At Naza24, your privacy is not a compliance formality — it is a core commitment. This Privacy Policy explains exactly what personal data we collect from Malaysian players, why we collect it, how it is used, who it may be shared with, and the rights you hold over your information at all times.
Naza24 is committed to handling personal data responsibly and in accordance with applicable data protection principles. Our platform serves Members primarily based in Malaysia, and our data practices are designed to align with applicable Malaysian data protection legislation, including the Personal Data Protection Act 2010(PDPA), as well as internationally recognised data protection standards.
By registering an account on the Naza24 Platform, making a deposit or withdrawal, or otherwise interacting with our services, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you do not agree with the terms of this Policy, you should not use the Naza24 Platform.
This Privacy Policy should be read in conjunction with the Naza24 Terms & Conditions. In the event of any conflict between this Policy and the Terms & Conditions regarding the handling of personal data, this Privacy Policy shall prevail.
For the purposes of this Privacy Policy, the following terms have the meanings set out below:
Naza24 collects the following categories of Personal Data in connection with the provision of our services:
Naza24 does not collect biometric data, racial or ethnic origin data, political opinions, religious beliefs, or health data except where voluntarily disclosed in the context of a responsible gambling self-exclusion request.
Naza24 collects Personal Data through the following means:
The following table sets out the purposes for which Naza24 processes your Personal Data and the type of data involved each processing activity:
| Processing Purpose | Data Categories Used |
|---|---|
| Account creation and identity verification (KYC) | Registration & Identity Data |
| Processing deposits, withdrawals, and financial transactions | Financial & Transaction Data, Identity Data |
| Providing casino games, sportsbook, and platform services | Gaming Activity Data, Technical Data |
| Customer support delivery (live chat, email, WhatsApp) | Communications Data, Identity Data |
| Fraud prevention, AML compliance, and security monitoring | All categories as necessary |
| Compliance with legal obligations (PDPA, regulatory reporting) | Identity Data, Financial Data |
| Administering bonuses, promotions, and VIP programme | Gaming Activity Data, Identity Data |
| Responsible gambling monitoring and intervention | Gaming Activity Data, Communications Data |
| Marketing communications (with consent) | Identity Data, Communications Data |
| Platform improvement and analytics | Technical & Device Data (aggregated) |
Naza24 processes your Personal Data on the following legal bases:
Naza24 does not sell, rent, or trade your Personal Data to any third party for commercial purposes. Personal Data may be disclosed to the following categories of recipients, solely for the purposes described in this Policy:
Where Naza24 shares Personal Data with third-party processors, we require those parties to process data only in accordance with our instructions and applicable data protection law, and to maintain appropriate security safeguards.
Naza24 retains Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention principles apply:
Where Personal Data is no longer required for its original purpose and no legal retention obligation applies, it will be securely deleted or anonymised in accordance with our data destruction procedures.
The Naza24 Platform uses cookies and similar tracking technologies to operate the Platform effectively, remember your preferences, and improve your experience. The following categories of cookies are in use:
You may control non-essential cookies through your browser settings. Please note that disabling certain cookies may impact the functionality of the Platform. Naza24 does not use third-party advertising cookies or behavioural tracking cookies for the purpose of selling advertising inventory.
As a data subject under the PDPA and applicable data protection principles, you hold the following rights in respect of your Personal Data processed by Naza24. To exercise any of these rights, please contact our Data Protection contact at [email protected].
You have the right to request a copy of the Personal Data Naza24 holds about you, together with information about how it is being processed.
You have the right to request correction of inaccurate or incomplete Personal Data. You may update certain profile data directly via your Account settings.
You may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations.
You may request that Naza24 restrict the processing of your Personal Data in certain circumstances, such as while a correction request is being resolved.
Where processing is based on your consent (e.g., marketing emails), you may withdraw that consent at any time by using the unsubscribe link or contacting support.
If you believe Naza24 has not handled your Personal Data in accordance with applicable law, you may contact our support team to raise a formal complaint.
Naza24 will respond to all data rights requests within 21 calendar days of receipt. Where a request is complex or involves a large volume of data, we may extend this period by a further 21 days and will notify you accordingly.
