Official Platform Documents

Privacy Policy Nenastoto —
Your Personal Data Protection

At nenastoto, your privacy is more than a legal obligation — it is our commitment. Find out exactly how we collect, use, and protect your information at all times.

Last Updated: 1 July 2026
256-bit
SSL Encryption
0
Sale of Data to Third Parties
24/7
Security Monitoring
PDPA
Data Protection Act Compliance

This Privacy Policy explains how nenastoto ("we", "Platform") collects, uses, discloses, and protects your personal information when you use our services. By registering or using the nenastoto platform, you agree to the terms of this policy.

1

Introduction and Scope of This Policy

Nenastoto is committed to protecting the privacy of every member who uses our platform. This Privacy Policy is drafted in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and global online gaming industry best practices.

This policy applies to all information collected through the nenastoto website, mobile app, support chat, and any other communication channels we operate. It covers all users who register, browse, or interact with our platform regardless of their geographic location.

We encourage you to read this document carefully. If you have any questions about how we handle your data, our support team is available to help at any time.


2

Types of Information We Collect

We collect information from you in several different ways, depending on how you interact with the nenastoto platform:

Information you provide directly:

  • Full name as shown on official identification documents
  • Date of birth for age verification
  • Email address and mobile phone number
  • Current residential address
  • Bank account or e-wallet information for payment purposes
  • KYC documents: copy of MyKad, passport, or other supporting documents
  • Content of communications with our support team

Information collected automatically:

Data Type Example Purpose
Technical Data IP address, device type, web browser Security & fraud prevention
Usage Data Games played, session duration, wagering Service improvement
Transaction Data Total deposits, withdrawals, payment history Payment processing & compliance
Location Data Country, time zone (general) Regional regulatory compliance
Cookie Data Language preferences, login sessions Enhanced user experience

3

How We Use Your Information

The data we collect is used solely for legitimate purposes directly related to the operation of the nenastoto platform. Below is a detailed description of each intended use:

  • Account management — to process registrations, verify identity, and maintain your account records.
  • Financial transaction processing — to handle deposits, withdrawals, and all payment activities securely.
  • KYC verification and compliance — to fulfil legal requirements related to anti-money laundering (AML) and counter-terrorism financing.
  • Platform enhancement — to analyse usage patterns in order to improve the gaming experience and develop new features.
  • Service communications — to send important notifications regarding your account, transactions, and platform updates.
  • Targeted marketing — to keep you informed about relevant promotions and offers (subject to your communication preferences).
  • Fraud prevention — to detect and investigate suspicious activity in order to protect all platform members.
  • Customer support — to resolve enquiries, complaints, and technical issues more effectively.

You can opt out of marketing communications at any time by updating your communication preferences in your account settings. Important account and security notifications cannot be disabled.


4

Data Storage and Security Measures

The security of your data is nenastoto's absolute priority. We implement multiple layers of technical and organizational protection to keep your information safe at all times:

  • 256-bit SSL Encryption on all data transmissions between your device and our servers.
  • Password storage with hashing using the bcrypt algorithm — your password is never stored in plain text.
  • ISO 27001-certified secure servers with physical and digital access restricted to authorised personnel only.
  • Two-factor authentication (2FA) available for all accounts as an additional layer of protection.
  • 24/7 Monitoring by automated security systems to detect any unauthorised access or unusual activity.
  • Penetration testing conducted periodically by independent security experts.

Your personal data is retained for as long as necessary to fulfill the purpose for which it was collected, or as required under Malaysian law. Once the retention period expires, data is securely deleted in accordance with our standard procedures.

While we take all reasonable security measures, no online system can be guaranteed 100% secure. Please ensure you use a strong password and never share your login credentials with anyone.


5

Sharing Information with Third Parties

Nenastoto does not sell, rent, or trade your personal information to any third party for commercial purposes. Your data is only shared in the following limited situations:

  • Payment service providers — to process your deposits and withdrawals securely. These providers are bound by strict confidentiality agreements.
  • Gaming software providers — the minimum data required to run the games you select on our platform.
  • Identity verification services — for KYC and AML compliance purposes as required by law.
  • Regulatory authorities and governing bodies — when required by law or a valid court order.
  • Legal and financial advisors — in situations where it is necessary to defend nenastoto's legitimate interests.

All third parties who receive your data are required to comply with data protection standards equal to or higher than our own. We do not permit them to use your data for any purpose other than those specified.


6

Use of Cookies and Tracking Technologies

Nenastoto uses cookies and similar tracking technologies to enhance the user experience on our platform. Cookies are small text files stored on your device when you visit our website.

Types of cookies we use:

  • Essential Cookies — required for core platform functions such as login sessions and security. These cookies cannot be disabled.
  • Preference Cookies — to remember your settings and preferences for a more personalised experience.
  • Analytics Cookies — to help us understand how players use the platform for continuous improvement. This data is collected in aggregate and does not identify individuals.
  • Performance Cookies — to ensure the platform runs quickly and smoothly on your device.

