Privacy Policy — Dash88

This Privacy Policy (the "Policy") is issued by Dash88 Group, the operator of the online gaming platform accessible at https://dash88.click (the "Platform"). It sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by Dash88.

Dash88 is committed to protecting the privacy and personal data of all individuals who interact with our Platform, including registered players, prospective users, and visitors from across Malaysia and internationally. We process personal data in accordance with applicable data protection legislation, including the Personal Data Protection Act 2010 (Malaysia) (PDPA 2010) and any other laws or regulations applicable to the jurisdictions in which we operate.

Please read this Policy carefully before providing us with any personal data. By using the Platform, registering an account, or submitting personal information to Dash88, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.

For the purposes of this Policy, the following terms shall have the meanings set out below:

The Data Controller responsible for your Personal Data in connection with the Platform is Dash88 Group, the operator of https://dash88.click. As Data Controller, Dash88 Group determines the purposes for which, and the means by which, your Personal Data is processed.

Dash88 Group has appointed designated personnel responsible for overseeing data protection compliance. Where Dash88 engages third-party service providers to process Personal Data on its behalf, it does so under binding contractual agreements that require those providers to process data only in accordance with Dash88's instructions and applicable data protection law.

For all data-related enquiries, including the exercise of your rights under this Policy, please refer to the contact details provided in Section 16 of this Policy.

Dash88 collects the following categories of Personal Data in connection with the operation of the Platform:

Dash88 collects Personal Data through the following means:

• Direct Provision: Data you actively submit during account registration, KYC verification, deposit or withdrawal requests, form submissions, live chat interactions, and email correspondence;
• Automated Collection: Technical and Usage Data collected automatically when you access or navigate the Platform, through server logs, cookies, pixel tags, and similar tracking technologies;
• Third-Party Sources: Where permitted by law, Dash88 may receive Personal Data from identity verification service providers, payment processors (including FPX operators and e-wallet providers such as Touch 'n Go eWallet, Boost, and GrabPay), fraud prevention partners, and publicly available sources;
• Gaming Activity Logs: Data automatically generated through your use of gaming and betting services on the Platform, including bet placements, game results, and session activity.

Dash88 processes your Personal Data for the following purposes, under the corresponding lawful bases:

Where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

Dash88 does not sell or rent Personal Data to third parties. We may share your Personal Data with the following categories of recipients, strictly on a need-to-know basis and subject to contractual data protection obligations:

• Payment Processors: Financial institutions and payment service providers facilitating your deposits and withdrawals, including FPX-participating banks (Maybank, CIMB, Public Bank, Hong Leong), DuitNow operators, and e-wallet providers (Touch 'n Go eWallet, Boost, GrabPay);
• Identity Verification Providers: Third-party KYC and AML screening services engaged to verify your identity and assess compliance risk;
• Technology and Infrastructure Providers: Cloud hosting, platform software, and cybersecurity service providers who process data on Dash88's behalf under binding data processing agreements;
• Regulatory and Law Enforcement Authorities: Where required by law, court order, or regulatory direction, Dash88 may disclose Personal Data to competent authorities without prior notice to you;
• Professional Advisors: Legal counsel, auditors, and compliance consultants, subject to professional confidentiality obligations;
• Business Successors: In the event of a merger, acquisition, or transfer of all or substantially all of Dash88's assets, Personal Data may be transferred to the successor entity, subject to equivalent privacy protections.

Given the international nature of online gaming infrastructure, your Personal Data may be transferred to and processed in countries outside Malaysia, including countries whose data protection laws may differ from those applicable in Malaysia. In all such cases, Dash88 ensures that appropriate safeguards are in place to protect your Personal Data, including:

• Entering into standard contractual clauses approved by competent data protection authorities;
• Ensuring that recipient entities maintain data protection standards that are substantially equivalent to those required under PDPA 2010;
• Conducting transfer impact assessments where required by applicable law.

If you require further information about the specific safeguards applied to any international transfer of your Personal Data, please contact us using the details in Section 16.

Dash88 retains Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, having regard to applicable legal, regulatory, tax, accounting, and reporting requirements. The following general retention periods apply:

• Account and Identity Data: Retained for the duration of your active Account and for a minimum of five (5) years following Account closure, in accordance with anti-money laundering record-keeping obligations under Malaysian law;
• Financial Transaction Data: Retained for a minimum of seven (7) years from the date of the transaction, in accordance with applicable financial record-keeping requirements;
• Gaming Activity Logs: Retained for up to three (3) years from the date of the gaming session, unless longer retention is required by law;
• Customer Support Records: Retained for up to three (3) years from the date of the support interaction;
• Technical and Usage Data: Typically retained for up to thirteen (13) months, or such shorter period as is consistent with applicable cookie and analytics retention standards;
• Marketing Consent Records: Retained for the duration of your consent and for a reasonable period thereafter to demonstrate compliance.

