Dg48 Privacy Policy – Personal Data Protection for Malaysian Players

1 Introduction – Who We Are and Why This Policy Matters

This Privacy Policy is published by dg48 ("we", "our platform"), an online casino entertainment service provider operating in Malaysia via https://dg48.my. This policy explains in detail and with full transparency how we collect, process, store, and protect the personal information you provide to us when using the platform dg48.

Privacy is not merely a legal obligation for dg48 — it is a core value we uphold with the utmost seriousness. We understand that Malaysian players entrust us with highly personal and sensitive information, including financial details related to transactions in MYR. We regard this trust as a significant responsibility and will never abuse it.

dg48 operates in accordance with the principles of Malaysia's Personal Data Protection Act 2010 (PDPA 2010) and international industry best practices in personal data management. This Privacy Policy applies to all registered members, users browsing our platform, and any individuals who interact with the dg48 in any way whatsoever.

2 Types of Personal Data We Collect

dg48 collects your personal data in several ways — directly when you register or interact with our platform, and automatically through the technologies used within the platform. The following are the types of data we collect:

Data You Provide Directly:

• Full name as stated on your identification document (MyKad)
• An active Malaysian mobile phone number
• A valid email address
• Bank account or e-wallet details (Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX) for the purpose of processing deposits and withdrawals in MYR
• Date of birth for the purpose of verifying the minimum age requirement of 18 years
• Copies of identification documents when requested for identity verification purposes

Automatically Collected Data:

• Your device's IP address
• Browser type and version used
• Device information (device type, operating system, screen resolution)
• Game session data — including game types played, bet amounts in MYR, and game outcomes
• Deposit and withdrawal transaction records
• Cookie data and similar tracking technologies used to enhance your platform experience
• Activity logs — login times, in-account actions, and settings changes

We only collect data that is strictly necessary for legitimate purposes. dg48 does not collect data that is excessive or irrelevant to the services we provide.

3 Purposes for Collecting and Using Personal Data

Personal data that dg48 collected is used solely for the following legitimate and necessary purposes:

• Account Management: Creating, verifying, and maintaining member accounts dg48 you securely. This includes an identity verification process to ensure compliance with the 18-year age limit and our one-account-per-user policy.
• Financial Transaction Processing: Securely and accurately processes deposits in MYR via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, Maybank2u, CIMB Clicks, and withdrawals of winnings to your preferred account.
• Gaming Service Provision: Enabling you to access and play all games available on the platform dg48 — from video slots such as Lucky Lightning, Money Train, and Cat Wilde, to live casino games such as Crazy Coin Flip and Sic Bo Live.
• Platform Security: Detecting and preventing fraud, account misuse, money laundering, and activities that violate our Terms & Conditions dg48.
• Customer Support: Addressing enquiries, resolving complaints, and providing technical assistance through our 24/7 support channels.
• Responsible Gambling: Monitoring gameplay patterns to identify early signs of problem gambling and reaching out to members who may need assistance or support.
• Legal Compliance: Fulfilling applicable legal obligations in Malaysia, including reporting requirements to the relevant authorities when required by law.
• Platform Enhancements: Analysing aggregated, anonymised usage patterns to better understand member needs and improve the overall platform experience dg48.
• Service Communication: Sending you important notifications about your account, transactions, changes to terms, and relevant security updates.

dg48 will not use your personal data for any purpose other than those stated above without first obtaining your additional consent.

4 Data Sharing and Disclosure to Third Parties

dg48 does not sell, rent, or trade your personal data to any third party for their own marketing purposes. This is an absolute commitment. However, there are limited situations where data must be shared with specific parties in order for us to deliver our services:

Trusted Service Providers: We work with a number of trusted service providers who assist us in operating the platform dg48 — including game providers such as Evolution and Pragmatic Play, payment processors that handle your MYR transactions, and IT infrastructure providers. All such third parties are bound by strict confidentiality agreements and are only permitted to process your data in accordance with our specific instructions and for the defined service purposes.

Legal Requirements: dg48 may be required to disclose your information to Malaysian government authorities or law enforcement agencies if mandated by law, court order, or in the context of a legitimate official investigation. In such cases, we will endeavour to notify you of the disclosure where permitted by applicable law.

Legitimate Interests Protection: Where there is an urgent need to protect the safety, rights, or property of dg48 or our other members — for instance, in cases of large-scale fraud or serious security threats — relevant data may need to be shared with the appropriate parties.

In all data sharing situations, dg48 ensuring that only the minimum necessary data is shared, and that the receiving parties have adequate data protection safeguards in place.

