Privacy Policy Dapurtoto –
Protection of Your Personal Data

Dapurtoto collects your personal information solely to enable us to deliver safe, efficient, and responsible services. The type of information we collect depends on how you interact with our platform.

Information you provide directly:

• Full name as it appears on your official identification document.
• Date of birth for age verification (you must be 18 years of age or older).
• An active email address for account communications.
• A Malaysian mobile number registered in your name.
• Bank account or e-wallet details for processing deposits and withdrawals.
• KYC documents including a copy of your MyKad, passport, or driving licence.
• Proof of address such as a recent utility bill or bank statement.

Information collected automatically:

• IP address and general location information (country/city).
• Device type, operating system, and web browser used.
• Log data including access times, pages visited, and actions taken within the platform.
• Gaming data and betting history for compliance and security purposes.
• Session information including time spent on the platform.

The personal data we collect is used for the following purposes only. We do not use your data for any purpose not stated here without first obtaining your consent.

• Account management: Registering, verifying, and managing your member account on the dapurtoto platform.
• Financial transaction processing: Processing deposits via DuitNow QR, FPX, Touch 'n Go eWallet, Boost, and GrabPay, as well as withdrawals to your bank account.
• Identity verification (KYC): Ensuring you are an eligible individual who meets the legal requirements for responsible gambling.
• Security and fraud prevention: Detecting and preventing unauthorised access, money laundering, and any suspicious activity.
• Customer support: Providing assistance when you contact our support team via live chat 24/7.
• Important communications: Sending account-related notifications, policy updates, and promotions you have agreed to receive.
• Responsible gaming: Monitoring gameplay patterns to identify signs of addiction and offering appropriate self-control tools.
• Legal compliance: Fulfilling reporting obligations to authorities as required by Malaysian law.
• Platform enhancements: Analysing usage data in aggregate and anonymised form to improve the user experience on the dapurtoto platform.

We do not use your personal data for automated decision-making that significantly affects your rights without human involvement. Any decisions impacting your account are reviewed by trained staff.

Dapurtoto does not sell, rent, or disclose your personal data to third parties for their own marketing purposes. However, there are specific situations where we need to share information to keep the platform running properly and to comply with the law.

Third parties that may receive your data:

• Payment service providers: Banking institutions and Malaysian e-wallet providers such as FPX, DuitNow, Touch 'n Go eWallet, and others, for processing your financial transactions.
• KYC and identity verification providers: Licensed and trusted identity verification companies to assist with document verification processes.
• Game providers: Minimum required account information is shared with game providers that supply content on the dapurtoto platform.
• Cloud services and IT infrastructure: Server and technical infrastructure providers that store and process data on our behalf under strict security agreements.
• Authorities: Law enforcement agencies, courts, or regulatory bodies where required under Malaysian law.

In the event of a company restructuring, merger, or acquisition, your personal data may be transferred to the new entity, provided that entity continues to uphold the same privacy obligations as outlined in this policy. You will be notified before any such transfer takes place.

The dapurtoto platform uses cookies and similar tracking technologies to enhance your experience and ensure the platform functions correctly. Cookies are small data files stored on your device when you visit our website.

Types of cookies we use:

• Essential Cookies: Required for core platform functions such as login verification, session security, and navigation. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies: Collecting anonymised information about how you use the platform to help us improve site speed and functionality.
• Functional Cookies: Saving your preferences such as language, display settings, and login information for a smoother return experience.
• Analytics Cookies: Helping us understand platform usage patterns in aggregate. This data is used solely for platform development decisions.

You can manage cookie usage through your web browser settings. However, disabling certain cookies may affect the functionality of the dapurtoto platform. We recommend accepting essential cookies for the best experience.

We do not use third-party cookies for targeted advertising or commercial profiling. Your cookie data is not shared with advertising networks.

We continuously invest in security infrastructure to protect your personal data from unauthorized access, alteration, unintended disclosure, or destruction.

Technical security measures we have implemented:

• Data encryption in transit using TLS 1.3 protocol and 256-bit SSL certificates.
• Data encryption at rest in the database using AES-256.
• Role-based access control — each staff member can only access data relevant to their specific role.
• Two-factor authentication (2FA) is required for all internal access to systems containing sensitive data.
• 24/7 system monitoring with an automated intrusion detection system (IDS).
• Regular data backups and tested disaster recovery procedures.
• Penetration testing by an independent cybersecurity firm twice a year.

Organisational security measures:

• Mandatory data security training for all dapurtoto staff.
• Internal information security policy reviewed and updated annually.
• A clearly defined and practiced security incident response procedure.
• Background checks for staff handling sensitive data.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have certain rights regarding your personal data held by dapurtoto. We fully respect these rights and provide straightforward ways for you to exercise them.

To exercise any of the above rights, contact the dapurtoto privacy team via live chat on the platform or email our support address. We will process your request within 30 calendar days of receiving your complete request.

Dapurtoto retains your personal data only for as long as necessary for the stated purposes or as required under Malaysian law. Retention periods vary depending on the type of data.

Once the retention period expires, your data will be securely deleted or fully anonymised so that it can no longer be associated with you. The deletion process follows recognised industry standards.

Dapurtoto reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or platform improvements. All changes take effect as soon as the updated version is published on this page.

For material and significant changes, we will:

• Sending email notifications to all registered members at least 14 days before changes take effect.
• Displaying a clear notice on the platform's home page throughout the notice period.
• Updating the "Last Updated" date at the top of this page.

Your continued use of the dapurtoto platform after the effective date of any changes constitutes your acceptance of the updated Privacy Policy. If you do not agree with the changes, please stop using the platform and contact us to close your account.

We encourage you to review this page regularly to stay informed about how we protect your personal information.

If you have any questions, concerns, or wish to exercise your rights regarding personal data, the dapurtoto privacy team is here to assist you.

• Live Chat 24/7: The fastest way — contact us directly via the chat icon in the corner of the dapurtoto platform.
• Privacy Email: [email protected] — please state "Privacy Enquiry" in your email subject line.
• Response Time: We are committed to responding to all privacy-related enquiries within 3 business days.

If you believe we have not handled your complaint satisfactorily, you have the right to file a complaint with the Personal Data Protection Commissioner of Malaysia under the Personal Data Protection Act 2010.