1. Home
  2. Privacy Policy
Official NAK99 Documents

NAK99 Privacy Policy – Personal Data Protection for Malaysian Players

Your privacy is a priority at nak99. This document clearly explains how we collect, use, store, and protect your personal data in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA).

Updated: January 2026
Content
This Privacy Policy complies with Malaysia's Personal Data Protection Act 2010 (PDPA).
Key Summary

Nak99 does not sell your personal data to anyone. We collect only the data needed to operate your account and provide our services. You have the right to access, correct, and request deletion of your data. This document explains all of this in full detail.

01
Introduction
Who we are and why this privacy policy exists

Nak99 is an online entertainment platform serving Malaysian players through nak99.xyz. As a platform that handles its members' personal data, nak99 recognises the significant responsibility to ensure that data is managed securely, responsibly, and in accordance with applicable Malaysian law.

This Privacy Policy is written in accordance with the requirements of Malaysia's Personal Data Protection Act 2010 (PDPA) — the primary legislation governing the collection, processing, and storage of personal data in Malaysia. We have written this document in plain, accessible language because we believe every nak99 member has the right to fully understand how their data is used — not just those who are well-versed in technical legal terminology.

By registering a nak99 account or using any nak99 services, you agree to the collection and use of your personal data as described in this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of the platform and contact us to close your account.

Nak99 acts as the "Data Controller" (Data Controller) as defined under PDPA 2010 – meaning we determine the purposes and means by which your personal data is processed. We take this responsibility seriously, and it is reflected in every data management decision we make.

02
Personal Data We Collect
Types of information collected by nak99

Nak99 only collects the personal data necessary to operate our services safely and effectively. The categories of data we collect are as follows:

Data Category Example Information
Identity Data Full name, identification card number (MyKad), date of birth, gender, identity document image (for KYC)
Contact Data Malaysian phone number, email address, residential address
Account Data Username, password (in encrypted form), login history, account settings
Financial Data Deposit and withdrawal records, payment methods used (Touch 'n Go, GrabPay, DuitNow, FPX, etc.), account balance, transaction history
Gaming Data Game history, betting records, wins and losses, favourite games, play duration
Technical Data IP address, device type, operating system, web browser, screen resolution, session timestamp
Usage Data Pages visited, features used, navigation patterns within the platform, time spent in each section
Communications Data Customer support conversation records, emails sent to nak99, and feedback submitted
Data Minimisation Principle

Nak99 follows a "data minimisation" principle – we only collect data that is strictly necessary for the stated purposes. We do not collect data that "might come in handy someday" without a clear and legitimate reason.

03
How We Collect Data
How and where your personal data is collected

Nak99 collects your personal data through the following methods:

  • Account registration: When you register a nak99 account, you provide identity and contact information directly through the registration form. This includes your name, phone number, and email address.
  • Platform usage: When you use the nak99 platform – playing games, making deposits, requesting withdrawals, or interacting with platform features – our systems automatically record those activities.
  • Identity verification (KYC): When identity verification is required, you may be asked to upload documents such as a copy of your MyKad or bank statement. These documents are collected securely through an encrypted upload portal.
  • Customer support: When you contact the nak99 support team via chat, email, or other channels, the conversation is recorded for service quality and dispute resolution purposes.
  • Cookies and tracking technologies: As described in Section 9, nak99 uses cookies and similar technologies to automatically collect technical and usage data while you browse the platform.
  • Trusted third parties: In certain cases such as payment verification, we receive the necessary data from payment providers such as FPX gateways or Malaysian e-wallet providers.
04
Purposes for Using Personal Data
Why nak99 needs and uses your data

Nak99 uses your personal data only for the purposes listed below. We do not use your data for any purpose not stated here without first obtaining your additional consent.

  • Account management: Creating and maintaining your nak99 account, verifying your identity at login, and ensuring account security.
  • Transaction processing: Processing deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX, Maybank2u, and CIMB Clicks, as well as processing winnings withdrawals to the same payment methods.
  • Provision of gaming services: Enabling you to access and play games on the nak99 platform, maintaining game records, and ensuring a smooth, consistent gaming experience.
  • Legal compliance and fraud prevention: Meeting Anti-Money Laundering (AML) requirements, verifying member eligibility, and detecting and preventing fraud, bonus abuse, and duplicate account usage.
  • Customer support: Handling your enquiries, complaints, and disputes effectively. Communication records help us deliver consistent support and resolve issues accurately.
  • Platform improvements: Analysing usage patterns in aggregate (not at the individual level) to improve the nak99 platform's interface, performance, and overall experience.
  • Service communications: Sending important notifications related to your account, such as transaction confirmations, security alerts, or updates to terms of service.
  • Responsible gaming: Monitoring playing patterns to detect signs of problem gambling and managing the self-control limits you have set in your account.
  • Marketing (with consent): Sending you information about nak99 promotions, bonuses, and offers that may interest you – only if you have opted in to receive marketing communications. You may withdraw this consent at any time.
Marketing Communications Preferences

