Dafa Privacy Policy – Malaysian Player Data Protection

Dafa ("we", "the platform") is fully committed to protecting the privacy and data security of every player on our online casino and Sports Betting platform. This Privacy Policy is designed to give you a clear and transparent understanding of how dafa handles your personal information as a Malaysian player.

As a platform built on player trust, dafa never sells, rents, or discloses your personal data to third parties for marketing purposes without your explicit consent. All information you provide is used solely for platform operations, account security, legal compliance, and improving your gaming experience.

By registering a dafa account and using our services, you agree to accept and comply with this Privacy Policy. Please read this document carefully. If you have any questions, dafa's support team is available 24 hours a day via Live Chat or email.

Dafa only collects data that is strictly necessary to operate the platform safely and efficiently. Below are the categories of data we collect and the purposes for which they are used:

Dafa does not collect sensitive data such as players' health information, religious beliefs, or sexual orientation. All financial data related to your RM transactions is stored in encrypted systems and accessible only to authorised personnel.

All data collected by dafa is used on a valid legal basis and strictly for the purposes clearly stated. The following are the primary ways dafa uses Malaysian players' personal data:

• Account Management: Creating and maintaining your dafa account, processing your registration, and keeping your login secure at all times.
• Financial Transaction Processing: Processing MYR deposits via Touch 'n Go eWallet, GrabPay, DuitNow, FPX, and other Malaysian payment methods, as well as processing winnings withdrawals to your bank account.
• Identity Verification (KYC): Meeting legal requirements by verifying player identities to prevent money laundering, fraud, and access by underage individuals.
• Service Communications: Sending important notifications about your account, transactions, security updates, and policy changes via email or SMS.
• Platform Improvements: Analysing usage patterns to improve the performance, speed, and overall playing experience on the dafa platform.
• Responsible Gaming: Monitoring betting patterns to identify players who may need assistance and providing appropriate self-control tools.
• Relevant Marketing: Sending you information about dafa bonuses, promotions, and new offers relevant to your playing preferences — only if you have opted in to receive them.

Dafa does not sell your personal data to any third party. However, in certain limited circumstances, dafa may need to share your data with the following parties:

• Payment Service Providers: Parties such as DuitNow, FPX, Touch 'n Go eWallet, GrabPay operators, and Malaysian banking institutions that process your financial transactions. This sharing is necessary to complete your MYR deposits and withdrawals.
• Game Software Providers: Providers of slots, Live Casino, and virtual sports content available on the dafa platform. They receive only the minimum data necessary to operate the games.
• Government Authorities: Where required by Malaysian law or a valid court order, dafa will disclose the necessary data to government authorities or law enforcement agencies.
• Fraud Prevention Services: Third-party service providers that assist dafa in detecting and preventing fraud, money laundering, and security threats.
• Business Transfers: In the event of a merger, acquisition, or sale of dafa's assets, user data may be transferred to the new entity, subject to adequate notice being given to players.

All third parties that receive data from dafa are bound by strict confidentiality agreements and are only permitted to use that data for the specific purposes agreed upon with dafa.

The security of players' personal data is dafa's highest priority. We continuously invest in the latest security infrastructure to ensure your data is always protected against unauthorised access, loss, or misuse.

The key security measures implemented by dafa are:

• 256-bit SSL Encryption: All data transmitted between your device and dafa's servers is encrypted using 256-bit SSL technology — the same standard used by Malaysia's leading banks, including Maybank and CIMB.
• Two-Factor Authentication (2FA): dafa offers two-factor authentication to add an extra layer of security to your account.
• 24/7 Monitoring: Our systems are continuously monitored to detect any suspicious activity or unauthorised access attempts.
• Encrypted Password Storage: Your account password is never stored in plain text. dafa uses industry-standard hashing algorithms to protect your password — making it unreadable even to dafa staff.
• Internal Access Controls: Only authorised dafa staff with a legitimate business need may access players' personal data, and every access is logged for audit purposes.
• Regular Security Testing: dafa conducts regular penetration testing and security audits by independent cybersecurity experts to identify and patch any system vulnerabilities.

The dafa platform uses cookies and similar tracking technologies to enhance your gaming experience and ensure the platform runs at its best. Cookies are small text files stored on your device when you visit the dafa platform.

The types of cookies used by dafa are:

• Essential Session Cookies: Required for core platform functions such as maintaining your login status during a gaming session. These cookies cannot be disabled.
• Preference Cookies: Saves your personal preferences — such as language, currency (RM), and display settings — so you don't have to reconfigure them every time you visit.
• Analytics Cookies: Helps dafa understand how players use the platform — which pages are visited most, how long play sessions last, and which features are most popular. This information is used to improve the platform.
• Marketing Cookies: Used to display relevant dafa advertisements and promotions based on your interests and browsing behaviour. You may opt out of these cookies.

You can control and manage cookies through your web browser settings. However, disabling certain cookies may affect the functionality or your playing experience on the dafa platform. For more information on managing cookies, please refer to your web browser's help documentation.

As a dafa player in Malaysia, you have the following rights regarding your personal data held by us. dafa is committed to respecting and facilitating the exercise of these rights:

To exercise any of the rights above, please contact dafa's data protection team by email at support@dafa-bangla.com clearly stating your request. dafa will process your request within 14 business days.

Dafa retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or for the period required under applicable Malaysian law.

• Active Account Data: Retained for as long as your dafa account remains active and you continue using our platform.
• Financial Transaction Data: MYR transaction records are retained for a minimum of 7 years in accordance with Malaysia's accounting and anti-money laundering legal requirements.
• KYC Data: Identity verification documents are retained for a minimum of 5 years after the account closure date.
• Communication Data: Customer support communication records are retained for 2 years for reference and dispute resolution purposes.
• Cookie Data: Session cookies are deleted when you close your browser, while persistent cookies have varying expiry periods depending on their type.

Once the designated retention period has ended, dafa will securely delete or anonymise your data so that it can no longer be linked to your identity.

The dafa platform is strictly for individuals aged 21 years and above. dafa does not knowingly collect or process personal data of any individual under the age of 21.

Should dafa discover that personal data of an individual under the age of 21 has been inadvertently collected, we will take the following steps immediately:

• Immediate closure of the associated account.
• Deleting all associated personal data from our systems.
• Reporting the incident to the relevant authorities where required.

If you suspect that someone under the age of 21 has registered an account with dafa, please notify us immediately via email support@dafa-bangla.com. dafa takes its social responsibility seriously to ensure our platform remains inaccessible to underage individuals.

Dafa reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, new legal requirements, or platform improvements. Any material changes will be communicated to players via:

• A clear notice on the dafa platform's main page
• Email notifications to all registered players
• Updates the "Last Updated" date at the top of this page

Your continued use of the dafa platform following any updates to this Privacy Policy will be considered your acceptance of the revised terms. We recommend checking this page periodically to stay informed on how dafa protects your privacy.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how dafa handles your personal data, please reach out to us through the following channels:

• Live Chat: Available 24/7 directly on the dafa platform — the fastest way to get an immediate response.
• Email: support@dafa-bangla.com – for enquiries requiring detailed clarification or document attachments.

Dafa is committed to responding to all privacy-related enquiries within 3 business days. For formal requests relating to your personal data rights, the processing period is up to 14 business days.