dis88 Privacy Policy

1.1 This Privacy Policy ("Policy") describes how dis88 ("dis88", "we", "us", "our") collects, uses, stores, and discloses personal data relating to individuals ("you", "your", "Player", "User") who access or use the dis88 platform at dis88.bio.

1.2 dis88 is committed to protecting your personal data and processing it in a lawful, fair, and transparent manner in accordance with applicable data protection legislation and the data protection obligations imposed by dis88's international gaming authority licence.

1.3 By registering an account on dis88.bio or continuing to use the platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree to this Policy, you must not use the dis88 platform.

1.4 This Policy should be read alongside the dis88 Terms & Conditions. Defined terms not defined in this Policy carry the meanings given in the Terms & Conditions.

2.1 dis88 collects personal data in the following categories:

Identity Data: Full legal name, date of birth, gender, nationality, and government-issued identification document number (for KYC purposes).

Contact Data: Email address, Malaysian phone number, and residential or correspondence address.

Financial Data: Payment method identifiers (e-wallet account reference, masked bank account details), transaction history, deposit and withdrawal records, and wallet balances. dis88 does not store complete payment card numbers or full bank account numbers on its servers.

Gaming Data: Bet history, game session records, wagering activity, responsible gaming settings, and self-exclusion status.

Technical Data: IP address, device type and operating system, browser type and version, session tokens, login timestamps, and geolocation data (country/region level).

Communications Data: Records of live chat sessions, email correspondence with support, and any complaints or feedback submitted to dis88.

Marketing Data: Your stated preferences for receiving promotional communications and your response history to dis88 promotional offers, where you have opted in to receive such communications.

2.2 dis88 does not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data, except where age verification processes require document submission containing such data, in which case the data is processed solely for age verification purposes and is not retained beyond the verification process.

dis88 uses your personal data for the following purposes:

• Account management: To create, maintain, and secure your dis88 account, including processing your registration, verifying your identity under KYC requirements, and managing account settings.
• Service delivery: To enable your access to games, sportsbook markets, live dealer tables, and all other features of the dis88 platform.
• Transaction processing: To process your deposits and withdrawal requests, verify payment method ownership, detect and prevent fraudulent transactions, and comply with anti-money laundering obligations.
• Regulatory compliance: To meet obligations imposed by dis88's gaming licence, including player verification, responsible gaming requirements, suspicious transaction reporting, and record-keeping mandates.
• Customer support: To respond to your queries, process complaints, investigate disputes, and improve support quality.
• Platform improvement: To analyse aggregated usage data, identify technical issues, optimise platform performance, and develop new features for dis88 players.
• Marketing communications: Where you have provided consent, to send you promotional offers, bonus notifications, and updates about new games or features at dis88. You may withdraw consent at any time through your account settings or by contacting [email protected].
• Fraud prevention and security: To detect, investigate, and prevent cheating, collusion, multi-accounting, bonus abuse, and other prohibited conduct described in the dis88 Terms & Conditions.

4.1 dis88 processes your personal data on one or more of the following legal bases:

• Contractual necessity: Processing required to perform the contract between dis88 and you as a registered player, including account management, game access, and payment processing.
• Legal obligation: Processing required to comply with regulatory obligations under dis88's gaming licence and applicable anti-money laundering and data protection laws.
• Legitimate interests: Processing carried out in pursuit of dis88's legitimate business interests, including fraud prevention, platform security, and service improvement, where those interests are not overridden by your rights and freedoms.
• Consent: Processing based on your freely given, specific, and informed consent, such as processing for direct marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

5.1 dis88 does not sell your personal data to third parties for their own marketing or commercial purposes.

5.2 dis88 may share your personal data with the following categories of recipients, only to the extent necessary for the stated purpose:

• Payment processors and e-wallet providers (including Touch n Go eWallet, Boost, GrabPay, Maybank, and CIMB) — for the processing of deposits and withdrawal transactions;
• Identity and KYC verification service providers — for the purpose of verifying player identity and age in compliance with dis88's licensing obligations;
• Game technology providers — who supply certified casino games and sportsbook platforms integrated into dis88, and who may receive technical session data as part of game delivery;
• Regulatory authorities — including dis88's gaming licence authority and relevant financial intelligence units, where disclosure is required by law or the terms of dis88's licence;
• Law enforcement agencies — where required by lawful order or where dis88 reasonably believes disclosure is necessary to prevent or investigate fraud, money laundering, or other criminal activity;
• Professional advisers — including legal counsel, auditors, and compliance consultants, subject to professional confidentiality obligations.

5.3 Where dis88 engages third-party service providers to process personal data on its behalf, those providers are contractually bound to process such data only on dis88's instructions, to maintain appropriate security measures, and not to disclose it for their own purposes.

