Dis888 Privacy Policy – Your Personal Data Protection

1Information We Collect

Dis888 collects various types of information to enable us to provide a safe, personalised and high-quality service to every user. Our data collection is divided into three main categories:

a) Information you provide directly:

• Registration information: full name, date of birth, identification card number (MyKad), mobile number, and email address.
• Financial information: bank account number, bank name, e-wallet number (TNG, Boost, GrabPay) for deposit and withdrawal purposes.
• Identity verification documents (KYC): copies of identification, proof of address, and other supporting information when required.
• Communications with us: live chat records, emails, and any feedback you send to the dis888 support team.

b) Information collected automatically:

• Technical data: IP address, device type, operating system, phone model, and app version.
• Activity data: login history, game records, transaction history, bonuses used, and game preferences.
• Location data: general location information based on IP address for security and compliance purposes.
• Cookie and session data: browsing session information to ensure a smooth user experience.

c) Information from third-party sources:

• Identity verification through trusted third-party KYC services.
• Financial transaction records from banking institutions and e-wallet providers for deposit and withdrawal verification purposes.

2How We Use Your Data

Collected personal data is used exclusively for the following purposes and will not be used beyond the stated scope without your consent:

Dis888 practises the principle of data minimisation — we only process data that is strictly necessary for the stated purposes. We never use your data to make fully automated decisions that significantly affect you without human intervention.

3Sharing Information with Third Parties

Dis888 does not sell, rent or disclose your personal data to third parties for marketing purposes. However, in certain limited situations, we may share your information with the following parties:

• Payment service provider: Required financial information is shared solely with partner banks, FPX providers, TNG eWallet, Boost, and GrabPay to process your transactions.
• KYC service provider: Identity verification documents are shared with accredited KYC service providers used by dis888 for verification purposes only.
• Game provider: Basic account information (such as user ID and balance) is shared with integrated game providers within the dis888 platform to ensure smooth gameplay.
• Legal authorities: dis888 complies with any lawful requests from Malaysian authorities such as Bank Negara Malaysia, the Royal Malaysia Police or relevant regulatory bodies, where required by law.
• Business transfer: If dis888 is involved in any merger, acquisition, or asset sale, user data may be transferred to the successor entity, with notice given to affected users.

4Security & Data Protection

Dis888 continuously invests in enterprise-grade security infrastructure to ensure your personal data is always protected from unauthorised access, breaches or misuse. The security measures we maintain include:

• 256-bit SSL encryption: All communication between your browser or app and dis888 servers is encrypted using the latest TLS 1.3 protocol.
• Data-at-rest encryption: Sensitive data stored in the dis888 database, including financial information and KYC documents, is encrypted using the AES-256 algorithm.
• Role-based access control: Only specifically authorised dis888 staff may access users' personal data, and every access is logged for audit purposes.
• 24/7 security monitoring: The dis888 cybersecurity team continuously monitors the system to detect any threats or unusual activity.
• Periodic penetration testing: dis888 conducts regular security testing by independent security experts to identify and patch any vulnerabilities before they can be exploited.
• Two-factor authentication (2FA): Users are encouraged to enable 2FA for an additional layer of account protection.

While dis888 takes all reasonable steps to protect your data, we want to emphasise that no system can be guaranteed 100% secure. You also play a role in keeping your account safe by not sharing your password and using a secure network.

5Cookies & Tracking Technology

Dis888 uses cookies and similar tracking technologies to enhance the user experience, analyse usage patterns and ensure platform security. The types of cookies we use are as follows:

• Essential cookies: Required for core platform functions such as login session management and language preferences. These cookies cannot be disabled without affecting platform functionality.
• Performance cookies: Collects anonymous data on how users interact with our platform to help us improve the overall experience.
• Functional cookies: Stores your preferences such as game selections, display settings, and login information to streamline repeat visits.
• Security cookies: Used to detect and prevent fraud, verify that each login session is legitimate, and protect your account from unauthorised access.

You can manage cookie settings through your browser preferences. However, disabling certain cookies may affect the functionality of some parts of the dis888 platform. For more information on managing cookies, please refer to your browser's help documentation.

6Your Rights as a dis888 User

As a user whose data is processed by dis888, you have the following rights under Malaysia's Personal Data Protection Act 2010 (PDPA) and dis888's internal policies:

• Right of access: You have the right to request a copy of the personal data we hold about you at any time.
• Right to rectification: If your personal data is inaccurate or incomplete, you have the right to request prompt correction.
• Right to erasure: Under certain circumstances, you have the right to request the deletion of your personal data from dis888 systems, subject to legal record-keeping obligations.
• Right to object: You have the right to object to the processing of your data for direct marketing purposes at any time.
• Right to withdraw consent: Where data processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal.
• Right to complain: You have the right to lodge a complaint with the Malaysian Personal Data Protection Department if you believe your privacy rights have been violated.

To exercise any of the rights above, contact the dis888 customer support team via live chat or email. dis888 will process your request within 30 business days from the date the request is received.

7Data Retention Period

Dis888 retains your personal data only for as long as necessary to fulfil the original purpose of collection or to comply with legal obligations. The following are our data retention period guidelines:

• Active account data: Retained for the duration of your active account with dis888 and for a period of 7 years after account closure for legal and tax compliance purposes.
• Financial transaction records: Retained for a minimum of 7 years in accordance with Malaysian legal requirements relating to financial records and anti-money laundering.
• KYC Documents: Retained for the duration of the active account and 7 years after account closure.
• Support communication log: Retained for 3 years for dispute resolution and service quality improvement purposes.
• Cookie and session data: Session cookies are deleted when you close your browser; persistent cookies are stored for a maximum of 12 months.

Once the retention period expires and there is no legal requirement for further retention, your data will be securely deleted or anonymised using methods that ensure it cannot be recovered or re-linked to you.

8Children's Privacy

Dis888 is an entertainment platform exclusively intended for individuals aged 18 and above. We do not knowingly collect, process or store personal data of individuals under the age of 18.

• All account registrations require strict age verification through the KYC process.
• Should dis888 discover that personal data of a minor has been collected without our knowledge, we will take immediate action to delete such data and close the relevant account.
• Parents or guardians who discover that a minor in their care has registered a dis888 account are encouraged to contact our support team immediately.

9Links to Third-Party Sites

The dis888 platform integrates services from third-party game and payment providers. While we select our partners carefully, dis888 is not responsible for the privacy practices of third-party services that operate independently of our platform.

• Third-party game providers integrated within the dis888 platform have their own privacy policies governing data they collect during gaming sessions.
• Payment providers such as banks and e-wallets are independent entities with their own privacy policies that apply to the processing of your transactions.
• Dis888 recommends that you read the privacy policy of all third-party services you use alongside our platform.

10Amendments to This Privacy Policy

Dis888 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our practices, legal requirements or service improvements. Here is how we manage amendments:

• Users will be notified of any significant amendments at least 14 days before they take effect via in-app notifications and registered email.
• The "Updated" date at the top of this document will always reflect the date of the latest amendment.
• Your continued use of the dis888 platform after any amendments take effect constitutes your acceptance of the revised Privacy Policy.
• If you disagree with any amendments made, you have the right to close your account and request deletion of your data before the amendment takes effect.
• Previous versions of this Privacy Policy are available upon request through our customer support team.