Personal Data Protection

Privacy Policy Nanstoto — Our Commitment to Protecting Your Information

Your privacy is not something we take lightly. This document clearly explains what data we collect, why we need it, and how we ensure it remains secure under nanstoto's care.

Updated: January 2026 256-bit SSL Encryption Full Data Access Right

Nanstoto Privacy Policy

Version: January 2026

At nanstoto, we understand that entrusting a platform with your personal information is a serious decision. This Privacy Policy is written in plain language — not complex legal jargon — so you know exactly what happens to your data from the moment you register through every gaming session.

1. Introduction and Scope of This Policy

This Privacy Policy applies to all users of the nanstoto platform in nanstoto.pro, including website visitors, registered members, and any individual who interacts with our services through any device. It should be read together with Terms and Conditions us.

Nanstoto operates as the data controller with full responsibility for the processing of personal information collected through this platform. By using nanstoto, you agree to the terms of this privacy policy. If you do not agree, please discontinue use of the platform.

Nanstoto does not sell, rent, or trade member personal data to any third party for marketing purposes. This is a core principle that does not change.

2. Types of Personal Data We Collect

Nanstoto collects personal data in two main ways: directly when you provide information, and automatically through your use of the platform. Below is a summary of the types of data collected:

Data Category Example Information Collection Methods
Identification Data Full name, IC / passport number, date of birth Registration & KYC
Contact Data Email address, phone number Account registration
Financial Data Bank name, account number, transaction history Deposits & withdrawals
Usage Data Games played, wagering history, session duration Automatically during gameplay
Technical Data IP address, device type, browser, operating system Automatically upon access
KYC Document Data MyKad / passport image, verification selfie Manual member upload

We only collect data that is strictly necessary to operate the platform — no excess data is collected beyond what is stated above.

3. How Your Data Is Used

Every piece of data we collect has a specific purpose. nanstoto does not process your personal data for any purpose other than those stated below without your additional consent:

  • Account management: Creating and maintaining your account, processing secure logins, and keeping accurate member records.
  • Identity verification (KYC): Ensuring compliance with anti-money laundering (AML) laws and verifying that members are at least 18 years of age.
  • Transaction processing: Processing deposits and withdrawals to registered payment methods, and maintaining accurate financial records.
  • Platform security: Detecting fraudulent activity, abuse, or unauthorized access to your account and the platform as a whole.
  • Customer support: Responding to inquiries, resolving complaints, and providing technical assistance to members.
  • Responsible gaming: Monitoring usage patterns to identify members who may need assistance and to enforce member-defined limits.
  • Service communications: Sending important notifications related to your account, transactions, and terms changes — not unauthorized marketing.
  • Platform enhancement: Analyzing usage data in aggregate (not individually) to improve platform performance and user experience.

4. Data Sharing and Disclosure

Nanstoto does not share your personal data with external parties except in the following limited and strictly controlled situations:

  • Trusted third-party service providers: Such as payment processors, KYC service providers, and security auditing firms — all bound by strict confidentiality agreements and permitted to process data only for specified purposes.
  • Legal requirements: When required by court order, regulatory authority directive, or a lawful law enforcement agency — nanstoto will comply while ensuring you are notified where legally permitted.
  • Protection of nanstoto's rights: In cases involving fraud investigation, money laundering, or serious terms violations — where data disclosure is necessary to protect the platform and other members.

Nanstoto does not share data with advertisers, uncontrolled third-party analytics companies, or any other entity for direct marketing purposes without your explicit consent.

All third parties that receive data from nanstoto are required to comply with data protection standards equal to or higher than those we uphold ourselves.

5. Data Security and Protection

Nanstoto invests seriously in security infrastructure to protect your data. The technical and organizational measures we implement include:

  • Encryption in transit: All communications between your browser and nanstoto's servers are encrypted using TLS 1.3 protocol with 256-bit SSL certificates.
  • Encryption of stored data: Sensitive information such as financial details and KYC documents is encrypted at rest in our database using AES-256 encryption.
  • Internal access controls: Only staff with a legitimate business need may access members' personal data, and all access is logged and audited.
  • Regular security audits: Nanstoto conducts penetration testing and security audits carried out by independent parties at least twice a year.
  • 24/7 threat monitoring: An active anomaly detection system monitors suspicious activity and automatically alerts our security team.

While we take all reasonable measures, no security system in the world can be guaranteed 100% safe. We encourage you to enable two-factor authentication (2FA) on your nanstoto account as an additional layer of protection.

In the event of a data breach that materially affects your information, nanstoto will notify you by email within 72 hours of identifying the incident, along with details of the data involved and the steps being taken.

