Dana123 Privacy Policy – Our Commitment to Protecting Your Data in Malaysia

1. Introduction

This Privacy Policy describes how dana123 ("Platform", "We") collects, uses, stores, and protects your personal information ("Personal Data") when you use our website and services at dana123.best.

We are committed to protecting the privacy of all members in Malaysia in accordance with the Personal Data Protection Act 2010 (PDPA) and the highest industry standards. This document is written in English to ensure clarity and accessibility for all our members.

dana123 is the data controller for all personal information you provide to us. If you have any questions about how we handle your data, do not hesitate to contact us at support@dana123.best.

2. Personal Data We Collect

dana123 collects various types of information depending on how you interact with our platform. The following are the categories of data we may collect:

Account Registration Information:

• Full name as it appears on your official Malaysian identification document.
• Date of birth for age verification purposes (minimum 18 years old).
• An active email address used as your primary account identifier.
• Malaysian mobile number for two-factor authentication and important communications.
• Account passwords stored in encrypted form that cannot be read by our staff.

Identity Verification (KYC) Information:

• A copy of your MyKad or valid Malaysian passport for identity verification.
• Recent bank statement or proof of current residential address.
• Payment method information, including e-wallet account numbers such as Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, and DuitNow, or FPX account details.

Platform Usage Data:

• Game history, betting activity, and financial transactions within the platform dana123.
• IP address, device type, operating system, and web browser used.
• Login timestamps, logout logs, and session activity.
• Your saved game preferences and account settings.

Communication Data:

• Live chat conversation records with the support team dana123.
• Emails you send to us and our responses to you.
• Feedback, complaints, or surveys that you complete.

3. How We Use Your Data

dana123 uses your personal data only for legitimate and reasonable purposes. We will not use your data for purposes unrelated to the provision of platform services without first obtaining your separate consent.

Purposes for which data is used include:

• Managing and maintaining your account – ensuring your account functions properly, verifying your identity, and processing your financial transactions at dana123.
• Payment processing – deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX, as well as withdrawals of winnings to the same methods.
• Fraud prevention and security – detecting and preventing fraudulent activity, money laundering, and the use of multiple accounts in violation of our terms dana123.
• Compliance with legal obligations – to meet reporting and compliance requirements under applicable Malaysian laws, including PDPA 2010.
• Customer support – resolving issues, answering enquiries and providing technical assistance to members dana123.
• Platform improvements – analysing usage patterns in aggregate and anonymised form to improve the overall user experience.
• Service communications – to send important notifications regarding your account, transactions, and policy changes that affect you.
• VIP programme and rewards – calculating VIP points, weekly cashback and other rewards based on your gaming activity on dana123.

For direct marketing purposes such as promotional emails or special offer notifications, dana123 will only send such communications if you have given your consent at the time of registration or subsequently. You may withdraw this consent at any time through your account settings.

4. Disclosure to Third Parties

dana123 does not sell, rent, or disclose your personal data to third parties for their own marketing purposes. However, there are limited situations where we need to share data in order to operate our services effectively:

• Payment Processors: Information required to process financial transactions is shared with the licensed payment service providers we use, including Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow operators, and banks via FPX. All payment processors are bound by strict data protection agreements.
• Game Software Providers: Minimum data required for game operation may be processed by providers such as Pragmatic Play, PG Soft, and NetEnt, entirely under the terms of the data protection agreements between dana123 and the relevant providers.
• Relevant Authorities: dana123 will disclose data when required by a valid court order, regulatory authority directive, or Malaysian legal requirement. In such situations, we will notify you in advance where permitted by law.
• Business Transfers: If dana123 involved in any merger, acquisition, or asset sale, user data may be transferred to the relevant parties, subject to notice and your right to opt out.

5. Data Security

dana123 implements multiple layers of technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction.