6.1 dis88.bio uses cookies and similar tracking technologies to operate the platform, maintain your session, remember your preferences, and collect analytics data to improve platform performance.

6.2 The following categories of cookies are used on dis88.bio:

• Strictly necessary cookies: Required for platform operation, session authentication, and security. These cookies cannot be disabled without disrupting platform functionality.
• Functional cookies: Used to remember your language preferences, display settings, and responsible gaming tool configurations.
• Analytics cookies: Used to collect aggregated, anonymised information about how players use dis88.bio, enabling platform improvements. This data does not identify individual users.
• Marketing cookies: Used only where you have provided consent, to personalise promotional communications and measure campaign effectiveness.

6.3 You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair your ability to use the dis88 platform.

7.1 dis88 retains your personal data for as long as your account remains active and for a period thereafter as required by applicable law and dis88's regulatory obligations. The specific retention periods applicable to different categories of data are as follows:

• Account and identity data: Retained for the duration of your account and for a minimum of five (5) years following account closure, as required by anti-money laundering obligations under dis88's licensing framework.
• Transaction records: Retained for a minimum of five (5) years following each transaction, in compliance with applicable financial record-keeping requirements.
• Gaming activity data: Retained for five (5) years following the relevant gaming session or activity.
• Support communications: Retained for three (3) years following resolution of the relevant matter, unless the communication forms part of a compliance or dispute record requiring longer retention.
• Marketing consent records: Retained for the duration of your consent and for one (1) year following withdrawal of consent, to demonstrate compliance.

7.2 Following the expiry of applicable retention periods, dis88 will securely delete or anonymise your personal data in accordance with its data management procedures.

8.1 dis88 implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and dis88 servers;
• Encryption of sensitive data fields at rest, including identity document data and financial identifiers;
• Role-based access controls limiting employee access to personal data to those with a documented operational need;
• Regular security assessments, penetration testing, and vulnerability management;
• Multi-factor authentication requirements for administrative access to systems containing personal data.

8.2 In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, dis88 will notify affected individuals and relevant regulatory authorities in accordance with applicable law and dis88's breach response procedures.

8.3 No method of electronic transmission or storage is completely secure. While dis88 uses reasonable and appropriate security measures, it cannot guarantee the absolute security of your personal data. You are responsible for maintaining the security of your dis88 login credentials.

9.1 Subject to applicable law, you have the following rights in relation to your personal data held by dis88:

• Right of access: You may request a copy of the personal data dis88 holds about you;
• Right to rectification: You may request correction of inaccurate or incomplete personal data;
• Right to erasure: You may request deletion of your personal data where retention is no longer necessary, subject to dis88's legal and regulatory retention obligations;
• Right to restrict processing: You may request that dis88 limits how it uses your personal data in certain circumstances;
• Right to data portability: Where processing is based on consent or contract and carried out by automated means, you may request a structured, machine-readable copy of the data you have provided to dis88;
• Right to object: You may object to processing based on legitimate interests or for direct marketing purposes;
• Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

9.2 To exercise any of the above rights, please contact dis88 at [email protected] with your registered email address and a clear description of your request. dis88 will respond within thirty (30) calendar days. dis88 may request additional verification of your identity before actioning your request.

10.1 The dis88 platform is strictly for adults aged 21 and above. dis88 does not knowingly collect personal data from persons under the age of 21. If dis88 discovers that a minor has registered an account, that account will be immediately closed, all associated funds will be frozen pending investigation, and the personal data will be deleted or securely quarantined in accordance with applicable law.

10.2 If you have reason to believe that a minor has registered on the dis88 platform, please contact [email protected] immediately so that appropriate action can be taken.

11.1 The dis88 platform may contain references to third-party services, such as payment providers. dis88 is not responsible for the privacy practices of any third-party websites or services. Where you access third-party services — for example, by authenticating a Touch n Go eWallet payment — you do so subject to the privacy policy of that third party. dis88 recommends reviewing the privacy policies of all third parties you interact with in connection with your use of dis88.

12.1 dis88 may update this Privacy Policy from time to time to reflect changes in our data practices, regulatory requirements, or platform functionality. The "Last Updated" date at the top of this page will be revised accordingly.

12.2 Where changes are material, dis88 will notify registered players via the email address on file or via an in-platform notification. Continued use of the dis88 platform following notification of a material change constitutes acceptance of the revised Policy.

13.1 dis88 is the data controller for personal data collected through dis88.bio. For any privacy-related enquiries, data subject rights requests, or concerns about this Policy, please contact the dis88 Data Protection team:

dis88 will acknowledge all data subject rights requests within five (5) business days and will endeavour to fulfil requests within thirty (30) calendar days. Complex requests may require additional time, in which case dis88 will notify you of the extended timeframe and the reason for the delay.