Contents
1 Introduction
Nanastoto is committed to protecting the privacy of every player on our platform. As a trusted online casino platform in Malaysia, we understand how important the security and confidentiality of your personal information is. Your trust is the foundation of our relationship.
This Privacy Policy is designed to clearly and transparently explain the types of data we collect, why it is collected, how it is used, who it may be shared with, and what your rights are regarding that data. We do not take this responsibility lightly — every data-related decision is made with our players' interests and safety as the top priority.
This policy applies to all users who access the nanastoto platform via the website, mobile app, or any other digital channel we operate. If you have any questions after reading this document, our support team is available to assist at any time.
2 Information We Collect
Nanastoto collects several categories of information to ensure the services we provide are safe, orderly, and meet your needs as a player. This information is collected through various means as described below.
Account Registration Information
When you register an account at nanastoto, we collect the basic information needed to create and manage your account:
- Full name as shown on identity document
- Date of birth for age verification
- Active email address
- Mobile phone number
- Current residential address
- Chosen username and password
Financial & Payment Information
To process deposits and withdrawals, we collect information related to the payment methods you use. This includes bank account numbers, bank names, and registered e-wallet details. All financial information is stored in encrypted format and is never shared with unrelated parties.
Identity Verification Information (KYC)
As part of the mandatory KYC process to ensure platform security and comply with anti-money laundering regulations, we may request copies of identification documents such as a national ID or passport, as well as proof of address such as a recent utility bill or bank statement.
Activity & Usage Data
We automatically record data relating to how you use the nanastoto platform, including your game history, login dates and times, IP address, device and browser type, and pages visited within our platform.
3 How Your Data Is Used
Information collected by nanastoto is used for specific, legitimate purposes. Below is a detailed table explaining each data usage purpose along with its underlying legal basis:
| Purpose of Use | Data Type | Legal Basis |
|---|---|---|
| Account management & verification | Registration data, KYC | Contractual requirement |
| Deposit & withdrawal processing | Financial data | Contractual requirement |
| Fraud prevention & security | Activity data, IP | Legitimate interest |
| Regulatory compliance & AML | All categories | Legal obligation |
| Customer service communications | Contact information | Legitimate interest |
| Marketing & promotions (with consent) | Email, phone number | Your consent |
| Platform improvement & analytics | Usage data | Legitimate interest |
We will not use your data for any purpose other than those stated above without first obtaining your additional consent. If you do not wish to receive marketing communications, you may withdraw your consent at any time via your account settings or by contacting our support team.
4 Information Sharing
Nanastoto does not sell, rent, or disclose your personal data to third parties for their own commercial purposes. However, in the course of operating the platform, there are certain situations where we need to share information with selected parties:
- Payment service providers: To securely process your deposit and withdrawal transactions. They receive only the information necessary for that purpose.
- Game software providers: Game providers partnering with nanastoto receive the game session data necessary to deliver a seamless gameplay experience.
- Government authorities: nanastoto will disclose information to government agencies or law enforcement authorities if required to do so by applicable Malaysian law.
- Analytics service providers: Anonymised usage data may be shared with analytics providers to help us understand and improve the user experience on the platform.
All third parties working with nanastoto are bound by confidentiality agreements and must comply with data protection standards equal to or higher than those we maintain.
5 Data Security
We implement comprehensive technical and organisational security measures to protect your personal data from unauthorised access, alteration, disclosure, or destruction. The nanastoto security infrastructure is designed with the latest cybersecurity threats in mind.
Key security measures we have implemented include:
- 256-bit SSL encryption: All communications between your device and nanastoto's servers are encrypted using the latest SSL/TLS protocols, ensuring no third party can intercept your data in transit.
- Encryption of data at rest: Sensitive information stored in our databases, particularly financial and KYC data, is encrypted using AES-256 standards.
- Tiered access control: Only authorised personnel may access players' personal data, and every access is recorded in a comprehensive audit log.
- 24/7 Monitoring: Automated monitoring systems operate around the clock to detect and respond to any suspicious activity or intrusion attempts.
- Regular penetration testing: We conduct regular security testing by independent experts to identify and address any vulnerabilities before they can be exploited.
- Two-factor authentication: Players are encouraged to enable two-factor authentication (2FA) for an additional layer of protection on their accounts.
While we do everything within our power to protect your data, no security system is entirely perfect. In the event of a data breach affecting your information, we will notify you within the timeframe required by applicable legal obligations.
