dis88 Privacy Policy

1. Introduction

dis88 ("we", "us", "our", "the Company") operates the online gaming platform accessible at dis88.one and is committed to safeguarding the privacy and personal data of all registered members and platform visitors ("you", "the Member").

This Privacy Policy ("Policy") describes the categories of personal data that dis88 collects, the purposes for which that data is processed, the parties with whom it may be shared, and the rights you hold in relation to your own personal data. This Policy is incorporated by reference into the dis88 Terms & Conditions and should be read alongside them.

By registering a dis88 account or continuing to use our platform, you confirm that you have read and understood this Policy and consent to the processing of your personal data as described herein.

2. Data Controller

dis88 acts as the data controller in respect of personal data collected through the dis88.one platform. As data controller, dis88 determines the purposes and means of processing your personal data. Where dis88 engages third-party processors (for example, payment service providers or fraud detection vendors), those parties act strictly on dis88's instructions under written data processing agreements.

For all privacy-related enquiries, the dis88 Data Protection team can be contacted via our 24/7 live chat support or by email at support@dis88.one (plain text — not a clickable link).

3. Data We Collect

dis88 collects personal data across several categories depending on how you interact with the platform:

3.1 Registration Data

When you create a dis88 account, we collect your full legal name, date of birth, gender (where provided), email address, Malaysian mobile number, mailing address, and your chosen username. This data is mandatory — without it, we cannot create or maintain a compliant gaming account.

3.2 Identity Verification (KYC) Data

To comply with international gaming authority licensing requirements and Malaysian anti-money laundering (AML) obligations, dis88 may collect copies of government-issued identification (MyKad, passport, or driving licence) and proof of address (recent utility bill or bank statement). Biometric data is not collected or stored by dis88.

3.3 Financial Data

We collect information relating to your deposits and withdrawals, including payment method type (e.g., Touch 'n Go eWallet, DuitNow, Maybank), transaction references, and transaction amounts in MYR. Full payment instrument credentials (e.g., full bank account numbers) are handled exclusively by our licensed payment service provider partners and are not stored on dis88 servers.

3.4 Gaming & Behavioural Data

dis88 records details of all bets, wagers, and gaming sessions — including game type, stake, outcome, session duration, and time of play. This data is used for account management, dispute resolution, responsible gaming monitoring, and regulatory reporting.

3.5 Technical & Device Data

When you access dis88, we automatically collect your IP address, browser type and version, device type, operating system, referring URL, and session timestamps. This information is used for security, fraud prevention, and platform optimisation purposes.

3.6 Communications Data

Where you contact dis88 support via live chat, email, or any other channel, we retain records of those communications for quality assurance, training, and dispute resolution purposes.

4. How We Use Your Data

dis88 processes your personal data for the following purposes:

dis88 does not use your personal data for automated decision-making that produces legal or similarly significant effects without human review, except where required or permitted by applicable law or licensing obligations.

5. Legal Bases for Processing

dis88 processes your personal data on the following legal bases:

• Contract performance — Processing necessary to provide gaming services, manage your account, and process financial transactions pursuant to your membership agreement with dis88.
• Legal obligation — Processing required to comply with AML legislation, gaming authority licensing conditions, KYC requirements, and any applicable Malaysian regulatory obligations.
• Legitimate interests — Processing for fraud prevention, security monitoring, platform stability, and customer service improvement, where our legitimate interests are not overridden by your fundamental rights.
• Consent — Processing for optional marketing communications, where you have provided explicit opt-in consent. You may withdraw this consent at any time via your account settings.

6. Cookies & Tracking Technologies

dis88 uses cookies and similar tracking technologies to operate the platform, remember your preferences, maintain session security, and analyse platform usage. The categories of cookies we use are:

• Strictly Necessary Cookies — Essential for platform functionality, authentication, and security. These cannot be disabled.
• Performance Cookies — Collect anonymised data on page views, navigation paths, and error rates to help us improve the dis88 platform. No personally identifiable information is transmitted.
• Preference Cookies — Store your language, display, and session settings so you do not need to re-enter them on each visit.
• Marketing Cookies (opt-in) — Used to deliver relevant promotional content based on your gaming preferences. These are only activated with your explicit consent.

