Privacy Policy dwpo89 – Your Data Protection

Introduction & Privacy Policy Scope

dwpo89 treats member privacy as a responsibility that must never be taken lightly. We understand that when you trust us with your personal information, it is a commitment we must uphold with full integrity. This Privacy Policy is designed to provide complete clarity on how your data is handled — from the moment you register an account to every daily transaction you make on our platform.

This policy applies to all users who access the dwpo89 platform via the official website or mobile app. It covers all information you provide directly to us, data collected automatically during use, and information obtained through our service partners.

Dwpo89 operates in compliance with industry best practices for data protection and is committed to never selling, renting, or disclosing your personal information to any third party without your consent, except where required by applicable Malaysian law.

Types of Personal Data Collected

Dwpo89 only collects data necessary to provide members with a safe, efficient, and high-quality service. The data we collect falls into three main categories:

Data you provide directly:

• Full name as it appears on official identification documents
• National identification card or passport number for KYC verification purposes
• Date of birth to verify that you meet the minimum age requirement of 18 years
• An active Malaysian mobile phone number
• A valid and active email address
• Bank account or digital wallet details for processing deposits and withdrawals
• Supporting documents such as bank statements or utility bills for address verification

Automatically collected data:

• IP address and device location information
• Device type, model, operating system, and browser version
• Login history and session activity, including usage times and duration
• Gaming data including bets, wins, and activity patterns
• Cookie data and similar tracking technologies

Data from third-party sources:

• Identity verification information from accredited KYC check services
• Financial risk information from fraud prevention service providers
• Technical data from our CDN providers and hosting infrastructure

Data Category	Example	Primary Purpose
Identity	Name, IC, date of birth	KYC verification, fraud prevention
Contact	Email, phone number	Communications, two-factor authentication
Financial	Bank account, DuitNow	Deposits, withdrawals, AML compliance
Technical	IP, device, browser	Security, fraud detection
Behaviour	Game history, wagering	Responsible gaming, platform improvements

How We Use Your Personal Data

Every piece of data we collect has a clear and lawful purpose. dwpo89 does not use your personal data for any purpose beyond what is stated below:

• Account management: To securely create, maintain, and manage your member account.
• Transaction processing: To accurately and securely process deposits, withdrawals, and all financial transactions.
• Identity verification (KYC): To meet legal compliance requirements and prevent fraud and money laundering.
• Platform security: To detect and prevent unauthorised activity, hacking attempts, and system abuse.
• Service communications: To send transaction notifications, security updates, and important information related to your account.
• Product improvement: To analyse usage patterns and improve platform quality, new features, and the overall user experience.
• Responsible gaming: To monitor wagering patterns and identify members who may need support through our responsible gaming programme.
• Marketing (with consent): To deliver promotional offers, bonuses, and the latest updates — only to members who have consented to receive marketing communications.

Data Encryption & Security Measures

Dwpo89 continuously invests in the latest security infrastructure to ensure your personal and financial information remains protected at all times. We employ a comprehensive combination of security technologies and procedures:

• 256-bit SSL/TLS encryption: All communications between your device and dwpo89 servers are encrypted using 256-bit SSL/TLS protocol — the gold standard in banking and digital finance.
• Data encryption at rest: Sensitive data stored in our databases is encrypted using the AES-256 algorithm — your data remains unreadable even to internal staff without authorised access.
• Two-factor authentication (2FA): dwpo89 supports 2FA via SMS and authenticator apps for an additional layer of protection at login.
• 24/7 real-time monitoring: Our intrusion detection system (IDS) operates around the clock to identify and neutralise security threats before they can impact member data.
• Regular security audits: dwpo89's infrastructure undergoes periodic independent security audits by accredited cybersecurity firms to ensure there are no vulnerability gaps.
• Tiered access controls: Only staff with a legitimate business need are granted access to member personal data, and all access is logged and monitored.

