Data Protection

Privacy Policy Nanastoti – Personal Data Protection for Malaysia Players

Your privacy is our priority. This document clearly explains how nanastoti collects, processes, stores and protects your personal information as a registered player on our platform.

Updated: 1 January 2026

Commitment Data Protection Nanastoti

Six core principles that guide how nanastoti handles your personal data

256-bit SSL Encryption

All data transmitted between your device and nanastoti's servers is protected with bank-grade encryption. Your information cannot be read by unauthorised parties during transmission.

Secure Data Storage

Personal data is stored on protected servers with strict access controls, 24-hour monitoring, and regular security audits. Only authorised personnel may access sensitive information.

No Data Sales

Nanastoti has never and will never sell players' personal data to any third party for marketing or commercial purposes. Your data is used only for the purposes you have agreed to.

Data Controls in Your Hands

You may access, correct, download, or request deletion of your personal data at any time via your account settings or by contacting the nanastoti support team.

Player Identity Privacy

Win records and gaming activity displayed publicly use privacy-protected names. Your full name and personal information will never be revealed to other users.

International Standards Compliance

Nanastoti's data handling practices comply with international data protection standards, including GDPR as a reference framework, ensuring your data is managed to the highest standard.


Quick Summary: Nanastoti collects information necessary to operate your account and services. We do not sell your data. You have full rights to access and control your personal information. Any inquiries can be directed to our support team at any time.

Introduction and Scope of This Policy

This Privacy Policy is published by nanastoti ("we", "Platform") and applies to all users who access or use the nanastoti.win website, the nanastoti mobile app, and all related services. This policy describes our practices for collecting, using, storing, and disclosing your personal information.

By registering a nanastoti account or using our services, you agree to the practices described in this Privacy Policy. This document should be read alongside the nanastoti Terms and Conditions, as both documents together form the complete agreement between you and our platform.

We are committed to handling your personal data responsibly, transparently, and in accordance with recognised data protection standards. If you disagree with any part of this policy, please stop using the platform and contact us for further assistance.

Types of Personal Data We Collect

Nanastoti collects personal information in three main ways — information you provide directly, information collected automatically during platform use, and information received from legitimate third-party sources.

Information You Provide:

  • Full name as shown on a valid identification document
  • Email address and phone number for communication and verification
  • Date of birth for age verification (must be 18 years or older)
  • Current residential address for KYC compliance
  • Payment method information including bank account or e-wallet details
  • Copy of identification document (MyKad, passport) for the KYC process

Automatically Collected Information:

  • IP address and device information used to access the platform
  • Usage pattern data, including games played and session duration
  • Deposit and withdrawal transaction logs for financial records
  • Cookie data and similar tracking technology (see section 6)
Data Category Primary Purpose Legal Basis
Identity (name, ID number) KYC verification, fraud prevention Legal requirement
Contact (email, phone) Account communications, security Contract performance
Financial (bank, e-wallet) Transaction processing Contract performance
Technical (IP, device) Security, platform analytics Legitimate interest
Usage (games, sessions) Service improvement, promotions Consent

How We Use Your Data

Nanastoti uses your personal data only for legitimate purposes directly related to the services we offer. We do not use your data for any purpose not stated in this policy without obtaining your consent first.

  • Verify your identity and age during the registration and KYC process
  • Process deposits, withdrawals and all financial transactions in your account
  • Send important notifications related to your account, security and transactions
  • Personalise your platform experience based on your preferences and usage patterns
  • Detect and prevent fraud, money laundering and platform abuse
  • Comply with legal obligations and regulatory reporting requirements
  • Send promotional information and exclusive offers (only if you have given your consent)
  • Continuously improve the functionality, performance and security of the nanastoti platform
Marketing Consent: You may withdraw consent to receive marketing communications at any time through your account settings or by contacting the nanastoti support team. Withdrawing marketing consent does not affect your account services.

Data Sharing with Third Parties

Nanastoti does not sell or rent your personal data to any third party. However, there are limited situations where we need to share certain information with other parties to enable our services to function properly.

Parties That May Receive Your Data:

  • Payment processors: Transaction information required to process deposits and withdrawals is shared with payment service providers we have selected based on security and reliability
  • Game providers: Limited session information required to keep games running properly
  • Legal authorities: Information required by law, court order or a legitimate regulatory authority
  • Technology service providers: Companies that help us operate the platform, such as cloud and security services, are subject to strict confidentiality agreements.

All third parties who receive your data are bound by data protection agreements and are required to handle your information to the same security standards as nanastoti.

