Naga Wind Privacy Policy – Our Commitment to Protecting Malaysian Players' Personal Data

Naga wind is an online gaming platform operating exclusively for the Malaysian market. When you register and play with us, you are entrusting us with highly personal information — your name, contact details, payment information, and your activity patterns on the platform. That trust is not something we take lightly.

This Privacy Policy is written to explain clearly and transparently: what data we collect about you, why we need it, how we use it, who can access it, how long we retain it, and what rights you have over it. We want you to have a full understanding of Naga Wind's privacy practices before you decide to share your information with us.

By using the naga wind platform — including the website, mobile app, or any related services — you agree to the collection and use of information as described in this Privacy Policy. If you do not agree with any part of this policy, please stop using the platform and contact us to close your account.

Naga Wind only collects data that is strictly necessary for the stated purposes. Below are the categories of data we collect:

Naga Wind does not collect credit/debit card data directly — all financial transactions are processed through certified third-party payment processors (Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, FPX) that maintain their own security standards. Naga Wind receives only transaction confirmations, not full card numbers or bank account details.

Naga Wind collects your personal data through several different channels:

• During account registration: When you register a new naga wind account, you provide identity and contact data directly through the registration form. This information is required to create and verify your account.
• During identity verification (KYC): To process withdrawals or where verification is required, Naga Wind may request additional documents such as a copy of your MyKad or bank statement. These documents are submitted directly through our secure platform.
• During financial transactions: Deposit and withdrawal details — including payment method used, amounts, and transaction timestamps — are automatically recorded for financial record-keeping and legal compliance.
• During platform use: Technical and usage data are collected automatically when you use the naga wind platform — including device type, IP address, and in-platform navigation history. This helps us detect suspicious activity and improve the user experience.
• Through interactions with customer support: When you contact our support team via live chat or email, those conversations are stored for quality control purposes and as a record of the assistance provided.
• Via cookies and tracking technologies: The Naga Wind platform uses cookies and similar technologies to enhance platform functionality and user experience. Further details are explained in Section 8.

Naga Wind uses your personal data only for specific, legitimate purposes. We will not use your data for anything beyond what is stated below without first obtaining your consent:

• Account management: Creating, verifying, and managing your Naga Wind account, including processing registrations, logins, and changes to account details.
• Financial transaction processing: Processes deposits via Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, and FPX (Maybank2u, CIMB Clicks), and manages withdrawals to your account in Malaysian Ringgit (RM).
• Provision of gaming services: Gives you access to all games on the platform — progressive jackpot slots, Live Casino (baccarat, roulette, Dragon Tiger), Sports Betting (EPL, Liga Super Malaysia, badminton, e-sports), and Texas Hold'em poker.
• VIP programme and bonuses: Calculates and credits weekly cashback, manages VIP tier progression (Bronze, Silver, Gold, Platinum, Diamond), and processes personalised birthday bonuses.
• Customer support: Processes and responds to your enquiries, complaints, and support requests via live chat and email at support@nagawind.my.
• Security and fraud prevention: Detecting and investigating suspicious activity, duplicate accounts, collusion, or other attempted fraud that may compromise the security of the platform and other players.
• Legal compliance: Fulfilling legal obligations under the PDPA 2010, anti-money laundering laws, and other applicable statutory reporting requirements.
• Marketing communications: Sending promotional updates, new bonuses, and special offers — only if you agreed to receive them during registration or at a later date. You may opt out of marketing communications at any time.
• Platform improvements: Analysing usage patterns on an aggregated (not individual) basis to improve the design, functionality, and performance of the Naga Wind platform.

Naga Wind does not sell, rent, or share your personal data with third parties for their own marketing purposes. However, there are limited circumstances where Naga Wind may need to share certain data with selected third parties, strictly for platform operational purposes:

• Payment processor: naga wind works with licensed Malaysian payment processors — Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX (Maybank2u, CIMB Clicks) — to process your deposits and withdrawals. These processors receive only the information necessary to complete the relevant transaction.
• Gaming software providers: naga wind uses gaming software from internationally licensed providers. These providers may receive the technical data necessary to deliver the games, but they do not receive players' full identity information.
• Legal authorities: naga wind will disclose required data to Malaysian legal authorities if compelled by a court order, legal warrant, or other valid legal requirement.
• Professional advisors: Lawyers, accountants, and technical consultants bound by strict professional confidentiality obligations may access the necessary data in the context of providing professional advice to Naga Wind.

