Privacy Policy na777 – Our Commitment to Protecting Your Data

This Privacy Policy is published by na777 ("we", "na777" or "platform") and applies to all individuals who register an account, access the na777-bangla.com website, use the na777 mobile application, or interact with any services provided by na777.

Na777 understands that personal data is a trust placed in us by every member who uses this platform. We are committed to processing that data responsibly, transparently, and in accordance with recognized best practices in data protection. This Privacy Policy is designed to give you a clear understanding of your rights and how na777 manages your personal data from start to finish.

This document is written in Malay and applies specifically to users in Malaysia. By continuing to use the na777 platform after reading this Privacy Policy, you acknowledge that you have understood and agreed to how we process your personal data as described herein.

Na777 collects your personal data through several channels — primarily during the registration process, while you are using the platform, and through your interactions with our support team. The following are the categories of data we collect:

Na777 does not collect sensitive data such as medical information, religious beliefs, political views, or sexual orientation, unless you choose to share such information voluntarily while interacting with our support team — in which case it is used solely within the context of that particular communication.

The personal data we collect is used solely for the purposes listed below. na777 will not use your data for any purpose outside this list without first obtaining fresh consent from you.

• Service Provision: Creating and managing your na777 account, processing deposits and withdrawals in MYR, verifying your identity for KYC requirements, and enabling you to access all games and features available on the na777 platform.
• Platform Security: Detecting and preventing fraud, money laundering, bonus abuse, bot usage, and any activity that violates the terms of use. This includes analyzing unusual usage patterns and transactions to protect all na777 members.
• Service Communications: Sending important account-related notifications such as deposit confirmations, withdrawal confirmations, security alerts, and policy updates. These emails cannot be unsubscribed from as they form part of na777's core service.
• Marketing Communications: With your consent, na777 may send you information about the latest promotions, special bonuses, VIP offers and events for Hari Raya, Chinese New Year and Deepavali. You may opt out of marketing emails at any time via your account settings or the unsubscribe link in the email.
• Legal Compliance: Complying with applicable legal and regulatory requirements, including transaction reporting required under anti-money laundering laws and the KYC requirements prescribed by those regulations.
• Product Improvement: Analyzing aggregated and anonymized usage data to understand how members use the na777 platform, identify areas for improvement, and develop new features that are more useful for Malaysian players.
• Responsible Gaming: Monitoring gameplay patterns to identify early signs of problem gambling and, where necessary, reaching out to members with support information or suggesting the use of limit-setting features available within the na777 account.

Na777 processes your personal data on the basis of one or more valid legal grounds. Being transparent about these grounds is important so you understand the rights available to you in relation to each category of data.

• Contract Performance: Processing that is necessary to provide na777's services to you in accordance with the Terms & Conditions you agreed to upon registration. This includes data processing for account management, financial transactions, and access to games.
• Consent: For data processing that is not contractually required — such as marketing communications and optional analytics cookies — na777 obtains your explicit consent. You may withdraw this consent at any time without affecting the validity of any processing that took place prior to withdrawal.
• Legitimate Interest: In certain cases, na777 processes data based on our legitimate interests in operating a responsible business — including fraud detection, system security and risk analysis — provided these interests do not override your fundamental rights and freedoms.
• Legal Obligations: In certain circumstances, na777 is required to process and disclose personal data in order to comply with legal obligations applicable in Malaysia, including reporting requirements to the relevant authorities.

Na777 does not sell, rent, or trade your personal data to any third party for their own marketing purposes. However, in order to deliver na777's full range of services to you, we may share personal data with the following categories of third parties under limited and controlled circumstances:

• Payment Service Providers: To process your deposits and withdrawals, the required data is shared with the payment providers we work with, including Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, Maybank2u, CIMB Clicks, and FPX gateway providers. All these providers are subject to their own privacy policies and strict industry security standards.
• Game Software Providers: To enable you to play slots, Live Casino, football, e-sports and other games on the na777 platform, minimum technical data (such as session IDs) is shared with the game software providers that supply those titles. They do not receive your full personal identity information.
• Technical Service Providers: Third parties that provide technical infrastructure services to na777 — such as cloud hosting, fraud detection systems, and email services — may process your personal data on na777's behalf. All such parties are bound by data processing agreements that require them to handle your data in accordance with the standards set by na777.
• Relevant Authorities: na777 will disclose personal data to Malaysian authorities if required to do so by law, court order, or in the course of a legitimate fraud or anti-money laundering investigation. na777 will not disclose more data than is strictly required by the relevant legal obligation.

