Dota88 Privacy Policy – Personal Data Protection for Malaysian Players

Dota88 (accessible at https://dota88.ws) is a digital entertainment platform committed to protecting the privacy and personal data security of all its members in Malaysia. This Privacy Policy sets out in detail how we collect, process, store, disclose, and protect your personal information when you use the dota88 platform, services, and products.

This document applies to all users of the dota88 platform — including website visitors, prospective members browsing the platform, and registered members actively using our services. It covers all your interactions with dota88 through our website, mobile application (where available), email, live chat, and customer support channels.

Dota88 is fully compliant with Malaysia's Personal Data Protection Act 2010 (PDPA), the primary legislation governing the processing of personal data in a commercial context in Malaysia. Beyond the PDPA, we also draw on international data protection best practices to ensure the standard of protection we provide to our members remains on par with global benchmarks.

Dota88 collects various types of personal data necessary to operate the platform effectively and deliver quality services to members in Malaysia. We only collect data that is genuinely required — we do not collect data excessively or for purposes unrelated to platform operations.

Dota88 collects your personal data through various channels depending on how you interact with the platform. The following are the main data collection channels used by dota88.

• Account Registration: When you register a dota88 account, you directly provide your name, Malaysian phone number, and email address. This information forms the foundation of your account profile on dota88.
• Financial Transactions: When you make a deposit via Touch 'n Go eWallet, GrabPay, DuitNow, FPX Maybank2u, CIMB Clicks, Boost, or ShopeePay, information related to that transaction is recorded in the dota88 system for record-keeping and security purposes.
• Platform Usage: Usage data is collected automatically as you browse and use the dota88 platform — including the games you play, bets you place, and time you spend on the platform.
• Contact dota88: Whenever you contact the dota88 support team via live chat, email, or other channels, those communication records are retained for service quality and issue resolution purposes.
• Cookies & Similar Technologies: dota88 uses cookies and similar tracking technologies to automatically collect technical and usage data. Further details are available in section 6 of this document.
• Identity Verification: For withdrawals exceeding certain limits or in cases requiring additional verification, dota88 may request identity verification documents such as a copy of your MyKad or passport.

Dota88 uses collected personal data solely for legitimate purposes relating to the operation of the platform and the provision of services to members. We will not use your data for any purpose to which you have not given explicit or implied consent.

• Account Management: Creating, maintaining, and protecting your dota88 account — including identity verification, password recovery, and duplicate account detection.
• Transaction Processing: All deposits and withdrawals are processed in MYR via your chosen Malaysian payment method, quickly and securely.
• Provision of Gaming Services: To ensure all casino games, slots, Sports Betting, poker, rummy, and other services run smoothly and fairly for you.
• Fraud Prevention and Security: Detecting and preventing fraud, money laundering, bonus abuse, and other security threats to the dota88 platform and its members.
• Customer Support: To provide you with effective, personalised assistance whenever you reach out to the dota88 support team with an issue or enquiry.
• Platform Improvement: Analysing usage patterns in aggregate (without identifying individuals) to improve the design, features, and performance of the dota88 platform.
• Service Communications: Sending important notifications related to your account, service updates, changes to terms, and relevant security information.
• Marketing (with consent): Sending information about new dota88 promotions, bonuses, and offers — only to members who have given consent to receive marketing communications.
• Legal Compliance: To comply with legal obligations applicable to dota88, including requirements under Malaysia's PDPA 2010 and other relevant legislation.

Dota88 does not sell or rent its members' personal data to any third party. That said, in the course of operating the platform, there are specific circumstances where data may be shared with trusted parties as outlined below.

• Payment Service Providers: Payment gateways processing your deposit and withdrawal transactions via Touch 'n Go, GrabPay, DuitNow, FPX, Boost, and ShopeePay require limited transaction information to complete payments. These providers are bound by strict confidentiality agreements with dota88.
• Game Provider: Casino game providers such as Pragmatic Play and PG Soft may receive game session data necessary to ensure continuity and game integrity. This does not include any personally identifiable information.
• Legal Authorities: dota88 may disclose personal data to the relevant authorities where required by Malaysian law, a court order, or other valid legal process — including investigations related to fraud or money laundering.
• Technical Infrastructure Providers: Cloud and technical infrastructure providers that host the dota88 platform may have access to stored data — however, they are bound by strict confidentiality and data protection agreements.

Dota88 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you browse the dota88 website.

