Dana123 Privacy Policy – Personal Data Protection for Malaysian Members

Introduction

This Privacy Policy is issued by dana123 and applies to all members using the dana123 platform, accessible at dana123.asia. This document outlines our commitment to protecting your personal data and how we fulfil our responsibilities under Personal Data Protection Act 2010 (PDPA) Malaysia.

By registering for or using dana123's services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this policy, you are advised not to use the dana123 platform and to contact our support team regarding data deletion options.

This Policy should be read together with dana123 Terms & Conditions and Responsible Gaming Policy us. Together, these three documents form a comprehensive agreement between you and dana123.

Personal Data We Collect

Dana123 collects various categories of personal data depending on how you interact with our platform. Below is an overview of the data we collect and the purposes for which it is used:

How We Use Your Data

Personal data collected by dana123 is used solely for legitimate, stated purposes. We do not use your data for any other purpose without your prior consent:

• Account Operations and Identity Verification: To create and manage your account, verify your identity during registration and the KYC process, and ensure that only the legitimate account holder can access the account.
• Financial Transaction Processing: To process deposits via Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, and FPX, and to process withdrawal requests to the same payment methods. Transaction records are retained for financial accountability purposes.
• Gaming Service Delivery: To provide access to all games on the dana123 platform, including slots, baccarat, blackjack, roulette, and Sports Betting. Game records are retained to facilitate the resolution of any disputes.
• Customer Support: To handle your inquiries, complaints, and support requests more effectively. Support conversation records are retained for 12 months for quality assurance purposes.
• Security & Fraud Prevention: To detect and prevent fraud, money laundering, unauthorised access, and any activity that violates dana123's Terms and Conditions.
• Legal Compliance: To fulfil legal obligations under Malaysian law, including anti-money laundering (AML) requirements and reporting obligations mandated by the relevant authorities.
• Platform Improvements: To analyse aggregated (not individual) usage patterns in order to improve the user experience, platform performance, and the development of new features at dana123.
• Marketing Communications (with Consent): To send you promotional information, bonuses, and special offers — only if you have consented to receive such communications during registration or via your account settings. You may unsubscribe at any time.

Data Sharing with Third Parties

Dana123 does not sell, does not lend, and does not trade your personal data to any third party for commercial or marketing purposes. However, in the course of operating the platform, there are certain situations where we may need to share your data with specific parties:

• Payment Service Providers: To process deposit and withdrawal transactions, the minimum necessary transaction information is shared with the relevant eWallet providers and banks (Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, Maybank, CIMB) as technically required.
• Game Providers: Providers such as Evolution Gaming, PG Soft, and Pragmatic Play may receive session identifiers required for game operation. They do not receive your full personal identity information.
• Competent Authority: dana123 will disclose your data to Malaysian government authorities or law enforcement when required by law or a valid court order. We will not disclose more than is strictly necessary.
• Anti-Fraud Services: To detect and prevent fraud, we may use recognised third-party verification services. Any data shared in this context is limited strictly to the information required for the verification process.

All third parties working with dana123 are required to uphold data protection standards no less stringent than our own, and may only use shared data for the specific, agreed purposes.

Data Security Measures

Dana123 continually invests in security infrastructure to ensure your personal data remains protected at all times. The technical and organisational security measures we implement include:

• 256-bit SSL Encryption: All data communications between your device and dana123's servers are encrypted using TLS protocol with 256-bit keys — the same standard used by major Malaysian banking institutions.
• Secure Password Storage: Your password is never stored in plain text. We use a one-way hashing algorithm with a unique salt for each password.
• Internal Access Controls: Access to member data within dana123's internal systems is restricted on a need-to-know basis — only staff who require access to carry out their specific duties are authorised.
• 24/7 Security Monitoring: dana123's security systems are continuously monitored to detect any suspicious activity or unauthorised access attempts.
• Regular Security Audits: Dana123 undergoes regular independent penetration testing and security audits to identify and address any vulnerabilities before they can be exploited.
• Security Incident Management: Dana123 has a detailed incident response procedure in place. In the event of a material data breach, affected members will be notified within 72 hours and remediation steps will be taken immediately.

Data Retention & Deletion Period

Dana123 retains your personal data only for as long as it is needed for the purposes stated in this Privacy Policy, or as required by Malaysian law. Our data retention policy is as follows:

• Active Account Data: For as long as your account remains active and you continue using dana123's services.
• Financial Transaction Records: A minimum of seven (7) years from the transaction date, in compliance with Malaysia's anti-money laundering and financial reporting legal requirements.
• Customer Support Records: Twelve (12) months from the date of last communication, for quality assurance and dispute resolution purposes.
• Game Records: Ninety (90) days for regular gameplay; for large wins that may require verification, records may be retained for a longer period.
• After Account Closure: Once your account is closed, dana123 will delete or anonymise all personal data that is no longer legally required within thirty (30) days of the account closure being confirmed.

Data deletion is carried out using methods that ensure the data cannot be recovered. For physically stored data, secure document destruction procedures are applied. For digital data, secure erasure tools that overwrite the data multiple times are used before storage space is released.

Your Rights Under PDPA 2010

As a data subject under Malaysia's Personal Data Protection Act 2010, you have the following rights regarding the personal data held by dana123:

To exercise any of the above rights, contact us at support@dana123.asia with the subject line "Personal Data Rights Request". We will verify your identity before processing the request and will respond within thirty (30) calendar days.

Cookies & Tracking Technologies

Dana123 uses cookies and similar tracking technologies to enhance the user experience and ensure the platform operates correctly. Cookies are small text files stored on your device when you visit the dana123 platform.

Types of cookies we use:

• Essential Cookies (Required): Required for core platform functions such as login session authentication, security, and basic account preferences. These cookies cannot be disabled without affecting platform functionality.
• Performance & Analytics Cookies: Helps us understand how members use the platform — which pages are visited most, how long sessions last, and where any technical issues occur. This data is collected in aggregate and does not identify individuals.
• Functional Cookies: Storing your preferences such as language, display limits, and last-used table settings to provide a more personalised experience during your sessions on dana123.

You can manage or delete cookies through your web browser settings at any time. However, disabling essential cookies may affect your ability to log in or use certain features of the dana123 platform properly.

Data Relating to Minors

Dana123 is a platform that for users aged 18 and above only. We do not knowingly collect, store, or process any personal data of children or individuals under the age of 18.

If we discover that personal data of a minor has been collected without our knowledge — for example, through an account registration that misrepresented the user's age — we will take immediate action to delete all such data and close the account in question.

To parents and guardians: if you believe your child under the age of 18 has registered for or used the dana123 platform, please contact us immediately at support@dana123.asia with the relevant account details. We will respond promptly.

Third-Party Links and Services

The dana123 platform may contain links to third-party websites or services for specific purposes such as payment verification. This Privacy Policy applies to the dana123 platform only and does not cover the privacy practices of any third-party websites.

We encourage you to read the privacy policy of any third-party service you access through our platform. Dana123 is not responsible for the privacy practices or content of any third-party websites you visit.

Amendments to This Privacy Policy

Dana123 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or platform improvements. When material changes are made:

• The "Last Updated" date at the top of this page will be revised accordingly.
• Registered members will receive an email notification at least seven (7) days before the changes take effect.
• An in-platform notification will be displayed at your next login to ensure you are aware of any changes.

Your continued use of the dana123 platform after any changes to the Privacy Policy take effect will be considered your acceptance of the amended policy. If you do not agree with the changes, you have the right to close your account and request deletion of your data before the changes come into effect.

Contact Us About Privacy

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data at dana123, our team is here to help: