Privacy Policy

1 Introduction

This Privacy Policy ("Policy") describes how dafa888 ("the Company", "we", "us", or "our") collects, uses, stores, and protects the personal data of players and visitors ("you" or "your") who access or use the dafa888 online gaming platform, accessible at https://dafa888.cam and its associated interfaces (collectively, the "Platform").

dafa888 is committed to protecting the privacy and security of all individuals whose personal data we process. This Policy is designed to meet recognised data protection principles and reflects our obligations toward our player community, which includes players across Malaysia — from Kuala Lumpur and Penang to Johor Bahru, Petaling Jaya, and Shah Alam.

By registering an Account, using the Platform, or otherwise engaging with dafa888's services, you acknowledge that you have read, understood, and agree to the data practices described in this Policy. This Policy should be read in conjunction with our Terms & Conditions. Capitalised terms not defined herein carry the same meaning as in the Terms & Conditions.

2 Definitions

For the purposes of this Privacy Policy, the following definitions apply:

3 Data We Collect

dafa888 collects Personal Data through several channels and mechanisms. The categories of data we collect are as follows:

3.1 Data You Provide Directly

• Registration data: Full name, date of birth, email address, mobile phone number, and chosen username and password when you create an Account.
• KYC documentation: Government-issued photo identification (Malaysian IC / MyKad, Passport, or Driver's Licence), proof of residential address (utility bill or bank statement dated within three months), and a verification selfie.
• Financial data: Bank account details, e-wallet identifiers (e.g., Touch 'n Go eWallet, Boost, GrabPay linked account references), and cryptocurrency wallet addresses used for deposits and withdrawals. We do not store full card numbers or banking PINs.
• Communications data: Records of your interactions with our customer support team via live chat or email, including the content of messages exchanged.
• Preferences data: Language, notification, and marketing communication preferences set within your Account.

3.2 Data Collected Automatically

• Device and browser data: IP address, device type, operating system, browser type and version, and screen resolution.
• Usage data: Pages visited, time spent on pages, game sessions played, betting history, deposit and withdrawal history, and navigation paths through the Platform.
• Session data: Login timestamps, session duration, and geographic location derived from IP address (country and city-level only — we do not track precise GPS location).
• Cookie data: Data stored via cookies and similar tracking technologies as described in Section 7.

3.3 Data from Third Parties

In limited circumstances, dafa888 may receive Personal Data about you from third-party sources, including payment processors confirming transaction status, identity verification service providers used during KYC, and fraud detection agencies. All such third-party data sharing is conducted under appropriate data processing agreements.

4 How We Use Your Data

dafa888 processes your Personal Data only for defined, legitimate purposes. The table below summarises the primary purposes for which your data is used:

5 Legal Basis for Processing

dafa888 processes Personal Data on one or more of the following legal bases:

• Contractual necessity: Processing required to fulfil our obligations under the Terms & Conditions you accepted upon registration — including Account management, transaction processing, and KYC verification.
• Legal obligation: Processing required to comply with applicable anti-money laundering (AML) legislation, age verification requirements, regulatory reporting obligations, and responses to lawful orders from competent authorities.
• Legitimate interests: Processing necessary for dafa888's legitimate business interests, including fraud prevention, platform security, responsible gambling monitoring, and service improvement — provided such interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing for optional purposes such as direct marketing communications, where you have provided clear, affirmative consent. You retain the right to withdraw this consent at any time without prejudice to processing already carried out prior to withdrawal.

6 Data Sharing & Disclosure

dafa888 does not sell, rent, or trade your Personal Data to third parties for their own marketing purposes. We may share your data with trusted third parties only in the following circumstances:

6.1 Service Providers and Processors

We engage vetted third-party service providers who process data on our behalf under binding data processing agreements. These include payment gateway operators (for processing MYR transactions via FPX, DuitNow, and e-wallet providers), identity verification and KYC service providers, fraud detection and AML screening platforms, cloud infrastructure and hosting providers, and customer support software operators. These processors are permitted to use your data only for the specific purposes for which they were engaged and are prohibited from using it for any other purpose.

6.2 Legal and Regulatory Disclosure

We may disclose your Personal Data to competent governmental, regulatory, or law enforcement authorities where required by applicable law, court order, or regulatory direction — including in the context of anti-money laundering investigations, fraud enquiries, or responsible gambling compliance audits.

6.3 Business Transactions

In the event of a merger, acquisition, reorganisation, or sale of all or part of the Company's assets, your Personal Data may be transferred to the acquiring entity as part of the transaction. We will provide reasonable notice of any such transfer and ensure the receiving entity is bound by privacy obligations no less protective than those in this Policy.

6.4 With Your Consent

We will share your Personal Data with third parties for any other purpose only where you have provided explicit, informed consent to do so.

7 Cookies & Tracking Technologies

dafa888 uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files placed on your device when you visit the Platform. They help us maintain session continuity, remember your preferences, and analyse how players navigate the site.