Data Sharing with Third Parties

Dwpo89 does not sell, rent, or trade member personal data. However, in certain limited and lawful situations, we may share some of your information with the following parties:

• Payment service providers: Transaction information is shared with payment processors such as FPX, DuitNow, Touch 'n Go, and GrabPay solely for the purpose of processing your financial transactions.
• KYC service providers: Identity data is shared with accredited KYC verification partners for legally mandated identity verification purposes.
• Legal authority: dwpo89 will disclose member information to government authorities, courts, or law enforcement agencies when required to do so by a valid court order or applicable legislation.
• Technical service providers: Cloud and hosting infrastructure providers bound by strict confidentiality agreements may process some technical data for platform operational purposes.
• Fraud prevention analysts: In cases of suspected fraud or money laundering, relevant data may be shared with the appropriate financial investigation units.

All third parties we work with are bound by strict data protection agreements and are not permitted to use dwpo89 member data for any purpose other than what is specified in those agreements.

Cookies, Tracking & Similar Technologies

Dwpo89 uses cookies and similar tracking technologies to enhance your experience on our platform, maintain session security, and understand how members interact with our services.

Types of cookies we use:

• Essential cookies (required): Required for core platform operations such as login session verification, security, and transaction integrity. These cookies cannot be disabled.
• Performance cookies: Collecting aggregate and anonymised data on how pages are used to help us improve platform speed and responsiveness.
• Functional cookies: Saving your preferences such as language, display settings, and game preferences to deliver a more personalised experience.
• Analytics cookies: Used to understand overall traffic patterns and user behaviour for internal product improvement purposes.

You can manage your cookie settings through your browser preferences. However, disabling essential cookies may affect the functionality of the dwpo89 platform and your gaming experience.

Your Rights as a dwpo89 Member

As a dwpo89 member, you have the following rights regarding your personal data, and we are committed to respecting and facilitating the exercise of those rights:

• Right to access: You have the right to request a copy of all personal data we hold about you. We will process such requests within 14 business days.
• Right to rectification: If any of your personal data is inaccurate or outdated, you have the right to request that we correct or update it promptly.
• Right to erasure: In certain circumstances, you may request that we delete your personal data. Such requests are subject to applicable legal retention and compliance requirements.
• Right to withdraw consent: If you have previously given consent for certain processing activities such as marketing communications, you may withdraw that consent at any time.
• Right to object: You have the right to object to the processing of your data for certain purposes, subject to our legitimate interests and legal requirements.
• Right to data portability: You may request your data in a machine-readable format for transfer to another service provider where applicable.

To submit any request related to the rights above, please contact our privacy team via live chat or email. We may need to verify your identity before processing your request.

Data Retention & Deletion

Dwpo89 retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. Our retention guidelines are as follows:

• Active account data: Retained for the duration your account remains active on dwpo89, plus the period required to resolve any disputes or claims.
• Financial transaction records: Retained for a minimum of 7 years from the transaction date to comply with Malaysia's financial and tax legal requirements.
• KYC and identity verification data: Retained for a minimum of 5 years after account closure for Anti-Money Laundering (AML) legal compliance purposes.
• Security and access logs: Retained for 12 months for security incident investigation and digital forensics purposes where required.
• Customer support communication data: Retained for 3 years after the last interaction for reference and service quality improvement purposes.

When data is no longer needed, we will securely delete or anonymise it using industry-standard data deletion procedures.

Children's Privacy

The dwpo89 platform is exclusively for individuals aged 18 years and above. We do not knowingly collect or process any personal data from minors. Our KYC process is specifically designed to detect and prevent registration by children or underage individuals.

Should we discover that personal data of a minor has been collected without our knowledge, we will immediately take the following steps:

• Suspending the account in question immediately.
• Deleting all related personal data as quickly as possible.
• Returning any available fund balance after further review.
• Reporting the incident to the relevant authorities if required.

If you believe your child or dependent has accessed the dwpo89 platform, please contact our support team immediately via live chat.

Amendments to This Privacy Policy

Dwpo89 reserves the right to amend or update this Privacy Policy at any time to reflect changes in our operational practices, new legal requirements, or technological advancements that affect how we process data. The date of the most recent revision will always be displayed at the top of this document.

For amendments deemed material — meaning changes that significantly affect how we use your personal data — we will notify members via in-account notifications or their registered email at least 14 days before the changes take effect.

Your continued use of the dwpo89 platform after any amendments take effect will be considered your acceptance of the updated Privacy Policy. We encourage you to review this page periodically to stay informed of the latest developments.

Contact the dwpo89 Privacy Team

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data by dwpo89, our privacy team is ready to assist.