Data Protection & User Privacy

Privacy Policy nanastoro – Our Commitment to Protecting Malaysian Users' Data

Your privacy is our priority. This document explains in detail how nanastoro collects, uses, stores, and protects your personal information at all times.

Updated: January 2026 SSL 256-bit PDPA Compliant
Bank-Grade Encryption

All data transmitted between your device and nanastoro servers is protected with 256-bit SSL encryption — the same standard used by leading banking institutions.

Secure Data Storage

Personal data is stored in a server environment protected by strict access controls. Only authorised personnel have access to user information.

No Data Sales

Nanastoro has never and will never sell users' personal information to any third party for marketing or any other commercial purpose.

User Data Controls

You have the right to access, correct, or request deletion of your personal data. nanastoro fully respects user rights and makes this process straightforward.

Data Use Transparency

We clearly inform you of the purpose behind each data collection. There is no hidden data use or use you have not consented to.

Retention Period Limits

Data is retained only for as long as necessary for its original purpose or as required by law. Data that is no longer needed is disposed of securely.

Important Note: This Privacy Policy explains how nanastoro handles your personal information. By using our platform, you agree to the practices described in this document.
1Introduction

Nanastoro ("we", "Platform") is committed to protecting the privacy of all users of our online entertainment platform. This Privacy Policy explains the types of information we collect, how it is used, and the steps we take to keep your data safe at all times.

This document is drawn up in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and applicable international data protection standards. As a platform serving Malaysian users, we take our responsibilities under this local legislation seriously.

This Privacy Policy applies to all information collected through the nanastoro website, mobile app, email communications, customer support, and any other interactions you have with our platform.

If you have any questions about how we handle your personal data, the nanastoro privacy team can be reached at any time through our support channels.
2Personal Data We Collect

Nanastoro collects your personal data through several means — directly when you register and use the platform, automatically as you browse our website, and occasionally through trusted third-party sources for verification purposes.

Below is a summary of the types of data we collect:

Data Categories Example Information Collection Methods
Identity Data Full name, date of birth, IC/passport number Registration form, KYC
Contact Data Email address, phone number, mailing address Registration, user profile
Financial Data Bank account number, account holder name, transaction records Deposit/Withdrawal Process
Technical Data IP address, device type, web browser, operating system Automatically during use
Gaming Data Betting history, favorite games, session duration In-platform activity
Communication Data Support chat records, emails, feedback Interaction with Support
3How We Use Your Data

Nanastoro uses collected personal data only for lawful, specified purposes. We do not use your data for any unrelated purpose without first obtaining your consent.

The primary purposes for which your data is used are as follows:

  • Account management: Registering and maintaining your account, verifying identity through KYC, and enabling secure access to the platform.
  • Transaction processing: Processing deposits, withdrawals, and all financial transactions on the platform securely and accurately.
  • Platform security: Detecting and preventing fraud, unauthorized access, bonus abuse, and any activity that violates the Terms and Conditions.
  • Service improvements: Understanding how users interact with the platform to improve the overall user experience.
  • Service communications: Sending important notifications related to your account, transactions, security updates, and policy changes.
  • Legal compliance: Fulfilling applicable legal and regulatory obligations, including anti-money laundering (AML) requirements.
  • Customer support: Resolving inquiries, complaints, and technical issues submitted by users.

For marketing communications such as promotions and new offers, we will only send you information if you have given your consent to do so. You may withdraw this consent at any time through your account settings.

4Data Sharing with Third Parties

Nanastoro does not sell, rent, or disclose users' personal data to third parties for their own marketing purposes. However, there are certain situations where we need to share your information with other parties to enable the platform to operate properly.

Third parties that may receive your data include:

  • Payment providers: Financial institutions and e-wallet providers that handle your deposit and withdrawal transactions. They receive only the information necessary to process those transactions.
  • Licensed game providers: Game development companies whose platforms are integrated with nanastoro. Information shared is limited to what is necessary for the gaming experience.
  • Technical service providers: Companies providing cloud infrastructure, cybersecurity, and platform analytics. All such parties are bound by strict confidentiality agreements.
  • Legal authorities: Law enforcement agencies or regulatory bodies when we are required to do so by law or court order.
All third parties we work with are bound by data protection agreements requiring them to handle your information to security standards equivalent to those of nanastoro.
5Data Security Measures

The security of your personal data is something we take seriously. nanastoro implements multiple layers of technical and procedural protection to keep your data safe at all times.

  • Transmission encryption: All data transmitted between your device and our servers is protected with 256-bit SSL/TLS encryption.
  • Storage encryption: Sensitive data such as financial information and identity documents is stored in encrypted format within our database.
  • Access controls: Access to user data within nanastoro's internal systems is role-based and limited to operational necessity. All access is logged and monitored.
  • Two-factor authentication: Our internal systems require multi-factor authentication for all access to user data.
  • Continuous monitoring: An active security monitoring system operates 24/7 to detect any unauthorized access attempts.
  • Periodic audits: We conduct regular security assessments and penetration testing to identify and address any vulnerabilities.

