Namastoto Privacy Policy – Member Data Protection Malaysia

1 Introduction & Scope of This Policy

Namastoto operates as an online entertainment and betting platform that places member trust at the forefront. We recognise that your personal information is a valuable and sensitive asset — which is why we have built a robust data protection system to safeguard your privacy at all times.

This Privacy Policy applies to all personal information we collect through:

• The namastoto.com website and all associated subdomains
• Namastoto mobile app for Android and iOS
• Interactions with our customer support team
• Any other official namastoto communication channels

2 Information We Collect

We only collect information that is genuinely necessary to provide a safe and quality service. The data we collect falls into three main categories:

A. Information you provide directly:

• Full name as stated on official identity documents
• Date of birth and gender
• National identity card number (MyKad) or passport number
• Email address and mobile phone number
• Current residential address
• Payment method details (bank account number, bank name, e-wallet details)
• Uploaded KYC verification documents

B. Information collected automatically:

• IP address and geolocation data
• Device type and version, and web browser
• Platform activity logs — pages visited, games played, session duration
• Cookie data and related tracking technologies
• Deposit and withdrawal transaction records

C. Information from third-party sources:

• Identity verification via licensed eKYC services
• Anti-money laundering and sanctions list screening
• Feedback from payment service providers

3 How We Use Your Data

Every piece of information we collect is used responsibly and only for legitimate purposes. Below is a detailed overview of how your data is used in namastoto's day-to-day operations:

Account management and identity verification — Your personal data is used to create and maintain your namastoto account, carry out mandatory KYC processes, and ensure that only you can access your account. This is the foundation of security across the entire platform.

Financial transaction processing — Your bank and e-wallet details are required to process deposits and withdrawals of your winnings. We do not store credit or debit card information directly — all card transactions are processed through integrated, licensed payment gateways.

Anti-money laundering (AML) regulatory compliance — namastoto is required under applicable laws to monitor and report suspicious transactions. This monitoring is carried out automatically using artificial intelligence systems and does not involve routine manual review.

User experience improvement — Behavioral and technical data helps us understand how members interact with the platform, identify technical issues, and improve the user interface over time.

Communications and notifications — We use your email address and phone number to send important account notifications, security updates, and promotional information (if you have consented to receive it).

Fraud prevention and security — IP addresses, device data, and activity patterns are used to detect unauthorized access attempts, identity fraud, and system abuse.

4 Sharing Information with Third Parties

Namastoto does not sell, rent, or trade members' personal information to any third party for marketing purposes. However, in the course of delivering our services, there are certain situations where data may need to be shared with selected parties:

• Technical service providers — Companies providing server infrastructure, cybersecurity systems, and email delivery services. They are only permitted to process data according to our instructions and are subject to strict confidentiality agreements.
• Payment processors — Payment gateways and banks required to process your financial transactions. Information shared is the minimum necessary to complete each transaction.
• Identity verification services — Licensed eKYC providers that assist us in verifying the authenticity of member identity documents.
• Game providers — Game session information and member IDs required by game providers to deliver a seamless gaming experience. These providers do not receive your full personal details.
• Regulatory authorities — When required by law or official directive from a competent regulatory authority.

5 Data Security & Protection Measures

We invest seriously in security infrastructure to ensure members' personal and financial data remains protected at all times. Our security layers include:

• 256-bit SSL/TLS encryption — All communications between your device and namastoto servers are protected by industry-grade encryption. No data travels in an unencrypted state.
• Data segregation — Member funds are held in accounts completely separate from the company's operating funds, ensuring your balance is always available and unaffected by business operations.
• Two-factor authentication (2FA) — Members are encouraged to enable two-factor authentication to add an extra layer of security to their account.
• Continuous security monitoring — Our systems monitor account activity at all times to detect any unusual activity or unauthorized access attempts.
• Regular security testing — namastoto conducts regular penetration testing and security audits by independent third parties.
• Internal access controls — Access to member data among namastoto staff is restricted to those who genuinely need it to carry out official duties, and every access is logged.

6 Cookies & Tracking Technologies

Namastoto uses cookies and similar tracking technologies to enhance your experience on our platform. Below are the types of cookies we use and their respective purposes:

You can manage cookie settings through your web browser. However, disabling essential cookies may affect platform functionality. Analytics and performance cookies can be disabled without affecting basic platform use.

7 Your Rights as a Data Subject

As a namastoto member, you have specific rights regarding your personal data. We fully respect and facilitate the exercise of these rights:

8 Data Retention Period

Namastoto only retains your personal data for as long as necessary for the purposes stated in this Policy, or as required by applicable law. The following are our data retention guidelines:

• Active account data — Retained for the duration your account is active and for the required period following account closure to fulfill legal obligations.
• Financial transaction records — Retained for a minimum of 7 years after a transaction occurs, in line with Malaysia's financial and taxation legal requirements.
• KYC Documents — Retained for a minimum of 5 years after the business relationship with you ends, in line with anti-money laundering requirements.
• Support communication logs — Retained for 2 years for quality control and dispute resolution purposes.
• Cookie and analytics data — Deleted in accordance with the retention periods stated in the cookies section above.

When data is no longer needed and there is no legal obligation to retain it, Namastoto will securely delete or anonymise that data.

9 Links to Third-Party Sites

The namastoto platform may contain links to websites or services operated by third parties, including game providers and payment partners. Please note that this Privacy Policy applies solely to the namastoto platform.

When you click links to third-party sites, you are subject to those sites' privacy policies, which may differ from ours. Namastoto is not responsible for the privacy practices or content of those third-party sites.

10 Amendments to This Privacy Policy

Namastoto reserves the right to update or amend this Privacy Policy at any time to reflect changes in law, technology, or our business practices. Any amendments take effect once published on this page with an updated effective date.

For material amendments — those that significantly change how we use your data — we will notify you via an in-platform notification or your registered email at least 14 days before the changes take effect.

Continued use of the namastoto platform after the effective date of any amendment constitutes acceptance of the revised Policy. If you disagree with any amendment, please contact us to discuss available options, including account closure if you choose to do so.

11 Contact Us About Privacy

If you have any questions, concerns, or complaints regarding how we handle your personal data, the Namastoto privacy team is here to help. You can reach us through the following channels:

• Live Chat: Available 24/7 directly on the namastoto platform
• Support email: [email protected] (plain text display only, not a link)
• Official Telegram: Through official namastoto support channels

We aim to respond to all privacy-related enquiries within 5 business days. For formal data subject rights requests such as access or deletion, the response period is up to 30 business days depending on the complexity of the request.