Privacy Policy – Personal Data Protection for d4vd Malaysia Members

1

Introduction and Scope of This Privacy Policy

This Privacy Policy ("Policy") describes how d4vd ("we", "platform") collect, use, store, disclose and protect your personal data when you register, log in or use the online casino platform d4vd on the d4vd.my website.

We operate in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and all related privacy laws in force in Malaysia. We take this responsibility very seriously, because we believe that the trust you place in us when you register at d4vd is something we are wholeheartedly committed to protecting.

This Policy applies to all users of the d4vd who are in Malaysia, including registered members, visitors browsing the site, and any individual who interacts with our platform in any way. By using the services of d4vd, you confirm that you have read and understood this Privacy Policy.

2

Types of Personal Data We Collect

d4vd only collects data that is necessary to provide you with a safe, fair and high-quality service. The following are the categories of data we collect:

3

How We Collect Your Personal Data

Your personal data is collected by d4vd through several different channels, depending on the type of data and how you interact with our platform:

• Directly from you: When you register a new account at d4vd, completing identity verification forms, contacting our customer support team, updating your account profile, or making any financial transactions on our platform.
• Automatically: When you browse or use the platform d4vd, our servers automatically record technical data including your IP address, device type and web browser used, pages visited, session duration and your navigation patterns within the platform.
• Via cookie technology: Platform d4vd uses cookies and similar tracking technologies to remember your preferences, maintain your login session, and enhance your overall experience. You can manage cookie settings through your web browser.
• From authorised third parties: In certain situations, such as during identity verification or security checks, we may receive data from authorised third-party service providers — including Malaysian local payment providers (Touch 'n Go, GrabPay, DuitNow, FPX) — to verify your transactions.

4

Purposes for Using Your Personal Data

d4vd uses the personal data we collect solely for legitimate and transparent purposes. The following are the primary purposes for which your data is used:

• Service provision: To create and manage your account, process deposits and withdrawals via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow and FPX, and to give you access to all games and features on the platform d4vd.
• Identity verification: To verify that you meet the minimum age requirement of 18 years and to comply with the Know Your Customer (KYC) requirements mandated by Malaysian financial regulations.
• Security and fraud prevention: To detect, investigate, and prevent any fraudulent activity, money laundering, or platform abuse that may compromise your safety and that of other members at d4vd.
• Customer support: To respond to your enquiries, resolve complaints, and provide the technical support you request from our support team d4vd in the Malay language.
• Service improvement: To analyse usage patterns and feedback in order to improve platform quality, enhance the user interface, and introduce new features that are useful to Malaysian players.
• Account-related communications: To send important notices regarding your account, including transaction confirmations, security alerts and updates to the Terms & Conditions or this Privacy Policy.
• Legal compliance: To fulfil applicable legal obligations in Malaysia, including compliance with PDPA 2010, anti-money laundering regulations, and directives from competent authorities.

5

Data Sharing with Third Parties

d4vd does not sell your personal data. However, in certain limited situations, we may need to share data with trusted third parties. This occurs only under the following circumstances:

• Payment service providers: Transaction data that must be shared with Malaysian local payment service providers — Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX via Maybank2u or CIMB Clicks — solely for the purpose of processing your deposit and withdrawal transactions.
• Game provider: The minimum technical data required by internationally accredited game providers such as Pragmatic Play, Evolution Gaming or Microgaming to enable you to access their games through the platform d4vd.
• Regulatory authorities and law enforcement: Where required by Malaysian law or upon order from a court or competent authority, we may be obliged to disclose certain data. In such situations, we will endeavour to notify you in advance unless prohibited from doing so by law.
• Third-party fraud investigators: In cases involving suspected fraud investigations, money laundering or other illegal activities, data may be shared with authorised security agencies or fraud investigation firms.

In all of the above cases, we share only the minimum data necessary and require all recipient parties to adhere to data protection standards no less stringent than those set out in this Privacy Policy. All data sharing is subject to legally binding confidentiality agreements.

6

Data Security at d4vd

Protecting your personal data is one of the most significant technical investments we make at d4vd. The following are the security layers we employ to protect your information:

• 256-bit SSL Encryption: All communications between your browser and the d4vd is encrypted using TLS/SSL 256-bit protocol, ensuring that no third party can intercept or read any data transmitted.
• Stored data encryption: Sensitive data stored in our databases — including financial information and identity verification documents — is encrypted using the AES-256 algorithm before being stored.
• 24/7 security monitoring: Our threat detection and security monitoring systems operate around the clock to detect and respond to any unauthorised access attempts or cyberattacks.
• Internal access controls: Only staff d4vd who require access to specific data to carry out their authorised duties are permitted to do so, and all such access is logged and monitored.
• Regular security audits: Platform d4vd undergo regular security audits and penetration testing conducted by independent parties to identify and address any vulnerabilities.
• Secure server storage: Your data is stored in data centres protected by physical and technical safeguards, with backup systems in place to ensure service continuity and data recovery in the event of any unexpected incident.