All third parties granted access to naga wind player data are bound by strict data protection agreements and are only permitted to use that data for purposes specified by naga wind.

Naga Wind continually invests in security infrastructure to ensure your personal data remains protected at all times. The technical and organisational security measures we implement include:

• Data encryption in transit: All communications between your device and Naga Wind's servers are protected by TLS 1.3 and 256-bit SSL encryption. This applies to all traffic — logins, navigation, transactions, and support communications.
• Data encryption at rest: Sensitive data stored in naga wind's databases is encrypted using strong encryption algorithms. This means that even if someone gains unauthorised access to the database, the data they see cannot be read without the decryption key.
• Strict access controls: Only Naga Wind staff who require access to specific data to carry out their responsibilities are permitted to do so. The principle of least privilege applies — each staff member has only the minimum level of access necessary for their role.
• 24/7 security monitoring: Naga Wind's automated monitoring system detects and alerts on suspicious activity in real time, including unusual login attempts, access from new locations, and irregular transaction patterns.
• Regular security audits: Naga Wind conducts regular technical security audits to identify and patch vulnerabilities in the platform infrastructure before they can be exploited.
• Staff training: All Naga Wind staff who handle personal data receive comprehensive data protection training and are bound by strict confidentiality agreements.

While Naga Wind takes all reasonable steps to protect your data, no security system is 100% impenetrable. We encourage you to play your part in securing your account by using a strong password, not sharing your login credentials, and notifying us promptly if you suspect any unauthorised activity.

As a data subject under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by Naga Wind:

The Naga Wind platform uses cookies and similar tracking technologies to ensure optimal platform functionality and a better user experience. Below are the types of cookies we use:

You can manage your cookie preferences through your web browser settings. However, disabling certain cookies may affect the functionality of the naga wind platform. For more information on how to manage cookies in your browser, refer to the help section of the browser you are using.

The Naga Wind platform is strictly for individuals aged 18 and above. Naga Wind does not knowingly collect or process personal data from any individual under the age of 18.

If we discover that we have collected personal data from an individual under 18 years of age without proper age verification, we will take immediate steps to delete that data and close the account in question. Any funds deposited by an underage individual will be refunded in accordance with established procedures.

Naga wind operates primarily in Malaysia, and your personal data is generally stored and processed within server infrastructure located in the Asian region. In some circumstances, data may need to be transferred to or accessed from locations outside Malaysia — for example, when using gaming software providers or international cloud infrastructure employed by naga wind.

When personal data is transferred outside Malaysia, Naga Wind ensures that protection equivalent to that required under Malaysia's PDPA 2010 is maintained through appropriate data transfer mechanisms, including legally binding data transfer agreements with recipients outside Malaysia.

You may contact us for more information about the data transfer mechanisms we use and the countries in which your data may be processed.

Naga Wind reserves the right to update this Privacy Policy from time to time to reflect changes in our privacy practices, applicable laws, or improvements in how we handle data. The latest version of the Privacy Policy is always available on this page.

Notice of changes: For significant changes to how we process your personal data, Naga Wind will provide clear notice at least 30 days before those changes take effect — via an in-platform notification, an email to your registered address, or both. This gives you sufficient time to review the changes and make an informed decision about whether you wish to continue using the platform.

Minor updates: Spelling corrections, language clarifications, or formatting improvements that do not alter the substance of the policy may be made without specific notice, though the "last updated" date will always be revised accordingly.

Last updated: January 2026.

If you have any questions, concerns, or complaints regarding how naga wind handles your personal data, or if you wish to exercise any of your privacy rights as outlined in Section 7, please contact us through the following channels:

When contacting us regarding a privacy request, please include the following information to help us process it promptly: your account username or registered email address, the type of request (access, correction, deletion, etc.), and any further details about your request or concern.

Naga wind is committed to processing all privacy requests within 30 business days. For more complex cases, we may require up to 60 days and will notify you of any delay.