Privacy Policy dota88 —
Personal Data Protection for Malaysia Members

1Introduction

Dota88 ("we", "Platform", or "dota88") respects the privacy of every individual who uses our services. This Privacy Policy is formulated in accordance with the Malaysian Personal Data Protection Act 2010 (PDPA) and clearly explains how we handle the personal information you share with us.

This document applies to all users of the dota88 platform, including website visitors, registered members, and anyone who interacts with our services through any channel — whether via the website, mobile app, or our customer support channels.

We encourage you to read this Privacy Policy carefully. If you have any questions or concerns about how we handle your data, please contact our privacy team through the available support channels.

2Types of Personal Data We Collect

Dota88 collects various categories of personal data based on platform operational requirements and regulatory obligations. Below is a summary of the data collected:

3How We Collect Your Data

Your personal data is collected through several key channels:

• Account Registration — Information you provide when creating a new dota88 account, including name, email, phone number, and date of birth.
• KYC (Know Your Customer) Process — Identity documents and proof of address submitted during identity verification to enable your first withdrawal to be processed.
• Financial Transactions — Information automatically collected when you make a deposit or withdrawal through the platform.
• Platform Usage — Technical and game data collected automatically as you browse and play on dota88.
• Contact Us — Information you share when contacting our customer support team via live chat or email.
• Cookies and Tracking Technologies — Data collected through cookies and similar technologies as you browse our website. Please refer to Section 9 for more information.

4Purposes for Using Your Personal Data

Dota88 uses the personal data collected for the following purposes, all grounded on a valid legal basis:

• Service Delivery — To process account registration, verify identity, handle deposits and withdrawals, and ensure a seamless gaming experience.
• Regulatory Compliance — To fulfill anti-money laundering (AML), know your customer (KYC), and reporting requirements mandated by regulatory authorities.
• Platform Security — To detect and prevent fraud, unauthorized access, system abuse, and other criminal activity.
• Service Communications — To send important notifications related to your account, transactions, policy changes, and security information.
• Marketing (with consent) — To send promotional offers, bonuses, and new product information — only if you have given consent to receive marketing communications.
• Product Improvement — To analyze platform usage patterns for the purpose of improving user experience and developing new features.
• Responsible Gaming — To monitor gaming habits and detect signs of potential problem gambling for member protection purposes.

5Data Sharing with Third Parties

Dota88 does not sell your personal data. However, under certain limited circumstances, we may share data with the following parties:

• Payment Service Providers — Required transaction information is shared with payment gateways and processing banks to complete your deposits and withdrawals.
• Technical Service Providers — Companies that assist in operating our platform infrastructure, subject to strict confidentiality agreements.
• KYC Service Providers — Identity verification partners who help us conduct required document checks securely.
• Authorities — When required by law, court order, or a valid request from a law enforcement agency.
• Regulatory Bodies — Information required for regulatory reporting and compliance audit purposes.

6Your Personal Data Security

We implement a comprehensive range of technical and organisational security measures to protect your personal data from unauthorised access, loss, misuse, or disclosure:

• Data Encryption in Transit — All communications between your device and dota88 servers are secured with TLS 1.3 protocol and 256-bit SSL encryption.
• Data Encryption at Rest — Sensitive data such as passwords is stored in an unrecoverable hashed form, while financial information is fully encrypted.
• Access Control — Access to members' personal data is granted only to staff with a legitimate operational need, based on the principle of least privilege.
• Regular Security Audits — The dota88 platform undergoes regular independent security assessments to identify and address potential vulnerabilities.
• Incident Response Plan — We have clear procedures in place for detecting, reporting, and managing any data breaches that may occur.

In the event of a data breach that may compromise your rights and freedoms, we will notify you within the timeframe required by applicable law.

7Data Retention Period

Dota88 retains your personal data only for as long as necessary to fulfill the purposes stated in this Privacy Policy, or as required by law:

• Active Account Data — Retained for the duration your account is active and for several years after account closure, in accordance with legal requirements.
• Financial Transaction Records — Retained for a minimum of seven (7) years in accordance with anti-money laundering and tax legal requirements.
• KYC Records — Retained for at least five (5) years from the account closure date or the date of the last transaction, whichever is later.
• Support Communication Logs — Retained for two (2) years for reference and dispute resolution purposes.
• Technical Data & Logs — Retained for a shorter period, typically between 90 days and 12 months, depending on the log type.

Upon expiry of the retention period, your data will be securely deleted or permanently anonymised so that it can no longer be associated with any specific individual.

8Your Personal Data Rights

As a data subject, you have the following rights, which you may exercise at any time by contacting our privacy team:

To exercise any of the above rights, please contact the dota88 customer support team. We will process your request within 30 business days. In complex cases, this period may be extended to 60 days with notice to you.

9Cookies & Tracking Technologies

Dota88 uses cookies and similar tracking technologies to enhance user experience and collect platform analytics data. The following are the types of cookies we use:

• Essential Cookies — Required for basic platform functions such as login sessions and security preferences. These cookies cannot be disabled.
• Performance Cookies — Collecting information on how you use the platform to help us improve website functionality and performance.
• Functional Cookies — Storing your preferences such as language selection and display settings for a more personalised experience.
• Analytics Cookies — Helping us understand platform usage patterns in aggregated, anonymised form for product development purposes.

You can control and manage cookie settings through your web browser settings. However, disabling essential cookies may affect the functionality of the dota88 platform. By continuing to use our platform after being informed of this cookie policy, you consent to the use of cookies as described.

10Cross-Border Data Transfers

In the course of its operations, dota88 may need to transfer your personal data to servers or processing facilities located outside Malaysia. Any such transfer is carried out with adequate safeguards to ensure your data remains protected at a standard comparable to Malaysian requirements.

The protective measures we take for cross-border data transfers include:

• Using standard contractual clauses approved by the relevant data protection authorities.
• Ensuring data recipients in destination countries comply with equivalent data protection standards.
• Conducting data protection impact assessments before transfers to new regions are carried out.

11Children's Privacy

The dota88 platform is exclusively for individuals aged 18 and above. We do not knowingly collect, process, or store any personal data from children or individuals under the age of 18.

If we find that a child's personal data has been collected without proper age verification, we will take immediate steps to delete that data and close the account in question. Parents or guardians who have reason to believe their child has registered on our platform should contact us immediately.

12Amendments to This Privacy Policy

Dota88 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, technological requirements, or applicable legislation. The "Updated" date at the top of this document indicates when the last amendment was made.

For significant changes, we will provide clear notice to members via their registered email or in-platform notification at least 14 days before the changes take effect. Continued use of the dota88 platform after the effective date of any amendment constitutes your acceptance of the updated Privacy Policy.