DWG288 Privacy Policy – Personal Data Protection for Malaysian Members

This Privacy Policy ("Policy") describes how DWG288 ("We", "Platform" or "DWG288") collects, uses, discloses, stores and protects your personal information when you use our website at dwg288.my and all related services. This policy applies to all registered members, website visitors and anyone who interacts with the DWG288 platform in any capacity.

1. Introduction – Who We Are and Why Privacy Matters

DWG288 is an online casino platform operating exclusively for the Malaysian market, offering a wide range of high-quality entertainment including slots, live casino with live dealers, table games, and Sports Betting covering EPL football, Malaysia Super League, badminton and e-sports. Since launching in 2019, we have become the platform of choice for over 150,000 active members across Malaysia.

We understand that your trust in DWG288 depends not only on the quality of our games and the accuracy of our payouts, but also on your confidence that the personal data you entrust to us is handled with the utmost responsibility. That is why DWG288 invests seriously in data security infrastructure, transparent privacy policies and rigorous data-handling procedures – not merely because the law requires it, but because it is simply the right thing to do for our members.

This Privacy Policy has been drafted in accordance with the requirements of Malaysia's Personal Data Protection Act 2010 (PDPA) and international best practices in data protection. DWG288 is the data controller responsible for the personal information you provide to us, and we are committed to ensuring that such data is processed lawfully, fairly and transparently.

2. Personal Data We Collect

DWG288 collects the following categories of personal data from our members and platform users. We only collect data that is strictly necessary for the purposes clearly stated:

DWG288 does not collect sensitive data such as health information, religious beliefs, political views or biometric data unless required by applicable law. We also do not knowingly collect data from individuals under the age of 21.

3. How DWG288 Uses Your Personal Data

DWG288 uses your personal data for the following lawful, necessary and proportionate purposes in the operation of our platform:

• Account Management: To register your account, verify your identity, manage secure log-ins and maintain accurate, up-to-date account records;
• Transaction Processing: To process deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX, Maybank2u and CIMB Clicks, and to process your winnings withdrawals quickly and securely;
• Platform Security: To detect, investigate and prevent fraud, money laundering, unauthorised access and other unlawful activities that could compromise the safety of DWG288 members;
• Legal Compliance: To fulfil the legal compliance obligations applicable to DWG288, including KYC (Know Your Customer), AML (Anti-Money Laundering) and financial reporting requirements;
• Customer Support: To understand and resolve queries, complaints or technical issues that you raise with the DWG288 support team;
• Responsible Gaming: To monitor gameplay patterns, identify signs of problem gambling and provide appropriate support to members who need assistance;
• Platform Improvements To analyse how members use the DWG288 platform with the aim of improving user experience, technical performance and the games library;
• Service Communications: To send you important account-related notifications, such as transaction confirmations, security alerts, policy updates and relevant technical information.

4. Legal Basis for Data Processing

DWG288 processes your personal data on the basis of one or more of the following legal grounds in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA):

• Contract Performance: Processing necessary to perform the agreement between you and DWG288, including the provision of platform services, processing transactions and managing your account;
• Consent: Where you have given clear and freely provided consent for specific processing activities, such as receiving marketing materials or processing optional data not required for account operations;
• Legitimate Interests: Where processing is necessary for the legitimate interests of DWG288 or a third party, having taken your rights and freedoms into account. This includes platform security, fraud prevention and service improvement;
• Legal Compliance: Where processing is necessary to comply with legal obligations applicable to DWG288 as a licensed online casino platform operator.

5. Sharing of Personal Data

DWG288 does not sell, rent, trade or share your personal data with third parties for marketing purposes. Your data is only shared in the following limited and lawful circumstances:

• Service Providers: Third-party service providers that assist DWG288 in its operations, such as payment processors for DuitNow, Touch 'n Go eWallet and GrabPay, gaming software providers such as Pragmatic Play, and cloud infrastructure services. All such providers are bound by strict data protection agreements and are only permitted to process your data in accordance with DWG288's instructions;
• Legal Requirements: If DWG288 is required by law, court order or valid legal process to disclose your data, including anti-money laundering reporting obligations;
• Protection of Rights: To protect the rights, property or safety of DWG288, its members or the public where required under applicable law;
• Business Transfers: In the event that DWG288 is involved in a merger, acquisition or asset sale, member data may be transferred as part of those assets. You will be notified via a clear notice before your data is transferred and becomes subject to a different privacy policy.

