najib44 Privacy Policy

1. Introduction

najib44 ("we", "us", "our") is committed to protecting the privacy and personal data of all persons who access the najib44 Platform at najib44.win, register as Members, or otherwise interact with our Services. This Privacy Policy sets out in detail the categories of personal data we collect, the purposes for which we process that data, the legal basis for such processing, and the rights you hold in respect of your personal data.

This Policy should be read alongside the najib44 Terms & Conditions, which govern your use of the Platform. By registering an account or using the Services, you acknowledge that you have read this Privacy Policy and consent to the processing of your personal data as described herein. If you do not agree with this Policy, you must cease using the Platform and contact us to close your account.

najib44 takes privacy seriously — not as a regulatory checkbox, but as a genuine commitment to the trust that Malaysian players place in this platform. We collect only what is necessary, retain data only for as long as required, and never monetise your personal information through third-party data sales.

2. Data Controller

For the purposes of applicable data protection law, the data controller responsible for the personal data processed through the najib44 Platform is the operator of najib44.win, operating under international gaming authority licensing. Contact details for data protection enquiries are provided in Section 15 of this Policy.

Where najib44 engages third-party processors — such as payment service providers, game technology providers, or KYC verification services — those parties act as data processors under contractual data processing agreements that bind them to process personal data solely on najib44's documented instructions and in compliance with applicable data protection law.

3. Personal Data We Collect

3.1 Identity and Contact Data

When you register a najib44 account, we collect your full legal name, date of birth, gender, residential address, email address, and mobile phone number. This information is mandatory for account creation and identity verification.

3.2 Identity Verification (KYC) Data

To comply with our licensing obligations and anti-money laundering requirements, we may collect copies of government-issued identity documents (such as your MyKad or passport), proof of address documents (utility bills, bank statements), and in some cases facial biometric data processed through our third-party KYC verification partner.

3.3 Financial Data

We collect payment method details sufficient to process deposits and withdrawals — including bank account references, e-wallet identifiers (such as Touch n Go eWallet or Boost account references), and transaction history. We do not store full payment card numbers; card transactions are tokenised through our payment processor.

3.4 Usage and Gaming Data

We collect data about how you use the Platform, including login timestamps, pages viewed, games played, bet history, session duration, promotion claims, and in-game actions. This data is used to operate the Services, detect fraud, and comply with our licensing obligations to maintain comprehensive gaming records.

3.5 Technical Data

We automatically collect technical data including IP addresses, browser type and version, device identifiers, operating system, referring URLs, and geolocation data derived from IP. This data is used for security monitoring, fraud prevention, and Platform optimisation.

3.6 Communications Data

If you contact najib44 support via live chat, email, or any other channel, we retain records of those communications for quality assurance, dispute resolution, and regulatory compliance purposes.

4. How We Collect Your Data

najib44 collects personal data through the following mechanisms:

• Direct provision: Information you provide during registration, KYC, deposit or withdrawal requests, support interactions, and promotional claim forms.
• Automated collection: Technical and usage data collected through cookies, server logs, and Platform analytics tools as you interact with najib44.win.
• Third-party sources: Identity verification data from licensed KYC service providers; fraud indicators from fraud detection partners; payment status data from payment processors.
• Publicly available sources: Where lawful and necessary for compliance or fraud prevention purposes, publicly available data may be referenced.

5. Purpose and Legal Basis of Processing

najib44 processes your personal data for the following purposes, each supported by a lawful legal basis:

• Account creation and management — necessary for the performance of our contract with you as a Member.
• Identity verification (KYC) and age verification — legal obligation under our gaming licence; necessary to prevent underage gambling (21+ requirement).
• Processing deposits and withdrawals — necessary for the performance of our contract with you.
• Anti-money laundering (AML) monitoring and suspicious activity reporting — legal obligation under applicable AML legislation.
• Fraud detection and prevention — legitimate interest of najib44 and protection of other members.
• Provision of gaming Services and personalisation — performance of contract; legitimate interest in improving member experience.
• Marketing communications — consent (you may withdraw consent at any time via account settings or by contacting support).
• Responsible gaming monitoring and intervention — legal obligation under our licensing responsible gaming standards.
• Regulatory record-keeping — legal obligation; records of gaming activity are retained as required by our licensing authority.

