Privacy Policy DN88 – How We Protect Your Personal Data

1 Introduction

DN88 ("we", "our platform") is committed to protecting the privacy and data security of all members and users of our platform at dn88-app.com. This Privacy Policy sets out in detail how we collect, use, store, protect and disclose your personal information when you use DN88's services.

This document has been prepared in accordance with the requirements of Personal Data Protection Act (PDPA) Malaysia 2010 and forms part of the overall agreement between you and DN88, together with our platform's Terms & Conditions.

This policy was last updated on January 2026. You will be notified of any material amendments via an in-account notification or registered email before they take effect.

2 Personal Data We Collect

DN88 collects several categories of personal data from you when you register and use our platform. We only collect data that is genuinely necessary to provide the services you request — nothing more.

3 How We Use Your Data

The personal data we collect is used for specific, lawful purposes. DN88 does not use your data for any purpose other than those set out below:

• Service delivery: Managing your account, processing deposits via DuitNow, FPX, Touch 'n Go, and others, handling withdrawals, and enabling access to all games on the platform.
• Identity verification (KYC): Verifying your identity prior to processing withdrawals or when suspicious activity is detected, in accordance with Malaysia's Anti-Money Laundering Act (AMLA).
• Security and fraud prevention: Detect and prevent unauthorised access, financial fraud, bonus abuse and other illicit activities on the platform.
• Platform improvements: Analysing usage patterns on an aggregate (not individual) basis to improve the interface, performance, and overall user experience of the DN88 platform.
• Service communications: Sending important notifications relating to your account, transactions, promotions you have opted into, and material policy updates.
• Legal compliance: Fulfilling the reporting and record-keeping obligations required under Malaysian law, including PDPA 2010 and AMLA.
• Responsible gambling: Monitoring gameplay patterns to identify signs of problem gambling and reaching out to players who may need support.

4 Legal Basis for Data Processing

Under Malaysia's PDPA 2010, DN88 processes your personal data on the following lawful bases:

• Consent: You provide explicit consent when registering an account and when authorizing us to send marketing communications. This consent may be withdrawn at any time.
• Contract performance: Processing necessary to deliver the services you have requested – including managing your account, processing payments, and enabling access to games.
• Legitimate interests: Processing for fraud prevention, platform security, and service improvement purposes, where our legitimate interests do not override your rights.
• Legal obligations: Processing necessary to comply with applicable Malaysian laws, including AMLA and directives from relevant regulatory authorities.

5 Data Sharing with Third Parties

DN88 does not sell your personal data to any party. However, in the course of our operations, we may share certain information with the following categories of third parties:

• Payment service providers: DuitNow, FPX, Maybank2u, CIMB Clicks, Touch 'n Go, GrabPay, Boost, and ShopeePay – to process your deposits and withdrawals. Each provider is subject to their own privacy policy and security standards.
• Game providers: Gaming technology companies that provide our slots, Live Casino, and Sports Betting platforms may receive the gaming data necessary to operate games correctly. These providers do not receive any personally identifiable information that could directly identify you.
• Technology service providers: Companies that provide hosting, cybersecurity, analytics, and technical support services. All such providers are bound by strict data protection agreements.
• Legal authorities: DN88 will disclose information to the police, courts or regulatory bodies when lawfully required to do so under Malaysian law or a valid court order.

6 Cookies & Tracking Technologies

The DN88 platform uses cookies and similar tracking technologies to enhance your experience and ensure the platform functions correctly. Below are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as login, active gaming sessions, and security. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies: Collects information about how you use the platform – such as the most frequently visited pages and error messages encountered – to help us improve the user experience. All information is collected in aggregated form and does not identify you personally.
• Functional Cookies: Allows the platform to remember your preferences — such as language, display settings, and login details — for a more convenient experience on future visits.
• Analytics Cookies: Helps us understand overall traffic patterns and platform usage, with this information used to inform product improvement decisions.

You can control or delete cookies through your browser settings. However, disabling essential cookies may affect the platform's functionality. For guidance on managing cookies in your browser, refer to the help section of Chrome, Safari or Firefox.