6 Cookies & Tracking Technologies
Nanastoto uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.
We use cookies for the following purposes:
- Essential Cookies: Required for core platform functions such as login session authentication and security. These cookies cannot be disabled without affecting platform functionality.
- Preference Cookies: Saves your preferences such as language, currency, and display settings for a more personalised experience.
- Analytics Cookies: Helps us understand how players interact with the platform, the most frequently visited pages, and areas that require improvement.
- Performance Cookies: Used to monitor platform response times and identify any technical issues that need to be resolved.
You can manage cookie settings through your web browser. However, disabling certain cookies may affect the functionality of parts of the nanastoto platform. For more information on how to manage cookies in your browser, please refer to your browser's help documentation.
7 Your Rights
As a nanastoto player, you have specific rights regarding your personal data under Malaysia's Personal Data Protection Act 2010 (PDPA). nanastoto fully respects and facilitates the exercise of these rights:
Right of Access
You have the right to request a copy of the personal data we hold about you.
Right to Rectification
You may request that we correct any inaccurate or incomplete data.
Right to Erasure
In certain circumstances, you may request that your data be deleted from our systems.
Right to Restriction
You may request that we restrict the processing of your data in certain circumstances.
Right to Portability
You have the right to receive your data in a reusable format.
Right to Object
You may object to the processing of your data for direct marketing purposes.
To exercise any of the above rights, please contact the nanastoto support team via Live Chat or email. We will process your request within 30 business days. Please note that some requests may be subject to identity verification requirements to ensure the security of your account.
8 Data Storage & Transfer
Your personal data is stored on secure, continuously monitored servers. nanastoto retains your personal data for as long as necessary to fulfil the purpose for which it was collected, or for the period required by applicable Malaysian law.
In general, our data retention guidelines are as follows:
- Active account data: Retained for the duration your account is active and for a reasonable period following account closure.
- Financial transaction records: Retained for a minimum of seven (7) years in accordance with Malaysian financial regulatory requirements.
- KYC documents: Retained for the period required by applicable anti-money laundering regulations.
- Customer support communication logs: Retained for three (3) years after the last interaction.
When data is no longer needed and the mandatory retention period has expired, nanastoto will securely delete or anonymise that data in accordance with industry-standard procedures.
9 Changes to the Privacy Policy
Nanastoto reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other operational reasons. Any material changes will be communicated to registered players via in-platform notifications or their registered email.
The "Updated" date at the top of this document indicates when this Privacy Policy was last reviewed. We encourage you to check this page periodically to stay informed about how we protect your information. Continued use of the nanastoto platform after any amendments constitutes your acceptance of the revised Privacy Policy.
10 Contact Us
If you have any questions, concerns, or wish to exercise your privacy rights, please do not hesitate to contact our team through the following channels:
- Live Chat: The fastest method — available 24 hours a day, 7 days a week, directly within the nanastoto platform.
- Privacy Email: [email protected] — specifically for data and privacy-related enquiries.
- General Support: [email protected]
- FAQ: Visit page FAQ us for answers to frequently asked privacy questions.
Why Your Privacy Is Safe at nanastoto
Data protection is more than a document — it is a daily commitment we uphold across every aspect of platform operations.
Bank-Grade Encryption
All data transmitted between your device and nanastoto's servers is protected by 256-bit SSL encryption — the same standard used by leading banking institutions in Malaysia. Your data is never exposed during transit.
Strict Access Control
Only specifically authorised personnel are permitted to access players' personal data, and every such access is logged and monitored. No other staff may view your sensitive information without valid, documented authorisation.
Malaysia PDPA Compliance
Nanastoto operates in full compliance with Malaysia's Personal Data Protection Act 2010 (PDPA). This means your rights as a data subject are recognised and protected under a robust legal framework.
No Data Sales
Nanastoto has never and will never sell players' personal data to advertisers, data brokers, or any third party for commercial gain. Your data belongs solely to you — we only use it to provide the services you signed up for.
Regular Security Testing
Independent cybersecurity experts conduct regular penetration testing and vulnerability assessments on nanastoto's infrastructure. Any identified weaknesses are addressed promptly before they can compromise our players' data security.
Rapid Breach Notification
In the event of any security incident affecting your data, nanastoto will notify you within the timeframe required by law. Transparency in critical situations is part of our commitment to our players.
Your Data Is Protected — Register & Start Playing at nanastoto
You now know how nanastoto protects your privacy. Register an account today and enjoy over 3,000 games with complete peace of mind.