You can manage your cookie settings through your web browser at any time. However, disabling certain cookies may affect some features on the nenastoto platform.


7

Your Rights Regarding Personal Data

As a data subject under Malaysia's PDPA, you have the following rights regarding the personal information nenastoto holds about you:

👁️
Right of Access

You have the right to request a copy of the personal information we hold about you. Requests can be submitted through customer support and will be processed within 14 business days.

✏️
Right to Rectification

If any information we hold is inaccurate or incomplete, you may request a correction. Some information can be updated directly in your account panel.

🚫
Right to Object to Processing

You may object to the processing of your data for marketing purposes. However, processing required for legal compliance or contractual obligations cannot be refused.

🗑️
Right to Erasure

Under certain circumstances, you may request the deletion of your personal data. Such requests are subject to data retention obligations set out under Malaysian law.

📦
Data Portability Right

You have the right to receive your personal data in a machine-readable format and transfer it to another service provider if desired.

To submit any privacy rights request, please contact our Data Protection Officer by email: [email protected]. We will respond within 14 business days.


8

Children's Data Protection

The nenastoto platform is strictly for individuals aged 18 and above. We do not knowingly collect or process any personal information from children or minors under the age of 18.

If we discover that a child's data has been collected without our knowledge, we will take immediate action to delete the information and close the relevant account. Parents or guardians who suspect their child has registered on our platform are urged to contact us immediately.


9

Links to Third-Party Sites

The nenastoto platform may contain references to third-party services or content (such as game providers). This Privacy Policy applies solely to the nenastoto platform.

We are not responsible for the privacy practices of any third-party websites or services. We recommend reading the privacy policy of each external service before providing them with any personal information.


10

Amendments to This Privacy Policy

Nenastoto reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other relevant factors. The date of the latest update will always be displayed at the top of this page.

For significant amendments, we will notify you via your registered email or in-account notification before the changes take effect. Continued use of the platform after the amendments take effect will be considered acceptance of the updated terms.


11

Contact Our Data Protection Officer

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please contact us via:

We are committed to handling every enquiry with care and professionalism. For general questions, you may also refer to our FAQ us for an immediate response.

Why Your Data Secure at Nenastoto

Six layers of protection ensuring your privacy is safeguarded at all times

🔐

Bank-Level Encryption

All data transmitted between your device and the nenastoto platform is protected by 256-bit SSL encryption — the same security standard used by leading financial institutions worldwide.

🛡️

Malaysia PDPA Compliance

Nenastoto operates in full compliance with Malaysia's Personal Data Protection Act 2010 (PDPA). Your rights as a data subject are respected and upheld without compromise.

🚫

No Data Sales

We never sell, rent, or trade your personal information to advertisers or third-party data brokers. Your data belongs to you — not our business commodity.

👤

Full Control in Your Hands

You can update, request access to, or delete your personal data at any time. The nenastoto account settings panel gives you full control over the information you share.

🔍

Regular Security Audits

Nenastoto's security systems undergo regular penetration testing and independent audits. This ensures we stay ahead of the latest cyber threats and proactively protect your data.

📋

Full Transparency

We do not hide how we use your data in fine print. This Privacy Policy is written clearly and plainly so you know exactly what happens with your information.

Frequently Asked Questions About Data Privacy

Direct answers to the most frequently asked questions about nenastoto data protection

Nenastoto only discloses data to authorities when required by law or a valid court order. We do not voluntarily share user information with any government agency without a solid legal basis. Every such request will be carefully reviewed by our legal team.

Active account data is retained for the duration your account remains active, plus the period required under Malaysian law for AML and tax compliance purposes (typically 7 years). Once an account is closed and the mandatory retention period has expired, data is securely deleted using industry-standard procedures.

Yes, you may request data deletion under certain circumstances. However, nenastoto may need to retain some data to fulfil legal obligations (such as financial transaction records for 7 years). Please contact us at [email protected] with your request and we will clarify what can and cannot be deleted.

Nenastoto does not directly store your credit or debit card information. All payments are processed through licensed third-party payment providers that comply with the highest PCI-DSS security standards. Your payment data is encrypted end-to-end and cannot be accessed by any unauthorized party.

In the event of a merger, acquisition, or asset sale, user data may be transferred as part of that process. However, the new entity will be required to comply with this Privacy Policy or an equivalent. You will be notified via email and in-account notification before any significant changes take effect, and you will be given the option to delete your account if you do not agree.

You can stop receiving marketing emails by clicking the "Unsubscribe" link at the bottom of any promotional email we send, or by updating your communication preferences in your account settings. Changes typically take effect within 24–48 hours. Note: you will continue to receive important account and security-related emails that cannot be disabled.
Trusted Platform

Your Data is Safe. Let's Start Your Gaming Experience!

Now you know exactly how nenastoto protects your privacy. Register a free account today and enjoy a gaming platform that is not only exciting, but also completely safe and transparent.

100% Data Protected
PDPA Compliance
256-bit SSL
No Data Sales
Bahasa Melayu