Dana50 Privacy Policy – Malaysian User Personal Data Protection

Welcome to the Privacy Policy page Dana50. We understand that your personal data is something deeply valuable. That is why we take strict precautions to ensure every piece of information you provide us is handled with full responsibility, transparency and security.

This policy applies to all users who access or use the dana50 platform through any device or channel, including web browsers and mobile apps. By using our platform, you agree to the collection and use of data as described in this policy.

Dana50 operates as an online gaming and betting platform that processes users' personal data to provide services that are safe, secure and trustworthy. This Privacy Policy is prepared in accordance with the provisions of the Personal Data Protection Act 2010 (PDPA) Malaysia and international best practices in data management.

This policy covers all data processing activities involving:

• Member account registration and management
• Processing deposits, withdrawals and financial transactions
• Identity verification (KYC) and legal compliance
• Customer support services
• Marketing and promotional communications (with your consent)
• Platform usage analytics for continuous improvement

This policy does not apply to third-party websites or services you may access through links on our platform. We encourage you to read their privacy policies separately.

We collect various types of information depending on how you interact with the dana50 platform. The following are the data categories we process:

We only collect data that is strictly necessary for the stated purposes. You are not required to provide all information, though certain services may not be fully accessible without it — for example, withdrawals cannot be processed without completed KYC verification.

The data we collect is used for specific, pre-defined purposes. We will not use your data for any other purpose without obtaining your fresh consent beforehand.

• Account management: Securely create, verify and maintain your member account.
• Transaction processing: Process deposits, withdrawals and all financial transactions you make on the platform.
• Legal compliance: Fulfil KYC obligations, anti-money laundering (AML) requirements and reporting to relevant authorities in accordance with Malaysian law.
• Platform security: Detect and prevent fraud, unauthorised access and any suspicious activity.
• Customer support: Resolve enquiries, complaints and technical issues you report.
• Service improvements: Analyse usage patterns to improve platform quality and performance.
• Marketing communications: Send promotional information, exclusive offers and platform updates — only to members who have given their consent.

Dana50 does not sell, rent or trade your personal data to any third party for marketing purposes. However, in certain limited situations, we may share your data with the following parties:

• Payment providers: Banking institutions, e-wallet providers and payment processors required to carry out your transactions. They are bound by strict confidentiality agreements.
• Technical service providers: Companies providing cloud infrastructure, hosting, cybersecurity and analytics services — all bound by PDPA-compliant data processing agreements.
• Regulatory authority: Bank Negara Malaysia, law enforcement agencies or relevant tribunals when required by law or court order.
• Identity verification providers: Integrated third-party eKYC services to securely verify your identity documents.

In all data sharing arrangements, we ensure that the receiving party complies with data protection standards equal to or higher than those we apply ourselves.

The security of your personal data is dana50's top priority. We implement multiple layers of technical and organisational safeguards to protect your data from unauthorised access, disclosure or loss.

• 256-bit SSL encryption: All communications between your device and dana50's servers are encrypted using the latest TLS protocols, ensuring no third party can intercept your data in transit.
• Static data encryption: Sensitive data such as financial information and identity documents are encrypted when stored in our database.
• Role-based access control: Only authorised staff with legitimate job requirements may access user data, and all access is logged for audit purposes.
• Real-time monitoring: An intrusion detection system (IDS) operates 24/7 to identify and respond to any security threats.
• Two-factor authentication (2FA): An additional security layer is available for all member accounts to prevent unauthorised access.
• Regular security audits: Penetration testing and security audits are conducted regularly by independent parties.

Dana50 uses cookies and similar tracking technologies to enhance the user experience and understand how the platform is used. Cookies are small text files stored on your device when you visit our platform.

We use several types of cookies:

• Essential cookies: Required for basic platform operations such as login sessions and security. These cookies cannot be disabled.
• Performance cookies: Collect information on how pages are used to help us improve the platform. All data is aggregated and anonymised.
• Functionality cookies: Store your preferences such as language, region and display settings for a more personalised experience.
• Analytics cookies: Helps us understand overall platform traffic and usage patterns using internal analytics tools.

You can control or disable cookies through your browser settings. Please note that disabling certain cookies may affect platform functionality and your login experience.

As a registered dana50 user in Malaysia, you have certain rights regarding your personal data under the Personal Data Protection Act 2010. dana50 respects and facilitates the exercise of these rights:

Dana50 retains your personal data only for as long as necessary to fulfil the purpose for which it was collected or as required by Malaysian law. The following is a general guide to our retention periods:

• Active account data: Retained for the duration your account remains active and for 5 years after account closure for compliance purposes.
• Financial transaction records: Retained for a minimum of 7 years in line with Malaysian financial legal requirements and AML compliance.
• KYC documents: Retained for 5 years after the business relationship ends as required by the Anti-Money Laundering Act 2001.
• Support communication logs: Retained for 2 years for reference and dispute resolution.
• Analytics data: Aggregated anonymous data is retained indefinitely as it cannot be identified as belonging to any specific individual.

Once the retention period expires, your data will be securely deleted or anonymised using industry-recognised methods.

Dana50 reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our practices, legal requirements or technological developments. Any material changes will be communicated to you via:

• In-platform notification upon your next login
• Email to your registered address at least 7 days before the changes take effect
• Updates the "Last Updated" date at the top of this document

Continued use of the platform after the effective date of any amendments constitutes your acceptance of the updated policy. We encourage you to review this page periodically to stay informed about how we protect your privacy.

If you have any questions, concerns or requests regarding this Privacy Policy or the management of your personal data, please contact the dana50 Data Protection Officer (DPO) through the following channels:

• Live Chat: Available 24/7 via the in-platform chat icon after login
• Email: [email protected] (response time within 3 business days)
• FAQ: Browse FAQ page for frequently asked questions about privacy

For formal data protection complaints that dana50 is unable to resolve, you may refer to Department of Personal Data Protection Malaysia under the Ministry of Digital.