PDPA 2010 Compliance

Privacy Policy naxwin —
Your Data Is Safe with Us

At naxwin, we understand that your privacy is more than a legal requirement — it is the trust you place in us. This document clearly explains how we collect, use, and protect your personal information.

Effective: 1 January 2026 Updated: June 2026 PDPA 2010 Compliance

Naxwin's Six Pillars of Data Protection

Here is how we ensure your personal information is always protected and used responsibly.

256-bit SSL Encryption

All data transmitted between your device and naxwin servers is protected with industry-standard 256-bit SSL encryption, meaning your information cannot be stolen or intercepted in transit.

Full PDPA 2010 Compliance

Naxwin operates in full compliance with Malaysia's Personal Data Protection Act 2010 (PDPA). We adhere to the seven data protection principles set out in the Act without exception.

Data Control in Your Hands

You have the right to access, correct, or request the deletion of your personal data at any time. naxwin provides a straightforward process for you to exercise these rights without hassle.

No Sale of Data to Third Parties

Naxwin has never and will never sell players' personal data to any third party for marketing or commercial purposes. Your data is used solely for the operation of our platform.

Secure Data Storage

All data is stored on servers protected with full encryption, strict access controls, and continuous monitoring. Only authorised personnel may access player personal data.

Data Minimisation Principle

We only collect data that is strictly necessary to deliver our services. naxwin does not request irrelevant information and does not retain data beyond the period required.

Important Note: By registering and using the naxwin platform, you agree to the collection and use of your personal data as described in this Privacy Policy. Please read the entire document to understand your rights.

1. Introduction & Scope of This Policy

Naxwin ("we", "Platform", "naxwin") is committed to protecting the privacy of all users on our online entertainment platform. This Privacy Policy explains in detail how we collect, process, store, and protect your personal data.

This policy applies to all users of the naxwin platform — including registered players, website visitors, and naxwin mobile app users. It covers all digital channels we operate, including the official website, Android app, iOS app, and any other platforms managed by naxwin.

We comply with Malaysia's Personal Data Protection Act 2010 (PDPA) and all applicable data protection laws. In carrying out data processing, we adhere to the seven data protection principles: General Principles, Notice & Choice Principles, Disclosure Principles, Security Principles, Integrity Principles, Access Principles, and Data Transfer Principles.

2. Personal Data We Collect

Naxwin collects personal data in the following categories, depending on how you interact with our platform:

Registration & Identity Data:

  • Full name as per identity card or passport.
  • Date of birth and gender.
  • Active email address and mobile phone number.
  • Current residential address.
  • Identity card number (MyKad) or passport number for international players.

Financial & Transaction Data:

  • Bank account details (bank name, account number) for withdrawal processing.
  • Registered e-wallet details (TNG, GrabPay, Boost).
  • Records of all deposits, withdrawals, and wagering.

Usage & Technical Data:

  • IP address and device information (device type, operating system, model).
  • Web browser data and app version in use.
  • Activity logs within the platform, including games played and session duration.
  • Cookie data and similar tracking technologies.
Data Type Collected Shared with Third Parties Deleted upon Request
Identity Data (Name, IC) Yes No Terms Apply
Financial Data (Bank, E-Wallet) Yes No Terms Apply
Session & Game Log Data Yes No Yes
Cookie & Analytics Data Yes Analytics Only Yes
IP Address & Device Yes No Yes

3. How We Use Your Data

The personal data we collect is used solely for legitimate purposes directly related to the operation of the naxwin platform. The following are the specific purposes for which your data is used:

  • Account Management: To create, manage, and verify your player account, including the KYC process required by regulatory authorities.
  • Transaction Processing: To accurately and securely process deposits, withdrawals, and all financial transactions on the platform.
  • Security & Fraud Prevention: To detect, investigate, and prevent fraudulent activity, money laundering, or security breaches.
  • Legal Compliance: To comply with applicable legal and regulatory obligations, including reporting requirements to the relevant authorities.
  • Service Improvement: To analyse usage patterns in order to improve platform quality, user experience, and customer service.
  • Service Communications: To send you important notifications related to your account, transactions, and platform updates.
  • Customer Support: To enable our support team to assist you with any enquiries or issues related to your account.

Naxwin does not use your personal data for third-party marketing, excessive profiling, or any purpose unrelated to the operation of our platform.

4. Data Sharing with Third Parties

Naxwin does not sell, rent, or trade your personal data to any third party for marketing or commercial purposes. However, in certain circumstances, we may need to share data with the following parties:

  • Game Providers: Third-party game providers such as Pragmatic Play and Evolution Gaming receive the session data required to run games. They are bound by strict confidentiality agreements.
  • Payment Processors: Payment gateway providers such as FPX and e-wallet processors receive the transaction data necessary to process your deposits and withdrawals.
  • Regulatory Authority: When required by Malaysian law or a court order, we will disclose the necessary data to the relevant authorities.
  • Analytics Services: We use audited analytics tools to understand platform usage patterns. Any shared data is aggregated and does not identify individuals.

All third parties working with naxwin are required to comply with privacy standards equal to or stricter than our own, and are not permitted to use your data for any purpose beyond what is specified in our contractual agreements.