In all of the above cases, na777 ensures that data sharing occurs only to the extent necessary, and that all recipients are bound by adequate confidentiality and data protection obligations.

Na777 continuously invests in security infrastructure to ensure your personal data is protected to the highest practicable standard at all times. The following are the key security measures we have in place:

• Data Encryption in Transit: All communications between your device and na777's servers use TLS 1.3 protocol with 256-bit SSL encryption — the same standard used by major banking and financial institutions in Malaysia.
• Data Encryption at Rest: Sensitive data such as financial details and identity documents are stored in encrypted form on na777's servers, meaning they cannot be read even by na777 staff who do not have the appropriate access authorisation.
• Internal Access Controls: Access to members' personal data within na777 is governed by a strict "need-to-know" principle — only staff who require access to perform their duties are granted permission, and all access is logged and audited on a regular basis.
• Two-Factor Authentication: na777 staff with access to systems containing personal data are required to use two-factor authentication (2FA) to log in, reducing the risk of unauthorised access even in the event of a password breach.
• 24/7 Security Monitoring: na777's security monitoring system operates 24 hours a day, 7 days a week to detect and promptly respond to any unauthorised access attempts, cyberattacks, or suspicious activity.
• Regular Security Testing: na777 conducts regular security assessments (penetration testing) carried out by qualified independent third parties to identify and address any vulnerabilities before they can be exploited.

As a na777 member in Malaysia, you have certain rights regarding the personal data we hold and process. na777 fully respects and facilitates the exercise of these rights:

Na777 uses cookies and similar tracking technologies to enhance the platform experience, understand how members use our services, and ensure account security. Cookies are small text files stored in your web browser when you visit the na777 platform.

• Essential Cookies (Non-Deactivatable): These cookies are essential for the basic functionality of the na777 platform, including maintaining your login session, remembering language settings, and securing transactions. Without these cookies, the na777 platform will not function correctly.
• Performance & Analytics Cookies: These cookies help na777 understand how members interact with the platform — which pages are most popular, how long members spend in each section, and where they may encounter difficulties. This data is used in aggregated and anonymized form to improve the platform.
• Functional Cookies: These cookies allow the na777 platform to remember your preferences — such as display settings, favourite games, and other personal configurations — so you do not have to reconfigure them each time you log in.
• Marketing Cookies: With your consent, these cookies are used to display more relevant na777 promotions and offers based on your interests and usage patterns. You may decline these cookies without affecting your core use of the platform.

You can manage your cookie settings through your web browser settings or via the cookie settings panel available on the na777 platform. Please note that blocking all cookies may affect certain features of the na777 platform.

Na777 retains your personal data only for as long as necessary to fulfil the purposes outlined in this Privacy Policy, or as required by applicable law. Once the data is no longer needed, it will be securely deleted or anonymised in accordance with established procedures.

• Active Account Data: For as long as your na777 account remains active, na777 will retain all data necessary to provide services to you. "Active" means you have logged in or made a transaction within the past 24 months.
• Financial Transaction Records: Records of deposits, withdrawals and financial transactions are retained for a minimum of 7 years from the transaction date, in line with Malaysia's financial record-keeping legal requirements. These records cannot be deleted upon member request.
• KYC Documents: Copies of identity documents (MyKad, passport) submitted for KYC verification are retained for a minimum of 5 years after account closure, or longer if required by applicable law.
• Marketing Data: Data used for marketing communications is retained until you unsubscribe or withdraw your consent, after which it is deleted within 30 days.
• Customer Support Data: Customer support interaction records are retained for 2 years after the last interaction, allowing us to provide consistent and continuous service to you.
• After Account Closure: When a na777 account is closed, data not subject to legal retention requirements will be deleted within 90 days. Data subject to legal requirements will be retained for the mandated period before being securely deleted.

Na777 takes all privacy-related enquiries, complaints and requests seriously. We have a dedicated team responsible for handling all matters relating to data protection and member privacy.

If you have any questions about this Privacy Policy, wish to exercise your privacy rights, or would like to report a concern about how your data is handled, please contact us via:

• Privacy Email: support@na777-bangla.com — please mark your email subject line with "Data Privacy Enquiry" to ensure it is directed to the right team.
• Live Chat: Via the live chat button on the na777 platform or website, available 24 hours a day, 7 days a week in Bahasa Melayu.

Na777 reserves the right to amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technological developments. Significant amendments will be communicated to members via email or in-app notification at least 14 days before taking effect. The "Updated" date at the top of this document indicates when the most recent amendment was made. Your continued use of the na777 platform after any amendment takes effect constitutes your acceptance of the revised policy.