Naza24 implements appropriate technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security measures include, but are not limited to:
Notwithstanding these measures, no method of data transmission or storage is completely secure. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, Naza24 will notify you as required by applicable law.
You are responsible for maintaining the confidentiality of your Account password. Naza24 will never ask you for your password via email, live chat, or any other communication channel. Do not share your login credentials with any third party.
The Naza24 Platform is strictly restricted to individuals aged21 years and above. Naza24 does not knowingly collect or process Personal Data of persons under the age of 21. Age verification is conducted as part of the registration process and may be re-verified at any stage of Account operation.
If Naza24 becomes aware that Personal Data has been collected from an individual under the age of 21, that data will be deleted promptly and the associated Account will be closed. Any funds in such an Account may be forfeited in accordance with our Terms & Conditions.
If you have reason to believe that a person under the age of 21 has registered an Account on the Naza24 Platform, please contact our support team immediately.
Naza24 may transfer Personal Data to, and process Personal Data in, countries outside of Malaysia where our service providers, game studios, or technology partners are located. Where such transfers occur, Naza24 takes steps to ensure that appropriate data protection safeguards are in place, including the use of contractual clauses that impose data protection obligations on the receiving party equivalent to those applied by Naza24.
By using the Naza24 Platform, you acknowledge and consent to such cross-border transfers of your Personal Data, subject to the safeguards described above.
Naza24 may send you promotional communications relating to new games, upcoming sporting events (including EPL fixtures, Liga Super Malaysia matches, UFC fight nights, and other events available on the Platform), bonus offers, and platform updates, where you have provided your consent to receive such communications.
You may withdraw your consent to marketing communications at any time by:
Opting out of marketing communications does not affect your receipt of transactional communications — such as deposit confirmations, withdrawal notifications, and Account security alerts — which are sent as part of the provision of services and cannot be opted out of while your Account remains active.
Naza24 reserves the right to update this Privacy Policy at any time to reflect changes in applicable law, our data processing practices, or our service offering. The date of the most recent revision is displayed at the top of this page.
Where changes to this Policy are material — for example, where new categories of Personal Data are collected or new processing purposes are introduced — Naza24 will provide notice via Platform notification and/or email to registered Members. Your continued use of the Platform following notification of an amended Policy constitutes your acceptance of the updated terms.
We encourage you to review this Policy periodically to stay informed of how your Personal Data is being handled.
If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data by Naza24, please contact us through any of the following channels:
Naza24 is dedicated to resolving all data protection enquiries promptly and fairly. If you are not satisfied with our response to a data rights request, you may escalate the matter in accordance with the complaints process described in our Terms & Conditions.
Our Privacy Commitments
Six concrete commitments that underpin how Naza24 handles your personal information — clear, practical, and enforced.
All data transmitted between your device and Naza24 is protected by SSL/TLS encryption. Financial data — including your bank account details, e-wallet identifiers, and transaction records — is stored encrypted at rest using industry-standard algorithms.
Naza24 does not sell, rent, or trade your personal data to advertisers, data brokers, or any commercial third party. Your information is used solely to operate your Account, deliver our services, and meet our legal obligations — nothing else.
You have the right to access, correct, restrict, and delete your personal data at any time. Data rights requests are acknowledged within 48 hours and resolved within 21 days. No obscure processes, no unnecessary hurdles.
Naza24 does not retain your data indefinitely. Retention periods are tied to legal requirements and operational necessity. Transaction records are retained for 7 years; inactive account data is reviewed and purged on a regular cycle.
Our data handling practices are aligned with Malaysia's Personal Data Protection Act 2010 (PDPA). We apply the seven PDPA data protection principles — including security, transparency, and purpose limitation — across all processing activities.
Marketing consent can be withdrawn instantly via the unsubscribe link in any Naza24 email, via your Account settings, or by contacting our support team. Opting out of marketing does not affect transactional or security notifications.
Questions About Your Data?
Our 24/7 support team can assist with any privacy-related enquiries, data rights requests, or general questions about how Naza24 handles your personal information. You can also explore our Terms & Conditions or FAQ for more context.