5. Data Security & Encryption

Naxwin takes security infrastructure seriously to protect your personal data. The technical and organisational security measures we implement include:

  • 256-bit SSL/TLS Encryption for all data communications between your device and our servers.
  • Data encryption at rest (at-rest encryption) for all databases containing personal information.
  • Role-based access control (RBAC) ensuring only authorised personnel can access sensitive data.
  • 24/7 security monitoring by our experienced cybersecurity team.
  • Penetration testing conducted periodically by independent third parties.
  • Two-factor authentication (2FA) available and encouraged for all player accounts.

While we take all reasonable steps to protect your data, no system is completely immune to cyber threats. In the event of a data breach affecting your rights, we will notify you and the relevant authorities within the timeframe prescribed by law.

6. Cookies & Tracking Technologies

The naxwin platform uses cookies and similar tracking technologies to enhance user experience and understand how our platform is used. The following are the types of cookies we use:

  • Essential Cookies: Required for core platform functions such as login authentication and session security. These cookies cannot be disabled without affecting platform functionality.
  • Preference Cookies: Saves your preferences such as language and display theme for a more personalised experience.
  • Analytics Cookies: Helps us understand platform usage patterns in aggregate without identifying individuals. This data is used for continuous improvement.
  • Security Cookies: Helps detect and prevent fraudulent activity and ensures the security of your session.

You can manage your cookie settings through your web browser. However, disabling essential cookies may affect the functionality of the naxwin platform. Continued use of our platform after a cookie notice means you consent to the use of cookies as described above.

7. Your Rights as a User

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data processed by naxwin:

Right of Access

You have the right to request a copy of the personal data we hold about you. Requests can be made through our customer support and will be processed within 21 business days in accordance with the PDPA.

Right to Rectification

If any of your personal data is inaccurate, incomplete, or outdated, you have the right to request a correction. We will update our records within a reasonable timeframe following verification.

Right to Erasure

You may request the deletion of your personal data subject to our legal obligations. Financial transaction data may need to be retained for a specified period for regulatory compliance purposes.

Right to Object

You may object to the processing of your data for specific purposes such as marketing communications. Requests can be made via your account settings or by contacting our support team.

Right to Data Portability

You have the right to request your data in a machine-readable format. We will provide the relevant data in CSV or JSON format upon a valid request.

To exercise any of the above rights, contact the naxwin support team via live chat or email at [email protected]. Please include your account number and the right you wish to exercise. We will respond within 5 business days.

8. Cross-Border Data Transfers

In the course of operating the naxwin platform, some data may be processed or stored on servers located outside Malaysia — specifically for international game provider services and cloud infrastructure services.

When cross-border data transfers occur, naxwin ensures that:

  • The recipient country provides a level of data protection equivalent to or higher than that of Malaysia.
  • Appropriate contractual agreements have been established with recipients to protect your rights.
  • The transfer complies with the requirements of Section 129 of PDPA 2010 regarding the transfer of personal data overseas.

You consent to such data transfers by using the naxwin platform, subject to the protections stated above.

9. Data Retention Period

Naxwin retains your personal data only for as long as necessary to fulfil the purposes stated in this Privacy Policy or as required by Malaysian law. The following is a guide to our data retention periods:

  • Active Account Data: For as long as your account is active and for 7 years after account closure, for AML (Anti-Money Laundering) compliance purposes.
  • Financial Transaction Records: Minimum 7 years from the transaction date, in accordance with Malaysian legal requirements on financial records.
  • Game & Session Logs: 2 years from the date of record, or longer if required for active investigations.
  • Cookie & Analytics Data: Between 30 days and 2 years depending on the cookie type.
  • Customer Support Communications: 3 years from the date of last interaction.

Once the retention period expires, your personal data will be securely deleted or anonymised in a manner that prevents re-identification.

10. Children's Privacy

The naxwin platform is intended solely for adults aged 18 and above. We do not knowingly collect, process, or store personal data from individuals under the age of 18.

If you believe we have inadvertently collected data from a minor, please contact us immediately. We will take prompt action to delete the relevant data and close the associated account.

Naxwin uses an age verification system through a rigorous KYC process to ensure only eligible users can register and access our platform.

11. Privacy Policy Amendments

Naxwin reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, legal requirements, or platform service developments.

When significant changes are made, we will notify you via:

  • Email to the address registered in your account at least 14 days before the changes take effect.
  • A clear notice within the platform when you log in.
  • Updating the "Last Updated" date at the top of this page.

Continued use of the naxwin platform after any changes take effect means you accept the updated Privacy Policy terms. We encourage you to review this page periodically to stay informed about how we protect your privacy.

12. Contact Our Data Protection Officer

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, you may reach us through the following channels:

We aim to respond to all privacy-related enquiries within 5 business days. For formal data protection complaints, you may also refer to the Department of Personal Data Protection Malaysia (JPDP) if you believe your rights under PDPA 2010 have been violated.

Your privacy is our priority. naxwin is committed to addressing every enquiry transparently and promptly. Your trust is our most valuable asset.

🔒

Your Data Is Safe — Play with Full Confidence

Naxwin protects your privacy to the highest standard. Register today and enjoy a safe, fair, and responsible gaming experience with us.

256-bit SSL PDPA 2010 No Data Sales 24/7 Support

18+ adult entertainment platform. Play responsibly.

Bahasa Melayu