Privacy Policy

01 Introduction

This Privacy Policy ("Policy") sets out the basis on which dirwan88 ("we", "us", "our", "Company", "Platform") collects, processes, stores, and discloses personal data relating to individuals who visit, register with, or otherwise interact with the dirwan88 website at https://dirwan88.cam and all associated mobile-optimised pages and services (collectively, the "Platform").

dirwan88 acts as the data controller in respect of the personal data described in this Policy. We are committed to processing personal data in accordance with applicable data protection legislation and with due respect for your fundamental right to privacy.

By accessing the Platform or creating an Account, you acknowledge that you have read and understood this Policy and consent to the data practices described herein. This Policy should be read alongside our Terms & Conditions and our Responsible Gambling Policy.

02 Definitions

For the purposes of this Policy, the following terms have the meanings set out below:

• "Personal Data" means any information relating to an identified or identifiable natural person ("data subject").
• "Processing" means any operation performed on personal data, including collection, storage, use, disclosure, or deletion.
• "Data Controller" means the entity that determines the purposes and means of processing personal data — in this context, dirwan88.
• "Data Processor" means any third party that processes personal data on behalf of dirwan88 under a written data processing agreement.
• "Account" means the registered player account created on the dirwan88 Platform.
• "KYC" means Know Your Customer identity verification, as described in our Terms & Conditions.
• "Cookies" means small text files placed on your device by the Platform to store preferences and facilitate session management.

03 Personal Data We Collect

dirwan88 collects the following categories of personal data from users of the Platform:

04 How We Collect Personal Data

We collect personal data through the following means:

4.1 Directly From You

• When you complete the account registration form on the Platform;
• When you submit KYC documents for identity verification;
• When you make a deposit or request a withdrawal;
• When you contact our customer support team via live chat, email, or WhatsApp;
• When you participate in promotional activities, surveys, or competitions.

4.2 Automatically Through Platform Use

• Technical and usage data collected automatically via cookies, web beacons, and server logs when you access and interact with the Platform;
• Device and browser fingerprint data collected for fraud prevention and session security purposes;
• Geolocation data (country and region) derived from your IP address to verify eligibility and apply region-appropriate content.

4.3 From Third Parties

• Identity verification data from KYC service providers engaged to assist with document authentication;
• Fraud screening and risk assessment data from our anti-fraud partners;
• Payment confirmation data from payment processors handling transactions via FPX, DuitNow, and e-wallet providers.

05 Purposes & Legal Basis for Processing

dirwan88 processes personal data only where a lawful basis exists for doing so. The table below sets out our primary processing purposes and the corresponding legal basis:

06 Data Sharing & Disclosure

dirwan88 does not sell, rent, or trade your personal data to any third party for marketing or commercial purposes. We may share your personal data with third parties only in the limited circumstances described below:

6.1 Service Providers and Data Processors

We engage carefully selected third-party service providers who process personal data on our behalf and under our instruction, strictly for the purposes of providing the Platform's functionality. These include:

• Payment processors facilitating MYR transactions via FPX, DuitNow, Touch 'n Go eWallet, GrabPay, Boost, Maybank, CIMB, and Public Bank channels;
• KYC and identity verification providers who assist in authenticating identity documents and performing age checks;
• Anti-fraud and risk management platforms that screen transactions for suspicious activity;
• Cloud infrastructure and hosting providers that host our Platform and database systems under data processing agreements;
• Customer support platform providers that power our live chat, WhatsApp integration, and email ticketing systems.

All third-party data processors are contractually bound to process personal data only in accordance with our instructions and applicable data protection law.

6.2 Legal and Regulatory Disclosure

We may disclose personal data to competent authorities, regulators, or law enforcement agencies where we are legally required to do so, or where such disclosure is necessary to: (a) comply with a court order, legal process, or government request; (b) enforce our Terms & Conditions; (c) protect the rights, property, or safety of dirwan88, our players, or the public; or (d) detect, prevent, or address fraud, security, or technical issues.

07 Cookies & Tracking Technologies

The dirwan88 Platform uses cookies and similar tracking technologies to operate the Platform, enhance your experience, and gather analytics data. The categories of cookies we use are as follows:

7.1 Strictly Necessary Cookies

These cookies are essential for the Platform to function and cannot be disabled. They include session authentication tokens, security cookies, and cookies required to maintain your login state. No personal data collected by these cookies is used for marketing purposes.

7.2 Functional Cookies

Functional cookies store your preferences — such as preferred language, display settings, and previously visited game categories — so that the Platform remembers your choices between sessions. These cookies improve usability but are not strictly essential.

7.3 Analytics Cookies

We use analytics cookies to understand how players interact with the Platform — including which pages are visited most frequently, how long sessions last, and which features generate the most engagement. This data is used in aggregate to improve Platform performance and user experience.

