nanas44 Privacy Policy

1. Introduction

nanas44 ("we", "us", "our") operates the online gaming platform available at nanas44.club. We are committed to protecting the privacy and personal data of all players and visitors who interact with our Platform. This Privacy Policy explains what personal data we collect, why we collect it, how we use and protect it, and what rights you have in relation to your data.

This Policy applies to all personal data processed by nanas44 in connection with your use of the Platform — including account registration, deposits, withdrawals, gameplay, customer support interactions, and your use of the nanas44 website. By accessing or using the Platform, you acknowledge that you have read and understood this Privacy Policy.

This Policy should be read together with the nanas44 Terms & Conditions. Defined terms used but not defined here carry the meanings given in the Terms & Conditions. If you have any questions about this Policy, contact us via the 24/7 live chat or at [email protected] (plain text only — not a clickable link).

2. Personal Data We Collect

2.1 Registration Data

When you create a nanas44 Account, we collect the information you provide in the registration form. This includes:

• Full legal name (as it appears on your government-issued ID);
• Date of birth (for age verification — you must be 21 or older);
• Email address;
• Mobile phone number;
• Residential address;
• Username and password (password is stored in hashed form — nanas44 cannot retrieve your plaintext password).

2.2 Identity Verification (KYC) Data

In compliance with our licensing obligations and anti-money laundering (AML) requirements, nanas44 collects KYC documentation from players prior to processing first withdrawals and at such other times as required by our compliance procedures. KYC documents may include:

• Copy of government-issued photo ID (MyKad, passport, or equivalent);
• Proof of address (utility bill, bank statement issued within 3 months);
• Proof of payment method ownership (screenshot of e-wallet or bank account matching your registered name).

2.3 Transaction Data

We collect records of all financial transactions conducted on your nanas44 Account, including deposit amounts, withdrawal requests, payment method details (truncated account/wallet identifiers — never full card or account numbers), and transaction timestamps. This data is required for financial reconciliation, fraud prevention, and regulatory compliance.

2.4 Gameplay and Activity Data

We collect data about your activity on the Platform, including games played, bet amounts, bet outcomes, session times, and responsible gaming tool usage. This data is used for Account management, dispute resolution, RNG audit purposes, and responsible gaming monitoring.

2.5 Technical Data

When you access the Platform, our servers automatically log certain technical data, including your IP address, browser type and version, device type, operating system, referring URL, and pages visited. This data is used for Platform security, fraud detection, and performance optimisation.

2.6 Communication Data

If you contact nanas44 support via live chat or email, we retain records of those communications, including the content of messages and resolution notes. This data is used to provide support, resolve disputes, and improve service quality.

3. How We Use Your Personal Data

nanas44 uses the personal data we collect for the following purposes:

• Account creation and management — to register your Account, verify your identity and age, maintain your Account records, and process login authentication;
• Transaction processing — to process deposits and withdrawals via your chosen Malaysian payment method (Maybank2u, Touch n Go eWallet, DuitNow, FPX, etc.) and maintain accurate financial records;
• Regulatory compliance — to fulfil our obligations under the terms of our international gaming licence, including KYC, AML screening, and reporting obligations;
• Platform security and fraud prevention — to detect, investigate, and prevent fraudulent transactions, account takeovers, and abuse of Platform terms;
• Responsible gaming — to monitor gameplay patterns, enforce player-set limits, and identify potential problem gambling behaviour in accordance with our responsible gaming obligations;
• Customer support — to respond to your enquiries, process complaints, and resolve Account-related issues;
• Platform improvement — to analyse aggregated, anonymised usage data to improve Platform performance, game selection, and user experience;
• Communications — to send you transactional notifications (deposit confirmations, withdrawal updates, security alerts) and, where you have opted in, promotional communications about nanas44 offers and promotions.

nanas44 does not use your personal data for automated individual decision-making that produces significant legal effects, except where required to do so by applicable law or for fraud prevention purposes with appropriate safeguards.

4. Legal Basis for Processing

nanas44 processes your personal data on the following legal bases:

• Contractual necessity — processing required to perform the contract between you and nanas44 (the Terms & Conditions), including Account management, transaction processing, and gameplay;
• Legal obligation — processing required to comply with applicable laws and our gaming licence obligations, including KYC, AML, and data retention requirements;
• Legitimate interests — processing conducted for fraud prevention, Platform security, responsible gaming monitoring, and service improvement, where these interests are not overridden by your rights and interests;
• Consent — processing based on your explicit consent, including optional marketing communications. You may withdraw consent at any time by updating your communication preferences in Account Settings or contacting support.

5. Data Sharing and Disclosure

nanas44 does not sell your personal data. We share personal data only in the following circumstances and only to the extent necessary for the stated purpose:

5.1 Service Providers

We share data with carefully selected third-party service providers who assist in operating the Platform, including payment processors (for transaction handling via FPX, Touch n Go, Maybank2u, DuitNow, and other Malaysian payment rails), KYC verification providers, fraud detection services, IT infrastructure providers, and game software suppliers. These providers are contractually bound to process data only on nanas44's instructions and to maintain appropriate security standards.

5.2 Regulatory and Legal Obligations

We disclose personal data to regulatory authorities, law enforcement agencies, and licensing bodies when required to do so by applicable law, court order, or the terms of our gaming licence. nanas44 will notify you of such disclosure where legally permitted to do so.

5.3 Business Transfers

In the event of a merger, acquisition, or sale of all or a material part of nanas44's business assets, your personal data may be transferred to the successor entity as part of that transaction. We will provide notice of such transfer and the opportunity to exercise your data rights prior to data being subject to a different privacy policy.

