Dadu88's Commitment to Your Privacy
At dadu88, privacy is not just a legal document we need to have in place — it is part of how we run our business. Since day one, we have built a data management system centred on member trust. We know that when you share personal information with us, you are placing significant trust in us, and we do not take that responsibility lightly.
This Privacy Policy clearly explains what information we collect from you, why we need it, how we store and protect it, and the rights you hold over your own personal data. This document is written in plain language because we want every member to genuinely understand what happens with their data — not just tick an acceptance box without reading.
This policy applies to all dadu88 platform users, including website visitors, registered members, and anyone who interacts with our services via web browser or mobile app. By using dadu88 services, you agree to the collection and use of information as described in this Privacy Policy.
How dadu88 Protects Your Data
256-bit SSL Encryption
All data transmitted between your device and dadu88's servers is protected by 256-bit SSL encryption — the same standard used by leading banking institutions. No third party can intercept your information while it is in transit.
Secure Data Storage
Your personal data is stored on servers protected by multi-layered firewalls and intrusion detection systems operating 24/7. Access to member personal databases is restricted to authorised personnel only.
Strict Access Control
Dadu88's access control system ensures that only staff with a legitimate business need are able to access member personal data. Every access is logged and reviewed regularly by our internal security team.
No Data Selling
Dadu88 has never and will never sell member personal data to third parties for marketing purposes. Your information is used solely for platform operations and user experience improvement as stated in this policy.
Two-Factor Authentication
Dadu88 supports two-factor authentication (2FA) to add an extra layer of security to your account. Even if your password is compromised, an attacker would still require verification from your device to gain access.
Periodic Policy Review
This Privacy Policy is updated periodically to reflect changes in our operational practices and current legal requirements. We will notify members of any material changes via an in-platform notice.
Dadu88 Full Privacy Policy
Information We Collect
Dadu88 collects your personal information through several different channels. The following are the categories of information we process:
Information you provide directly:
- Full name, date of birth, and gender during the registration process.
- Email address and mobile number for verification and communication purposes.
- Bank account or digital wallet details registered for financial transactions.
- A copy of your identity document (MyKad or passport) during the KYC process.
- Residential address and postcode for location verification.
Information collected automatically:
- Your device's IP address and geolocation data (country/state level only).
- Web browser type, operating system, and device model in use.
- Session data includes pages visited, access times, and navigation patterns within the platform.
- Transaction records including deposit history, withdrawals, and gaming activity.
- Cookies and similar tracking technologies to enhance user experience.
Purpose of Data Use
Every piece of information we collect has a clear and legitimate purpose. We use your personal data for the following purposes:
| Purpose of Use | Data Type | Legal Basis |
|---|---|---|
| Registration & account management | Name, email, phone | Contract performance |
| Identity verification (KYC) | MyKad, passport | Legal obligations |
| Financial transaction processing | Bank/wallet details | Contract performance |
| Fraud detection & security | IP, session logs, activity | Legitimate interests |
| Customer Support | All related data | Contract performance |
| Platform improvement & analytics | Anonymous session data | Legitimate interests |
| Marketing communications (with consent) | Email, phone | Consent |
Sharing Information with Third Parties
Dadu88 does not sell, rent, or disclose your personal information to third parties for their own marketing purposes. However, we do share certain information with parties necessary to operate our platform:
- Payment service providers: Required transaction information is shared with providers such as DuitNow, FPX, Touch 'n Go, Boost, and GrabPay to securely process your deposits and withdrawals.
- Game software providers: To enable gaming functions to operate, minimal account information is shared with approved gaming platform providers. All such providers are bound by strict data confidentiality agreements.
- Regulatory authorities: We may need to disclose information to Malaysian authorities when required by law or court order.
- Identity verification services: KYC information is shared with approved identity verification service providers to authenticate your documents.
All third parties we work with are required to meet data security standards equal to or higher than our own. We will not transfer your data outside Malaysia without adequate safeguards in place.
Your Rights as a Data Subject
Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have certain rights regarding your personal data held by dadu88:
Right of Access
Requesting a copy of the personal data we hold about you.
Right to Rectification
Requesting correction of inaccurate or incomplete data.
Right to Erasure
Requesting data deletion where permitted by law.
Right to Object
Objecting to the processing of your data for direct marketing purposes.
Right to Restriction
Requesting restriction of processing under certain circumstances.
Right to Portability
Requesting your data in a portable format.
To exercise any of the rights above, please contact our data protection team via the in-platform live support. We will process your request within 21 business days.
Cookies & Tracking Technologies
The dadu88 platform uses cookies and similar technologies to enhance your experience. Below are the types of cookies we use:
- Essential Cookies: Required for core platform functions such as login session authentication and security. These cookies cannot be disabled as the platform will not function without them.
- Preference Cookies: Saving your preferences such as language, time zone, and display settings so you don't have to reconfigure them each time.
- Analytics Cookies: Helping us understand how members use the platform so we can improve its design and functionality. This data is collected anonymously.
- Security Cookies: Used to detect suspicious activity and protect your account from unauthorised access.
You can manage cookie settings through your web browser. However, disabling essential cookies may affect platform functionality. Our cookies do not track your activity on other websites.
Data Retention Period
Dadu88 retains your personal data only for as long as it is needed for the purposes stated in this policy, or as required by applicable law:
- Active account data: Retained for as long as your account is active on the dadu88 platform.
- Post-account closure data: Transaction and identity records are retained for a minimum of 7 years after account closure, in line with Malaysia's anti-money laundering (AML) legal requirements.
- Marketing log data: Marketing consent data is retained until you withdraw that consent.
- Security logs: Retained for 12 months for security incident investigation purposes.
- Anonymous analytics data: Can be retained indefinitely as it cannot be linked to any specific individual.
When the retention period expires, data is securely deleted using methods that ensure it cannot be recovered.
Data Security & Incident Response
Dadu88 implements a range of technical and organisational measures to protect your personal data from unauthorised access, loss, or damage:
- Data encryption in transit (TLS 1.3) and at rest (AES-256).
- Periodic penetration testing conducted by independent cybersecurity firms.
- Real-time threat monitoring using a SIEM (Security Information and Event Management) system.
- Mandatory cybersecurity awareness training for all staff who handle personal data.
- A comprehensive incident response plan that is tested and updated annually.
In the event of a data breach that affects the rights and freedoms of members, dadu88 will notify the relevant authorities within the timeframe required by law, and will inform affected members as promptly as possible through available channels.
Changes to the Privacy Policy
Dadu88 reserves the right to update this Privacy Policy from time to time to reflect changes in our business practices, new technology requirements, or updates to applicable data protection laws.
When we make material changes, we will:
- Updating the "Last Updated" date at the top of this page.
- Displaying a clear notice on the platform at least 14 days before changes take effect.
- Sending notifications via your registered email for changes that significantly affect your rights.
Continued use of the dadu88 platform after changes take effect constitutes your acceptance of the updated Privacy Policy. If you disagree with any changes, you have the right to close your account before they take effect.