You may opt out of receiving marketing emails from nak99 at any time by clicking the "unsubscribe" link in any marketing email, or by contacting nak99 support directly. Opting out of marketing communications will not affect important transactional and security emails.

05
Disclosure to Third Parties
When and with whom nak99 may share your data

Nak99 does not sell your personal data to any third party for their own marketing or commercial purposes. However, there are limited situations where nak99 needs to share your personal data:

  • Payment providers: Required transaction data is shared with Malaysian payment gateways such as FPX, and e-wallet providers including Touch 'n Go, GrabPay, Boost, ShopeePay, and DuitNow to process your deposits and withdrawals. These providers are bound by payment industry security standards and their own privacy policies.
  • Game provider: Minimum required account data is shared with game providers such as Pragmatic Play, PG Soft, Evolution, and others to enable you to access their games within the nak99 platform. This data is limited to session identifiers and does not include your financial information or full identity details.
  • Technology service provider: Companies that assist nak99 in managing its technical infrastructure, such as cloud computing and cybersecurity service providers. All such providers are bound by strict confidentiality agreements and are only permitted to process nak99 data in accordance with our instructions.
  • Legal authorities: Nak99 will disclose personal data to Malaysian authorities such as the police, courts, or the Financial Intelligence Unit (FIU) when required by law or a valid court order. In such circumstances, nak99 is not required to obtain your consent beforehand.
  • Business merger or acquisition: Should nak99 be involved in any merger, acquisition, or sale of business assets, member personal data may be transferred to the relevant party. Members will be notified in advance and given the option to withdraw if applicable.
Important Notice

Nak99 will not disclose your personal or financial information to any party making requests that have no valid legal basis, including requests from individuals claiming to be authorities without verifiable official documentation.

06
Data Security
Steps nak99 takes to protect your data

Nak99 invests seriously in security infrastructure to ensure members' personal data is always protected against unauthorized access, data breaches, and misuse. The following are the security layers nak99 employs:

  • 256-bit SSL encryption: All data transmitted between your device and nak99's servers is encrypted using the same 256-bit SSL standard used by major Malaysian banks. This means that even if data is intercepted in transit, it cannot be read without the correct encryption key.
  • Secure password storage: Your account password is never stored in plain text. We use strong hashing algorithms with random salts – meaning that even if nak99's servers were accessed without authorisation, your password would remain unreadable.
  • Internal access controls: Only nak99 staff with a legitimate business need are permitted to access member personal data. All such access is logged and audited on a regular basis.
  • Continuous security monitoring: Nak99's systems are monitored around the clock to detect unusual activity, intrusion attempts, or suspicious access patterns.
  • Regular security updates: nak99's software and infrastructure are updated regularly to ensure protection against the latest known security vulnerabilities.
  • Data segregation: Sensitive financial data and identification data are separated and stored in distinct systems with additional layers of protection.

While nak99 takes all reasonable steps to protect your data, no security system in the world can be guaranteed 100% secure. nak99 is committed to notifying affected members within a reasonable timeframe in the event of any material data security incident.

07
Data Retention Period
How long nak99 retains your personal data

Nak99 retains your personal data only for as long as necessary to fulfil the purposes set out in this Privacy Policy, or as required by Malaysian law. The following are our data retention guidelines:

Data Type Retention Period
Identity & account data (active accounts) For the duration of the active account, plus 7 years after account closure (AML requirement)
Financial transaction records Minimum 7 years in accordance with Malaysian financial regulatory requirements
Game History 5 years from the date of the game, or until the resolution of any related dispute
Customer support records 3 years from the date of the last interaction
Technical data & access logs 12 months from the date of the record
KYC Documents 7 years after account closure, in accordance with AML requirements
Marketing data (with consent) Until you withdraw your consent

Once the retention period has lapsed and there is no legal requirement to retain the data further, nak99 will securely delete or destroy it using methods that ensure the data cannot be recovered.