While we take all reasonable steps to protect your data, no security system is entirely perfect. We encourage users to play their part in keeping their accounts secure by using strong passwords and not sharing login credentials.

6Cookies and Tracking Technologies

Nanastoro uses cookies and similar tracking technologies to enhance the user experience and gather analytics on how our platform is used.

Types of cookies we use:

  • Essential cookies: Required for core platform functions such as login sessions and security. These cookies cannot be disabled.
  • Performance cookies: Helps us understand how users interact with the platform — most visited pages, time spent, and navigation paths.
  • Functional cookies: Storing user preferences such as language, display settings, and game preferences for a more personalized experience.
  • Analytics cookies: Helps us analyze usage patterns in aggregate for ongoing platform improvements.

You can manage your cookie settings through your web browser. Disabling certain cookies may affect the functionality of some parts of the nanastoro platform.

7Cross-Border Data Transfers

As an online platform, data you provide may be processed or stored on servers located outside Malaysia. This is standard practice in the technology industry, and we ensure that any such data transfers are carried out with adequate protection measures in place.

Nanastoro only transfers data to countries or regions that offer a level of data protection equivalent to or greater than Malaysia, or where appropriate data protection agreements have been established with the receiving party.

In all cases of cross-border data transfers, nanastoro ensures that:

  • Transfers are only carried out when strictly necessary for service purposes.
  • Data recipients are bound by equivalent data protection obligations.
  • Appropriate security measures are in place to protect data during transfer.
8Your Rights as a User

Under Malaysia's PDPA and nanastoro's policies, you have certain rights regarding your personal data. We fully respect and facilitate the exercise of these rights.

Right to Access

You have the right to request a copy of the personal data we hold about you and to receive information on how it is being used.

Right to Rectification

If your data is inaccurate or incomplete, you may request that we correct or update it promptly.

Right to Erasure

Under certain circumstances, you may request that your personal data be deleted from our systems, subject to any applicable legal obligations.

Right to Restrict Processing

You may request that we restrict the processing of your data in certain circumstances, such as when you are disputing the accuracy of that data.

Right to Data Portability

You have the right to receive your personal data in a machine-readable format for transfer to another service provider.

Right to Object

You may object to the processing of your data for direct marketing purposes at any time, and we will stop such processing immediately.

To exercise any of the above rights, contact the nanastoro privacy team via live chat or support email. We will process your request within 30 business days.
9Child Privacy

Nanastoro is a platform intended exclusively for adults aged 18 and above. We do not knowingly collect or process personal data from individuals under the age of 18.

Our registration process includes age verification steps designed to prevent access by minors. The KYC verification we conduct ensures that all active accounts belong to verified adult users.

If we discover that personal data from a minor has been collected unintentionally, we will take immediate action to delete that data and close the associated account. Parents or guardians with concerns about this matter may contact us directly through our support channels.

10Data Retention Period

Nanastoro retains your personal data only for as long as necessary for the purposes stated in this Privacy Policy, or as required by applicable law.

  • Active account data: Retained for as long as your account is active and for a reasonable period after account closure for customer service purposes.
  • Financial transaction records: Retained for a minimum of 7 years from the transaction date in accordance with Malaysian accounting and tax law requirements.
  • KYC records and identity verification: Retained for a minimum of 5 years after the end of the service relationship in accordance with AML requirements.
  • Support communication logs: Retained for 2 years for reference and dispute resolution purposes.
  • Technical data and logs: Retained for 90 days for security and technical troubleshooting purposes.

Once the retention period expires, data will be securely disposed of using methods that ensure it cannot be recovered by any party.

11Amendments to the Privacy Policy

Nanastoro reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or the technologies we use.

When we make significant changes, we will notify you via:

  • In-platform notifications on nanastoro upon your next login.
  • A notification email sent to the email address registered to your account.
  • Updates the "Last Updated" date shown at the top of this document.

We encourage you to review this Privacy Policy periodically. Continued use of the nanastoro platform following any amendments constitutes acceptance of the updated terms.

12Contact Us About Privacy

If you have any questions, concerns, or wish to exercise your privacy rights, please contact the nanastoro team through the following channels:

  • Live Chat: The fastest way — click the chat icon on the platform, available 24/7.
  • Email: [email protected] — we will respond within 1–2 business days.
  • Help Center: nanastoro FAQ Page for privacy-related frequently asked questions.

For formal data rights requests, please clearly state the type of request and include the required identity verification information so we can process your request securely and accurately.

Your Privacy Protected, Your Entertainment Begins

Sign up with nanastoro with confidence — a platform that takes protecting your data as seriously as we take your entertainment experience.

Protected Data PDPA Compliant No Data Sales SSL 256-bit
Bahasa Melayu