Privacy Policy diss88 – Personal Data Protection for Malaysian Members

Diss88 takes the privacy and personal data of every registered member seriously. This Privacy Policy is an official document that transparently explains how diss88 collects, stores, uses, protects and, in certain circumstances, shares your personal information.

As an online betting and casino platform operating in Malaysia, diss88 fully complies with the Personal Data Protection Act 2010 (PDPA) and all applicable data privacy regulations. We believe you have the right to know exactly what happens with your personal information — not just empty promises, but real practices we uphold every day.

This Privacy Policy applies to all users of the diss88 platform, including visitors browsing our website without an account, individuals in the process of registering, and all active diss88 members. It covers all diss88 services, including Sports Betting, live matches, Live Casino, lottery, roulette, and virtual sports.

Diss88 collects various categories of personal data depending on how you interact with our platform. Below is a full breakdown of the types of data we collect and the reasons for doing so.

Data We Do Not Collect: diss88 does not directly collect credit or debit card numbers – all financial transactions are processed through authorised third-party payment providers such as DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay and FPX. We also do not collect any biometric data beyond what is required for identity verification as mandated by law.

Diss88 uses your personal data only for legitimate, stated purposes. We will not use your data for any other purpose without first obtaining your consent or establishing a valid legal basis.

• Account Management: Managing your member account, processing registrations, verifying your identity, and keeping your account secure at all times.
• Transaction Processing: Processing deposits via DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay and FPX, and managing your winnings withdrawals in Malaysian Ringgit (RM).
• Platform Services: Provides access to all sections of the diss88 platform, including Sports Betting (Malaysia Super League football, EPL, badminton), live matches, Live Casino, roulette, lottery, and virtual sports.
• Service Communications: Sending important notifications about your account, security updates, transaction confirmations and relevant promotional information via email or SMS.
• Security & Fraud Prevention: Detecting and preventing unauthorised access, fraud, money laundering and other suspicious activities that threaten the security of our platform and members.
• Legal Compliance: To fulfil legal obligations under Malaysia's PDPA, anti-money laundering laws, and applicable financial regulations.
• Service Improvement: Analysing platform usage patterns in aggregate (not individual data) to improve diss88's features, performance, and user experience.
• Personalisation: Delivering more relevant content, promotions and recommendations based on your preferences and usage history on the diss88 platform.

Diss88 does not sell your personal data to any third party for marketing or commercial purposes. This is an absolute commitment on our part. That said, there are certain situations where we need to share your data with trusted parties to keep the platform running properly.

• Payment Providers: Required transaction data is shared with licensed payment service providers in Malaysia — DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, and banking institutions for FPX — solely for the purpose of processing your deposits and withdrawals.
• Game Software Providers: Minimum required account information is shared with internationally licensed Live Casino and roulette game software providers solely to enable your access to those games.
• Malaysian Authorities: diss88 will disclose personal data to Malaysian authorities including the police, MACC, Bank Negara Malaysia or other regulatory bodies when required by law, court order or valid official request.
• IT Service Providers: Companies providing technical services to diss88 — such as server hosting, cybersecurity, and analytics — may have limited access to certain data, but are bound by strict confidentiality agreements.

All third parties we work with are bound by data protection agreements that ensure they handle your information to the same high standards we uphold at diss88.

Diss88 implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, or accidental disclosure.

• 256-bit SSL Encryption: All communications between your device and diss88's servers are encrypted using 256-bit SSL/TLS – the highest encryption standard used by leading banking institutions worldwide.
• Stored Data Encryption: All personal and financial data stored in the diss88 database is encrypted using internationally recognised encryption algorithms. Your password is never stored in readable form.
• Two-Factor Authentication (2FA): diss88 encourages all members to enable two-factor authentication to add an extra layer of security to their account.
• 24/7 Security Monitoring: diss88's security team monitors our systems around the clock to detect and respond to any security threats promptly.
• Internal Access Controls: Only diss88 staff with a legitimate business need are granted access to members' personal data, and all such access is continuously monitored and audited.
• Penetration Testing: diss88 conducts regular security testing, including penetration testing by independent security experts, to identify and address any system vulnerabilities.

Diss88 uses cookies and similar tracking technologies to ensure the platform runs smoothly, enhance the user experience, and understand how members interact with our services.