Types of Cookies We Use

You may manage cookie preferences via your browser settings at any time. Note that disabling essential cookies will affect Platform functionality, including your ability to maintain a logged-in session. dafa888 does not use third-party advertising network cookies or cross-site behavioural tracking technologies.

8 Data Retention

dafa888 retains Personal Data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention periods apply:

• Account and KYC data: Retained for the duration of your Account plus a minimum of five (5) years following Account closure, in accordance with anti-money laundering record-keeping requirements.
• Transaction records: Retained for a minimum of seven (7) years following each transaction, in compliance with applicable financial record-keeping obligations.
• Customer support records: Retained for three (3) years from the date of the last support interaction.
• Marketing consent records: Retained until you withdraw consent, plus a reasonable period thereafter to evidence the withdrawal.
• Analytical and usage data: Retained in aggregated, anonymised form indefinitely for platform improvement purposes. Personally identifiable usage data is anonymised or deleted within 24 months of collection.

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised so that it can no longer be associated with any identifiable individual.

9 Data Security

dafa888 implements comprehensive technical and organisational security measures to protect your Personal Data against unauthorised access, disclosure, alteration, and destruction. Our security framework includes:

• Encryption in transit: All data transmitted between your browser or app and the dafa888 Platform is protected using TLS 1.2 or higher (256-bit SSL) encryption.
• Encryption at rest: Sensitive Personal Data and KYC documents stored on our servers are encrypted at rest using industry-standard encryption algorithms.
• Access controls: Internal access to Personal Data is restricted on a strict need-to-know basis. All staff with access to player data are subject to confidentiality obligations and undergo data protection training.
• Intrusion detection: Our infrastructure is monitored around the clock for unauthorised access attempts, unusual activity, and potential security incidents.
• Penetration testing: The Platform undergoes regular independent security assessments and vulnerability testing.
• Incident response: In the event of a data breach that poses risk to your rights and freedoms, dafa888 will notify affected players promptly and take immediate remedial action.

While we apply best-practice security measures, no data transmission or storage system can be guaranteed to be 100% secure. We encourage you to use strong, unique passwords for your Account and to notify us immediately at [email protected] if you suspect any unauthorised activity.

10 Your Data Rights

As a Data Subject, you hold the following rights in respect of your Personal Data processed by dafa888. To exercise any of these rights, contact us at [email protected] with your Account username and a brief description of your request. We will acknowledge receipt within 48 hours and respond fully within 14 business days.

• Right of Access: You have the right to request a copy of the Personal Data we hold about you, along with information about how it is being processed.
• Right to Rectification: You have the right to request correction of inaccurate or incomplete Personal Data. For Account details such as name and contact information, you may also update these directly in your Account settings.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent (and no other legal basis applies), or where the data has been unlawfully processed. Note that certain data must be retained to comply with legal obligations — we will advise you of any such limitations in response to your request.
• Right to Restriction of Processing: You may request that we restrict processing of your data in certain circumstances — for example, while a rectification request is being assessed, or where you have objected to processing pending verification of our legitimate grounds.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity, and is carried out by automated means, you have the right to receive your Personal Data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing based on legitimate interests or for direct marketing purposes. Where you object to direct marketing, we will cease processing for that purpose immediately.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

11 Children's Privacy

The dafa888 Platform is strictly intended for users aged 21 years and above. We do not knowingly collect, store, or process Personal Data from persons under the age of 21. Registration by minors is prohibited under our Terms & Conditions.

All accounts undergo mandatory age verification as part of the KYC process. Where we become aware that Personal Data has been collected from a person under the age of 21 — whether through misrepresentation or otherwise — we will immediately close the Account, delete the associated Personal Data, and return any deposited funds where feasible.

If you are a parent or guardian and have reason to believe that a minor has registered an Account on dafa888 using false information, please contact us immediately at [email protected]. We take underage access to gambling platforms very seriously and will act promptly upon notification.

12 Changes to This Privacy Policy

dafa888 reserves the right to update or modify this Privacy Policy at any time in response to changes in applicable law, regulatory guidance, platform features, or internal data practices. The revised Policy will be published on this page with an updated "Last updated" date at the top.

For material changes that significantly affect how we process your Personal Data, we will notify registered Players by email to the address associated with their Account at least 14 days before the changes take effect. Continued use of the Platform after the effective date of any revision constitutes your acceptance of the updated Policy.

We encourage you to review this page periodically to stay informed of how dafa888 protects your privacy. Prior versions of this Policy are available upon request to [email protected].

13 Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data, please contact the dafa888 team through the following channels:

• Email: [email protected]
• Live Chat: Available on the Platform, 9AM – 1AM MYT, 7 days a week
• Response Commitment: Privacy requests acknowledged within 48 hours; full response provided within 14 business days

When submitting a privacy request, please include your Account username and a clear description of the data or action concerned to help us respond efficiently.

This Privacy Policy was last reviewed and updated on 1 January 2026. It supersedes all prior versions of the dafa888 Privacy Policy.