🔒 Personal Data Protection

Privacy Policy nanaatoto –
Your Data Security is Our Priority

We are committed to protecting every piece of personal information you share with us. This document clearly explains how your data is collected, used, and safeguarded.

128-bit SSL Encryption

All data transmitted between your device and our servers is protected by high-grade encryption technology.

No Sharing Without Consent

Your data will not be shared, sold, or transferred to any third party without your explicit consent.

Full Control in Your Hands

You have the right to access, correct, or request deletion of your personal data at any time.

Secure Data Storage

Data is stored on servers protected by strict access controls and continuous 24/7 monitoring.

Updated: January 2026

1. Introduction and Scope of Policy

Nanaatoto ("we", "Platform", "nanaatoto") respects the privacy of every individual who interacts with our services. This Privacy Policy explains in detail how we collect, store, use, disclose, and protect your personal information when you use our online gaming platform at nanaatoto.net.

This document applies to all registered members, website visitors, and anyone who interacts with our platform through any device or channel. By registering for or using nanaatoto services, you acknowledge that you have read, understood, and agreed to the terms of this Privacy Policy.

Important: If you disagree with any part of this Privacy Policy, please discontinue use of our platform and contact the support team to close your account.

2. Information We Collect

In operating the platform, nanaatoto collects several categories of information depending on how you interact with our services.

2.1 Information You Provide Directly

  • Full name as per official identification document
  • Date of birth and national identity card or passport number
  • Email address and mobile phone number
  • Full residential address
  • Bank account or digital wallet details for transaction purposes
  • Encrypted passwords and login credentials
  • KYC verification documents (copy of identity card, proof of address)

2.2 Information Collected Automatically

  • IP address and general geolocation information
  • Device type, operating system, and web browser used
  • Gaming activity history and wagering records
  • Login session details and activity timestamps
  • Cookie and website usage data
  • Communication records with the customer support team
Data Categories Primary Purpose Retention Period
Identification Information Identity verification, KYC Throughout the active period + 5 years
Financial Data Transaction processing Minimum 7 years (audit requirements)
Game History Security, customer support 2 years after account closure
Technical Data System security, fraud prevention 90-day rolling period
Support Communications Complaint and resolution records 3 years after resolution

3. How We Use Your Data

Nanaatoto uses the information collected for lawful and transparent purposes. We do not use your data for purposes unrelated to the provision of platform services without your explicit consent.

  • Service provision: Managing your account, processing deposits and withdrawals, and enabling access to all available games.
  • Identity verification: Conducting KYC checks to ensure account security and prevent fraud or unauthorized access.
  • Service communications: Sending transaction notifications, account updates, security alerts, and relevant service information.
  • Platform improvement: Analyzing usage patterns to improve user experience, system performance, and content relevance.
  • Legal compliance: Fulfilling legal obligations including financial reporting, anti-money laundering compliance, and regulatory requirements.
  • Platform security: Detecting and preventing fraudulent activity, account intrusion attempts, and any other security threats.
  • Marketing (with consent): Reaching out to you about promotions, special offers, and loyalty programs where you have given consent to receive such communications.

4. Legal Basis for Data Processing

Every processing activity carried out by nanaatoto is done on a lawful basis. We rely on the following bases as appropriate to each situation:

  • Contractual agreement: Processing necessary to fulfill our contractual obligations to you as a registered member.
  • Legitimate interests: Processing for platform security, fraud prevention, and service improvement purposes.
  • Legal obligations: Processing required by applicable laws or regulations in force.
  • Consent: Processing for marketing and promotional communications, which you may withdraw consent for at any time.

5. Information Sharing

Nanaatoto does not sell, rent, or trade your personal information to third parties for their own commercial purposes. However, under certain circumstances, we may share your data with the following parties:

5.1 Service Providers

We work with third-party companies that help us operate the platform — including game providers, payment processors, cloud service providers, and analytics firms. All service providers are bound by strict confidentiality agreements and are only permitted to use your data for the specific purposes agreed upon.

5.2 Legal Requirements

Nanaatoto may disclose your personal information to government authorities, law enforcement agencies, or tribunals when required to do so by law or a valid court order.

5.3 Business Transfers

In the event of a merger, acquisition, or sale of company assets, member personal information may be transferred as part of those assets. You will be notified of any such changes, and your rights over your data will continue to be protected.

Our Guarantee: We have never sold and will never sell your personal data to advertisers or data brokers for third-party marketing purposes.

