Privacy Policy dana69

Dana69 ("we", "Platform") takes the privacy of every individual using our services very seriously. As a responsible online entertainment platform, we understand that member trust is our most valuable asset — and that trust begins with transparency in how we handle your personal data.

This Privacy Policy is drafted in accordance with the requirements of Malaysia's Personal Data Protection Act 2010 (PDPA) and clearly sets out who is responsible for your data, what data is collected, how it is used, with whom it may be shared, and what your rights are as the owner of that data.

This document applies to all registered dana69 members, website visitors, and any individual who interacts with our platform through any channel — including the official website, Android and iOS mobile apps, and our customer support channels.

If you disagree with any part of this Privacy Policy, please stop using the platform and contact our support team for further clarification before making any decisions.

Dana69 collects various types of personal data depending on how you interact with our platform. The following are the main categories of data we collect:

Data marked "Required" is necessary to register and maintain your account. Failure to provide this data may prevent you from using the full dana69 service. Data marked "Automatic" is collected technically while you use the platform, while data marked "Applicable" is only collected when a relevant situation arises.

Dana69 collects your personal data through several different channels, and we want you to understand each of them:

• Account registration: When you complete the registration form and finish the KYC process, you voluntarily provide us with your identity and contact information.
• Platform usage: Every interaction you have with games, deposits, withdrawals, and other features automatically records relevant activity data.
• Tracking technology: Cookies, session tokens, and similar technologies collect technical data such as IP addresses, device information, and website usage patterns.
• Support communication: When you contact our customer support team via live chat, email, or other channels, we record those communications for quality and issue resolution purposes.
• Third-party sources: In certain cases, we may receive identity verification data from third-party KYC service providers we engage, or fraud prevention information from trusted security partners.

We do not purchase personal data from data brokers or any external commercial sources. All data we hold is either provided directly by you, automatically generated by our systems, or received from partners with a direct relationship to the delivery of services to you.

Dana69 uses the personal data collected for the following purposes, and we ensure each use has a solid legal basis:

• Account management: Creating, verifying, and maintaining your member account, including KYC processes and age verification.
• Service provision: Processing deposits, managing withdrawals, settling wagers, and delivering all platform features you use.
• Security and fraud prevention: Detecting and investigating suspicious activity, preventing unauthorised access, and complying with anti-money laundering (AML) obligations.
• Legal compliance: Meeting reporting requirements to relevant authorities in accordance with applicable Malaysian law.
• Service communication: Sending important notifications relating to your account, terms changes, security alerts, and relevant technical information.
• Customer support: Resolving enquiries, complaints, and technical issues you report to our support team.
• Platform improvements: Analysing usage patterns in aggregate to improve overall platform performance, design, and user experience.
• Marketing communication: With your consent, sending information about dana69 promotions, bonus offers, and the latest news that may interest you.

Dana69 does not sell your personal data. However, there are certain situations where we need to share your data with carefully selected parties:

• Payment service providers: Banking institutions and e-wallet providers such as FPX, Touch 'n Go eWallet, GrabPay, Boost, and DuitNow QR require relevant information to process your financial transactions.
• KYC and identity verification providers: Third-party verification partners we use to process and validate member identity documents for compliance purposes.
• Technical service providers: Companies that provide hosting infrastructure, cybersecurity, analytics, and technical support to our platform, all bound by strict confidentiality agreements.
• Competent authority: Government agencies, law enforcement bodies, or courts when required to do so under Malaysian law or a valid court order.
• Fraud prevention: Industry partners or bodies established specifically to prevent online fraud and money laundering within the gambling sector.

All third parties that receive personal data from dana69 members are bound by strict data processing agreements. They may only use such data for the specific permitted purposes and must adhere to security standards equivalent to those we apply ourselves.

If dana69 is involved in a merger, acquisition, or asset sale, members' personal data may be transferred as part of that transaction. You will be notified in advance via a clear notice on the Platform should this occur.