Our Data Security Measures

Nanastoti implements multiple layers of technical and organisational security to protect your personal data from unauthorised access, loss, damage or disclosure.

  • 256-bit SSL/TLS encryption for all data in transit between devices and servers
  • Encryption of sensitive data in databases using modern encryption methods
  • Role-based access control – only authorised personnel may access personal data
  • Continuous system monitoring to detect and respond to security threats
  • Regular security audits by independent auditors to identify and address vulnerabilities
  • Two-factor authentication (2FA) for user accounts and critical internal systems
  • Regular data security training for all staff who handle user data

While we take all reasonable precautions, no security system can be guaranteed to be 100% risk-free. In the event of a security breach affecting your data, nanastoti will notify you within a reasonable timeframe and take appropriate remedial action.

Cookies and Tracking Technologies

Nanastoti uses cookies and similar tracking technologies to enhance the user experience, ensure platform security and understand how players interact with our services.

Types of Cookies We Use:

  • Essential Cookies: Required for core platform functions such as login sessions and security. Cannot be disabled.
  • Performance Cookies: Collect information on how you use the platform to help us improve our services.
  • Preference Cookies: Save your settings and preferences such as language and display options.
  • Analytics Cookies: Help us understand overall usage patterns for improvement purposes.

You can manage cookie settings through your web browser preferences. Disabling certain cookies may affect the functionality of some parts of the nanastoti platform.

Your Rights Over Personal Data

As a nanastoti user, you have certain rights regarding your personal data. We fully respect and facilitate the exercise of these rights.

👁️
Right of Access

You have the right to request a copy of all personal data we hold about you.

✏️
Right to Rectification

You may request correction of inaccurate or incomplete data at any time.

🗑️
Right to Erasure

In certain circumstances, you may request deletion of your personal data from our systems.

📦
Right to Data Portability

You may request your data in a machine-readable format for transfer to another platform.

🚫
Right to Object

You may object to the processing of your data for direct marketing purposes at any time.

⏸️
Right to Restriction

You may request that nanastoti restrict the processing of your data under certain permitted circumstances.

To exercise any of the above rights, contact the nanastoti support team via live chat or email. We will respond within 30 days of receiving your request.

Data Retention Period

Nanastoti retains your personal data only for as long as necessary to fulfil the purposes stated in this policy or as required by applicable law.

  • Active account data is retained for the duration of the active account plus 5 years after closure for legal compliance
  • Financial transaction records are retained for a minimum of 7 years as required by financial law
  • Security logs are retained for 2 years for incident investigation purposes when required
  • Marketing data is retained until you withdraw consent or close your account

Once the retention period expires, your personal data will be securely deleted or anonymised so that it can no longer be linked to you.

Children's Data Protection

Nanastoti does not provide services to individuals under the age of 18. Our platform does not knowingly collect or process personal data from children.

If we become aware that we have inadvertently collected personal data from minors, we will take immediate action to delete that information from our systems and terminate the associated account.

If You Identify an Underage User: If you believe a minor has registered a nanastoti account, please contact our support team immediately. We will investigate and take appropriate action without delay.

Changes to This Privacy Policy

Nanastoti reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our practices, legal requirements or technological developments. All material changes will be communicated to you via your registered email or in-platform notification at least 14 days before the changes take effect.

The version history of this Privacy Policy is kept on record and can be requested from our support team. It is your responsibility to review this page periodically and ensure you are always aware of the latest version applicable to your use of the nanastoti platform.

The "Updated" date displayed at the top of this page indicates when this Privacy Policy was last reviewed by the nanastoti team.

Contact Us About Privacy

If you have any questions, concerns, or complaints regarding how nanastoti handles your personal data, our team is ready to assist you.

  • Contact us via live chat directly within the nanastoti platform – the fastest way to reach us
  • Privacy email: [email protected] with the subject line "Data Privacy Enquiry"
  • Typical response time for privacy inquiries: within 3 business days

For formal requests to exercise your rights (access, deletion, or correction of data), please include your full name, registered account number, and request details to expedite the process. nanastoti will process valid requests within 30 days of receipt.

Complaint Resolution: Nanastoti is committed to resolving all privacy complaints fairly and transparently. If you are not satisfied with our response, you have the right to lodge a complaint with the relevant data protection regulatory authority in your jurisdiction.

Your Data Is Safe With Nanastoti

Your privacy and data security are our priority. Register with confidence and enjoy a safe gaming experience on the nanastoti platform, trusted by over 500,000 Malaysian players.

Bahasa Melayu