dmc88 Privacy Policy

1Who We Are

dmc88 operates an online gaming platform accessible at dmc88.app, providing slots, live casino, sportsbook, and lottery products primarily to players in Malaysia. As operator of the Platform, dmc88 is responsible for determining the purposes and means of processing personal data submitted by users of the Platform. This Privacy Policy is addressed to all registered and prospective users of dmc88, with particular relevance to players based in Malaysia, including those in Kuala Lumpur, Penang, Johor Bahru, Ipoh, and across the country.

dmc88 takes its data protection obligations seriously. Our data practices are designed to comply with applicable data protection legislation, including the Malaysian Personal Data Protection Act 2010 (PDPA) and the principles of international data protection frameworks relevant to the jurisdictions in which dmc88 operates. We do not sell your personal data. We do not share your personal data with third parties for their own marketing purposes without your express consent.

2Personal Data We Collect

dmc88 collects personal data in the following categories:

dmc88 does not intentionally collect sensitive personal data (as defined under applicable law) beyond what is strictly required for age and identity verification and compliance with anti-money laundering obligations.

3How We Collect Your Data

dmc88 collects personal data through the following means:

• Direct submission: Information you provide during account registration, KYC verification, deposit and withdrawal processes, contact form submissions, and support interactions.
• Automated collection: Technical and usage data collected automatically via cookies, session tokens, server logs, and analytics tools as you navigate and use the Platform.
• Third-party sources: Identity and address verification data from KYC service providers; fraud and sanctions screening data from compliance data providers; payment verification data from payment service processors including FPX network operators, Touch n Go, Boost, and GrabPay.
• Platform usage: Gaming activity, betting history, session data, and responsible gaming tool usage generated through your interactions with dmc88 games, sportsbook markets, and account settings.

4Purposes of Data Processing

dmc88 processes your personal data for the following purposes:

• Account creation and management: Establishing and maintaining your dmc88 Account, processing login authentication, and managing your account preferences.
• Identity and age verification (KYC): Confirming that you are who you say you are and that you are aged 21 or above before granting real-money access to the Platform, in compliance with our licensing obligations.
• Transaction processing: Processing deposits, withdrawals, and any other financial transactions conducted through your dmc88 Account.
• Legal and regulatory compliance: Complying with anti-money laundering (AML) obligations, Counter-Financing of Terrorism (CFT) requirements, sanctions screening, record-keeping obligations under our gaming licence, and responding to lawful requests from regulatory authorities and law enforcement.
• Responsible gaming: Monitoring gaming activity to identify patterns consistent with problem gambling; providing and administering responsible gaming tools including deposit limits, self-exclusion, and cooling-off periods; complying with self-exclusion register obligations.
• Fraud prevention and security: Detecting and preventing fraud, money laundering, account takeover, and other prohibited conduct; maintaining platform integrity.
• Customer support: Responding to your queries, complaints, and support requests; maintaining records of communications for quality assurance and dispute resolution.
• Marketing communications: Sending you promotional offers, bonus notifications, and platform updates via email or SMS, where you have provided your consent to receive such communications. You may opt out at any time via your account settings.
• Platform improvement: Analysing aggregated usage data to understand player behaviour, improve the platform experience, and develop new features.

5Legal Basis for Processing

dmc88 processes personal data on the following legal bases:

• Contractual necessity: Processing required to perform our contractual obligations to you as a registered Player, including account management, transaction processing, and game provision.
• Legal obligation: Processing required to comply with AML, KYC, licensing, sanctions, and other mandatory legal and regulatory requirements.
• Legitimate interests: Processing for fraud detection, platform security, responsible gaming monitoring, and platform improvement, where our legitimate interests are not overridden by your privacy rights.
• Consent: Processing for direct marketing communications, where consent has been obtained. Consent may be withdrawn at any time.

6Sharing Your Personal Data

6.1  dmc88 does not sell your personal data to third parties. We share personal data only in the following limited circumstances:

• KYC and identity verification providers: To verify your identity and age as required by our licensing obligations.
• Payment service providers: To process deposits and withdrawals, including FPX network operators, Touch n Go, Boost, GrabPay, and cryptocurrency processing services. These providers receive only the data necessary to process the specific transaction.
• Game and platform technology providers: Game studios and live casino studio operators who supply content accessible through dmc88 receive gaming session data necessary to operate their games. These parties act as data processors under written agreements with dmc88.
• Fraud and AML screening services: To screen transactions and account activity against sanctions lists and fraud databases in compliance with our regulatory obligations.
• Regulatory authorities and law enforcement: Where required by law, court order, or regulatory directive, dmc88 will disclose personal data to the relevant authority. Where legally permissible, we will endeavour to notify you of such disclosure.
• Self-exclusion registers: Where you apply for self-exclusion, relevant personal data may be shared with self-exclusion scheme operators as required by our licensing conditions.

6.2  All third parties with whom dmc88 shares personal data are required to maintain appropriate technical and organisational security measures and to process personal data only as instructed by dmc88 and in compliance with applicable data protection law.

