Personal Data Protection

Privacy Policy Nanastoo — Personal Data Protection for Malaysia Members

We understand that the trust you place in nanastoo is not something to be taken lightly. This policy clearly explains how your personal data is collected, used, protected, and managed by our platform.

Updated: 1 January 2026  |  Version 2.5
🔒
256-bit SSL encryption for all data
🚫
No sale of data to third parties
👁️
You can access & delete your data
🇲🇾
Complying with Malaysia's PDPA 2010

6 Data Protection Principles Nanastoo

These six principles form the foundation of how nanastoo handles all member personal information with full integrity.

🛡️
Minimum & Purposeful Collection

Nanastoo only collects data that is strictly necessary to provide our services, comply with the law, and improve your experience. We do not collect data for the sake of collecting it.

Data Minimisation
🔐
Banking-Grade Encryption

All data transmitted between your device and nanastoo's servers is protected with 256-bit SSL encryption — the same standard used by Malaysia's leading banking institutions.

SSL 256-bit
🚫
No Data Selling

Nanastoo has never sold, rented, or disclosed your personal data to advertisers, data brokers, or any third party for commercial purposes, and never will.

Zero Data Selling
👤
Full Control in Your Hands

You have the right to access, correct, download, or request deletion of your personal data at any time. Contact us and we will process your request within 14 working days.

User Rights
📋
Malaysia PDPA Compliance

The nanastoo Privacy Policy is designed to comply with Malaysia's Personal Data Protection Act 2010 (PDPA). We continuously update our practices as regulations evolve.

PDPA 2010
🔔
Data Breach Notification

In the event of any security incident involving your data, nanastoo will notify you by email within 72 hours of the incident being identified, in line with industry best practices.

Full Transparency

Note: This Privacy Policy forms part of the Terms and Conditions nanastoo. By using our platform, you agree to how we handle your personal data as described here.

01

Introduction

Nanastoo ("we", "Platform") values your privacy. This document explains nanastoo's privacy practices and how we handle the personal information you provide to us when using our online gaming platform.

This policy applies to all users of the nanastoo website, mobile app, Live Casino, Slots, fish shooting games, Bingo, sports and e-sports betting services, and all other products offered under the nanastoo brand.

We handle your personal data responsibly and are committed to ensuring your information remains secure, confidential, and used only for purposes you have consented to.

02

Data Collected

2.1 Data You Provide Directly

When you register an account or use nanastoo services, we collect the following information:

Data Type Example Primary Purpose
Identity Information Full name, date of birth, IC number KYC verification, fraud prevention
Contact Information Email address, phone number Account communications, security notifications
Financial Information Bank account number, bank name Deposit & Withdrawal Processing
KYC Documents Copy of ID card, proof of address Identity verification, AML compliance
Login Information Username (password is not stored in plain text) Account security

2.2 Data Collected Automatically

When you use the platform, we also collect technical data automatically:

  • IP address and general location information (country/city only).
  • The browser type and version, and the operating system of your device.
  • Date, time, and session duration.
  • Pages visited and actions taken within the platform.
  • Technical performance data to identify and resolve issues.
03

How Your Data Is Used

Nanastoo uses collected data for the following purposes only:

  • Service provision: Managing your account, processing deposits and withdrawals, and providing access to games.
  • Identity verification: Conducting KYC checks as required by anti-money laundering (AML) laws.
  • Security: Identifying and preventing fraud, unauthorized access, and other harmful activities.
  • Communications: Sending important notifications related to your account, transactions, and security updates.
  • Customer support: Responding to your inquiries and resolving issues you report.
  • Legal compliance: Meeting reporting obligations to authorities when required by law.
  • Platform improvement: Analyzing usage patterns to improve the interface and user experience.

Nanastoo does not use your data for third-party advertising purposes or to build profiles without your consent.

04

Third-Party Disclosure

Nanastoo does not sell or disclose your personal data to third parties except in the following situations:

4.1 Trusted Service Providers

We share the necessary information with service providers working on our behalf, such as:

  • Licensed game providers (to verify gaming sessions).
  • Payment processors (to process your financial transactions).
  • Secure cloud storage service providers.
  • Identity verification service providers for KYC.

All these third-party providers are bound by confidentiality agreements and are only permitted to use your data for specified purposes.