6. DWG288 Data Security Measures

DWG288 implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, loss or destruction. Below is an overview of our security framework:

The technical security measures we have implemented include:

• Data encryption in transit using TLS 1.3 protocol with 256-bit encryption;
• Encryption of sensitive data such as financial information stored in databases using AES-256 encryption;
• Implementation of two-factor authentication (2FA) for member account logins and staff access to internal systems;
• Continuous 24/7 security monitoring using an advanced SIEM (Security Information and Event Management) system;
• Periodic penetration testing conducted by independent security specialists to identify and address vulnerabilities;
• Role-based access controls applying the principle of least privilege for all staff with access to systems containing member data;
• Regular encrypted data backups stored at secure, separate locations;
• A tested and ready-to-activate incident response plan in the event of any data breach.

7. Personal Data Retention Period

DWG288 retains your personal data only for as long as necessary to fulfil the purposes outlined in this Policy, or as required by applicable law. The following data retention guidelines apply:

• Active Account Data: For as long as your account remains active on DWG288 and for the period required thereafter to resolve any outstanding transactions or disputes;
• Financial & Transaction Data: Minimum 7 years from the date of transaction, in accordance with applicable Malaysian financial and tax legislation;
• KYC (Identity Verification) Data: Minimum 5 years after the termination of the business relationship, in accordance with applicable AML compliance requirements;
• Security Log Data: Minimum 1 year for security investigation and digital forensics purposes where required;
• Support Communication Data: 3 years after the last interaction, for dispute resolution and service improvement purposes;
• Game Data: For the duration of the active account and 3 years following account closure for responsible gambling compliance purposes.

When data is no longer needed and there is no legal requirement to retain it, DWG288 will securely delete or anonymise it using industry-recognised methods.

8. Your Rights as a DWG288 Member

In accordance with Malaysia's Personal Data Protection Act 2010 and data protection best practices, you as a DWG288 member have the following rights regarding your personal data:

9. Cookies and Tracking Technologies

DWG288 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website. We use the following types of cookies:

• Essential Cookies (Strictly Necessary): These cookies are required for core platform functions such as secure login, staying logged in during your session and security. They cannot be disabled without affecting platform functionality;
• Performance Cookies: These cookies collect anonymous information about how you use DWG288 – such as which pages are visited most frequently, error messages received, and so on. This data is used solely to improve platform performance;
• Functional Cookies: These cookies allow the platform to remember your preferences such as language, game settings and display options in order to deliver a more personalised experience;
• Analytics Cookies: These cookies help us understand, in aggregate, how members interact with the DWG288 platform, enabling us to make better, data-driven improvement decisions.

You can manage your cookie settings through your web browser. Please note, however, that disabling all cookies may affect certain functions of the DWG288 platform, including potential difficulties logging in or staying logged in during your gaming session.

10. International Data Transfers

In the course of platform operations, DWG288 may transfer your personal data to servers or systems located outside Malaysia, particularly in connection with cloud infrastructure and international game developer services. In all cases of international data transfer, DWG288 ensures that protections equivalent to or exceeding those required under Malaysia's PDPA are in place through the following mechanisms:

• Comprehensive Data Processing Agreements with all data recipients outside Malaysia;
• Security assessments of all third-party partners prior to any data transfer being permitted;
• Use of internationally recognised standard contractual clauses for cross-border data transfers;
• Ongoing monitoring of third-party partners' compliance with agreed data protection requirements.

11. Children's Privacy

The DWG288 platform is strictly for users aged 21 years and above. DWG288 does not knowingly collect, store or process the personal data of any individual under the age of 21. If you believe that a minor has provided their personal information to DWG288, please contact us immediately at [email protected] and we will take prompt action to remove that information from our systems.

DWG288 has an age verification system designed to prevent access by underage individuals. If a member is found to have registered using false age information, the account will be immediately closed and all related transactions will be reviewed in accordance with DWG288's Terms & Conditions.

12. Amendments to This Privacy Policy

DWG288 reserves the right to amend this Privacy Policy from time to time to reflect changes in applicable law, technology, or our business practices. Any amendment will be accompanied by an updated "Last Updated" date at the top of this document.

For material amendments that significantly affect how we process your data, DWG288 will endeavour to provide reasonable notice via your registered email or through a prominent notification on the platform before the changes take effect. For minor, non-material amendments, we may update this Policy without separate notice.

It is your responsibility to review this Privacy Policy periodically. Your continued use of the DWG288 platform after any amendments are published constitutes your acceptance of those changes. If you do not agree with any amendment, please contact us to discuss your options, including account closure should you choose to do so.

13. Contact Us – DWG288 Data Protection Officer

If you have any questions, concerns or complaints regarding how DWG288 handles your personal data, or if you wish to exercise any of your privacy rights, please contact our data protection team through the channels below. We are committed to responding to all privacy-related enquiries within 14 business days.