nanas777
Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes the manner in which nanas777 ("nanas777", "we", "our", "us") collects, processes, stores, shares, and protects personal data belonging to individuals ("Player", "User", "you") who access or use the nanas777 online casino and sports betting platform at nanas777.cam, including all associated services and features.

nanas777 serves players primarily located across Malaysia, including residents of Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and other Malaysian cities. We recognise our responsibility to handle personal data with the highest standards of care, security, and transparency.

This Policy should be read alongside our Terms & Conditions and Responsible Gambling Policy, both of which are incorporated by reference. In the event of any conflict between this Policy and any other document on the platform, this Policy shall prevail with respect to privacy and data protection matters.

2. Definitions

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" — any information that identifies, or could reasonably be used to identify, a natural person, either directly or in combination with other available information.
• "Processing" — any operation or set of operations performed on personal data, including collection, recording, storage, adaptation, retrieval, use, disclosure, erasure, or destruction.
• "Data Controller" — nanas777, which determines the purposes and means by which personal data is processed.
• "Data Processor" — a third party that processes personal data on behalf of nanas777 under a contractual arrangement and in accordance with our instructions.
• "Consent" — freely given, specific, informed, and unambiguous indication of agreement to the processing of personal data for one or more specified purposes.
• "KYC Data" — identity and address verification documents including, but not limited to, MyKad, driver's licence, passport, utility bills, and photographic selfies, submitted by Players as part of the Know Your Customer verification process.
• "Cookies" — small text files placed on a user's device by the nanas777 platform to enable certain functionality and to collect usage analytics.

3. Personal Data We Collect

nanas777 collects only the categories of personal data that are necessary for the purposes described in this Policy. The following table summarises the data categories we collect and the primary reason each category is required:

We do not collect sensitive personal data categories such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric identification data unless specifically required by applicable law and disclosed to you separately.

4. How We Collect Personal Data

nanas777 collects personal data through the following channels:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact support, or update your account profile.
• Automatically via technical systems — through cookies, server logs, and analytics tools when you access and navigate the nanas777 platform. This includes your IP address, device information, and browsing behaviour on our site.
• From payment providers — when you transact via DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong Bank, or approved cryptocurrency channels, relevant transaction confirmation data is shared with us by the payment processor.
• From third-party identity verification services — where we employ regulated third-party KYC or AML screening services to assist with identity verification and sanctions list screening.
• From publicly available sources — in limited circumstances for AML and fraud prevention purposes, nanas777 may cross-reference publicly available information such as sanctions registers and politically exposed persons (PEP) lists.

5. How We Use Your Data (Data Processing)

nanas777 processes your personal data for the following specific purposes:

• Account creation and management — registering your account, maintaining account records, facilitating login and authentication, and managing account settings.
• Payment processing — facilitating deposits and withdrawals via Malaysian payment methods including DuitNow, FPX, Touch 'n Go eWallet, bank transfers, and crypto channels including USDT (TRC20/ERC20) and BTC.
• KYC and compliance verification — verifying your identity and address in fulfilment of our regulatory obligations, and screening your information against applicable sanctions and PEP lists.
• Anti-money laundering (AML) monitoring — monitoring transaction patterns for indicators of money laundering, fraud, or other criminal activity in accordance with applicable regulatory requirements.
• Responsible gambling management — monitoring gaming activity to identify potential signs of problem gambling, applying self-exclusion or deposit limit requests, and administering cooling-off periods.
• Customer support — responding to queries, resolving disputes, and maintaining support records for quality assurance purposes.
• Platform security — detecting and preventing fraud, unauthorised access, cyberattacks, and other security incidents.
• Legal compliance — fulfilling obligations under applicable laws, responding to lawful requests from regulatory or law enforcement authorities, and maintaining records required by our licensing obligations.
• Platform improvement — analysing anonymised usage data to improve the nanas777 platform, game selection, user experience, and technical performance.

6. Legal Basis for Processing

nanas777 processes your personal data only where a valid legal basis exists. The following legal bases apply to our processing activities:

• Contractual necessity — processing required to perform our obligations under the Terms & Conditions you accepted on registration, including operating your account, processing transactions, and providing gaming services.
• Legal obligation — processing required to comply with applicable laws and regulatory obligations, including KYC verification, AML monitoring, and data retention requirements.
• Legitimate interests — processing necessary for the legitimate interests of nanas777, including fraud prevention, platform security, and platform improvement, where those interests are not overridden by your rights and freedoms.
• Consent — where you have provided explicit consent for specific processing activities, such as receiving promotional communications. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

7. Data Sharing & Disclosure

nanas777 does not sell, rent, or trade your personal data to third parties. We share personal data only in the following limited and controlled circumstances:

• Payment processors and banking partners — transaction data is shared with our approved Malaysian payment partners (including banks, e-wallet providers, and cryptocurrency network operators) strictly to the extent necessary to process your deposits and withdrawals.
• KYC and identity verification providers — identity documents and related data are shared with regulated third-party KYC service providers engaged under data processing agreements that require them to handle data in accordance with applicable standards.
• Game software providers — your player identifier and gaming session data may be transmitted to our licensed game provider partners for the purpose of game delivery and RNG auditing. Game providers do not receive your full personal profile.
• Regulatory and law enforcement authorities — where required by applicable law, court order, or regulatory instruction, nanas777 will disclose personal data to competent authorities. We will notify you of any such disclosure where legally permitted to do so.
• Professional advisers — legal counsel, auditors, and compliance consultants engaged by nanas777 may access personal data on a need-to-know basis under strict confidentiality obligations.