5.4 Cross-Border Transfers

nanas44 operates under an international gaming licence. Some of our service providers and data processors may be located outside Malaysia. Where personal data is transferred internationally, we ensure that appropriate safeguards are in place, including standard contractual clauses, to protect your data to a standard equivalent to Malaysian data protection requirements.

6. Cookies and Tracking Technologies

nanas44 uses cookies and similar technologies on the Platform to provide a functional, secure, and personalised experience. The categories of cookies used are:

• Strictly necessary cookies — essential for the Platform to function, including session authentication, security tokens, and load balancing. These cannot be disabled;
• Functional cookies — used to remember your preferences, language settings, and game lobby configuration to improve your experience across sessions;
• Analytics cookies — used in aggregate, anonymised form to understand how players navigate the Platform, which pages are most visited, and where performance can be improved. No individual profiling is conducted;
• Security cookies — used for fraud detection and bot prevention, including detection of suspicious login attempts and automated access patterns.

You may manage your cookie preferences through your browser settings. Disabling strictly necessary cookies will impair the functionality of the Platform, including login and payment processing.

7. Data Retention

nanas44 retains personal data for the minimum period required to fulfil the purposes for which it was collected and to comply with applicable legal, regulatory, and licensing obligations. Specific retention periods are as follows:

• Account and KYC data — retained for a minimum of 5 years from the date of Account closure, as required by our gaming licence anti-money laundering provisions;
• Transaction records — retained for a minimum of 5 years from the date of each transaction;
• Gameplay and activity logs — retained for 2 years from the date of activity, or for the duration required by active disputes or regulatory enquiries;
• Customer support communications — retained for 2 years from the date of the communication;
• Technical logs (IP, device data) — retained for 12 months from the date of collection, unless retained longer in connection with an active security or fraud investigation.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with nanas44's internal data lifecycle management procedures.

8. Data Security

nanas44 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction:

• All data in transit between your device and nanas44 servers is encrypted using 256-bit SSL/TLS — the same standard protecting Maybank2u and CIMB Clicks sessions;
• Account passwords are stored using industry-standard one-way cryptographic hashing with salting — nanas44 cannot retrieve your plaintext password;
• Access to personal data within nanas44's systems is restricted on a strict need-to-know basis, enforced through role-based access controls and access logging;
• KYC documents are stored in encrypted, access-controlled document management systems with audit trails;
• nanas44 systems undergo regular independent security audits and penetration testing;
• Two-factor authentication is available for all player Accounts and is mandatory for administrative system access.

While nanas44 applies substantial security measures, no system is completely immune to all risks. We encourage players to use strong, unique passwords, enable Account 2FA, and report any suspected security incidents to support immediately.

9. Your Data Rights

Subject to applicable law and our regulatory obligations, you have the following rights in relation to your personal data held by nanas44:

• Right of access — you may request a copy of the personal data we hold about you;
• Right to rectification — you may request correction of inaccurate or incomplete personal data. Basic Account details can be updated directly in Account Settings;
• Right to erasure ("right to be forgotten") — you may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations;
• Right to restriction of processing — you may request that we limit how we use your data in certain circumstances, such as where you contest the accuracy of the data;
• Right to data portability — you may request a machine-readable copy of personal data you have provided to nanas44 for portability to another service provider;
• Right to withdraw consent — where processing is based on your consent (e.g., marketing communications), you may withdraw consent at any time without affecting the lawfulness of prior processing;
• Right to object — you may object to processing based on legitimate interests in certain circumstances.

To exercise any of these rights, contact nanas44 via 24/7 live chat or at [email protected] (plain text — not a clickable link). We will respond to your request within 30 calendar days. In complex cases, we may extend this period by a further 60 days, with notice provided within the initial 30-day window.

10. Children's Privacy

The nanas44 Platform is strictly for adults aged 21 years and above. 21+ We do not knowingly collect personal data from individuals under the age of 21. If we become aware that we have collected personal data from a person under 21, we will immediately suspend the associated Account, return any deposited funds to the originating payment method, and delete all associated personal data.

If you have reason to believe that a minor has registered an Account on nanas44, please contact us immediately via live chat. Parents and guardians concerned about underage access to gambling platforms should consider using parental control software to restrict access to online gaming sites.

11. Third-Party Links

The nanas44 Platform may contain links to third-party websites or services — for example, payment gateway pages operated by Maybank, CIMB, or Touch n Go for transaction processing. Once you leave the nanas44 Platform, this Privacy Policy no longer applies. nanas44 is not responsible for the privacy practices of third-party services. We encourage you to review the privacy policies of any third-party service you interact with in connection with your nanas44 Account.

12. Changes to This Privacy Policy

nanas44 may update this Privacy Policy from time to time to reflect changes in our data practices, Platform features, or applicable law. The date of the most recent revision is displayed at the top of this page. Material changes — those that meaningfully alter your rights or how we use your data — will be communicated to registered Account holders via email at least 7 days before taking effect.

We encourage you to review this Privacy Policy periodically. Your continued use of the Platform following the effective date of an updated Policy constitutes your acknowledgement of the changes. The current version of this Policy is always accessible at nanas44.club/privacy-policy.

13. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or nanas44's handling of your personal data, please contact us through any of the following channels:

• 24/7 Live Chat — available directly on the nanas44 Platform for immediate assistance;
• Email (plain text — not a clickable link): [email protected] — for written data subject requests and non-urgent privacy enquiries. Please include "Privacy Request" in the subject line and provide sufficient detail to allow us to identify your Account.

nanas44 aims to acknowledge all written privacy requests within 3 business days and resolve them within 30 calendar days. For complaints about our data practices that cannot be resolved directly, you may refer the matter to the relevant data protection authority in your jurisdiction.