7International Data Transfers

7.1  dmc88 operates in an international context. Your personal data may be transferred to and processed in countries outside Malaysia, including countries where our technology infrastructure, game providers, or compliance service providers are located.

7.2  Where personal data is transferred to a jurisdiction that does not provide an equivalent level of data protection to Malaysia's PDPA, dmc88 will implement appropriate safeguards — such as contractual data transfer agreements — to ensure that your personal data receives adequate protection consistent with the standards of this Privacy Policy.

8Data Retention

8.1  dmc88 retains your personal data for as long as is necessary for the purposes set out in this Privacy Policy or as required by applicable law. The following retention periods apply as a general guide:

• Account and identity data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in compliance with AML record-keeping obligations.
• Financial transaction data: Retained for a minimum of five (5) years following the transaction, in compliance with regulatory requirements.
• Gaming activity data: Retained for a minimum of three (3) years following your last login, or longer where required for dispute resolution, regulatory, or responsible gaming purposes.
• Customer support communications: Retained for two (2) years following resolution of the relevant query or complaint.
• Marketing data: Retained until you withdraw consent, or for two (2) years from last engagement, whichever is earlier.

8.2  Following expiry of the applicable retention period, personal data will be securely deleted or anonymised so that it can no longer be attributed to an individual.

9Your Data Protection Rights

9.1  Subject to applicable law, you have the following rights in relation to your personal data held by dmc88:

• Right of access: You may request a copy of the personal data dmc88 holds about you.
• Right to correction: You may request that inaccurate or incomplete personal data be corrected. You may update much of your personal information directly through your account settings.
• Right to erasure: You may request deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purposes for which it was collected, subject to our overriding legal retention obligations.
• Right to restrict processing: You may request that dmc88 restrict the processing of your personal data in certain circumstances.
• Right to data portability: Where processing is based on consent or contract, you may request a machine-readable copy of personal data you have provided to dmc88.
• Right to withdraw consent: Where processing is based on consent — in particular, marketing communications — you may withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.
• Right to object: You may object to processing based on legitimate interests in certain circumstances.

9.2  To exercise any of these rights, contact dmc88 via the details in Section 14. dmc88 will respond to verifiable requests within 30 days. Identity verification may be required before processing requests to prevent unauthorised access to personal data.

10Cookies & Tracking Technologies

10.1  dmc88 uses cookies and similar tracking technologies to enable core platform functionality, maintain session state, and collect analytics data that helps us improve the platform experience. The following categories of cookies are used:

• Strictly necessary cookies: Required for the platform to function. These cannot be disabled. They include session authentication tokens and security cookies.
• Functional cookies: Enable personalised features such as language preferences, your preferred lobby view, and saved responsible gaming settings.
• Analytics cookies: Collect aggregated usage data to help us understand how players use the platform — which games are most popular, which pages generate the most support queries, and similar insights. This data is processed in anonymised or pseudonymised form.

10.2  You may control non-essential cookies through your browser settings. Note that disabling certain functional cookies may affect your platform experience. dmc88 does not use third-party advertising cookies or share browsing data with advertising networks.

11Children's Privacy

11.1  dmc88 is strictly an adults-only platform. We do not knowingly collect, process, or retain personal data from individuals under the age of 21. If dmc88 becomes aware that personal data has been collected from a person under 21, the associated account will be immediately suspended, all data will be securely deleted to the extent permitted by regulatory retention obligations, and any funds held will be returned to the depositing payment source.

11.2  If you are a parent or guardian and believe that a minor has registered on dmc88 or otherwise submitted personal data to us, please contact dmc88 immediately via the contact details in Section 14 so that we can take appropriate action.

12Security Measures

12.1  dmc88 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and the dmc88 Platform.
• Encryption of sensitive data at rest, including identity documents, financial data, and authentication credentials.
• Role-based access controls limiting employee access to personal data on a need-to-know basis.
• Regular internal and third-party security assessments and penetration testing.
• Multi-factor authentication for internal system access by dmc88 staff.
• Incident response procedures for detecting, containing, and reporting data security incidents in compliance with applicable notification obligations.

12.2  Notwithstanding these measures, no online platform can guarantee absolute security. Players are encouraged to use strong, unique passwords for their dmc88 Account and to enable two-factor authentication as an additional protection layer accessible via account settings.

13Changes to This Privacy Policy

13.1  dmc88 may amend this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or the structure of the Platform. When material changes are made, dmc88 will notify registered Players via their registered email address and/or via a prominent notice on the Platform prior to the changes taking effect.

13.2  The "Last Updated" date at the top of this page reflects when the current version of this Privacy Policy became operative. Continued use of dmc88 following the effective date of any amendment constitutes acceptance of the revised Privacy Policy.

13.3  We encourage you to review this Privacy Policy periodically to remain informed about how dmc88 protects your personal data.

14Contact Us

14.1  For any questions, requests, or concerns relating to this Privacy Policy or the personal data dmc88 holds about you, please contact us through the following channels:

14.2  dmc88 will acknowledge receipt of all privacy-related requests within 48 hours and provide a substantive response within 30 days. Complex requests may require additional time; we will notify you of any extension along with the reason for the delay.