8. Data Retention

nanas777 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or to comply with applicable legal, regulatory, or contractual retention requirements. The following general retention periods apply:

• Active account data — retained for the duration of your account and for a minimum of five (5) years following permanent account closure, in accordance with standard AML and regulatory record-keeping requirements.
• KYC documents — retained for a minimum of five (5) years from the date of submission, or for such longer period as may be required by applicable law.
• Transaction records — retained for a minimum of seven (7) years for AML compliance and accounting purposes.
• Support communications — retained for three (3) years from the date of the last interaction for quality assurance and dispute resolution purposes.
• Technical and usage data — typically retained for twelve (12) months for security monitoring and platform optimisation, after which it is anonymised or deleted.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification, unless a further legal obligation requires continued retention.

9. Data Security

nanas777 implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and nanas777 servers.
• Encryption of personal data and KYC documents at rest using strong encryption algorithms.
• Role-based access controls ensuring that only authorised personnel with a legitimate need may access personal data.
• Two-factor authentication (2FA) available for Player accounts and mandatory for all administrative system access.
• Regular penetration testing and security audits by qualified independent security professionals.
• Real-time intrusion detection and security incident monitoring systems operating on a 24/7 basis.
• Isolated, access-controlled storage for KYC documents with full access logging and audit trails.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, nanas777 will notify affected Players without undue delay and will take immediate remediation steps. We will also report the breach to the relevant supervisory authority as required by applicable law.

10. Cookies & Tracking Technologies

nanas777 uses cookies and similar tracking technologies on the platform. Cookies are small text files stored on your device that help us deliver a functional, secure, and personalised experience.

The following categories of cookies are used on nanas777:

• Strictly Necessary Cookies — essential for the platform to function. These cookies enable core features such as account login, session management, and security. They cannot be disabled without affecting platform functionality.
• Functional Cookies — remember your preferences and settings (such as language and display preferences) to improve your experience on return visits.
• Analytics Cookies — collect anonymised data about how Players navigate the platform to help us improve performance, identify errors, and understand feature usage. Analytics data is aggregated and does not identify individual users.
• Security Cookies — used to detect and prevent fraudulent activity, bot access, and security threats to the platform and Player accounts.

11. Your Data Rights

Subject to applicable law and our regulatory obligations, you hold the following rights in respect of your personal data held by nanas777:

• Right of Access — you may request a copy of the personal data nanas777 holds about you, together with information about how it is being processed. We will respond to access requests within 30 calendar days.
• Right to Rectification — you may request that inaccurate or incomplete personal data be corrected. We will process correction requests within 5 business days.
• Right to Erasure ("Right to be Forgotten") — you may request deletion of your personal data following permanent account closure, subject to our legal obligation to retain certain data for AML and regulatory compliance purposes.
• Right to Restrict Processing — you may request that we restrict the processing of your data in certain circumstances, such as while the accuracy of your data is being contested.
• Right to Data Portability — where technically feasible and legally permissible, you may request that your personal data be provided to you in a structured, commonly used, machine-readable format.
• Right to Object — you may object to processing carried out on the basis of legitimate interests. We will consider your objection and cease processing unless we can demonstrate compelling legitimate grounds.
• Right to Withdraw Consent — where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

To exercise any of the above rights, please contact our data protection team at the details provided in Section 15 of this Policy. We may require proof of identity before processing any data rights request to prevent unauthorised access to your information.

12. Minors & Age Policy

nanas777 is strictly an adult platform. Registration, use of gaming services, and any associated data processing are available only to individuals who are 21 years of age or older. nanas777 does not knowingly collect, process, or retain personal data from any individual under the age of 21.

13. International Data Transfers

In the course of providing our services, personal data may be transferred to and processed in jurisdictions outside Malaysia, including in the location of our licensed game software providers, cloud infrastructure providers, and KYC service partners. Such transfers occur only where appropriate safeguards are in place to protect your data to a standard equivalent to the protections applicable in Malaysia.

Safeguards applied to international transfers include: contractual data processing agreements with all third-party processors, adherence to recognised data protection frameworks, and technical security measures consistent with those applied to data processed domestically.

Where a transfer is made to a jurisdiction that has not been recognised as providing an adequate level of data protection, nanas777 will implement additional contractual, technical, and organisational measures to ensure the continued protection of your data.

14. Updates to This Privacy Policy

nanas777 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory requirements. Where changes are material — meaning they affect how we collect, use, or share your personal data in ways that are meaningfully different from what was previously disclosed — we will notify registered players via the email address on file prior to the changes taking effect.

The most current version of this Privacy Policy will always be accessible at nanas777.cam/privacy-policy. The "Last Reviewed" date at the top of this page indicates when the policy was most recently updated. Continued use of the platform following any revision constitutes your acknowledgement of and agreement to the updated Policy.

15. Contact Us

If you wish to exercise any of your data rights, raise a privacy concern, request information about our data practices, or make a formal data protection complaint, please contact the nanas777 data protection team using the following details:

• Email: [email protected]  (plain text — not a clickable link)
• Subject Line: Please use "Privacy Request — [Your Account Username]" to ensure prompt routing to our data protection team.
• Response Time: Data rights requests will be acknowledged within 3 business days and substantively addressed within 30 calendar days.
• Identity Verification: We may ask you to provide proof of identity before processing any data rights request to protect against unauthorised access to your information.

For general account queries, our live chat support team is available 24 hours a day, 7 days a week from within your nanas777 account dashboard.

This Privacy Policy was last reviewed on 1 January 2026. nanas777 — for players aged 21 and above only.