Privacy Policy dapat24 — Player Personal Data Protection

1 Introduction & Our Commitment

Dapat24 takes user privacy very seriously. As an online gaming platform serving Malaysian players, we understand that your trust is the most valuable asset we safeguard. This Privacy Policy is provided to give you full transparency on how we manage your personal data from start to finish.

This document forms part of dapat24's commitment to complying with Malaysia's Personal Data Protection Act 2010 (PDPA). We recognize that your personal data belongs entirely to you, and our role is that of a responsible processor — not an owner.

Every time you register an account, make a deposit, play a game, or contact our support team, certain information is required to keep our services running smoothly, securely, and in accordance with regulations. This document explains all of that in detail.

2 Types of Personal Data We Collect

Dapat24 only collects data necessary for legitimate and specific purposes. The following are the categories of data we collect:

3 How We Collect Data

Your personal data is collected through several transparent and lawful channels:

• Account registration — information you provide when creating a new dapat24 account, including name, email, and phone number.
• KYC verification process — identity documents you upload to verify your identity for withdrawals and full account functionality.
• Financial transactions — information required during the deposit and withdrawal process via FPX, DuitNow, Touch 'n Go eWallet, and GrabPay.
• Platform usage — data automatically generated when you use our services, including session logs and game activity records.
• Support communications — information you share when contacting our support team via live chat or email.
• Cookies and tracking technologies — data automatically collected by your web browser when visiting the dapat24 platform, as described in Section 8.

We do not purchase or acquire your personal data from third-party data brokers. All data we hold is either provided directly by you or generated through your use of our platform.

4 Data Usage Purpose

Every piece of data we collect has a clear and legitimate purpose. dapat24 uses your information for the following purposes:

• Account management — processes registration, verifies identity, and manages your profile and account settings.
• Transaction processing — facilitates fund deposits and withdrawals securely and on time.
• Fraud prevention — identifies and investigates suspicious activity to protect your account and the integrity of the platform.
• Legal compliance — fulfils dapat24's obligations under applicable Malaysian law, including anti-money laundering (AML) requirements.
• Customer Support — resolves inquiries, disputes, and assistance requests you submit.
• Service improvement — analyzes usage patterns to improve our platform, interface, and game offerings.
• Marketing communications — sends information about promotions and new offers, subject to your notification preferences.
• Responsible gaming — monitors gameplay patterns to identify players who may need responsible gaming support.

5 Data Sharing with Third Parties

Dapat24 does not sell your personal data. However, there are limited situations where we need to share certain information with trusted third parties to enable our services to operate:

• Payment providers — local banks, FPX, DuitNow, Touch 'n Go, and GrabPay providers receive the transaction information needed to process your deposits and withdrawals.
• Identity verification services — approved eKYC providers receive your identity documents solely for legitimate verification purposes.
• Game software providers — licensed game providers may receive the session identifiers needed to enable gameplay; they do not receive your personal financial information.
• Legal authorities — law enforcement agencies or regulatory bodies when required by applicable Malaysian law.
• Cloud and computing services — infrastructure providers that store data on secure servers under strict data protection agreements.

All third parties we work with are bound by data confidentiality agreements that require them to protect your information to a standard no less than that of dapat24 itself. We conduct regular reviews of all partners to ensure ongoing compliance.

6 Data Security Measures

Data security is at the core of dapat24's operations. We implement multiple layers of technical and organisational protection to keep your data safe at all times:

• 256-bit SSL/TLS encryption — all data transmitted between your device and dapat24 servers is encrypted using the latest industry SSL/TLS protocols.
• AES-256 data-at-rest encryption — data stored in our databases is protected with military-grade AES-256 encryption.
• Two-factor authentication (2FA) — an additional security layer available for all dapat24 accounts to prevent unauthorized access.
• 24/7 Monitoring — our automated monitoring system operates around the clock to detect and respond to any suspicious activity.
• Data segregation — financial data and personal data are stored in separate systems with distinct access controls.
• Regular security audits — penetration testing and independent security audits are conducted regularly by accredited third parties.
• Internal access controls — only dapat24 staff with specific operational needs are permitted to access user data, and all access is meticulously logged.

While we take all reasonable steps to protect your data, no security system can be guaranteed 100% safe. In the event of any security incident involving your data, dapat24 will notify you within the timeframe required by applicable law.

7 Data Retention Period

Dapat24 does not store your data indefinitely. Retention periods are determined based on operational needs and legal obligations:

• Active account data — retained for as long as your account is active and for a specified period after account closure to meet legal requirements.
• Financial transaction records — retained for a minimum of 7 years in accordance with Malaysia's financial laws and AML requirements.
• Support communication logs — retained for 3 years for reference and dispute resolution purposes.
• Technical log data — retained for 90 days for fraud detection and security purposes, then automatically deleted.
• KYC Documents — retained for a minimum of 5 years after account closure in accordance with anti-money laundering compliance requirements.

Once the retention period expires, your data will be securely deleted using industry-approved data deletion methods, or fully anonymized so it can no longer be linked to your identity.

8 Cookies & Tracking Technologies

The dapat24 platform uses cookies and similar tracking technologies to enhance your experience and ensure account security. The following are the types of cookies we use:

• Essential cookies — required for core platform functions such as login authentication and session security. These cookies cannot be disabled.
• Performance cookies — collects information on how you use the platform to help us improve site speed and usability.
• Functional cookies — saves your preferences such as language, display settings, and game preferences so you don't have to reset them each time.
• Security cookies — used to detect suspicious login attempts and protect your account from unauthorized access.

You can manage your cookie settings through your web browser at any time. Please note that disabling essential cookies may affect your ability to use certain features of the dapat24 platform properly.

9 Your Rights as a User

Under Malaysia's PDPA and our commitment to data protection, you have the following rights regarding your personal data:

To exercise any of the rights above, please contact our data protection team by email or live chat. We will process your request within 30 calendar days.

10 Child Protection

Dapat24 is a gaming platform restricted to individuals aged 18 and above only. We do not intentionally collect or process personal data from children under the age of 18.

Our rigorous KYC verification process, including identity document checks, serves as a primary layer of protection against underage registration.

11 Privacy Policy Amendments

Dapat24 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technological developments.

When significant amendments occur, we will:

• Displaying a clear notice on the dapat24 platform homepage.
• Sending email notifications to all registered users before amendments take effect.
• Updating the "Last Updated" date at the top of this document.
• Retaining previous versions of the Privacy Policy for your reference if needed.

Your continued use of the dapat24 platform after the effective date of any amendment will be considered your acceptance of the updated Privacy Policy. We encourage you to review this page periodically to stay informed of the latest updates.

12 Contact Our Data Protection Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data by dapat24, please contact our Data Protection Officer (DPO):

We are committed to responding to all privacy-related inquiries within 3 working days. For formal requests under the PDPA, the processing period is up to 30 calendar days.