Privacy Policy dis88 — Protection Personal Data You

Dis88 ("we", "the platform", or "the company") cares about the privacy of every individual who uses our services. This Privacy Policy explains in detail how we collect, use, store, protect, and in certain circumstances, disclose your personal information when you interact with the dis88 platform.

This Policy applies to all users of the dis88 platform — including website visitors, registered members, and any individual who contacts our support team. It covers all interaction channels including the dis88.vu website, the dis88 mobile app, and any official communication channels we operate.

This Privacy Policy is drafted in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA), the primary legislation governing personal data processing in Malaysia. We also take into account international data protection best practices when designing our data handling systems and procedures.

Dis88 only collects data that is truly necessary to provide a safe, fair, and compliant service. The data we collect falls into three main categories:

Data You Provide Directly

• Identity information: Full name, date of birth, identity card number (MyKad), nationality.
• Contact information: Email address, phone number, residential address.
• Financial information: Bank account number, bank name, and digital wallet details for deposit and withdrawal purposes.
• Verification documents (KYC): Copies of identity cards, bank statements, or other supporting documents required for identity verification.
• Communications: Records of conversations with our customer support team via live chat, email, or other channels.

Automatically Collected Data

• Technical data: IP address, web browser type and version, device operating system, screen resolution.
• Usage data: Pages visited, session duration, in-platform actions, games played, and betting patterns.
• Transaction data: A complete record of all deposits, withdrawals, wagering, and financial activity in your account.
• Location data: Approximate location based on IP address for geo-restriction and security purposes.

Data From Third-Party Sources

• Verification information from KYC service providers we work with to confirm your identity.
• Information from payment providers such as FPX, DuitNow, TNG eWallet, and GrabPay during transactions.
• Information related to wagering blacklists from relevant regulatory bodies, to ensure legal compliance.

The data we collect is used for specific and transparent purposes. Below is a summary table explaining the purposes of data use and their legal basis:

We will not use your data for any purpose not listed above without first obtaining your explicit consent. If you do not wish to receive marketing communications from us, you may withdraw your consent at any time through your account settings.

Your privacy is our priority. dis88 does not sell your personal data to any third party. However, there are limited situations where we may need to share your information with trusted parties:

Authorised Service Providers

Dis88 works with a number of third-party service providers that help us operate the platform, including payment solution providers, identity verification (KYC) services, licensed game providers, and cloud computing infrastructure. All these providers are bound by strict confidentiality agreements and are only permitted to use your data for the purposes specified in those agreements.

Legal and Regulatory Requirements

Dis88 may be required to disclose your information to authorities such as the police, courts, or regulatory bodies when mandated by Malaysian law or a valid court order. In such situations, we will inform you of the disclosure to the extent permitted by law.

Business Transfers

In the event of a company merger, acquisition, or asset transfer, your data may be transferred as part of the relevant business transaction. We will ensure that the receiving party is bound by an equivalent or higher level of data protection than this Privacy Policy.

Dis88 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website. The following are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as login, navigation, and session security. These cookies cannot be disabled.
• Preference Cookies: Allows the platform to remember your preferences such as language, display settings, and other options for future sessions.
• Analytics Cookies: Helps us understand how users interact with the platform, which pages are visited most frequently, and areas that need improvement.
• Security Cookies: Used to detect suspicious activity, prevent fraud, and protect your account from unauthorised access.

You can manage or disable non-essential cookies through your web browser settings. However, disabling certain cookies may affect the functionality and user experience of the dis88 platform.

Dis88 continually invests in high-grade security infrastructure to protect your personal data from unauthorised access, disclosure, alteration, or destruction. The key security measures we implement are as follows:

• 256-bit SSL Encryption: All data communication between your browser or app and dis88 servers is protected with industry-grade SSL encryption.
• Two-Factor Authentication (2FA): An additional security layer that protects your account even if your password is compromised.
• Real-Time Monitoring: An automated monitoring system operating 24/7 to detect and respond to any security threats.
• Layered Access Controls: Only specifically authorised dis88 staff may access members' personal data, and only for designated purposes.
• Regular Security Audits: Penetration testing and security audits by independent third-party experts are conducted regularly to identify and address any vulnerabilities.
• Data Backup: Your data is automatically backed up to multiple secure locations to ensure no data loss due to technical failure.

As a dis88 platform user and data subject under Malaysia's PDPA, you have the following rights regarding your personal data:

• Right of Access: You have the right to request a copy of all personal data we hold about you. This request will be processed within 21 business days.
• Right to Rectification: If you find that any of your personal data is inaccurate or outdated, you have the right to request a correction.
• Right to Restriction of Processing: In certain circumstances, you may request that we restrict how we use your data — for example, while a dispute regarding data accuracy is being resolved.
• Right to Withdraw Consent: For data processing based on your consent (such as marketing communications), you may withdraw your consent at any time.
• Right to Lodge a Complaint: If you believe that dis88 has failed to comply with the PDPA in handling your data, you have the right to file a complaint with the Department of Personal Data Protection Malaysia.

To exercise any of the above rights, please contact the dis88 customer support team via live chat on the platform or through our official email. We will verify your identity before processing any data-related request to ensure your account security.

Dis88 only retains your personal data for as long as it is needed for the purposes stated in this Privacy Policy, or as required by applicable law. In general, the retention periods are as follows:

• Active account data: Retained for the duration of your account's active period.
• Closed account data: Retained for a minimum of 7 years after account closure, in line with Malaysia's anti-money laundering (AML) legal requirements.
• Transaction Records: Retained for 7 years for audit and legal compliance purposes.
• Customer Support Records: Retained for 3 years after the date of last interaction.
• Security logs: Retained for 12 months for security investigation purposes if required.

Once the retention period expires, your data will be securely deleted or anonymised so that it can no longer be linked to you as an individual.

The dis88 platform is intended solely for individuals aged 18 and above. We do not knowingly collect, use, or store personal data from individuals under the age of 18. Should we discover that data from an underage individual has been collected without our knowledge, we will take immediate steps to delete that data and close the associated account.

Parents or guardians who believe their child has registered an account at dis88 should contact our support team immediately so that appropriate action can be taken without any delay.

Dis88 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data handling practices, the latest legal requirements, or improvements to our services.

Any material changes to this Privacy Policy will be communicated to you via a prominent notice on the dis88 website or app, or by email to the address registered in your account, at least 14 days before the changes take effect. It is your responsibility to review this Privacy Policy from time to time.

Your continued use of the dis88 platform after changes take effect constitutes your acceptance of the updated terms. If you disagree with the changes made, you should discontinue use of the platform and contact us to close your account.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please contact the dis88 Data Protection Officer through the following channels:

• Live Chat: Available 24/7 within the dis88 platform for immediate assistance.
• Email: [email protected] (response time is typically within 24 business hours).

We are committed to addressing every inquiry seriously and providing a satisfactory response within a reasonable timeframe. Your trust is the foundation of our relationship, and we will never take any privacy concerns you raise lightly.