• Session Cookies: Temporary cookies that are deleted when you close your browser. These are used to maintain your logged-in status during an active session on dota88 so you do not need to log in again each time you navigate to a new page.
• Persistent Cookies: Persistent cookies stored on your device for a set duration. Used to remember your preferences such as language and display settings on dota88.
• Security Cookies: Cookies that help dota88 detect and prevent fraudulent activity — for example, by identifying suspicious login attempts from unfamiliar locations or devices.
• Analytics Cookies: Cookies that help dota88 understand how users interact with our platform on an aggregate basis — this information is used to improve the user experience and overall platform performance.

You can manage and delete cookies through your browser settings. Please note that blocking all cookies may affect certain functions on the dota88 platform — particularly those related to login and session security. We recommend allowing necessary cookies for the best possible experience.

Dota88 invests seriously in data security infrastructure to ensure that the personal and financial information of our members is protected at all times. The following are the key security layers we employ.

• 256-bit SSL encryption for all data transmitted between your device and dota88 servers.
• Passwords are stored as irreversible hashes — dota88 itself has no way to view your original password.
• Round-the-clock security monitoring by the dota88 technical team to detect unusual or suspicious activity.
• Strict internal access controls — only authorised personnel with a legitimate operational need may access members' personal data.
• Regular data security training for all dota88 staff who handle members' personal data.
• Periodic security audits by independent third parties to identify and address potential vulnerabilities in dota88's systems.
• Clear incident response procedures — in the event of a data breach, dota88 will notify affected members and the relevant authorities in accordance with Malaysia's PDPA requirements.

Dota88 retains members' personal data only for as long as necessary for the purposes stated in this Privacy Policy, or as required under applicable Malaysian law. The following are general guidelines on data retention periods at dota88.

• Active Account Data: For as long as your dota88 account remains active, your personal data is retained to ensure continuity of service.
• Data After Account Closure: Once your dota88 account is closed at your request, primary personal data will be deleted or anonymised within 90 days, subject to any legal requirements that may necessitate longer retention.
• Financial Transaction Records: Deposit and withdrawal records in RM are retained for a minimum of 7 years in accordance with Malaysian financial and tax legal requirements.
• Security Logs: Access logs and security activity records are retained for 12 months for security investigation and fraud prevention purposes.
• Support Communication Records: Live chat and email records with the dota88 support team are retained for 24 months for service quality and dispute resolution purposes.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you as a data subject have specific rights in relation to your personal data held by dota88. dota88 fully respects and facilitates the exercise of these rights.

As dota88 processes financial transactions in Malaysian Ringgit (RM) across various Malaysian e-wallet and digital banking platforms, payment data protection receives particular attention in our privacy policy.

• dota88 does not store your credit card number, debit card number, or online banking password on any of our servers.
• All Touch 'n Go eWallet, GrabPay, DuitNow, FPX Maybank2u, CIMB Clicks, Boost, and ShopeePay transactions are processed directly through certified payment gateways that comply with PCI-DSS security standards.
• dota88 only retains the information needed to verify and record transactions — such as payment method type, amount in MYR, transaction time, and settlement status.
• All withdrawal requests from dota88 can only be processed to a payment method registered under the same name as the account holder — this is a security measure to prevent unauthorised withdrawals.
• Withdrawals exceeding certain limits require additional identity verification by the dota88 team before processing — this is standard anti-money laundering procedure.

Dota88 reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements, or improvements to how we protect member data. Any material changes will be communicated to members via email to the address registered with your dota88 account, or through a prominent notification on the platform.

The "Last Updated" date shown at the top of this document will always reflect the most recent revision of dota88's Privacy Policy. We recommend checking this page periodically to stay informed about how we handle your personal data.

Continued use of the dota88 platform after any changes to this Privacy Policy take effect will be considered your acceptance of the updated Privacy Policy. If you do not agree with the changes made, please contact the dota88 support team for information on how to close your account.

If you have any questions, concerns, or complaints about how dota88 handles your personal data, or if you wish to exercise any of the rights described in section 9 of this document, please reach out to us through the following channels.

• Privacy Email: Send your privacy enquiries to support@dota88.ws with the subject line "Privacy Inquiry — [Account Name]". We will respond within 5 business days.
• Live Chat: For privacy queries requiring a prompt response, use the live chat function within the dota88 platform, which operates 24 hours a day.
• Response Time: Requests relating to data rights (access, correction, deletion) will be processed within 14 business days of receiving a complete request.