Privacy Policy Dafa — Your Personal Data Protection

1.Introduction & Scope of This Privacy Policy

Dafa takes the privacy of every member who entrusts us with their personal information very seriously. This Privacy Policy has been drafted to explain clearly and transparently how we handle your personal data — from the point of collection through to storage and deletion.

As an online betting platform operating for users in Malaysia, dafa is fully bound by the provisions of Personal Data Protection Act 2010 (PDPA) Malaysia. We believe that compliance with data protection laws is not merely an obligation — it is the foundation of trust that builds a lasting relationship between us and dafa members.

This policy explains:

• What types of personal data we collect from you
• Why and how we use that data
• With whom your data may be shared and under what circumstances
• The security measures we take to protect your data
• Your rights regarding your personal data and how to exercise them

If you are under 18 years of age, you are not permitted to use the dafa platform and, as such, we will not collect personal data from individuals below that age.

2.Personal Data We Collect

Dafa collects various types of personal data depending on how you interact with our platform. Below is a summary of the data we collect:

3.Data Collection & Processing Purposes

Every piece of data we collect has a clear and lawful purpose. Dafa processes your personal data for the following purposes:

• Account management: Creating, verifying and maintaining your dafa account so you can log in and use all platform features seamlessly.
• Transaction processing: Processing deposits, withdrawals and bonus payments quickly and securely through approved payment channels.
• Identity verification (KYC): Verifying your identity to comply with anti-money laundering (AML) requirements and prevent fraud on the platform.
• Personalise your experience: Personalising content, promotions and game recommendations based on your preferences and playing habits.
• Customer support: Resolving enquiries, complaints and technical issues you report to our team more efficiently.
• Platform security: Detecting and preventing fraudulent activity, account abuse and other security threats.
• Legal compliance: Fulfilling reporting obligations to the relevant authorities when required by law.
• Marketing communications: Sending promotional information, special offers and the latest dafa news — subject to your communication preferences.

Dafa will not process your personal data for any purposes not stated above without first obtaining your consent.

4.Data Sharing & Disclosure

Dafa does not sell or rent your personal data to any party for marketing purposes. However, in certain circumstances, your data may be shared with the following parties:

• Payment service providers: DuitNow, FPX, Touch 'n Go eWallet, Boost, and online banking network providers require transaction information to process your payments securely.
• Technology service providers: Hosting, cybersecurity, and technical infrastructure partners who help us operate the dafa platform stably and securely.
• Game software providers: Third-party game providers such as live casino solution providers may receive the minimum game data required to operate your game session.
• Legal authorities: Dafa will disclose required data to the police, courts, or regulatory bodies when mandated by a court order or applicable law.

5.Data Security Measures

Dafa continually invests in the latest security technologies and procedures to ensure your personal data is protected against unauthorised access, loss, misuse, or unintended disclosure.

Key security measures we have implemented include:

• End-to-end encryption: All data communications between the dafa platform and your device are encrypted using TLS 1.3 — the highest encryption standard currently available.
• Two-factor authentication (2FA): Members are encouraged to enable 2FA for an added layer of protection that makes unauthorised access to your account significantly more difficult.
• 24/7 Monitoring: Our security systems monitor for unusual activity around the clock and will trigger an immediate alert if any threat is detected.
• Regular security audits: Independent third parties conduct regular security audits to identify and patch any vulnerabilities in our systems.
• Staff training: All dafa staff who handle personal data undergo mandatory and regular data security training.

6.Cookies & Tracking Technologies

Dafa uses cookies and similar tracking technologies to enhance your user experience, understand platform usage patterns, and ensure the security of your login session.

Types of cookies we use:

• Essential Cookies: Required for core platform functions such as session authentication, login security, and language preferences. These cookies cannot be disabled.
• Performance Cookies: Helps us understand how members use the platform so we can continually improve the user experience. Data is collected anonymously.
• Functional Cookies: Saving your preferences such as favourite game selections, display settings and login information for a smoother return experience.
• Marketing Cookies: Used to display relevant advertisements and promotions based on your interests. You may opt out of these cookies through your web browser settings.

You can manage your cookie preferences through your web browser settings. Please note that disabling certain cookies may affect the functionality of some dafa platform features.

7.Your Rights Under PDPA

As a data subject under Malaysia's PDPA, you have the following rights regarding your personal data held by dafa:

To exercise any of the above rights, please contact the dafa data protection team via email at [email protected]. We will process your request within 14 business days from the date of receipt of the completed request.

8.Data Retention Period

Dafa retains your personal data only for as long as necessary to fulfil the purposes stated in this policy or as required by applicable law. The following are our general data retention guidelines:

• Active account data: Retained for the duration of your membership and for 5 years after account closure for legal compliance purposes.
• Financial transaction records: Retained for 7 years in accordance with applicable Malaysian financial legislation.
• KYC Documents Retained for 5 years after the business relationship ends or in accordance with applicable AML requirements.
• Support communication logs: Retained for 2 years for reference and dispute resolution purposes.
• Technical data and access logs: Retained for 12 months for security and fraud detection purposes.

Upon expiry of the designated retention period, your personal data will be securely deleted or permanently anonymised in accordance with the data deletion procedures established by the dafa IT team.

9.Privacy Policy Amendments

Dafa reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data management practices, new legal requirements, or relevant technological developments.

Any material amendments will be notified to all active members via their registered email or through a prominent notification on the dafa platform at least 14 days before the amendment takes effect. The "Last Updated" date at the top of this document will always reflect the latest version.

Your continued use of the dafa platform after the effective date of any amendment constitutes your acceptance of the revised policy. If you disagree with the changes made, you have the right to close your account and we will process any valid withdrawal request for your remaining balance in accordance with our standard procedures.

10.Contact Our Data Protection Team

If you have any questions, concerns, or complaints regarding how dafa handles your personal data, we welcome you to contact us directly.

You may also contact the Department of Personal Data Protection Malaysia (JPDP) if you believe that dafa has failed to comply with the provisions of PDPA 2010. Further information about JPDP is available on their official website.