You may manage cookie preferences through your browser settings. Disabling non-essential cookies will not affect your ability to access the core dis88 gaming platform.

7. Data Sharing & Disclosure

dis88 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your data with the following categories of recipients, strictly on a need-to-know basis:

• Payment service providers — To process deposits and withdrawals (e.g., Touch 'n Go eWallet, DuitNow, FPX gateways).
• Identity verification providers — To carry out KYC checks as required by our licensing obligations.
• Fraud prevention and security vendors — To detect and prevent fraudulent activity on the platform.
• Regulatory and law enforcement authorities — Where required by law, licensing conditions, or a valid legal order.
• Game content providers — Limited session data may be shared with licensed game providers (e.g., game round ID and stake) for game integrity purposes only.
• Legal and compliance advisers — Under strict confidentiality obligations, in connection with the conduct or defence of legal claims.

8. International Data Transfers

dis88 may transfer your personal data to countries outside Malaysia in connection with the services described in this Policy — for example, where game servers, fraud prevention systems, or cloud infrastructure are located in other jurisdictions. Where such transfers occur, dis88 ensures that appropriate safeguards are in place, including standard contractual clauses approved by the relevant data protection authority, to maintain a level of protection equivalent to that afforded under Malaysian data protection standards.

9. Data Retention

dis88 retains your personal data for the period necessary to fulfil the purposes described in this Policy, subject to the following minimum retention periods required by law and regulation:

• Account registration and KYC data: minimum 5 years from account closure, as required by AML regulations and licensing conditions.
• Transaction and financial records: minimum 5 years from the date of the transaction.
• Gaming session records: minimum 3 years from the date of the session.
• Support communications: 3 years from the date of the interaction.

Following expiry of the applicable retention period, personal data will be securely deleted or anonymised in accordance with industry-standard procedures.

10. Your Data Rights

As a dis88 member, you hold the following rights in relation to your personal data, subject to applicable law and regulatory obligations:

• Right of access — You may request a copy of the personal data dis88 holds about you.
• Right to rectification — You may request correction of any inaccurate or incomplete data held in your dis88 account.
• Right to erasure — You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to retention obligations imposed by law.
• Right to restrict processing — You may request that processing of your data be restricted in certain circumstances.
• Right to data portability — You may request a structured, machine-readable copy of data you have provided to dis88 under consent or contract.
• Right to object — You may object to processing based on legitimate interests, including direct marketing.
• Right to withdraw consent — Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact the dis88 Data Protection team via 24/7 live chat or by email. dis88 will respond within 30 calendar days of receiving a verified request.

11. Security Measures

dis88 implements technical and organisational security measures commensurate with the sensitivity of the personal data we hold. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your browser and dis88 servers;
• Encrypted storage of personal and financial data at rest;
• Strict role-based access controls limiting employee access to personal data on a need-to-know basis;
• Automated intrusion detection and anomalous login monitoring;
• Regular penetration testing and security audits by independent third-party specialists;
• Multi-factor authentication requirements for all dis88 staff accessing production systems.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, dis88 will notify affected members without undue delay in accordance with applicable data protection obligations.

12. Children & Minors

The dis88 platform is strictly for individuals aged 21 years and above. dis88 does not knowingly collect personal data from any person under the age of 21. Where dis88 discovers that personal data has been collected from an individual below the minimum age, that account will be immediately suspended and all associated data will be deleted.

If you believe a minor has registered a dis88 account, please notify our support team immediately via live chat.

13. Third-Party Links

The dis88 platform may contain references to third-party services (for example, licensed game providers). dis88 is not responsible for the privacy practices of any third-party service and this Policy does not extend to external websites or applications. We encourage you to review the privacy policies of any third-party services you access independently.

14. Policy Amendments

dis88 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, regulatory requirements, or platform features. The date of the most recent revision is shown at the top of this page. Where changes are material, dis88 will notify registered members via the platform or by email to the registered address.

Continued use of the dis88 platform following notification of an update constitutes acceptance of the revised Privacy Policy.

15. Contact Us

For all privacy-related enquiries, requests to exercise your data rights, or concerns regarding this Policy, please contact the dis88 Data Protection team:

Our team is available 24/7 via live chat directly on the dis88 platform, operating in Malaysia Standard Time (MYT, UTC+8). Written requests will receive a response within 30 calendar days.