7 Data Security Measures

DN88 invests in comprehensive security technologies and procedures to protect your personal data against unauthorized access, alteration, disclosure, or destruction:

• Encryption in transit: All data transmitted between your device and our platform is protected by TLS 1.3 with a valid 256-bit SSL certificate.
• Data-at-rest encryption: Sensitive data stored in our databases, including passwords (which are hashed) and financial details, is encrypted using current industry standards.
• Access controls: Role-based access control (RBAC) ensures that only authorised staff with a legitimate business need can access player data.
• Audits and monitoring: Access logs are audited regularly, and real-time monitoring systems are in place to detect any suspicious activity within our infrastructure.
• Security testing: DN88 conducts regular penetration testing and vulnerability scanning by independent third parties to identify and remediate security weaknesses.
• Staff training: All staff who handle player data receive regular data protection training.

8 Data Storage & Retention Period

DN88 retains your personal data only for as long as necessary for the stated purposes or as required under Malaysian law. The following is a guide to our retention periods:

• Active account data: Retained for the duration of your account and for up to 2 years after account closure for customer support and dispute resolution purposes.
• Financial and transaction records: Retained for 7 years as required under the Malaysian Companies Act and AMLA – these are legal obligations that cannot be waived even if you request account deletion.
• Security logs: Retained for 12 months for security incident investigation and fraud prevention purposes.
• Support communication records: Retained for 2 years for reference in resolving disputes or recurring issues.
• Marketing data (if consented): Retained until you withdraw consent or request deletion.

When data is no longer needed, it is securely deleted or anonymised in accordance with established procedures, ensuring it cannot be recovered or re-linked to you.

9 Your Rights Under PDPA 2010

As a DN88 player based in Malaysia, you have the following rights under the Personal Data Protection Act (PDPA) 2010 with respect to your personal data:

• Right of Access: You have the right to request a copy of the personal data we hold about you. Requests will be processed within 21 business days. A reasonable administrative fee may apply.
• Right to Rectification: You have the right to request correction of any inaccurate or outdated personal data. For basic details such as your phone number and email address, you can update these yourself through your account settings.
• Right to Erasure: You have the right to request the deletion of your personal data, except for data that must be retained to comply with legal obligations such as financial records.
• Right to Withdraw Consent: You may withdraw consent for consent-based data processing — such as marketing communications — at any time, without affecting the lawfulness of any processing carried out prior to withdrawal.
• Right to Object: You may object to the processing of your personal data in certain circumstances, including for direct marketing purposes.
• Right to Complain: You have the right to lodge a complaint with Malaysia's Department of Personal Data Protection if you believe your rights have been violated.

10 Cross-Border Data Transfers

In the course of operating the platform, some of your personal data may be transferred to or processed in countries other than Malaysia — particularly when we engage international technical service providers or game suppliers.

DN88 ensures that any such cross-border data transfers are safeguarded by appropriate mechanisms, including:

• Standard contractual clauses requiring recipients to uphold data protection standards equivalent to Malaysia's PDPA.
• Security assessment of service providers before any data transfer is initiated.
• Legally binding data processing agreements with all third parties that receive player data.

You may request further details about the protection mechanisms used for cross-border data transfers by contacting our privacy team.

11 Children's Privacy

The DN88 platform is exclusively for individuals aged 18 and above. We do not intentionally collect or process personal data from individuals under the age of 18.

If you are a parent or guardian and you discover that your child under the age of 18 has registered an account with DN88, please contact us immediately at support@dn88-app.com. We will investigate the matter, close the account, and delete all associated personal data at no charge and without further questions.

12 Amendments to This Privacy Policy

DN88 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements, or changes to the services we offer.

When we make material changes – meaning changes that significantly affect how we collect or use your data – we will:

• Sending you a notification via your registered email or in-account notification at least 14 days before the amendments take effect.
• Seeking your renewed consent where amendments involve processing data for new purposes that require explicit consent.
• Updating the "Last Updated" date at the top of this document.

Continued use of the platform after any amendments take effect will be considered acceptance of the revised terms. The latest version of this policy is always available on this page for your reference.

13 Contact Our Privacy Team

If you have any questions, concerns or requests regarding this Privacy Policy or how DN88 handles your personal data, please reach out to us through the following channels:

• Privacy Email: support@dn88-app.com (Subject: "Privacy Enquiry / PDPA")
• Live Chat: Available 24/7 on the DN88 platform after login – average response time under 3 minutes
• Service language: Bahasa Melayu and English

DN88's privacy team will respond to enquiries within 5 business days. For more complex PDPA rights requests such as data access or erasure, the processing period is up to 21 business days. We are committed to handling every request with the seriousness and professionalism it deserves.