Privacy Policy

1 Introduction

This Privacy Policy (hereinafter "Policy") sets out how dapat44 (hereinafter "dapat44", "we", "us", or "our"), the operator of the online sports betting and casino platform accessible at https://dapat44.cam, collects, processes, stores, and protects the personal data of individuals who visit or register on the Platform (hereinafter "User", "Member", "you", or "your").

dapat44 is committed to handling personal data responsibly and in accordance with applicable international data protection standards. We process personal data collected through the Platform solely for the purposes set out in this Policy and in accordance with our legitimate business operations, regulatory obligations, and user consent where required.

This Policy should be read in conjunction with our Terms & Conditions and Responsible Gambling Policy. Together, these documents govern your relationship with dapat44 and your use of the Platform.

2 Definitions

For the purposes of this Privacy Policy, the following terms shall have the meanings assigned below:

3 Data Controller

The Data Controller responsible for Personal Data processed through the Platform is the licensed operator of dapat44. dapat44 operates under an international online gaming licence. Specific licensing jurisdiction details are available to registered Members upon request through Customer Support.

All data protection enquiries, subject access requests, erasure requests, and complaints should be directed to the Data Controller via the contact details set out in Section 15 of this Policy. dapat44 will acknowledge all formal data requests within five (5) business days and will endeavour to resolve them within thirty (30) days of receipt, or within the timeframe required by applicable data protection law.

4 Data We Collect

dapat44 collects Personal Data from Users through various means, including voluntary submission during registration, automated collection during Platform use, and third-party verification services. The categories of data we collect include, but are not limited to:

4.1 Identity & Registration Data

• Full legal name as it appears on a government-issued identity document;
• Date of birth (for age verification purposes — minimum age 21);
• Email address and chosen username;
• Malaysian Identity Card number (MyKad), Passport number, or Driver's Licence number (collected during KYC verification);
• Residential address, including postcode, city (e.g., Kuala Lumpur, Petaling Jaya, Penang, Johor Bahru, Shah Alam), and country of residence.

4.2 Financial & Transaction Data

• Deposit and withdrawal transaction records, including amounts, timestamps, and payment method used;
• Preferred payment method identifiers (e.g., DuitNow account reference, bank name such as Maybank, CIMB, Public Bank, or Hong Leong; e-wallet identifier for Touch 'n Go eWallet, Boost, or GrabPay);
• Account balance history and betting transaction records;
• Cryptocurrency wallet addresses where applicable (BTC/USDT transactions).

4.3 Technical & Usage Data

• IP address and approximate geolocation derived therefrom;
• Device type, operating system, browser type and version;
• Session duration, pages visited, and interaction logs on the Platform;
• Betting history, game participation records, and live casino session data;
• Login timestamps and security event logs.

4.4 KYC & Verification Documents

• Scanned or photographed copies of government-issued identity documents (MyKad, Passport, Driver's Licence);
• Proof of address documents (utility bills from TNB, Syabas, Indah Water; or bank statements from Malaysian financial institutions);
• Selfie photographs submitted alongside identity documents for liveness verification.

4.5 Communication Data

• Records of live chat conversations with Customer Support;
• Email correspondence between you and dapat44;
• Records of complaints, feedback submissions, or dispute notifications.

5 How We Use Your Data

dapat44 processes your Personal Data only for specific, legitimate, and documented purposes. We do not process data beyond the scope of the purposes for which it was originally collected. The primary purposes for which we process your data include:

6 Legal Basis for Processing

dapat44 processes your Personal Data on the following legal grounds, consistent with internationally recognised data protection frameworks:

• Contractual Necessity: Processing required to perform the contract between you and dapat44, including account management, payment processing, and delivery of gaming services.
• Legal Obligation: Processing necessary for compliance with applicable laws and regulatory requirements, including anti-money laundering (AML) obligations and KYC requirements under our international gaming licence conditions.
• Legitimate Interests: Processing conducted in pursuit of dapat44's legitimate business interests, including fraud prevention, security monitoring, and platform improvement, provided such interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing for purposes such as direct marketing communications, where we rely on your explicit opt-in consent. You may withdraw this consent at any time by contacting Customer Support or updating your communication preferences in account settings.

7 Data Sharing & Disclosure

dapat44 does not sell, rent, or trade your Personal Data to any third party for commercial or marketing purposes. We may share your Personal Data in the following strictly limited circumstances:

7.1 Authorised Service Providers (Data Processors)

We engage trusted third-party service providers who process data on our behalf under written data processing agreements. These include payment gateway operators (e.g., FPX service providers, e-wallet processors), KYC and identity verification services, fraud detection and risk management platforms, cloud infrastructure and hosting providers, and customer support software providers. All processors are contractually bound to process data only as instructed by dapat44 and in compliance with applicable data protection standards.