7.4 Managing Cookies

You may manage your cookie preferences through your browser settings. Most modern browsers allow you to refuse all or certain categories of cookies, though doing so may impair the functionality of the Platform. Strictly necessary cookies cannot be refused without preventing access to the Platform entirely.

08 Data Retention

dirwan88 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, subject to any applicable legal retention obligations. The following general retention periods apply:

• Account and identity data: Retained for the duration of your Account and for a minimum of 5 years following Account closure, as required by anti-money-laundering regulations;
• Transaction and financial records: Retained for a minimum of 7 years from the date of the transaction in accordance with applicable financial record-keeping requirements;
• Customer support communications: Retained for up to 3 years from the date of the communication for dispute resolution and quality assurance purposes;
• Marketing consent records: Retained until you withdraw consent or for 3 years following your last interaction with the Platform, whichever is earlier;
• Technical and usage data (logs): Retained for up to 13 months for security monitoring and Platform performance analysis.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised in a manner that prevents re-identification.

09 Data Security

dirwan88 implements a comprehensive set of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include, but are not limited to:

• 256-bit SSL/TLS encryption for all data in transit between your device and our servers;
• AES-256 encryption for sensitive personal data stored in our databases at rest;
• Multi-factor authentication for all administrative access to production systems;
• Role-based access controls ensuring that personal data is accessible only to staff with a legitimate operational need;
• Regular penetration testing and vulnerability assessments conducted by independent security firms;
• Automated intrusion detection systems monitoring our infrastructure 24/7 for anomalous activity;
• Formal data breach response procedures enabling rapid identification, containment, and notification in the event of a security incident.

While we take every reasonable precaution to protect your personal data, no data transmission over the internet or electronic storage system is completely immune to security risks. You are responsible for maintaining the confidentiality of your Account password and for notifying us immediately if you suspect unauthorised access to your Account.

10 Your Data Rights

Subject to applicable data protection law, you have the following rights in relation to the personal data that dirwan88 holds about you:

To exercise any of these rights, please contact our Data Protection team via the contact details provided in Section 14 of this Policy. We will respond to all verified requests within 30 calendar days. Where requests are complex or numerous, we may extend this period by a further 60 days, in which case we will notify you of the extension and the reason for it.

We may need to verify your identity before processing certain requests to prevent unauthorised access to your personal data. This will typically involve providing a copy of your government-issued identification.

11 Children's Privacy

The dirwan88 Platform is strictly intended for individuals aged 21 years and above. We do not knowingly collect, process, or store personal data relating to any person under the age of 21.

If you believe that dirwan88 has inadvertently collected personal data from a person under the age of 21, please contact us immediately at the details provided in Section 14. Upon confirmation of such a case, we will take immediate steps to delete the relevant personal data and close the associated Account.

12 International Data Transfers

dirwan88 operates with a primary focus on the Malaysian market and stores the majority of player data on servers located in the Asia-Pacific region. In certain operational circumstances — for example, where we engage data processors such as cloud infrastructure providers or KYC verification services with facilities outside Malaysia — your personal data may be transferred to, and processed in, countries outside Malaysia.

Where such international transfers occur, dirwan88 takes appropriate safeguards to ensure that your personal data remains protected to a standard at least equivalent to that required under applicable Malaysian data protection law. Such safeguards may include, but are not limited to, contractual clauses requiring the receiving party to comply with appropriate data protection standards, and assessments of the adequacy of the data protection regime in the destination country.

By using the Platform, you acknowledge and agree that your personal data may be transferred and processed in jurisdictions outside Malaysia as described in this Section.

13 Changes to This Privacy Policy

dirwan88 reserves the right to update or amend this Privacy Policy at any time in order to reflect changes in our data processing practices, the applicable law, or the structure of our business. The "Last Updated" date at the top of this Policy indicates when the most recent revision was made.

Where we make material changes to this Policy — meaning changes that significantly affect your rights or the way we use your personal data — we will notify you by email to the address associated with your Account no less than 14 days before the changes take effect. Continued use of the Platform after that date constitutes your acceptance of the revised Policy.

We encourage you to review this Policy periodically to stay informed about how dirwan88 protects and uses your personal data. If you disagree with any changes, you may request account closure by contacting our support team before the effective date.

14 Contact Us — Data Privacy Enquiries

If you wish to exercise any of your data rights, raise a concern about our data practices, or ask a question about this Privacy Policy, please contact our Data Protection team using any of the following channels. Please include your registered Account email address and a description of your request so that we can assist you efficiently.

If you are unsatisfied with our response to any data privacy concern, you have the right to lodge a complaint with the relevant data protection authority in your jurisdiction. In Malaysia, data protection matters relating to personal data processing are governed by the Personal Data Protection Act 2010 (PDPA).