4.2 Legal Requirements

Nanastoo may be required to disclose your information to authorities when mandated by law, court order, or official investigations related to fraud or financial crime.

Note: Nanastoo will never disclose your data to advertisers, data brokers, marketing firms, or any third party for commercial purposes without your explicit consent.

05

Data Security

Nanastoo implements a range of technical and organizational measures to protect your personal data from unauthorized access, loss, misuse, or alteration:

  • Encryption in transit: All communications between your device and nanastoo's servers are secured with SSL/TLS 256-bit.
  • Encryption at rest: Sensitive data such as financial information and KYC documents are stored in encrypted form.
  • Access control: Only staff with a specific need are permitted to access user data, with strict audit logs in place.
  • 24/7 Monitoring: An automated monitoring system detects any suspicious activity in real time.
  • Regular security testing: Security audits and penetration testing are conducted periodically by independent third parties.
  • Password hashing: Your account password is never stored in plain text – it is processed through a strong one-way hashing algorithm.
06

Cookies & Tracking Technologies

Nanastoo uses cookies and similar technologies to enhance your experience on the platform. There are three types of cookies we use:

Essential Cookies (Required)

These cookies are required for the platform to function properly – including maintaining your login session, remembering your language preference, and ensuring transaction security. They cannot be disabled.

Functional Cookies

These cookies remember your preferences such as your selected odds format, display theme, and other settings so you do not have to reconfigure them every time you log in.

Analytics Cookies

We use internal analytics tools to understand how users interact with the platform — this information helps us improve the interface and performance. This data is aggregated and does not identify individuals personally.

You can manage cookie settings through your browser. However, disabling essential cookies may affect platform functionality.

07

Data Retention & Deletion

Nanastoo retains your personal data for as long as your account is active and for the period required after account closure to fulfill legal obligations.

In general:

  • Active account data: Retained for the duration of the active account plus 5 years after closure (AML compliance requirement).
  • Financial transaction records: Retained for 7 years in accordance with financial reporting requirements.
  • Support communication logs: Retained for 2 years.
  • Technical data and system logs: Retained for 12 months.

Once the retention period expires, data is securely deleted using methods that ensure it cannot be recovered. You may request early deletion by contacting our team, subject to applicable legal requirements.

08

Your Rights

As a nanastoo platform user, you have the following rights regarding your personal data:

👁️
Right to Access

You have the right to request a copy of the personal data we hold about you.

✏️
Right to Rectification

You have the right to request correction of inaccurate or incomplete data.

🗑️
Right to Erasure

You can request data deletion subject to legal conditions.

📦
Right to Portability

You can request your data in a machine-readable format.

⛔
Right to Object

You can object to data processing for specific purposes such as marketing communications.

⏸️
Right to Restrict Processing

You can request a restriction on data processing while a dispute or review is in progress.

To exercise any of the above rights, contact our privacy team by email or live chat. We will process your request within 14 working days.

09

Children's Data

Nanastoo is a platform dedicated to users aged 18 and above. We do not knowingly collect or store personal data from underage individuals.

Important Notice: If you believe that an individual under the age of 18 has registered a nanastoo account, please contact us immediately. We will investigate, close the account, and delete all associated data without delay.

10

Policy Amendments

Nanastoo reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or new platform features. When significant amendments are made, we will:

  • Updating the "Last Updated" date at the top of this document.
  • Displaying in-platform notices when you log in.
  • Sending alert emails to all registered members for major changes.

Your continued use of the nanastoo platform after amendments take effect constitutes your agreement to the updated terms. We encourage you to review this page from time to time.

11

Contact Us

For any questions, concerns, or requests regarding this Privacy Policy or nanastoo's handling of your personal data, please contact us:

  • Live Chat: Available 24/7 directly within the nanastoo platform — the fastest way to reach us.
  • Privacy Email: privacy@nanastoo.net — for personal data-related requests.
  • Support Email: support@nanastoo.net — for general enquiries.

You may also refer to the FAQ us for answers to frequently asked privacy questions, or the About Us for more information about nanastoo.

Your Data Is Safe With Us

Join Nanastoo with Full Confidence

Your personal data is protected with bank-grade encryption, a transparent privacy policy, and a genuine commitment to your security. Register today and play with peace of mind.

256-bit SSL Encryption Malaysia PDPA 2010 No Data Selling
Bahasa Melayu