5 Data Security Measures at dg48

dg48 invested seriously in the security of our members' data. The following are the protection layers we employ to safeguard your personal and financial information:

• 256-bit SSL Encryption: All communications between your device and our servers dg48 is protected by SSL/TLS protocols with 256-bit encryption — the same standard used by Malaysia's leading banks, including Maybank and CIMB.
• Encryption of Data at Rest: Sensitive data stored in our databases is also encrypted using robust encryption algorithms. This means that even in the event of a data breach, your information cannot be read by unauthorised parties.
• Multi-Layered Access Control: Access to members' personal data is granted only to staff of dg48 who have a legitimate business need and have completed comprehensive data security training. The least-privilege principle is applied — each staff member has access only to the minimum data required for their role.
• 24/7 Security Monitoring: Our automated monitoring system operates around the clock to detect any intrusion attempts, unusual activity, or unauthorised access to our systems.
• Regular Security Audits: dg48 conducting regular internal and external security audits to identify vulnerabilities and ensure security controls remain up to date against the latest threats.
• Two-Factor Authentication (2FA): Available for members who wish to add an extra layer of security to their account dg48 theirs — strongly recommended for all members, especially those with high balances.

While we take all reasonable steps to protect your data, no security system can guarantee 100% absolute protection against all cyber threats. You also have a responsibility to keep your account password secure dg48 your account and never share your login credentials with anyone.

6 Personal Data Retention Period

dg48 only retains your personal data for as long as necessary for the purposes for which it was collected, or as required by applicable laws in Malaysia.

• Active Account Data: Retained for the duration your account remains active at dg48 plus any mandatory retention periods required under applicable laws.
• Financial Transaction Records: Deposit and withdrawal records in MYR (RM) are retained for a minimum of 7 years in accordance with applicable accounting and anti-money laundering requirements.
• Data After Account Closure: After your account is closed at your request, your personal data will be deleted or anonymised within 90 days, unless there is a legal requirement to retain it for a longer period.
• Security Logs: Activity and security logs are retained for 12 months for security investigation purposes should the need arise.

Once the designated retention period has elapsed, your personal data will be securely deleted or anonymised so that it can no longer be linked to you as an individual.

7 Cookies & Tracking Technologies

dg48 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you browse our website. The following are the types of cookies we use:

You can manage cookie usage through your web browser settings. However, disabling certain cookies — particularly essential cookies — may prevent you from accessing some features of the platform dg48 in full.

8 Your Personal Data Rights

As a member of dg48 residing in Malaysia, you have the following rights with respect to the personal data we hold about you:

• Right of Access: You have the right to request a copy of the personal data we hold about you at any time.
• Right of Rectification: If any information we hold about you is inaccurate or out of date, you have the right to request that we correct it promptly.
• Right to Erasure: In certain circumstances permitted by law, you may request that we erase your personal data (the "right to be forgotten").
• Right to Object to Processing: You have the right to object to the processing of your personal data for certain purposes, including direct marketing.
• Right to Data Portability: You have the right to request your personal data in a machine-readable format for transfer to another service provider if needed.
• Right to Withdraw Consent: Where you have given consent for specific data processing, you may withdraw that consent at any time without affecting the validity of any processing carried out prior to withdrawal.

To exercise any of the above rights, please contact our support team dg48 via 24/7 live chat or email at [email protected]. Your request will be processed within 14 business days. If there is any reason your request cannot be fully fulfilled, we will notify you with a clear and detailed explanation.

9 Children's Privacy and Age Restrictions

Platform dg48 is exclusively for individuals aged 18 and above. We do not knowingly collect, process, or store personal data of individuals under the age of 18.

Should we discover that data belonging to a person under the age of 18 has been collected without our knowledge, we will take immediate action to delete that data and close the relevant account. If you are aware that a minor has registered an account at dg48, please contact us immediately at [email protected].

Parents and guardians are advised to monitor their children's internet usage and ensure they do not have access to online gambling platforms such as dg48.

10 Links to Third-Party Websites

Platform dg48 may contain links to third-party websites or services in certain contexts, such as links to game provider websites or support services. This Privacy Policy does not apply to those third-party websites.

dg48 is not responsible for the privacy practices or content of third-party websites. We encourage you to read the Privacy Policy of each website you visit separately. Your access to third-party websites is entirely at your own risk and discretion.

11 Changes to This Privacy Policy

dg48 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, legal developments, or platform enhancements. The latest version of the Privacy Policy will always be available on this page with a clearly indicated update date.

Should there be any material changes to how we handle your personal data, dg48 will endeavour to notify you via email or an in-platform notification before any changes take effect. Continued use of the platform dg48 after the changes take effect constitutes your acceptance of the amended Privacy Policy.

We encourage you to check this page periodically to stay informed about how we protect your information.

12 Contact Us Regarding the Privacy Policy

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way dg48 handling your personal data, our team is ready to assist you through the following channels:

• 24/7 Live Chat: The fastest way to get an immediate response — available directly within the platform dg48 at all times.
• Privacy Email: [email protected] — for formal complaints, data access requests, or any sensitive matters requiring written documentation.

Support team dg48 available in both Bahasa Melayu and English. For requests relating to personal data rights (such as data access or deletion requests), please use the email channel to ensure your request is properly documented and processed in accordance with established procedures within 14 business days.