6. Data Sharing and Disclosure

najib44 does not sell, rent, or trade your personal data. We disclose personal data only in the following circumstances:

• Service providers: We share data with vetted third-party processors who provide services on our behalf — payment processors (Maybank, CIMB, Public Bank FPX infrastructure; Touch n Go eWallet; Boost; GrabPay), game technology providers, KYC verification services, IT infrastructure providers, and customer support platform providers. All such processors are bound by data processing agreements requiring PDPA-consistent handling.
• Regulatory and law enforcement authorities: najib44 will disclose personal data to licensing authorities, financial intelligence units, or law enforcement agencies where required to do so by law, court order, or regulatory direction. Disclosure in these circumstances is a legal obligation, not a discretionary choice.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of najib44's business assets, member personal data may be transferred to the acquiring entity subject to at least equivalent data protection obligations as those described in this Policy.
• Fraud prevention networks: Anonymised or pseudonymised fraud indicators may be shared with licensed fraud prevention networks where permitted under applicable law.

We will not disclose your personal data to any third party for that party's independent marketing purposes.

7. International Data Transfers

najib44 operates servers and engages service providers across multiple jurisdictions. As a result, your personal data may be transferred to and processed in countries outside Malaysia. When personal data is transferred outside Malaysia, najib44 ensures that appropriate safeguards are in place — including standard contractual clauses, data processing agreements, or transfers to jurisdictions recognised as providing adequate data protection — to ensure that your data receives protection consistent with the standards applied within Malaysia under the PDPA.

Where our third-party game providers, such as those supplying slots or live casino technology, process transaction or session data on servers outside Malaysia, such processing is governed by our provider agreements which include appropriate data protection obligations. Providers are selected in part based on their data security certifications and compliance track records.

8. Data Retention

najib44 retains personal data for as long as necessary to fulfil the purposes for which it was collected, to maintain our Member relationship, and to comply with legal obligations. The following retention periods apply as a general guide:

• Account and KYC data: Retained for the duration of the member relationship and for a minimum of 5 years following account closure, as required by our licensing authority and AML obligations.
• Gaming and betting records: Retained for a minimum of 5 years following the date of the transaction, as required by our licensing authority.
• Financial transaction records: Retained for a minimum of 7 years in accordance with financial record-keeping requirements.
• Support communications: Retained for 3 years from the date of the communication, or longer where the communication relates to a dispute or regulatory matter.
• Marketing consent records: Retained for the duration of the member relationship and for 2 years following withdrawal of consent.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with najib44's data disposal procedure.

9. Cookies and Tracking Technologies

najib44.win uses cookies and similar tracking technologies to operate the Platform, personalise your experience, maintain your login session, and analyse Platform performance. Cookies are small text files stored on your device by your browser.

9.1 Types of Cookies Used

• Strictly necessary cookies: Required for the Platform to function — including session authentication, security tokens, and load balancing. These cannot be disabled without preventing use of the Platform.
• Functional cookies: Remember your preferences — such as preferred language (English, Bahasa Malaysia, or Chinese) and display settings — across sessions.
• Analytics cookies: Collect aggregated, anonymised data about how visitors interact with the Platform, used to improve Platform performance and user experience.
• Security cookies: Support fraud detection and security monitoring functions by tracking anomalous access patterns.

You may manage your cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from accessing the Platform, though some functional features may be affected. najib44 does not use third-party advertising cookies or cross-site tracking cookies.

10. Security Measures

najib44 implements a comprehensive range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These include:

• 256-bit TLS encryption for all data transmitted between your device and najib44 servers;
• Encryption of sensitive personal data (including KYC documents and payment identifiers) at rest;
• Role-based access controls limiting staff access to personal data to those with a legitimate operational need;
• Regular penetration testing and vulnerability assessments by independent security firms;
• 24/7 security monitoring and automated intrusion detection on Platform infrastructure;
• Staff data protection training and binding confidentiality obligations for all personnel with access to member data.

