Dota88 Privacy Policy – Player Data Protection in Malaysia

Dota88 collects personal data through several channels — account registration, platform usage, financial transactions, and communications with our support team. Below are the categories of data we collect and the purposes they serve:

We do not collect sensitive data categories such as medical information, political views, or religious beliefs. Biometric data is also not collected by dota88 unless required by specific regulatory obligations in the future.

The personal data we collect is used solely for the following purposes, all of which are directly related to the operation of the dota88 platform:

• Account Management: Create and maintain your account, verify your identity, process logins, and manage account security.
• Transaction Processing: Processes deposits via Touch 'n Go, GrabPay, DuitNow, FPX, and other Malaysian payment methods, and manages your winnings withdrawals.
• Service Provider: Enabling you to play slots, live casino, blackjack, baccarat, Sports Betting, virtual sports, and all other games available on dota88.
• VIP Program & Bonuses: Calculates and credits VIP points, cashback, rebates, and promotional bonuses based on your betting activity.
• Security & Fraud Detection: Monitor accounts for suspicious activity, prevent unauthorised access, and maintain the integrity of the platform.
• Legal Compliance: Meeting the KYC (Know Your Customer) and AML (Anti-Money Laundering) requirements set by the relevant authorities.
• Responsible Gaming: Monitors gameplay patterns to identify signs of problem gambling and activates self-control tools when necessary.
• Customer Support: Resolving complaints, responding to enquiries, and providing technical assistance to players.
• Service Communications: Sending important notifications related to your account, security, policy updates, and promotions you have agreed to receive.

We do not use your data for automated decision-making that significantly affects your rights without human involvement — for example, account suspensions for serious reasons always involve a manual review by the dota88 management team.

Dota88 does not sell or disclose your personal data to third parties for their own marketing purposes. However, there are limited situations where we need to share data to keep our services running:

• Payment Providers: Transaction information required for processing is shared with payment processors such as FPX, Touch 'n Go, GrabPay, and DuitNow providers solely to handle your deposits and withdrawals. They are bound by their own privacy policies and payment industry standards.
• Game Providers: Limited session information is shared with licensed game software providers solely to ensure games function correctly. This does not include your financial details or full identity information.
• Regulatory Authorities: dota88 may be required to disclose certain data to the relevant authorities when mandated by law — for example, in AML investigations or pursuant to a court order. This is done only where a legitimate legal obligation exists.
• Security Services: Limited technical data may be shared with cybersecurity service providers that assist dota88 in detecting and preventing fraud, cyberattacks, or platform abuse.
• Business Transfers: In the event of a merger, acquisition, or sale of dota88 assets, player data may be transferred to the successor entity, subject to prior notice to players and equivalent protections.

All third parties with whom we share data are bound by strict confidentiality and data protection agreements. We ensure they meet data protection standards equivalent to those of dota88 before any data sharing takes place.

The security of your personal data is dota88's highest priority. We implement multiple layers of technical and organisational safeguards to protect your data from unauthorised access, loss, or disclosure:

• 256-bit SSL Encryption: All communications between your device and dota88's servers are encrypted using TLS 1.3 with AES-256 encryption — the same standard used by Malaysia's major banking institutions.
• Two-Factor Authentication (2FA): We encourage all players to enable 2FA, which adds an extra layer of security through an OTP code sent to your phone each time you log in from a new device.
• 24/7 Monitoring: dota88's security monitoring system operates around the clock to detect suspicious activity, intrusion attempts, or unusual login patterns.
• Password Encryption: Your password is stored in hashed form using a one-way algorithm that cannot be reversed. No dota88 staff member is able to view your original password.
• Internal Access Controls: Access to user data within dota88's internal systems is restricted to staff who require it to perform their duties — on a strict need-to-know basis.
• Regular Security Audits: Dota88 conducts regular security testing and audits by independent security experts to identify and address any vulnerabilities before they can be exploited.
• Incident Response Plan: We have clear procedures in place to handle any personal data breach — including notifying affected players within the required timeframe.

Dota88 uses cookies and similar tracking technologies to ensure the platform functions properly and to deliver a better experience for players in Malaysia. The following are the types of cookies we use:

• Essential Cookies: Required for core platform functionality — login authentication, session management, security, and betting cart operation. These cookies cannot be disabled as the platform will not function without them.
• Functional Cookies: Saves your preferences such as interface language, display settings, and game choices so you do not need to reset them each time you log in.
• Performance Cookies: Collects anonymous data on how players use the platform to help us identify technical issues and optimise performance. This data cannot be used to personally identify you.
• Analytical Cookies: Helps us understand aggregate platform usage patterns for continuous improvement. All analytics data is collected anonymously.

