Privacy Policy nanas44 — Our Commitment to Protecting the Personal Data of Malaysian Players

This Privacy Policy ("Policy") is published by nanas44 ("we", "Platform" or "nanas44") and describes how we collect, store, process, use, and protect the personal information of players and users who access nanas44.best and all related services.

This Policy applies to all registered nanas44 players, unregistered website visitors, and any individual who interacts with the nanas44 platform through any channel — including the website, email, live chat, or Telegram. This Policy should be read alongside the nanas44 Terms & Conditions, which is the complete document governing the relationship between players and the platform.

Nanas44 is committed to complying with Malaysia's Personal Data Protection Act 2010 (PDPA) in all aspects of handling players' personal data. We recognise that player trust is our most valuable asset, and protecting privacy is the primary way we uphold that trust.

Nanas44 collects several categories of information from players. The table below provides a full breakdown of the data types we collect and their primary purpose:

Nanas44 does not collect sensitive information such as biometric data, health information, religious beliefs, or political affiliations in the course of operating the platform. Any KYC verification requests involving identity documents are handled in accordance with strict security procedures.

Nanas44 collects players' personal information through several different methods, depending on the type of data and the purpose for which it is collected:

• Directly from you: During account registration, form submissions, withdrawal requests, or when you contact the nanas44 support team
• Automatically: Through cookie technology, server logs, and analytics tools that record how you interact with the nanas44 platform — including pages visited, time spent, and actions taken
• From payment providers: When you make a deposit or withdrawal via Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, or FPX, we receive transaction confirmation from the respective provider.
• From game providers: Game providers such as PG Soft, Pragmatic Play, and Evolution Gaming may transmit technical data relating to your game sessions for dispute resolution and audit purposes.
• From public sources: In the context of certain legal compliance requirements, we may review information from legitimate public sources for identity verification purposes.

Nanas44 uses players' personal data for the following purposes, all of which have a valid legal basis under Malaysia's PDPA:

• Account management: Creating, verifying, and maintaining player accounts, processing secure logins, and managing account settings
• Transaction processing: Processing MYR deposits via Touch 'n Go, GrabPay, DuitNow, and other methods, as well as handling winnings withdrawals to the correct accounts
• Provision of gaming services: Managing access to over 1,200 games, recording game history, calculating bonuses, and accurately processing winnings
• Security and fraud prevention: Detecting unusual account activity, preventing unauthorised access, and maintaining the integrity of the nanas44 platform
• Legal compliance: Meeting regulatory requirements, mandatory financial reporting, and cooperating with law enforcement authorities when legally required
• Responsible gaming: Monitoring gameplay patterns to identify signs of problem gambling and provide appropriate support to players who need it
• Platform improvement: Analysing usage patterns in aggregate (not at an individual level) to improve features, performance, and the overall user experience on nanas44
• Service communications: Sending you important notices regarding your account, transactions, policy updates, and relevant security information

Nanas44 does not use players' personal data for targeted advertising on behalf of third parties, nor to build commercial profiles that are sold to other companies.

Nanas44 does not sell or disclose players' personal data to third parties for commercial purposes. However, in the course of operating the platform, there are situations where we need to share certain information with selected parties:

• Payment providers: Minimum transaction information required is shared with Touch 'n Go, GrabPay, DuitNow, Boost, ShopeePay, and FPX banks to process MYR deposits and withdrawals. These providers maintain their own privacy policies and are bound by mutual confidentiality agreements with nanas44.
• Game providers: Technical game-session data required for technical resolution is shared with licensed providers such as PG Soft, Pragmatic Play, and Evolution Gaming under strict data protection agreements.
• Regulatory bodies and law enforcement: When required by law, a court order, or a competent regulatory authority, nanas44 will disclose the necessary information in accordance with valid legal procedures.
• Technical service providers: Third parties that provide technical infrastructure, hosting, and security for the nanas44 platform have limited access only to the data needed to perform their technical functions, and are bound by strict confidentiality agreements.

All third parties that receive data from nanas44 are contractually obligated to use that information solely for the specified purpose and to protect it to a standard equal to or higher than our own.

