Privacy Policy — PlayDash55

This Privacy Policy (the "Policy") describes how PlayDash55 (the "Company", "we", "us", "our") — the operator of the online gaming and sports betting platform at playdash55.cam (the "Platform") — collects, processes, stores, and protects the personal data of users ("you", "User", "Player", "Account Holder") who access or use the Platform.

PlayDash55 is committed to handling personal information responsibly and in compliance with applicable data protection laws and international regulatory standards. This Policy has been drafted to give you a clear, complete understanding of your privacy rights and our data obligations.

By registering an account on PlayDash55 or using any feature of the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you do not agree with any part of this Policy, you should not use the Platform.

For the purposes of this Privacy Policy, the following terms shall have the meanings ascribed to them below:

• "Personal Data" means any information that identifies or can reasonably be used to identify a natural person, directly or indirectly, including name, identification number, contact details, financial data, device identifiers, or online identifiers.
• "Processing" means any operation performed on personal data, including collection, storage, use, disclosure, transfer, erasure, or destruction.
• "Data Controller" means the entity that determines the purposes and means of processing personal data — in this context, PlayDash55.
• "Data Processor" means any third party that processes personal data on behalf of PlayDash55, under instruction and subject to contractual obligations.
• "KYC Data" means identity verification documents and information collected for Know Your Customer compliance purposes, including government-issued identification, proof of address, and proof of payment method.
• "Sensitive Data" means a subset of personal data afforded heightened protection, which may include financial account details, payment card information, and identity document numbers.
• "Cookies" means small text files placed on your device by the Platform for the purposes of session management, security, and analytics.

PlayDash55 collects personal data across several categories, as set out in the table below. We collect only what is necessary for the stated purposes.

PlayDash55 does not intentionally collect special categories of sensitive personal data (such as racial origin, political opinions, or health data) except where strictly required for responsible gambling assessments or regulatory compliance.

PlayDash55 collects personal data through the following methods:

The majority of data we hold is provided directly by you during account registration, the KYC verification process, when making deposits or withdrawals, when contacting our customer support team, or when responding to surveys or promotions.

When you access and use the PlayDash55 Platform, certain technical data is automatically collected by our servers and analytics systems. This includes your IP address, device identifiers, browser specifications, and page interaction data. This information is essential for Platform security, fraud detection, and performance monitoring.

When you make a deposit or withdrawal using a third-party payment service — such as Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank2u, CIMB Clicks, Public Bank Online, or Hong Leong Connect — those providers may share transaction confirmation data with us for the purpose of crediting or debiting your PlayDash55 account. We do not receive your full payment credentials from these processors.

We may use authorised third-party identity verification services to assist with KYC checks. These providers process document images and identity data on our behalf, under strict contractual data processing agreements.

PlayDash55 processes your personal data for the following specific and legitimate purposes:

• Account Management: Creating, maintaining, and operating your PlayDash55 player account, including authentication and access control.
• Identity Verification & Compliance: Conducting KYC verification and complying with anti-money laundering (AML) regulations and gaming licence obligations.
• Payment Processing: Facilitating deposits and withdrawals in Malaysian Ringgit (MYR) and cryptocurrency, and maintaining accurate transaction records.
• Fraud Prevention & Security: Detecting, preventing, and investigating fraudulent activity, money laundering, account sharing, and other prohibited conduct as defined in our Terms & Conditions.
• Gaming Services: Delivering casino games, sports betting markets, live dealer games, and other Platform features, and maintaining accurate gaming records.
• Responsible Gambling: Implementing and monitoring player-set deposit limits, session limits, and self-exclusion orders; identifying players who may be at risk of problem gambling.
• Customer Support: Responding to enquiries, resolving disputes, and providing assistance via live chat, WhatsApp, and email in English, Bahasa Melayu, and Mandarin.
• Platform Improvement: Analysing aggregated usage data to improve the functionality, performance, and user experience of the Platform.
• Legal Obligations: Complying with applicable laws, regulatory requirements, court orders, or lawful requests from competent authorities.

PlayDash55 processes your personal data on one or more of the following legal bases:

• Contractual Necessity: Processing required to perform the contract between you and PlayDash55 — i.e., to operate your account, process transactions, and deliver gaming services.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including AML legislation, KYC requirements, and gaming licence conditions.
• Legitimate Interests: Processing in pursuit of PlayDash55's legitimate business interests, including fraud prevention, security monitoring, and Platform improvement, where such interests are not overridden by your rights.
• Consent: Where we rely on consent — for example, for optional marketing communications — you may withdraw that consent at any time without affecting the lawfulness of prior processing.

PlayDash55 does not sell, rent, or commercially trade your personal data. We share personal data with third parties only in the following limited circumstances:

Transaction data is shared with approved payment processors — including but not limited to Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and participating Malaysian banks — to the extent necessary to complete your deposit or withdrawal. These providers are bound by their own data protection obligations.