At the expiry of applicable retention periods, Personal Data is securely deleted, anonymised, or archived in accordance with Dash88's internal data lifecycle management procedures.

The Dash88 Platform uses cookies and similar technologies (including pixel tags and local storage) to operate and improve the Platform, personalise your experience, and analyse usage patterns. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential for the basic functionality of the Platform, including session management, authentication, and security. These cannot be disabled without impairing core Platform functionality;
• Performance and Analytics Cookies: Used to collect aggregated information about how visitors use the Platform — for example, which pages are visited most frequently and whether users encounter error messages. This data is used to improve the Platform's performance;
• Functionality Cookies: Enable the Platform to remember your preferences, such as language settings and game category selections, to provide a more personalised experience;
• Marketing and Retargeting Cookies: Used to deliver content and promotions relevant to your interests, based on your activity on the Platform. These are only set with your consent.

You may manage your cookie preferences through your browser settings. Please note that disabling certain categories of cookies may affect your experience on the Platform. Strictly necessary cookies cannot be disabled via browser settings without significantly impairing functionality.

Subject to applicable law and certain exceptions, you hold the following rights in respect of your Personal Data processed by Dash88. You may exercise any of these rights by contacting us using the details set out in Section 16.

Dash88 will respond to all valid data subject requests within thirty (30) days of receipt, or within such other period as required by applicable law. Where requests are complex or numerous, this period may be extended by a further sixty (60) days, in which case we will notify you accordingly.

The Dash88 Platform is strictly intended for adults aged 21 years and above. Dash88 does not knowingly collect or process Personal Data from individuals under the age of 21. Registration and use of the Platform by persons under 21 is strictly prohibited.

If Dash88 becomes aware that Personal Data has been inadvertently collected from a person under the age of 21, we will take immediate steps to delete that data and close the associated Account. If you believe that a minor has provided Personal Data to Dash88, please contact us immediately using the details in Section 16.

Dash88 has implemented a comprehensive suite of technical and organisational security measures designed to protect your Personal Data against unauthorised access, loss, destruction, alteration, or disclosure. These measures include, but are not limited to:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and our servers is encrypted using industry-standard transport layer security protocols — consistent with the standards applied by Malaysian banks operating via FPX and DuitNow;
• Data Encryption at Rest: Sensitive Personal Data stored on Dash88 servers, including financial records and identity documents, is encrypted at rest using AES-256 or equivalent algorithms;
• Access Controls: Role-based access control policies restrict internal access to Personal Data to authorised personnel only, on a strict need-to-know basis;
• Two-Factor Authentication: Available for all User accounts and mandated for internal staff accessing Personal Data;
• Regular Security Audits: Dash88 conducts periodic penetration testing, vulnerability assessments, and security audits of its platform infrastructure;
• Incident Response: A documented data breach incident response plan is maintained and tested regularly to ensure rapid and effective response in the event of a security incident.

While Dash88 takes reasonable and appropriate measures to protect your Personal Data, no security system is entirely impenetrable. Users are encouraged to use strong, unique passwords for their Accounts and to enable two-factor authentication where available.

The Dash88 Platform may reference third-party services — such as payment providers, game software suppliers, and banking partners — in the course of delivering our services. Dash88 is not responsible for the privacy practices of any third-party services, and this Policy does not apply to data collected by those parties through their own platforms or interfaces.

Where Dash88 shares your data with third-party processors as described in Section 7, it does so under binding data processing agreements that require those processors to handle your data in compliance with applicable law and Dash88's instructions. However, Dash88 cannot accept responsibility for the independent practices of third parties beyond the scope of those agreements.

We encourage you to review the privacy policies of any third-party services you interact with directly, including your bank, e-wallet provider, and any other payment method operator.

Dash88 reserves the right to update or amend this Privacy Policy at any time. When material changes are made, Dash88 will provide advance notice via one or more of the following methods: a notice displayed on the Platform, a notification upon login to your Account, or an email to your registered address. The "Last Updated" date at the top of this Policy will be revised to reflect the effective date of any amendments.

Your continued use of the Platform following the effective date of any amended Policy constitutes your acceptance of the revised terms. If you do not agree with the amendments, you should cease using the Platform and contact us to exercise your data rights or request Account closure.

If you have any questions about this Privacy Policy, wish to exercise your data rights, or have a privacy-related concern, please contact the Dash88 data team through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week, via the Dash88 Platform;
• Email: [email protected] — please include "Privacy Request" in the subject line;
• Response Time: All privacy-related enquiries are acknowledged within 5 business days and responded to substantively within 30 days.

For requests relating to the exercise of data subject rights, please provide your registered Account username, full legal name, and a clear description of your request to enable us to process it efficiently. Dash88 may request identity verification before actioning your request.