6. Cookies and Tracking Technologies

Nanstoto uses cookies and similar tracking technologies to ensure the platform functions correctly and to deliver a better experience for you. The following are the types of cookies we use:

  • Essential Cookies: Required for core platform functions such as maintaining login sessions and security. These cookies cannot be disabled without affecting platform functionality.
  • Preference Cookies: Saving your preferences such as display language and interface settings so you do not need to reconfigure them each time.
  • Analytics Cookies (Internal): Collecting aggregate usage data to help us understand which parts of the platform are most frequently used and which need improvement.

You can manage cookie settings through your browser. However, disabling essential cookies may affect your ability to log in and use certain nanstoto features.

7. Your Rights Over Personal Data

As a nanstoto member, you have full rights over your personal data. These rights can be exercised by contacting our support team via Live Chat within the platform:

1
Right of Access

Request a copy of all personal data we hold about you in a readable format.

2
Right to Rectification

Updating or correcting inaccurate or outdated data in your account.

3
Right to Erasure

Request deletion of your personal data — subject to our legal retention requirements.

4
Right to Restriction

Request that we pause processing of your data for specific purposes while keeping your account active.

5
Right to Portability

Receive your data in a structured format that can be transferred to another platform.

6
Right to Object

Object to the processing of your data for specific purposes such as internal analytics.

Data rights requests related to your account will be processed within 30 calendar days after receiving a complete request. For complex cases, this period may be extended with notice to you.

8. Data Retention Period

Nanstoto retains your personal data for as long as necessary to fulfil the purposes of collection and to comply with applicable legal requirements:

  • Active account data: For the entire duration that your account remains active on the nanstoto platform.
  • KYC and identification data: Minimum 5 years after account closure, in accordance with applicable AML legal requirements.
  • Financial transaction records: Minimum 7 years for accounting and tax compliance purposes.
  • Support communication logs: 2 years after case resolution for reference and service improvement purposes.
  • Technical log data: 90 days for security and fraud detection purposes.

Once the applicable retention period has expired, data will be securely deleted or anonymised so it can no longer be linked to you personally.

9. Child Protection

The nanstoto platform is exclusively for users aged 18 and above. We do not intentionally collect any personal information from individuals under the age of 18. Our KYC verification process is specifically designed to identify and block underage access.

If nanstoto becomes aware that we have collected personal data from a minor without consent, we will take immediate steps to delete that data and close the account without refunding any balance associated with age fraud activity.

If you suspect that someone under the age of 18 is using the nanstoto platform, please contact our support team immediately so that action can be taken.

10. Amendments to This Privacy Policy

Nanstoto reserves the right to amend this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements, or improvements to how we operate. The "Updated" date at the top of this page always reflects the latest version.

For material amendments — meaning changes that significantly affect how we use or share your data — we will provide at least 14 days' notice before the changes take effect via registered email and a prominent notice within the platform. Continued use after the effective date constitutes acceptance of those amendments.

11. How to Contact Us Regarding Privacy

If you have any questions, concerns, or wish to exercise any of your data rights outlined in this policy, please contact the nanstoto Data Privacy Officer through the following channels:

  • Live Chat: The fastest method — available 24/7 directly within the nanstoto platform.
  • Email: [email protected] — response within 3 business days.
  • FAQ: Check page FAQ us for answers to frequently asked privacy questions.

All privacy requests are logged and handled by our dedicated team — not managed by automated bots. We take every privacy inquiry we receive seriously.

This Privacy Policy should be read together with Terms and Conditions and Responsible Gaming Policy nanstoto for a complete overview of how our platform operates.

How nanstoto Protects Your Data in Real Life

These are not paper promises — they are daily practices carried out by the nanstoto security and privacy team.

End-to-End Encryption

From the moment you enter your password to the completion of a financial transaction — all data travels through encrypted channels using the latest industry standards, ensuring no third party can intercept your information.

Secure & Fast KYC

Nanstoto's identity verification process uses OCR technology and automated document verification to protect your MyKad image within an encrypted environment. KYC documents cannot be accessed by any staff without multi-layer authorisation.

Data Minimisation Principle

We only collect data that is strictly necessary to operate the platform. No hidden marketing surveys, no location tracking, and no browsing habit data collected outside the nanstoto platform.

No Spam, No Data Selling

Nanstoto does not sell or rent your data to advertisers. You only receive communications relevant to your account — transaction notifications, platform updates, and promotions you have opted in to receive.

72-Hour Data Breach Response

In the rare event of a data breach, we are committed to notifying affected members within 72 hours — well ahead of industry standards — with full details of what occurred and the remedial steps taken.

Independent Security Audit

Nanstoto's privacy and data security practices are regularly assessed by independent third-party auditors. This ensures our policies are not just words on paper, but verifiable, real-world practices.

Play with Confidence at Nanstoto

Your data is protected, your privacy is respected, and your transactions are secure. Register today and experience a digital entertainment platform that prioritises member safety just as much as it prioritises quality gameplay.

256-bit SSL Encryption Data is not sold to third parties Full data access right
Bahasa Melayu