While najib44 employs industry-standard security measures, no system is entirely impervious to all threats. In the event of a personal data breach that poses a risk to your rights and freedoms, najib44 will notify affected members and relevant regulatory authorities within the timeframes required by applicable law.

11. Your Data Rights

Subject to applicable law and any overriding legal obligations (such as our AML and licensing record-keeping requirements), you have the following rights in respect of your personal data held by najib44:

• Right of access: You may request a copy of the personal data najib44 holds about you.
• Right to correction: You may request that inaccurate or incomplete personal data be corrected. You may also update certain information directly within your account settings.
• Right to erasure: In certain circumstances, you may request that your personal data be deleted. Note that data subject to mandatory retention periods under our licensing or AML obligations cannot be erased until the applicable retention period expires.
• Right to restrict processing: You may request that processing of your personal data be restricted in certain circumstances — for example, while the accuracy of data you have contested is being verified.
• Right to data portability: Where processing is based on your consent or the performance of a contract and is carried out by automated means, you may request a machine-readable copy of your personal data.
• Right to withdraw consent: Where processing is based on your consent — such as marketing communications — you may withdraw consent at any time without affecting the lawfulness of processing conducted prior to withdrawal.
• Right to object: You may object to processing based on legitimate interests in certain circumstances.

To exercise any of these rights, submit a written request to [email protected]. We will respond within 14 business days. Requests will be processed at no charge unless they are manifestly unfounded, excessive, or repetitive.

12. Minors

najib44 does not knowingly collect personal data from persons under the age of 21. The Platform is strictly for adults. If you are under 21 years of age, you must not register an account or use the Services. If najib44 becomes aware that personal data has been collected from a person under 21, that account will be immediately suspended, all data reviewed, and the account closed with any balance forfeited in accordance with the Terms and Conditions.

If you believe that a minor has registered an account with najib44, please contact [email protected] immediately so that we may investigate and take appropriate action.

13. Responsible Gaming and Personal Data

najib44 uses member gaming data — including betting patterns, session frequency, deposit velocity, and loss history — for responsible gaming monitoring purposes. This processing is a condition of our gaming licence and is in the legitimate interests of member welfare. Where patterns of play indicate potential problem gambling behaviour, najib44 may use this data to trigger proactive welfare interventions, including account alerts, cooling-off prompts, or direct support outreach.

If you elect to use najib44's self-exclusion facility, your exclusion status is recorded in our system and shared with our access control infrastructure to prevent Platform access during the exclusion period. Self-exclusion records are retained beyond the exclusion period to prevent inadvertent reinstatement. Visit the Responsible Gaming page for full details. 21+ only.

14. Changes to This Privacy Policy

najib44 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or regulatory requirements. Material changes will be communicated to Members via the registered email address or by prominent notice on the Platform at least 7 days before the revised Policy takes effect, unless immediate amendment is required by law.

The revised Policy will display an updated "Last updated" date at the top of the page. Continued use of the Platform following the effective date of a revised Privacy Policy constitutes your acknowledgement of the changes. You are encouraged to review this Policy periodically.

15. Contact and Complaints

For any privacy-related enquiries, data rights requests, or concerns regarding this Privacy Policy, please contact the najib44 Data Protection team:

• Email: [email protected]
• Subject line: Privacy / Data Protection Request
• Response time: 14 business days for formal written requests
• Support hours: 24 hours, 7 days a week for general enquiries via live chat
• Languages: English, Bahasa Malaysia, Chinese

If you are not satisfied with our response to a privacy concern, you have the right to lodge a complaint with the relevant data protection authority in your jurisdiction. In Malaysia, the relevant authority is the Personal Data Protection Department (Jabatan Perlindungan Data Peribadi — JPDP) under the Ministry of Communications and Digital.