You can manage cookie settings through your web browser. However, disabling essential cookies will affect the functionality of the dota88 platform. For guidance on managing cookies in Chrome, Firefox, Safari, or Edge, please refer to the privacy settings of the respective browser.

Dota88 retains your personal data for as long as necessary to fulfil the purposes described in this Privacy Policy, including meeting legal, accounting, and reporting requirements.

• Active Account Data: For as long as your account remains active on dota88, personal data associated with that account will be retained to ensure the continued operation of our services.
• Transaction Data: Financial transaction records are retained for a minimum of 7 years in accordance with applicable accounting legislation and AML compliance requirements in Malaysia. This includes records of deposits and withdrawals made via Touch 'n Go, DuitNow, GrabPay, and other payment methods.
• KYC Data: Identity verification documents (such as a copy of your MyKad) are retained for a minimum of 5 years after the business relationship ends, in accordance with AML legal requirements.
• Security Log Data: Access logs and security activity records are retained for 12 months for the purpose of investigating security incidents if required.
• Data After Account Closure: When an account is closed, most personal data will be deleted or anonymised within 90 days, except for data that must be retained to meet legal obligations.

As a dota88 player in Malaysia, you have the following rights regarding your personal data. We are committed to respecting and facilitating the exercise of these rights:

• Right of Access: You have the right to obtain a copy of the personal data we hold about you. Contact us and we will prepare a data report within 14 business days.
• Right to Rectification: If your personal data is inaccurate or incomplete, you have the right to request a correction. For certain details such as your full name, a document verification process may be required.
• Right to Erasure ("Right to be Forgotten"): In certain circumstances, you have the right to request the deletion of your personal data. This right is subject to any applicable legal retention requirements.
• Right to Restriction of Processing: You may ask us to restrict how we use your data in certain circumstances — for example, while a dispute about the accuracy of your data is being resolved.
• Data Portability Rights: You have the right to receive your personal data in a machine-readable format for transfer to another service provider should you choose to do so.
• Right to Object: You may object to the processing of your data for direct marketing purposes at any time, and we will cease such processing immediately.

To exercise any of the rights listed above, contact the dota88 privacy team by email at support@dota88.link, stating the right you wish to exercise and the information needed to verify your identity. We will respond within 14 business days.

As a responsibly operated platform, dota88 complies with the Know Your Customer (KYC) and Anti-Money Laundering (AML) requirements in place. This means we may need to collect and process additional personal data in certain situations:

• Identity Verification: For withdrawals exceeding certain limits or where there are indicators of suspicious activity, we may request a copy of your MyKad, passport, or other valid identity document.
• Source of Funds Verification: In cases where large transaction amounts require verification, we may request bank statements or other documents to confirm the legitimate source of funds.
• Transaction Monitoring: dota88's systems automatically monitor transaction patterns to identify activity that may be linked to money laundering or other financial fraud.
• Statutory Reporting: Where a transaction meets certain criteria set out under AML requirements, dota88 may be obligated to report it to the relevant authorities without prior notice to you.

We understand that the KYC process can feel like an unnecessary hurdle. But it's an important safeguard — not just for legal compliance, but also to protect all dota88 players from becoming victims or unwitting instruments of illegal activity.

Dota88 reserves the right to update this Privacy Policy from time to time to reflect changes to our services, technological developments, or new legal requirements. Whenever a material change is made, we will:

• Updating the "Last Updated" date at the top of this page.
• Sending a notification to your registered email address at least 14 days before the changes take effect.
• Displaying clear notices within the dota88 platform regarding upcoming changes.

Continued use of the dota88 platform after the effective date of any Privacy Policy update constitutes acceptance of the revised policy. If you do not agree with the changes, you have the right to close your account and request deletion of your data before the changes take effect.

For any enquiries, complaints, or requests relating to your data privacy at dota88:

• Privacy Email: support@dota88.link (please state "Privacy Enquiry" in the subject line)
• Live Chat: Available 24/7 within the dota88 platform after logging in
• Response Time: Within 14 working days for written requests, under 2 minutes for live chat