Dadu88 Privacy Policy – Our Commitment to Protecting Your Personal Data

Welcome to Dadu88's Privacy Policy. This document transparently explains how Dadu88 ("Company", "we") collects, processes, stores, and protects your personal data as a user ("Member", "you") of our platform at dadu88.run.

This Privacy Policy forms part of the dadu88 Terms & Conditions and read alongside that document. By registering for or using the Dadu88 platform, you are deemed to have read and agreed to all provisions of this Privacy Policy.

Dadu88 operates in accordance with Personal Data Protection Act 2010 (PDPA) Malaysia. We take these legal obligations seriously — not merely as a compliance requirement, but as a reflection of our core values of trust and transparency with our members.

Dadu88 only collects data necessary for the purposes stated in this policy. The following are the categories of data we may collect:

Personal data collected by Dadu88 is used solely for legitimate purposes directly related to the provision of platform services. The following are the primary purposes for which your data is used:

• Account Management — Creating, verifying, and maintaining your member account. This includes the KYC (Know Your Customer) process required for withdrawals and identity verification.
• Transaction Processing — Processes deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX; as well as withdrawals to registered Malaysian bank accounts or eWallets.
• Service Provision — Enables access to slots, live blackjack, Live Casino, and Sports Betting for the Malaysia Super League, EPL, BWF badminton, esports, and other sports.
• Security & Fraud Detection — Monitoring account activity to detect fraud attempts, money laundering, or unauthorised access.
• Customer Support — Helping you resolve technical issues, account enquiries, and complaints via live chat or email in Bahasa Malaysia.
• Legal Compliance — Fulfils reporting obligations to the relevant authorities in accordance with applicable Malaysian law.
• Internal Marketing — Sending you information about promotions, new bonuses, and platform updates — only if you opted in to receive such communications during registration.

Dadu88 does not sell or rent members' personal data to anyone. However, under limited and specific circumstances, we may share data with the following parties:

• Payment Providers — Touch 'n Go, DuitNow, GrabPay, Boost, ShopeePay, and Malaysian banks (via FPX such as Maybank2u and CIMB Clicks) receive the transaction data necessary to process your payments. They are bound by their own Privacy Policies.
• Game Providers — Companies such as Pragmatic Play, Evolution Gaming, PG Soft, and Jili Games may receive game session data necessary to operate games on the Dadu88 platform. No personal identity data is shared directly.
• Technical Infrastructure Providers — The cloud and hosting services we use to operate the platform may store data on their servers, but they are bound by strict data processing agreements.
• Legal Authority — dadu88 will comply with any valid court order or official request from Malaysian authorities requiring the disclosure of data.

Dadu88 implements multiple layers of technical and organisational security to protect your personal data against unauthorised access, loss, destruction, or alteration:

• 256-bit SSL/TLS Encryption — All communications between your browser and Dadu88's servers are fully encrypted using the HTTPS protocol.
• Hashed Password Storage — Account passwords are never stored in plain text. We use a one-way hashing algorithm that cannot be reversed.
• Tiered Access Control — Only personnel who require access to specific data to perform their duties are granted permission. Access is governed by the principle of least privilege.
• 24/7 Monitoring — Our security monitoring systems operate around the clock to detect suspicious activity and cyber threats in real time.
• Two-Factor Authentication (2FA) — Available to all member accounts and mandatory for all dadu88 staff accounts with access to user data.
• Regular Security Assessments — Dadu88 conducts regular penetration testing and security audits to identify and patch vulnerabilities before they can be exploited.

Dadu88 uses cookies and similar tracking technologies to enhance the user experience and gather analytical data. The following are the types of cookies we use:

• Essential Cookies — Required for core platform operations such as login authentication and session management. Without these cookies, the platform cannot function properly. These cookies cannot be disabled.
• Performance Cookies — Collects information on how users interact with the platform (e.g. most visited pages, time spent) to help us improve site performance and usability.
• Functional Cookies — Saving your preferences such as language, currency, and display settings so you do not need to reconfigure them on every visit.
• Analytical Cookies — We use analytics tools to understand aggregated and anonymised usage patterns. This information is used to improve the platform, not to identify individuals.

You can manage your cookie preferences through your browser. However, disabling certain cookies may affect the functionality of some parts of the Dadu88 platform.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by Dadu88:

Dadu88 does not retain your personal data for longer than is necessary for the purpose it was collected. Retention periods vary by data category and legal requirements:

• Active Account Data — Retained for as long as your account is active and for 7 years after account closure, in compliance with Malaysia's accounting and tax legislation.
• Financial Transaction Records — Retained for a minimum of 7 years in accordance with the Companies Act Malaysia and Anti-Money Laundering (AMLA) requirements.
• Security & Technical Logs — Retained for 12 months for security investigation and fraud detection purposes.
• Support Communication Data — Live chat conversation records and support emails are retained for 3 years for quality control and dispute resolution purposes.
• Marketing Data — If you withdraw consent for marketing communications, your data will be removed from the mailing list within 30 days.

Once the retention period expires, data will be securely deleted or anonymised so that it can no longer be linked to any specific individual.

The Dadu88 platform is intended solely for individuals aged 18 and above. We do not knowingly collect personal data from anyone under the age of 18.

Should we discover that personal data of an individual under the age of 18 has been collected without our knowledge, that data will be deleted immediately and the associated account will be terminated.

Dadu88 has appointed a data protection officer responsible for ensuring compliance with this Privacy Policy. If you have any questions, concerns, or wish to exercise your privacy rights, please contact us via:

• Privacy Email: support@dadu88.run (Subject: Privacy Enquiry)
• Live Chat: Available 24/7 at the bottom-right corner of the dadu88.run platform
• Response Time: Within 5 business days for privacy enquiries

For complaints that we are unable to resolve internally, you have the right to lodge a complaint with Department of Personal Data Protection Malaysia (JPDP) under the Ministry of Communications and Digital.

Any material amendments to this Privacy Policy will be communicated to all active members via their registered email address at least 14 days before the changes take effect, except where immediate updates are required for security or legal reasons.