming: To monitor gameplay patterns and identify signs of potential gambling problems, and to provide assistance or restrict access where necessary to protect your wellbeing.

Na777 not use your personal data to sell to third-party advertisers, build marketing profiles for sale, or share with other gaming platforms that are not part of na777's operations.

Na777 understands that the key concern for Malaysian players is — "who is my information shared with?" The answer is: only on a limited and strictly controlled basis:

• Payment Providers: Information required to process your transactions is shared with payment gateway providers — such as the e-wallet platforms and local Malaysian banks you use. This sharing is kept to a minimum and limited strictly to what is necessary to complete the transaction.
• Game Providers: Slots and Live Casino providers that partner with na777 (such as Pragmatic Play, PG Soft, Evolution Gaming) may receive anonymised player IDs for game operation purposes. They do not receive your full name, mobile number or financial information.
• Technical Service Providers: Companies that provide na777 with technical infrastructure — such as cloud server services, analytics, and cybersecurity — may have limited access to data strictly for technical operational purposes. All such providers are bound by strict confidentiality agreements with na777.
• Authorities: na777 will disclose information to law enforcement, financial authorities, or regulatory bodies where required by Malaysian law or a valid court order. This includes cases involving fraud, money laundering, or financial crimes.

Na777 invests in the latest security technologies to ensure your personal data is always protected. Below are the security layers we have in place:

• 256-bit SSL Encryption: All communications between your device and na777's servers are encrypted using 256-bit SSL (Secure Socket Layer) technology — the same standard used by leading Malaysian banking institutions. This means any data transmitted cannot be read by any unauthorised party.
• Data Encryption at Rest: Personal data stored in na777's databases is encrypted at rest using AES-256 standards. Even in the event of a server breach, your data cannot be read without the encryption key.
• Two-Factor Authentication (2FA): na777 offers 2FA for all accounts. Once 2FA is enabled, logging in to your na777 account requires a one-time OTP sent to your registered mobile number — even if someone knows your password, they cannot access your account without that OTP.
• 24/7 Monitoring: na777's security system monitors account activity around the clock, 24 hours a day. Any suspicious activity — such as a login from a new location or sudden changes to account details — will trigger an automatic security review.
• Internal Access Controls: na777 staff only have access to the data necessary for their specific role — a strict "least privilege" principle. Access to sensitive data such as financial information requires multi-level approval.
• Regular Security Audits: na777 undergoes regular independent security audits to identify and address any system vulnerabilities before they can be exploited.

While na777 takes all reasonable precautions, no system in the world is 100% breach-proof. We therefore encourage you to take personal security measures as well — use a strong and unique password, enable 2FA and never share your na777 login credentials with anyone.

Na777 uses cookies and similar technologies to enhance your experience on the platform. Here are the types of cookies we use and their purposes:

• Essential Cookies (Required): Required for the basic operation of the na777 website — including login verification, session management and security. These cookies cannot be disabled as they are fundamental to the platform's functionality.
• Performance Cookies: Collects anonymous information about how you use na777 — which pages are visited most frequently, how long you spend on each page, and any error messages that appear. This data helps na777 improve platform performance and the overall user experience.
• Functional Cookies: Remembering your preferences on na777 — interface language, game preferences and display settings. This allows na777 to provide a more personalised experience each time you return to the platform.
• Session Cookies: Temporary files that are automatically deleted when you close your browser. These are used to maintain your login status during an active session on na777.

You can manage your cookie settings through your browser's preferences (Chrome, Safari, Firefox, etc.). Please note that disabling essential cookies may affect the functionality of the na777 platform.

Na777 retains your personal data for as long as necessary to fulfil the purposes outlined in this Policy, or as required by Malaysian law:

• Active Account Data: For as long as your na777 account remains active, all account information is retained for operational and customer support purposes.
• Financial Transaction Records: Minimum 7 years from the date of transaction, in accordance with Malaysian financial regulations governing audit record retention.
• Gaming History: A minimum of 5 years for dispute resolution and compliance audit purposes. Live Casino session recordings are retained for a minimum of 90 days.
• KYC Verification Documents: MyKad copies and other identity verification documents are retained for a minimum of 5 years after account closure.
• Data After Account Closure: After account closure, na777 retains only the minimum data required for legal and audit purposes. Any data no longer needed will be deleted or anonymised within 12 months of account closure.

You may request the deletion of your data beyond the minimum legal retention requirements. However, such a request may result in the closure of your na777 account if the data in question is necessary for account operations.

As a Malaysian player using the na777 platform, you have the following rights regarding your personal data:

• Right of Access: You have the right to request a copy of all personal information na777 holds about you. Requests will be processed within 14 working days.
• Right to Rectification: If you find that your personal data held in na777's system is inaccurate or outdated, you have the right to request a correction. Certain changes may require supporting documentation for verification.
• Right to Erasure: You may request the deletion of personal data that exceeds na777's operational and legal requirements. Such requests will be assessed in accordance with the relevant legal obligations.
• Right to Restrict Processing: In certain circumstances, you may request na777 to restrict how your data is processed — for example, while a dispute regarding the accuracy of your data is being resolved.
• Right to Withdraw Consent: For data processing based on your consent (such as marketing communications), you may withdraw that consent at any time without affecting the operation of your na777 account.
• Right to Data Portability: You may request a copy of your personal data in a machine-readable format (such as CSV or JSON) for transfer to another service, subject to technical compatibility.

To exercise any of the rights above, please contact the na777 privacy team by email at support@na777-khelo.com by clearly stating the right you wish to exercise along with your account information for identity verification. We will respond within 14 business days.

Na777 strictly does not accept users under 18 years of age. This platform is designed for adults only, and we take this responsibility very seriously.

• The na777 registration process requires age verification via an active Malaysian mobile number. na777 reserves the right to request age verification documents (MyKad) at any time.
• Should na777 discover or become aware that personal data of an individual under 18 years of age has been collected without our knowledge, we will take immediate steps to delete that data and close the account in question.
• Parents or guardians who suspect a child or minor in their care is using the na777 platform are encouraged to contact our support team immediately at support@na777-khelo.com.

Na777 may update this Privacy Policy from time to time to reflect changes in our practices, new technologies, or evolving legal requirements. Here is how we manage those changes:

• All active Members will be notified of any material changes to this Privacy Policy via their registered email address at least 14 days before the changes take effect.
• A notice of any changes will also be prominently displayed within the na777 platform upon your next login.
• The "Updated" date at the top of this page will always reflect the latest version of the na777 Privacy Policy.
• Continued use of the na777 platform after the effective date of any changes constitutes acceptance of the updated Privacy Policy.
• If you do not agree with the changes, you have the right to close your na777 account and request data deletion in accordance with the procedure set out in Section 8.

If you have any questions, concerns or requests regarding your privacy and personal data at na777, please contact us through the following channels:

• Privacy Email: support@na777-khelo.com — please include "Privacy Request" in the subject line of your email.
• Live Chat: Available 24/7 on the na777 platform — our support team speaks both Bahasa Melayu and English.

The na777 privacy team will respond to all enquiries within 14 working days. For urgent matters or issues involving account security, please use live chat for a faster response. We take every privacy enquiry seriously, as your trust is the foundation of everything na777 does.