• Essential Cookies (Required): These cookies are required for core platform functions such as secure login, user sessions, language settings, and security. Without them, the diss88 platform cannot operate properly. These cookies cannot be disabled.
• Functional Cookies: These cookies remember your preferences, such as display settings, favourite sports market selections (e.g. Malaysia Super League or EPL), and other personal settings, to make your experience more comfortable.
• Analytics Cookies: These cookies help us understand how members use the diss88 platform – which pages are visited most often, time spent in each section, and where users may encounter issues. This information is used in aggregate to improve the platform.
• Security Cookies: These cookies help us detect and prevent fraudulent activity, automated bots and other security threats to your account.

You can manage your cookie settings through your web browser settings. Please note that disabling certain cookies may affect the functionality of the diss88 platform. For more information on managing cookies in your browser, please refer to your browser's help documentation.

Diss88 retains your personal data only for as long as necessary for the purposes stated in this Privacy Policy, or as required by applicable Malaysian law.

• Active Account Data: For as long as your account remains active on diss88, we will retain all data necessary to manage your account and provide services to you.
• Financial Transaction Data: Financial transaction records including deposit history in RM and withdrawals are retained for a minimum of 7 years in accordance with Malaysian accounting and tax legal requirements.
• Identity Verification Data: Identity verification documents, such as copies of your MyKad submitted for KYC (Know Your Customer) purposes, are retained for as long as required to comply with anti-money laundering laws.
• Data After Account Closure: When your account is closed, diss88 will delete or anonymise your personal data within 90 days, except for data that must be retained to meet legal obligations.
• Security Logs: Security logs and access records are retained for 12 months for the purposes of security investigations and fraud prevention.

As a data subject under Malaysia's Personal Data Protection Act 2010 (PDPA), you have certain rights regarding your personal data held by diss88. We are committed to respecting and facilitating the exercise of these rights.

• Right to Access Data: You have the right to request a copy of the personal data we hold about you. Requests will be processed within 21 business days. The first request is free of charge; subsequent requests may be subject to a reasonable administrative fee.
• Right to Correct Data: If you find that any personal information held by diss88 is inaccurate or incomplete, you have the right to request a correction. We will update your data within 14 business days of receiving your request.
• Right to Withdraw Consent: You may withdraw your consent to the processing of your personal data at any time. Please note, however, that withdrawing certain consents may mean we are no longer able to provide diss88 services to you.
• Right to Restrict Processing: Under certain circumstances, you have the right to request that we restrict how we process your personal data while a dispute or review is pending.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes. You may opt out of marketing communications at any time by using the "unsubscribe" link in our emails or by contacting our support team.

To exercise any of the above rights, please contact the diss88 Data Protection Officer at privacy@diss88.xyz, specifying the right you wish to exercise and providing the information needed to verify your identity.

The diss88 platform may contain links or references to third-party services such as payment providers (DuitNow, Touch 'n Go, GrabPay, Boost, ShopeePay, FPX) and live casino game providers. Please be aware that once you leave the diss88 platform and access these third-party services, diss88's Privacy Policy no longer applies.

Each third-party service provider has its own privacy policy governing how they handle your data. diss88 is not responsible for the privacy practices of any third party. We encourage you to read the privacy policies of all platforms you use.

Diss88 only works with third-party providers with a proven track record in security and data protection. However, the responsibility for reviewing their individual privacy policies remains with the user.

Diss88 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements, or changes to the services we offer.

When we make material changes to this Privacy Policy, we will notify you via the email address registered to your account or through a prominent notice on the diss88 platform at least 14 days before the changes take effect. The "Last Updated" date at the top of this document will always reflect the most current version.

Continued use of the diss88 platform after a privacy policy update takes effect will be considered your acceptance of the revised policy. If you do not agree with the changes, please stop using the platform and contact us to close your account.

If you have any questions, concerns, or complaints about how diss88 handles your personal data, or if you wish to exercise any of the rights set out in this Privacy Policy, please contact diss88's Data Protection Officer (DPO) through the following channels.

• Privacy Email: privacy@diss88.xyz – for enquiries and specific requests relating to personal data
• General Support Email: support@diss88.xyz – for general platform enquiries
• Live Chat 24/7: Available directly on the diss88 platform – responses in under 2 minutes
• Response Time: Personal data requests will receive an initial response within 7 business days, with full resolution completed within 21 business days as required under the PDPA

All communications with diss88's Data Protection Officer are conducted in Bahasa Melayu to ensure complete clarity in every interaction.

If you are not satisfied with our response, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia under PDPA 2010.