Nanastito Privacy Policy – Your Personal Data Protection

Nanastito ("we", "our platform") is committed to protecting and respecting the privacy of every user who accesses nanastito.com and our mobile app. This Privacy Policy is crafted to ensure you fully understand how your personal data is managed transparently and responsibly.

This policy applies to all personal information we collect through the Nanastito website, mobile app, customer support systems, official communication channels, and any other services we offer. By registering an account or continuing to use our platform, you confirm that you have read and understood this Privacy Policy.

Nanastito operates in accordance with strict data protection principles and complies with applicable privacy legislation in Malaysia, including Personal Data Protection Act 2010 (PDPA). We believe transparency is the foundation of trust — and your trust is our top priority.

Nanastito only collects data that is strictly necessary to provide you with a safe, seamless, and quality service. We do not collect excessive data unrelated to the purpose of using the platform.

We may also receive data about you from legitimate third-party sources such as identity verification service providers, payment providers, and technology partners who help us deliver high-quality services to you.

All data we collect from you is used only for clearly defined purposes. Nanastito does not use your data for any other purpose without first obtaining your consent or without a valid legal basis.

• Account Management & Verification — processes registration, verifies identity through KYC, and ensures your account security at all times.
• Transaction Processing — handles deposits, withdrawals, and fund transfers securely through trusted payment channels.
• Gaming Services Provision — enables access to slots, the live casino lobby, bingo, and sports betting with a smooth, personalised experience.
• Fraud Prevention & Security — monitors suspicious activity, protects accounts from unauthorised access, and ensures platform integrity.
• Communications & Support — sends important account-related notifications, promotions you have opted into, and provides effective customer support.
• Legal Compliance — fulfils the reporting and compliance obligations required by law and the relevant authorities.
• Continuous Improvement — analyses aggregated usage patterns to improve the platform's performance, design, and overall experience.

Nanastito do not sell, rent, or trade your personal data to any third party for their own commercial purposes. This is a principle we uphold without exception.

However, in the course of operating the platform, we may share your information with selected third parties in the following situations:

• Payment Service Providers — FPX, TNG eWallet, Boost, GrabPay, Maybank2u, CIMB Clicks, and credit card providers require minimum transaction details to process your payment securely.
• KYC Verification Providers — certified third-party identity verification partners assist us in validating the authenticity of your identification documents.
• Game Providers — gaming software companies that provide slots, live casino games, and bingo may receive the minimum technical data required for smooth game delivery.
• Cloud & Hosting Services — technical infrastructure providers that store and process data on our behalf under strict confidentiality agreements.
• Authorities & Regulatory Bodies — when required by law or court order, we may be obligated to disclose certain information to the relevant authorities.

All third parties that receive your data are required to adhere to data protection standards equal to or exceeding our own. They are only permitted to use that data for the specified purpose and may not process it for any other reason.

Nanastito invests seriously in security infrastructure to ensure your personal data is always protected against unauthorised access, disclosure, alteration, or destruction.

• 256-bit SSL/TLS Encryption — all data transmitted between your device and Nanastito's servers is protected with industry-grade encryption protocols.
• Two-Factor Authentication (2FA) — an additional security layer requiring a second identity verification at login to protect your account.
• 24/7 Monitoring — automated monitoring systems operate around the clock to detect and block suspicious activity before it affects your account.
• Internal Access Controls — only authorised Nanastito staff with a legitimate business need may access your personal data.
• Regular Security Audits — we undergo regular independent penetration testing and security audits to identify and address any system vulnerabilities.
• Secure Data Backup — data is regularly backed up to a separate, secured location to ensure service continuity.

Nanastito uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

• Essential Cookies — required for core platform functions such as login session verification and security. These cookies cannot be disabled.
• Functional Cookies — saves your preferences such as language, display theme, and personal settings so you do not need to reconfigure them each time.
• Performance Cookies — collects information about how you use our platform to help us understand areas that need improvement.
• Marketing Cookies — used to deliver more relevant promotions to you based on your interests and usage habits on the platform.

You can manage or block cookies through your browser settings. However, disabling certain cookies may affect the functionality and your experience on Nanastito. For more information on managing cookies, refer to your browser's help documentation.

As a Nanastito user, you have certain rights regarding your personal data under Malaysia's Personal Data Protection Act 2010 (PDPA). We fully respect and facilitate the exercise of these rights.

Nanastito is an online entertainment platform that strictly for users aged 18 and above. We do not knowingly collect or process any personal data from individuals under the age of 18.

During registration, all applicants are required to confirm they are at least 18 years of age. Additional age verification through the KYC process is also conducted to ensure compliance with this requirement.

Nanastito retains your personal data only for as long as necessary to fulfil the original purpose of collection, or as required by applicable law, whichever is longer.

• Active account data — retained for the entire duration your account remains active and operational on our platform.
• Financial transaction data — retained for a minimum of 7 years in accordance with financial reporting and anti-money laundering (AML) requirements.
• KYC and identity verification data — retained for 5 years after account closure in accordance with industry compliance standards.
• Support communication logs — retained for 2 years for reference and service improvement purposes.
• Technical data and access logs — retained for 90 days for security and incident investigation purposes.

Once the retention period expires, your data will be securely deleted or anonymised so it can no longer be personally linked to you.

Nanastito reserves the right to amend this Privacy Policy at any time to reflect changes in our practices, legal requirements, or technological developments. Any amendments will take effect as soon as the updated version is published on this website.

We will notify you of significant changes via an in-account notification or through your registered email. The "Updated" date at the top of this page will always reflect the latest version of our Privacy Policy.

Your continued use of the Nanastito platform after those amendments take effect will be considered your acceptance of the updated terms. We encourage you to review this page periodically to stay informed about how we handle your data.