08
Your Rights as a Data Subject
Your rights under Malaysia's PDPA

As a data subject under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by nak99. To exercise any of these rights, contact us at support@nak99.xyz with the subject line "Data Subject Rights Request".

Right of Access

You have the right to request and receive a copy of the personal data nak99 holds about you. We will process such requests within 21 working days.

Right to Rectification

If the personal data we hold about you is inaccurate or outdated, you have the right to request a correction. You may also update your profile information directly in your nak99 account settings.

Right to Erasure

You may request the deletion of your personal data when it is no longer required for its original purpose, subject to any applicable legal retention requirements.

Right to Object

You have the right to object to the processing of your data for direct marketing purposes. This request will be actioned immediately and without any penalty to your account.

Right to Data Portability

You have the right to request a copy of the personal data you provided to nak99 in a machine-readable format, for transfer to another service provider should you choose to do so.

Right to Restrict Processing

In certain circumstances, such as when you dispute the accuracy of your data, you have the right to request that nak99 restrict the processing of your data while an investigation is carried out.

How to Submit a Data Rights Request

Send an email to support@nak99.xyz with the subject line "Data Subject Rights Request – [Type of Right]". Include your full name, nak99 account number, and a brief description of your request. We will verify your identity before processing the request and will respond within 21 business days from the date of receipt of the completed request.

09
Cookies & Tracking Technologies
How nak99 uses cookies and similar technologies

The nak99 platform uses cookies and similar tracking technologies to keep the platform running smoothly and to give you a better experience. The following are the types of cookies nak99 uses:

Essential Cookies
Required for core platform functionality – session authentication, account security, and language preferences. These cookies cannot be disabled without affecting platform performance.
Performance Cookies
Collecting information about how you use the platform (pages visited, time spent, errors encountered) to help us improve performance and user experience. Data is collected in aggregate and cannot be used to identify you individually.
Functional Cookies
Saving your preferences such as favourite games, display settings, and language choices so you do not have to reconfigure them each time.
Analytics Cookies
Helps nak99 understand how members use the platform as a whole. This data is used to make informed decisions on platform improvements based on real usage patterns.

You can manage cookies through your web browser settings. Most browsers allow you to view, manage, and delete cookies. However, disabling essential cookies may affect your ability to log in or use certain features on the nak99 platform.

10
Cross-Border Data Transfers
Transfer of data to servers outside Malaysia

As an online platform, nak99's technical infrastructure may involve servers and services operating outside Malaysia. Some of your personal data may be processed or stored in other countries as part of the platform's technical operations.

When cross-border data transfers occur, nak99 ensures adequate protection through:

  • Ensuring that the recipient country maintains a level of data protection equivalent to or higher than that of Malaysia
  • Using data processing agreements that require service providers to comply with strict data protection standards
  • Limiting data transferred to the minimum necessary for technical purposes
  • Ensuring all transfers are encrypted to industry standards

Game providers such as Pragmatic Play, PG Soft, and others operate on their own international infrastructure. Game session data that is required may be processed through their servers, which comply with recognised international online gambling industry standards.

11
Children's Privacy
Special protections for minors

The nak99 platform is intended exclusively for individuals aged 18 and above. Nak99 does not knowingly collect or process the personal data of children under the age of 18.

If nak99 discovers that personal data has been collected from an individual under the age of 18, we will take immediate action to:

  • Closing the relevant account
  • Delete all associated personal data as soon as possible
  • Returning any available funds in the account (where applicable and following investigation)

If you become aware that a person under the age of 18 has registered a nak99 account, please contact us immediately at support@nak99.xyz so that prompt action can be taken.

12
Privacy Policy Amendments
Nak99's right to update this policy

Nak99 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service improvements. When material amendments are made, nak99 will notify members through:

  • A prominent notice on the main page of the nak99.xyz website
  • An in-account notification upon the member's next login
  • Email notification to the registered address for significant amendments

The "Updated" date at the top of this page will always reflect the date of the latest version of this Privacy Policy. Your continued use of the nak99 platform after any amendments take effect constitutes your acceptance of the revised Privacy Policy.

We recommend reviewing this page at least once every three months, or whenever you receive a notice of amendments from nak99.

13
Contact Us
How to contact nak99 for privacy enquiries

If you have any questions, concerns, or requests regarding this Privacy Policy or how nak99 handles your personal data, please contact us:

  • Email: support@nak99.xyz – for privacy enquiries, please use the subject line "Privacy Policy Enquiry" or "Data Subject Rights Request"
  • Live chat: Click the chat icon within the nak99 platform – average response time under 3 minutes, available 24 hours a day

Nak99 is committed to addressing all privacy enquiries and concerns seriously and within a reasonable timeframe. If you are not satisfied with our response, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia.