6. Data Retention

Nanaatoto retains your personal data for as long as necessary to fulfil the purposes stated in this Privacy Policy, or for as long as required by applicable law. Generally, active account data is retained throughout your membership period. After an account is closed, certain data may still be retained for an additional period to meet legal obligations, resolve any outstanding disputes, or for legitimate audit purposes.

When data is no longer needed, we will ensure it is securely deleted or anonymised in accordance with established standard procedures.

7. Information Security

Nanaatoto implements comprehensive technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction. These measures include:

  • Data encryption in transit using 128-bit SSL/TLS protocol
  • Data encryption at rest for sensitive information
  • Role-based access control with the principle of least privilege
  • Two-factor authentication (2FA) for member accounts and internal access
  • Continuous 24/7 security monitoring and threat detection
  • Regular security audits and penetration testing
  • Comprehensive security awareness training for all staff
  • Tested and documented incident response procedures

While we take all reasonable precautions, no data transmission or storage system over the internet can be guaranteed 100% secure. You are also responsible for keeping your password and account login details safe.

8. Cookies and Tracking Technologies

The nanaatoto platform uses cookies and similar tracking technologies to enhance the user experience, maintain session security, and analyse website usage. Cookies are small data files stored on your device by your web browser.

8.1 Types of Cookies Used

  • Essential Cookies: Required for core platform functions such as login authentication and session security. These cookies cannot be disabled.
  • Performance Cookies: Collecting information on how the platform is used to help us improve our services.
  • Functional Cookies: Storing your preferences such as language and display settings for a more personalized experience.
  • Session Cookies: Automatically deleted when you close your browser and used to maintain your active session.

You can manage cookie settings through your web browser preferences. However, disabling certain cookies may affect the functionality and security of the platform.

9. Your Rights

As a data subject, you hold several rights regarding the personal information we process. nanaatoto respects and facilitates the exercise of these rights:

1
Right of Access

You may request a copy of all personal data we hold about you at any time.

2
Right to Rectification

You may request that we correct any inaccurate or incomplete information.

3
Right to Erasure

You may request deletion of your personal data, subject to applicable legal obligations.

4
Right to Object

You may object to the processing of your data for direct marketing purposes at any time.

5
Right to Data Portability

You may request your data in a structured, machine-readable format for transfer.

6
Right to Withdraw Consent

Your consent for specific processing activities can be withdrawn at any time without affecting any processing carried out prior to withdrawal.

10. Children's Privacy

Nanaatoto does not offer services to individuals under the age of 18. We do not knowingly collect, store, or process personal information from children. Should we discover that a child's data has been collected inadvertently, we will take immediate steps to delete that information and close the relevant account.

Parents or guardians who believe their child has registered an account at nanaatoto are encouraged to contact our support team immediately so that appropriate action can be taken.

11. Privacy Policy Amendments

Nanaatoto reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our information handling practices, new legal requirements, or the expansion of platform services. The latest version of the Privacy Policy is always available on this page with a clearly indicated update date.

If there are material changes to how we handle your personal data, we will notify you via an in-platform notification or your registered email at least 14 days before the changes take effect. Continued use of the platform after the amendment date constitutes your acceptance of the revised Privacy Policy.

12. Contact Us

For any enquiries, requests, or concerns regarding this Privacy Policy or the handling of your personal data by nanaatoto, please contact us through the following channels:

We aim to respond to all privacy-related inquiries within 72 business hours. For general questions, you may also refer to the Frequently Asked Questions (FAQ) us first.

Our Commitment: nanaatoto takes every privacy-related enquiry and complaint seriously. We are committed to resolving your concerns fairly, transparently, and in a timely manner.

Layer Protection We Provide

Data protection is not just a document — it is a daily practice we uphold at every level of our operations

Two-Factor Authentication

An additional security layer that ensures only you can access your account, even if someone else knows your password.

Data Anonymisation

Data used for internal analysis is anonymised so that individual identities cannot be identified from the dataset.

Secure Server Infrastructure

Data is stored in certified data centres with multi-layered physical and digital security controls that meet industry standards.

Real-Time Monitoring

An anomaly detection system operates around the clock to identify and respond to any suspicious activity swiftly.

Staff Training

All nanaatoto staff who handle personal data undergo regular data protection training and sign confidentiality agreements.

Regular Reviews and Audits

Our data handling practices are reviewed and audited periodically by internal and external parties to ensure ongoing compliance.

Join nanaatoto with Full Confidence

Your privacy and security are at the core of everything we do. Register today and enjoy a safe gaming experience alongside more than 500,000 of our members.

Bahasa Melayu