7

Cookies & Tracking Technologies

Platform d4vd uses cookies and similar tracking technologies to enhance your experience and ensure certain platform features function correctly. The following are the types of cookies we use:

• Strictly Necessary Cookies: These cookies are required for the platform d4vd function properly. This includes login session cookies, security cookies and cookies that store your basic preferences. These cookies cannot be disabled without affecting the core functionality of the platform.
• Performance and analytics cookies: We use these cookies to understand how members use the platform d4vd — which pages are visited most frequently, where technical errors occur, and how users navigate the platform. This information is used to improve the user experience.
• Functional cookies: These cookies allow the platform to remember your preferences — such as language, time zone, and display settings — so you do not need to reconfigure them each time you log in to your d4vd.
• Cookie duration: Session cookies expire automatically when you close your web browser. Persistent cookies are stored for a set duration — typically between 30 days and 12 months, depending on the cookie type.

You can manage and delete cookies at any time through your web browser settings. However, disabling certain cookies may affect your experience on the platform d4vd yours, including the possibility that you may need to log in again at the start of each session.

8

Your Rights as a d4vd Member

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and the commitment of d4vd regarding privacy, you have the following rights in relation to your personal data:

To exercise any of the above rights, please contact our data protection team at [email protected] stating the right you wish to exercise and the information needed to verify your identity. We will respond within 14 business days of receiving your request.

9

Data Retention and Deletion

d4vd retains your personal data only for as long as necessary to fulfil the purpose for which it was collected or to comply with applicable legal requirements. The following are our general data retention guidelines:

• Active account data: For as long as your account remains active on the platform d4vd, we retain all data associated with your account to enable us to deliver our services to you in full.
• Financial transaction data: Transaction records — including deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow or FPX, as well as withdrawal records — are retained for a minimum of 7 years in accordance with Malaysian accounting legislation and financial compliance requirements.
• Identity verification (KYC) data: Identity verification documents and information are retained for a minimum of 5 years following account closure, in accordance with Malaysia's anti-money laundering legal requirements.
• Activity data log: Technical and activity logs are retained for 12 months for security and troubleshooting purposes.
• Upon account closure: When your account is closed, d4vd will delete or de-link your personal data that is no longer required within a reasonable timeframe, except for data that must be retained for legal purposes as outlined above.

10

Children's Privacy and Protection of Minors

Platform d4vd is strictly for users aged 18 and above. We do not knowingly collect or process personal data from individuals under the age of 18.

If we discover that we have inadvertently collected personal data from an individual under the age of 18, we will take immediate steps to delete that data and close the account in question. Any financial transactions that have taken place on that account will be reviewed on a case-by-case basis.

If you, as a parent or guardian, believe that your child or ward under the age of 18 has registered an account at d4vd, please contact us immediately at [email protected] with the relevant evidence so that we can take the appropriate action without delay.

11

Amendments to This Privacy Policy

d4vd reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements, or relevant technological developments. Whenever we make material changes to this Policy, we will:

• Updating the "Last Updated" date at the top of this page.
• Sending email notices to all registered members d4vd at least 14 days before the changes take effect for any material amendments.
• Displaying a notice within the platform d4vd when you log in for a defined period after the changes take effect.

Continued use of the platform d4vd after the date on which the updated Privacy Policy takes effect will be considered your acceptance of the revised Policy. We encourage you to review this page periodically to stay informed about how we protect your personal data.

12

Contact Us About Privacy

If you have any questions, concerns or complaints regarding how d4vd handles your personal data, or if you wish to exercise any of the privacy rights set out in this Policy, please contact us through the following channels:

• Email: [email protected] (please include "Privacy Enquiry" in the email subject line)
• Live Chat: Available 24 hours a day, 7 days a week via the live chat icon on the platform d4vd
• Response time: We aim to respond to all privacy-related enquiries within 2 hours via live chat and within no more than 5 business days by email

You may also refer to the Malaysian Communications and Multimedia Commission (MCMC) or the Department of Personal Data Protection Malaysia (PDPD) for guidance or to lodge a complaint regarding personal data protection in Malaysia if you believe that d4vd failed to meet our privacy obligations.