This Privacy Policy was last updated on January 2026. The latest version is always available on this page. This document is governed and interpreted in accordance with Malaysian law, in particular the Personal Data Protection Act 2010 (PDPA).

NAK99's Privacy Commitment to Members

Six privacy commitments nak99 upholds every day in handling Malaysian members' data.

We Do Not Sell Your Data
Nak99 has never sold, and will never sell, members' personal data to any third party for their marketing or commercial purposes. Your data is collected solely to operate the nak99 service – it is not a product.
Bank-Grade Encryption
All data transmitted to and stored on nak99 is protected by 256-bit SSL encryption – the same standard used by Malaysia's major banks. Your sensitive financial data remains unreadable even if intercepted during transmission.
Full PDPA Malaysia Compliance
Nak99 operates in full compliance with Malaysia's Personal Data Protection Act 2010 (PDPA). This means your rights as a data subject – including the right to access, correct, and delete your data – are always respected.
Data Minimisation
nak99 only collects data that is genuinely necessary to operate its services. There is no excessive or "just-in-case" data collection. Every piece of data we retain has a clear and legitimate purpose.
Full Transparency
Nak99 is transparent about what data is collected, the purposes for which it is used, and who it is shared with. There are no hidden practices. If you would like to know more about any aspect of how your data is managed, ask us – we will explain clearly.
You Are in Control
You may access, correct, or request deletion of your data at any time. You may also withdraw your marketing consent easily. nak99 provides a clear and responsive process for all data rights requests.

Your Data Is Safe with NAK99

With 256-bit SSL protection, full PDPA compliance, and a firm commitment never to sell your data – playing at nak99 is not only enjoyable, but secure. Register for free today.

Register a Free Account Terms & Conditions

FAQ – NAK99 Privacy Policy

Answers to the most frequently asked questions about privacy and data protection at nak99.

When you close your nak99 account, we will cease processing your data for active service purposes. However, we are required to retain certain records in accordance with Malaysian legal obligations – specifically, financial transaction records for 7 years and identity data for AML compliance. This data is kept under restricted access and may only be accessed for legal compliance purposes. Once the mandatory retention period expires, your data will be securely deleted.

nak99 does not use your personal data for targeted advertising to external parties. We may use information about your favourite games to suggest relevant promotions within the nak99 platform itself — but this is to enhance your experience as a member, not for third-party advertising purposes. nak99 does not share your personal data with advertising networks or third-party analytics companies for targeted advertising outside our platform.

Yes, you may request deletion of your personal data by submitting a request to support@nak99.xyz. However, nak99 may not be able to fulfil deletion requests in full in all cases. Data that must be retained under Malaysian legal requirements — such as financial transaction records for 7 years for AML compliance — cannot be deleted early even upon request. We will provide a detailed explanation of which data can and cannot be deleted, along with clear reasons, in our response to your request.

KYC documents such as copies of MyKad are submitted via an upload portal encrypted with 256-bit SSL. Once received, documents are stored in a separate system with stricter access controls than those applied to standard account data. Access is restricted to nak99 staff who have been specifically authorised for KYC verification. All access to KYC documents is logged and audited. Documents are retained for the period required by law and subsequently deleted securely using methods that ensure they cannot be recovered.

If you suspect your nak99 account credentials have been compromised — such as noticing activity you did not perform, receiving verification emails you did not request, or any other signs of unauthorized access — contact nak99 support immediately via live chat for an instant account freeze. Do not wait. nak99 will investigate and take swift action to protect your account. If a data breach is confirmed, nak99 will inform you of its scope and impact, along with the protective measures taken, within the timeframe stipulated by Malaysia's PDPA.

Data shared with game providers such as Pragmatic Play or PG Soft is limited to the technical session identifiers needed to run games within the nak99 platform. Your full name, financial information, or game history on other games is not shared with game providers unless there is a clear technical requirement. Your overall game history on nak99 is nak99's internal information and is not shared with third parties except where required by law.
Responsible Gaming

Your gaming records at nak99 are also used to monitor your well-being as part of our responsible gaming commitment. For more information on self-control tools, visit Responsible Gaming. For users aged 18 and above only.

Terms & Conditions

This Privacy Policy should be read together with NAK99 Terms & Conditions. Both documents together form the complete agreement between you and nak99 regarding your use of the platform and the management of your data as a member.

Bahasa Melayu