KYC data, including identification documents, may be processed by authorised identity verification service providers who act as data processors under binding contractual agreements with PlayDash55.

PlayDash55 may be required by law, court order, or competent regulatory authority to disclose personal data. We will comply with lawful requests while seeking to protect your rights to the greatest extent possible.

Data may be processed by infrastructure providers (such as cloud hosting and analytics services) acting under data processing agreements. These providers have no independent right to use your data beyond what is necessary to provide services to PlayDash55.

PlayDash55 operates on an international basis, and your personal data may be transferred to and processed in countries outside Malaysia. Where such transfers occur, PlayDash55 implements appropriate safeguards to ensure your data receives an equivalent level of protection, including contractual data transfer mechanisms and, where applicable, reliance on adequacy decisions or approved standard contractual clauses.

Where data is transferred to jurisdictions without a recognised adequate level of data protection, we will ensure that additional contractual or technical safeguards are in place prior to the transfer.

PlayDash55 retains personal data only for as long as necessary for the purposes for which it was collected, or as required by applicable law. Our standard retention periods are as follows:

• Account and Registration Data: Retained for the duration of the active account relationship and for a minimum of 5 years following account closure, in compliance with AML record-keeping obligations.
• KYC and Identity Verification Documents: Retained for a minimum of 5 years from the date of the last transaction, as required by applicable AML and licensing regulations.
• Transaction and Gaming Records: Retained for a minimum of 5 years for regulatory compliance and dispute resolution purposes.
• Customer Support Communications: Retained for 2 years from the date of the communication, unless a longer period is required for ongoing dispute resolution.
• Technical and Log Data: Retained for 12 months for security and fraud monitoring purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised. Where anonymisation is not technically feasible, data is securely destroyed.

PlayDash55 uses cookies and similar tracking technologies on the Platform. The types of cookies we use are as follows:

• Strictly Necessary Cookies: Essential for the operation of the Platform, including session authentication, security tokens, and maintaining your logged-in state. These cannot be disabled without affecting Platform functionality.
• Performance and Analytics Cookies: Used to collect aggregated, anonymised information about how users interact with the Platform — pages visited, time on site, and navigation paths — to help us improve Platform performance.
• Functional Cookies: Used to remember your preferences, such as language settings or game category selections, to provide a more personalised experience.

PlayDash55 does not use advertising or targeting cookies to build profiles about you or to serve you advertisements on third-party websites. You may manage cookie preferences through your browser settings, noting that disabling strictly necessary cookies will impair Platform functionality.

Subject to applicable law and our legitimate legal obligations, you have the following rights in relation to your personal data held by PlayDash55:

To exercise any of the above rights, please contact our Data Protection team via live chat or email (contact details in Section 15). We will acknowledge your request within 5 business days and provide a substantive response within 30 days. We may request proof of identity before processing certain requests.

PlayDash55 implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS Encryption for all data transmitted between your device and our servers;
• Encryption at rest for all stored sensitive data, including financial records and identity documents;
• Strict access controls limiting access to personal data to authorised personnel only, on a need-to-know basis;
• Regular security audits and penetration testing of Platform infrastructure;
• Fraud detection systems monitoring account activity in real time for unusual patterns;
• Incident response procedures to detect, contain, and respond to any data security incidents promptly.

In the event of a data breach that is likely to result in a risk to your rights and freedoms, PlayDash55 will notify affected users and, where required, relevant regulatory authorities, without undue delay and in accordance with applicable law.

The PlayDash55 Platform is strictly intended for persons aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from an underage person, we will immediately close the associated account, delete all related personal data, and report the matter to relevant authorities where required.

If you are a parent or guardian and believe that a minor in your care has registered on PlayDash55, please contact us immediately via live chat or email so that we can take prompt action.

PlayDash55 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or operational requirements. Where material changes are made, we will notify registered Account Holders via the email address on file or via a prominent notice on the Platform, providing reasonable advance notice before the amended Policy takes effect.

The "Effective Date" displayed at the top of this Policy indicates when the current version came into force. We encourage you to review this Policy periodically. Your continued use of the Platform following the effective date of any updated Policy constitutes your acceptance of the revised terms.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by PlayDash55, please contact us through the following channels:

• Email: support@playdash55.cam (plain text — not a clickable link)
• Live Chat: Available 24/7 directly on this Platform — average response time 3-5 minutes
• Support Languages: English, Bahasa Melayu, and Mandarin Chinese

When submitting a data subject request, please include your registered Account username, the nature of your request, and any relevant details to assist us in identifying and processing your request efficiently. We will confirm receipt within 5 business days and provide a full response within 30 days.