Protecting your personal data is a technical and organisational responsibility we take seriously. Dana69 implements multiple layers of security controls to ensure your data remains safe from unauthorised access, disclosure, alteration, or loss.

• Encryption in transit: All communications between your device and our servers are secured with TLS 1.3 encryption and a valid 256-bit SSL certificate.
• Encryption at rest: Sensitive data such as financial details and KYC documents are encrypted at rest in our database using industry-recognised encryption algorithms.
• Internal access controls: Access to members' personal data within the dana69 organisation is restricted on a least-privilege basis — only staff who genuinely require access to carry out their authorised duties are permitted.
• Threat monitoring and detection: Automated monitoring systems operate 24/7 to detect and respond to any suspicious activity or intrusion attempts.
• Regular security audits: dana69 conducts regular security audits and penetration testing to identify and address any vulnerabilities before they can be exploited.
• Incident management: We have a clear incident response procedure. In the event of a data breach affecting members, we are committed to notifying affected parties within the timeframe required by law.

Dana69 uses cookies and similar tracking technologies to keep the platform running smoothly and to deliver a better experience for you. The following are the types of cookies we use:

You can manage your cookie settings through your web browser at any time. However, disabling essential or security cookies may affect platform functionality and your account security. dana69 does not use third-party cookies for advertising or marketing purposes unrelated to our platform.

As a data subject under Malaysia's PDPA and dana69's privacy policy, you hold several important rights regarding your personal data. We are committed to respecting and facilitating the exercise of these rights:

To exercise any of the above rights, please contact the dana69 customer support team via live chat or our support email. We will respond to your request within 30 days of receipt. In complex cases, this period may be extended to up to 60 days with prior notice to you.

Please note that some of these rights are subject to certain exceptions — for example, we cannot delete data required for legal compliance or data related to ongoing legal proceedings.

Dana69 retains your personal data only for as long as necessary for the purpose it was collected, or as required under Malaysian law. The following are general data retention guidelines:

• Active account data: Retained for the duration of your active membership and up to 7 years after account closure to meet financial and AML legal requirements.
• Financial transaction records: Retained for a minimum of 7 years in accordance with Malaysian accounting and tax legal requirements.
• KYC documents: Retained for the duration of active membership and 5 years after account closure or the date of the last transaction, whichever is later.
• Support communication logs: Retained for 3 years from the date of communication for reference and complaint resolution purposes.
• Technical log data: Retained for 12 months for security and fraud detection purposes.
• Marketing data: Retained until you withdraw consent or request deletion, whichever comes first.

When the retention period expires, your personal data will be securely deleted or permanently anonymised so it can no longer be linked to your identity. The data deletion process is carried out using methods that meet recognised security standards.

Dana69 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or service improvements. Any significant changes will be communicated to you via:

• Notice displayed prominently on the Platform's home page.
• A notification email to your registered email address.
• In-account notification upon your next login.

The latest version of the Privacy Policy is always available on this page, with the update date clearly shown at the top of the document. We recommend you review this page periodically — at least once every three months — to stay informed about how we handle your personal data.

Continued use of the dana69 platform after the effective date of any changes means you accept the updated Privacy Policy. If you disagree with those changes, you have the right to close your account and request data deletion in accordance with the procedure described in Section 8.

If you have any enquiries, concerns, or wish to exercise your privacy rights, the dana69 team is ready to assist through the following channels:

• Live Chat: Available 24/7 via the chat icon at the bottom corner of the platform — the fastest way to get an immediate response.
• Privacy Email: [email protected] — for written enquiries requiring detailed responses, we will reply within 24 hours on business days.

For data protection complaints that cannot be resolved through our internal channels, you have the right to lodge a complaint with the Department of Personal Data Protection (JPDP) Malaysia as the relevant supervisory authority.

For more information about your rights and how we handle our services responsibly, please visit our Responsible Gaming and FAQ ours.