Nanas44 employs comprehensive technical and organisational security measures to protect players' personal data against unauthorised access, misuse, disclosure, alteration, or destruction:

• 256-bit SSL encryption for all data in transit between your device and nanas44 servers
• Sensitive data stored in the database is encrypted using industry-recognised algorithms
• Role-based access control (RBAC) ensuring nanas44 staff can only access data necessary for their specific responsibilities
• Round-the-clock security monitoring with automated intrusion detection systems
• Regular security audits conducted by independent third parties
• A clear incident response procedure for addressing any potential data breaches

Data retention period: nanas44 retains players' personal data for as long as necessary to fulfil the purpose for which it was collected, or as required by law. Data for active accounts is retained for as long as the account remains active. Once an account is closed, financial data and transaction records may be retained for up to seven years to meet legal and regulatory obligations.

Once the retention period has ended, data is securely deleted or anonymised in accordance with approved procedures.

Nanas44 uses cookies and similar tracking technologies to enhance your experience on the platform. Cookies are small text files stored on your device when you visit our website. The following are the types of cookies we use:

You can manage or disable cookies through your web browser settings at any time. Disabling essential cookies may affect your login functionality and account security on nanas44. Analytics and functional cookies do not impact the platform's core functionality if disabled.

Under Malaysia's PDPA and nanas44's privacy commitments, you have the following rights with respect to your personal data:

To exercise any of the rights listed above, submit a written request to the nanas44 privacy team by emailing support@nanas44.best, clearly stating the right you wish to exercise and any relevant details. nanas44 will process your request within 30 business days of receiving a complete submission.

In certain situations, nanas44 may not be able to fulfil a data deletion request in full — for example, where the data is required to meet a legal obligation or for the purposes of defending a legal claim. In such cases, we will inform you of the reasons preventing full compliance.

Nanas44 strictly prohibits individuals under the age of 21 from registering or using our platform. We do not knowingly collect personal information from underage individuals.

If nanas44 discovers that we have inadvertently collected personal data from a minor, we will take immediate action to delete that information and close the account in question. Parents or guardians who believe their child has registered an account with nanas44 should contact our support team immediately at support@nanas44.best.

Nanas44 uses a range of technical controls and age verification procedures to prevent registration by individuals who do not meet the minimum age requirement, including phone number verification and ongoing account profile checks.

Nanas44 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements, or improvements in how we handle player data. The date of the most recent update will always be displayed at the top of this page.

For significant changes that affect player rights or alter how we use data in ways that differ from what is stated in this Policy, nanas44 will notify affected players via their registered email or an in-platform notice at least 14 days before the changes take effect. This gives you sufficient time to review the changes and make a fully informed decision.

Continued use of the nanas44 platform after any Privacy Policy changes take effect will be considered your acceptance of the updated terms. If you do not agree with any changes, you have the right to close your account and request deletion of your personal data in accordance with the procedure outlined in Section 8.

In operating an international platform, nanas44 players' personal data may be processed or stored on servers located outside Malaysia. This occurs primarily in connection with international game providers such as Evolution Gaming (Sweden), PG Soft (Singapore), and Pragmatic Play (Malta).

Nanas44 ensures that any cross-border data transfers are carried out with adequate safeguards in place, including:

• Data Processing Agreements with all third-party providers that receive Malaysian data
• Ensuring that providers in the destination country maintain a level of data protection equivalent to or greater than that required under Malaysia's PDPA
• Use of recognised standard contractual clauses to safeguard the rights of Malaysian players even when data is processed outside Malaysia

Nanas44 does not transfer data to countries without adequate data protection laws unless appropriate additional safeguards are in place.

If you have any questions, concerns, or requests relating to this Privacy Policy or how nanas44 handles your personal data, our team is ready to assist through the following channels:

• Email: support@nanas44.best — for official privacy-related requests and player rights inquiries
• Live Chat: Available 24 hours a day, 7 days a week via the chat icon within the nanas44 platform
• Telegram: Contact the nanas44 support team via Telegram for urgent enquiries

All privacy-related enquiries will be handled with high priority. We will acknowledge receipt within 24 hours and provide a full response within 7 business days. For formal rights requests — such as data access, correction, or deletion — please submit a written request by email so we can process it as efficiently as possible.