Key security measures we have in place:

• 256-bit SSL Encryption for all data transmitted between your device and the servers of dana123.
• Passwords stored in hashed form using algorithms that are undecryptable — our staff cannot read your password.
• Two-Factor Authentication (2FA) available for all accounts to add an extra layer of security.
• 24-hour security monitoring that detects and responds to any suspicious activity in real time.
• Strict internal access controls ensures that only staff who genuinely need access can view specific data categories, in line with privacy-by-design principles.
• Regular security audits by independent experts to identify and address any system vulnerabilities before they can be exploited.
• Secure data backups to ensure system resilience and recovery in the event of an emergency.

Even though dana123 takes all reasonable steps to protect your data, no system can be guaranteed 100% secure. In the event of a security breach that materially affects your personal data, we will notify you within a reasonable timeframe as required by applicable law.

6. Cookies & Tracking Technologies

dana123 uses cookies and similar tracking technologies to enhance the user experience on our platform. Cookies are small text files stored on your device when you visit our website.

Types of cookies we use:

• Essential Cookies: Required for core platform functions such as login authentication and session security. These cookies cannot be disabled without affecting the usability of the platform. dana123.
• Performance Cookies: Collects anonymised information about how you use the platform to help us identify areas for improvement.
• Functional Cookies: Stores your preferences such as language, game settings, and login information you choose to have remembered.
• Security Cookies: Helps detect and prevent fraudulent activity and ensures the security of your account at dana123.

You can manage your cookie preferences through your web browser. However, disabling certain cookies may affect platform functionality. For more information on managing cookies, refer to your browser's help documentation.

7. Your Rights as a Data Subject

As a member of dana123 who are residents of Malaysia, you have the following rights regarding your personal data under Malaysia's Personal Data Protection Act 2010:

To exercise any of the rights above, please contact us at support@dana123.best by stating the type of request and providing sufficient information for us to verify your identity. We will respond within 14 business days.

8. Data Retention & Deletion

dana123 retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required under Malaysian law. The following are the general data retention periods we observe:

• Active account data: Retained for as long as your account is active and for a reasonable period following account closure to allow for the resolution of any outstanding claims.
• Financial transaction records: Retained for a minimum of 7 years in accordance with Malaysian accounting and anti-money laundering legal requirements.
• Support communication records: Retained for 3 years for reference and dispute resolution purposes.
• Security logs: Retained for 12 months for the purpose of detecting and investigating suspicious activity.
• Marketing data: Retained until you withdraw your consent or close your account, whichever comes first.

When data is no longer needed and there is no legal obligation requiring its continued retention, dana123 will dispose of such data using secure deletion procedures that ensure the data cannot be recovered.

9. Protection of Children's Data

Platform dana123 is a service intended for adults only and is not directed at individuals under the age of 18. We do not knowingly collect personal data from children.

If you believe that someone under the age of 18 has registered an account at dana123 or provide their personal data to us, please contact us immediately at support@dana123.best. We will take prompt action to close the account and delete all associated data from our systems.

dana123 uses age verification methods during registration and may request additional verification through the KYC process to ensure all members meet our minimum age requirement.

10. Amendments to the Privacy Policy

dana123 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or the technologies we use.

When any material changes are made to this policy, we will:

• Updating the "Last Updated" date at the top of this page.
• Display in-platform notifications dana123 regarding the changes made.
• Sending notification emails to all registered members for significant changes that require renewed consent.

Continued use of the platform dana123 after any amendment takes effect constitutes your acceptance of the revised policy. It is your responsibility to check this page periodically.

11. How to Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way dana123 manages your personal data, we welcome you to reach out to us through the following channels:

• Email: support@dana123.best – for general enquiries or official requests related to data privacy.
• Live Chat: Available 24 hours a day, 7 days a week through the platform dana123 – for urgent enquiries.

For official requests relating to data rights such as access, correction, or deletion, please send an email stating:

• Full name and registered email address at dana123.
• The type of request you are submitting (access / correction / deletion / other).
• Additional information required for us to verify your identity before processing your request.

We are committed to responding to all privacy enquiries within 14 business days from the date the email is received. For more complex enquiries, we may require up to 30 business days and will notify you if this is the case.