dpt24 Privacy Policy for Malaysian Users

Introduction

This Privacy Policy applies to all personal data collected and processed by the operator of dpt24 in connection with the website, account services, sports betting markets, casino products, payment processing and customer support offered through the dpt24 platform.

dpt24 recognises that personal data deserves careful handling. This Policy explains what information may be collected about Malaysian users, how it is used, with whom it may be shared and how it is protected. Reading this Policy helps users understand what to expect when they register, verify deposit, play or contact support.

Accessing dpt24, creating an account or continuing to use the platform after this Policy has been made available signifies that the user has read and understood the practices described herein. If a user disagrees with any part of this Policy, the user should not access dpt24 or provide personal information.

Definitions

• Personal Data means any information that identifies or can reasonably be used to identify a living individual, directly or indirectly.
• Processing means any operation performed on personal data, including collection, storage, use, disclosure, deletion or transmission.
• Controller means the operator of dpt24 responsible for determining the purposes and means of processing personal data.
• User means an individual who accesses dpt24, submits a registration or maintains an account.
• KYC means know-your-customer procedures requiring identity, age and payment-ownership verification.
• Cookie means a small data file placed on a user's device by the dpt24 website to maintain session state or support functional behaviour.
• Third Party means a person or organisation other than the dpt24 user and the platform operator.

Data We Collect

dpt24 may collect the following categories of personal data:

Data is collected only to the extent reasonably necessary for the purposes described in this Policy. dpt24 does not seek to collect sensitive categories of data beyond what is required for age, identity and payment ownership checks.

How We Use Personal Data

dpt24 uses personal data for the following purposes:

• Verifying identity, age and eligibility as required by the account registration and KYC process.
• Processing MYR deposits, maintaining account balances and executing withdrawal requests to eligible Malaysian bank accounts or supported e-wallets.
• Providing access to sports betting markets including EPL, Liga Super Malaysia and UFC, and casino gaming products.
• Administering promotions, verifying wagering completion and releasing eligible bonus withdrawals.
• Delivering customer support through Live Chat, WhatsApp or email channels operated by dpt24.
• Detecting and investigating fraud, duplicate accounts, money laundering, betting irregularities and prohibited conduct.
• Implementing responsible-gambling measures including deposit-limit checks, self-exclusion reviews and regulatory compliance obligations.
• Improving the dpt24 platform through aggregated analytics that do not personally identify individual users.

Legal Basis for Processing

dpt24 may rely on one or more of the following grounds when processing personal data:

• Contractual necessity: Processing required to perform an account agreement, including registration, deposits, game access and withdrawal.
• Legitimate interests: Processing reasonably necessary to protect platform security, prevent fraud, maintain responsible-gambling controls and conduct operational analytics, provided those interests are not overridden by user rights.
• Legal obligation: Processing required to comply with applicable KYC, anti-money-laundering, record-keeping or licensing requirements.
• Consent: Where a user has specifically agreed to a processing activity such as optional marketing communications.

A user may withdraw consent for-based processing at any time by contacting dpt24 support, without affecting the lawfulness of earlier processing.

Data Sharing and Disclosure

dpt24 does not sell personal data. Personal data may be shared only in the following circumstances:

• Payment processors and e-wallet operators: Data shared with Maybank, CIMB, Public Bank, Hong Leong Bank, Touch 'n Go eWallet, Boost or FPX-connected systems as necessary to process a specific MYR transaction.
• Identity verification providers: KYC data may be shared with third-party verification services operating under appropriate contractual data-protection obligations.
• Technology and hosting partners: Service providers supporting platform infrastructure, customer service tools or security monitoring who are bound by confidentiality obligations.
• Regulatory and legal bodies: Where dpt24 is required to disclose data by applicable law, court order, licensing authority or legitimate law-enforcement request.
• Business transfers: If dpt24 undergoes a corporate reorganisation, personal data may be transferred to successors subject to equivalent privacy protections.

Any third party receiving personal data from dpt24 is expected to maintain appropriate technical and organisational security measures and to use the data only for the specified purpose.

Cookies and Tracking Technologies

dpt24 may use cookies and similar technologies to support essential platform operation. Session cookies allow a user to remain logged in while navigating the platform. Functional cookies may remember preferences such as language or layout choices.

Analytics tools may collect aggregated, anonymised data about page visits, navigation patterns and device types to help dpt24 improve usability. Where analytics involve identifiable data, appropriate anonymisation or consent measures should be applied.

Users can manage cookie settings through their browser. Disabling essential cookies may affect the ability to access account features, place wagers or process payments through dpt24. Instructions for managing cookies in common browsers are available from the browser publisher.

Data Retention

Personal data is retained only as long as reasonably required for the purpose for which it was collected, or as required by applicable laws, licensing obligations or legitimate security needs.

• Active account data is retained while the dpt24 account remains open and for a reasonable period after closure to allow query resolution.
• Transaction and KYC records may be retained for longer periods where required by anti-money-laundering or financial record-keeping obligations.
• Support communications may be retained for quality assurance, dispute resolution and internal review purposes.
• Anonymised or aggregated data may be retained indefinitely as it does not personally identify any individual.

At the end of a retention period, personal data should be securely deleted, anonymised or otherwise made inaccessible through appropriate technical means.

Security Measures

dpt24 applies technical and organisational measures designed to protect personal data against unauthorised access, accidental loss, alteration or disclosure. These measures may include encrypted data transmission, access controls, session management and security monitoring.

No internet-based service can guarantee absolute security against all threats. Users should use strong, unique passwords, avoid sharing login details, log out from shared devices and contact dpt24 support promptly if they suspect that their account has been accessed without authorisation.

Where a data incident occurs that is likely to result in significant risk to affected users, dpt24 will take steps to investigate, contain and address the incident in accordance with applicable obligations.

User Rights

Subject to applicable law and the specific circumstances of each request, dpt24 users may have the following rights regarding their personal data:

Children and Minors

dpt24 is strictly a service for adults aged 21 and above. The platform must not be accessed by or used on behalf of anyone under the age of 21. dpt24 does not intentionally collect personal data from minors.

Where dpt24 discovers that personal data belonging to a person under the required age has been submitted, the relevant account should be suspended, the data reviewed and appropriate steps taken to remove or restrict it. Parents or guardians who become aware of underage access should notify dpt24 support promptly.

Third-Party Links and Services

dpt24 may reference or interact with third-party payment processors, software providers or support tools. This Privacy Policy applies only to data processed directly by dpt24 and does not cover how third parties handle information on their own platforms.

Users should review the privacy practices of any third-party service they interact with separately. dpt24 is not responsible for the privacy policies or security measures of independent operators.

Policy Updates

dpt24 may update this Privacy Policy to reflect changes in legal requirements, platform features, data-processing practices or security standards. Material amendments may be communicated through the dpt24 website, account notifications or other appropriate channels before taking effect.

Users are encouraged to review this Policy periodically. Continued use of dpt24 following notification of a material change may constitute acceptance of the updated terms, subject to applicable law and any specific consent requirements.

Contact Us

Questions, access requests, correction requests or privacy concerns relating to dpt24 personal data processing should be directed to dpt24 customer support through the channels displayed in the account interface or by email.

Website email: [email protected] (displayed as plain text — this address is not a clickable link).

dpt24 aims to acknowledge privacy requests promptly and to respond substantively within a reasonable time frame. Requests requiring identity verification, account investigation or legal review may take longer, and dpt24 will advise on expected timelines where appropriate.