7.2 Regulatory & Legal Authorities

dapat44 may disclose Personal Data to competent regulatory authorities, law enforcement agencies, financial intelligence units, or courts where required by applicable law or a valid legal process. We will notify affected Users of such disclosures where legally permissible to do so.

7.3 Business Transfers

In the event of a merger, acquisition, asset sale, or corporate restructuring involving dapat44, Personal Data held on the Platform may be transferred to the acquiring entity as part of the transaction, subject to the acquiring entity assuming equivalent data protection obligations.

8 Cookies & Tracking Technologies

dapat44 uses cookies and similar tracking technologies (including local storage objects and pixel tags) to operate the Platform, analyse usage patterns, enhance security, and deliver a personalised user experience. By continuing to use the Platform, you consent to the use of cookies in accordance with this Policy.

You may manage your cookie preferences through your browser settings. Note that disabling essential cookies will impair your ability to use the Platform. For marketing cookies, you may withdraw consent at any time by updating your account preferences.

9 Data Retention

dapat44 retains Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, to comply with legal and regulatory obligations, and to resolve any outstanding disputes or enforce agreements.

• Active Account Data: Retained for the duration of your account's active status plus any mandatory retention period required by our licensing jurisdiction's AML and gaming regulations.
• KYC Documents: Retained for a minimum of five (5) years following account closure, in compliance with standard anti-money laundering record-keeping requirements.
• Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, in accordance with financial record-keeping obligations.
• Customer Support Records: Retained for a period of three (3) years from the date of the final interaction, to enable accurate dispute resolution.
• Marketing Consent Records: Retained until consent is withdrawn, plus an additional period of one (1) year for compliance documentation purposes.

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised such that it can no longer be associated with an identifiable individual.

10 Data Security

dapat44 implements technical and organisational security measures appropriate to the sensitivity of the Personal Data we hold and the risks associated with our operations. These measures include:

• Encryption in Transit: All data transmitted between your device and the Platform is encrypted using industry-standard Transport Layer Security (TLS 1.2 or higher) protocols, as indicated by the HTTPS padlock in your browser.
• Encryption at Rest: Sensitive data stored on our servers, including KYC documents and payment information, is encrypted at rest using AES-256 or equivalent standards.
• Access Controls: Access to Personal Data is restricted on a strict need-to-know basis. Internal staff access to Member data is logged, audited, and subject to role-based access controls.
• Two-Factor Authentication: Members are strongly encouraged to enable two-factor authentication (2FA) on their accounts as an additional layer of protection against unauthorised access.
• Security Audits: dapat44 conducts regular security assessments and penetration testing to identify and remediate vulnerabilities in our infrastructure.
• Incident Response: In the event of a Personal Data breach that poses a risk to affected individuals, dapat44 will notify relevant regulatory authorities and affected Members in accordance with applicable data breach notification requirements.

11 International Data Transfers

As an internationally licensed online platform, dapat44 may transfer your Personal Data to servers, service providers, or regulatory bodies located in jurisdictions outside of Malaysia. Such transfers are conducted in accordance with applicable data protection standards, including:

• The execution of standard contractual clauses or equivalent data transfer mechanisms with receiving entities;
• Transfer to jurisdictions that maintain an adequate level of data protection as recognised by international standards;
• Where required by applicable law or regulatory obligation.

By using the Platform, you acknowledge and consent to the transfer of your Personal Data to jurisdictions outside Malaysia for the purposes set out in this Policy.

12 Your Data Rights

Subject to applicable data protection law and certain lawful limitations, you hold the following rights in relation to your Personal Data held by dapat44. To exercise any of these rights, please contact our Data Support team using the contact details in Section 15.

Please note that certain rights may be limited where processing is necessary for compliance with legal obligations (e.g., AML record retention) or where legitimate interests override your individual rights. dapat44 will communicate any such limitations clearly when responding to a data rights request.

13 Children & Minors

The Platform is strictly intended for individuals aged 21 years and over. dapat44 does not knowingly collect Personal Data from individuals under the age of 21. Age verification is conducted as part of the mandatory KYC process for all accounts prior to the processing of any withdrawal request.

If dapat44 becomes aware that an account is held by or that Personal Data has been collected from a person under the minimum age of 21, the account will be immediately suspended, all Personal Data will be securely deleted, and any deposited funds will be returned to the source payment method in accordance with our underage account closure procedure.

If you are a parent or guardian and believe that a minor has registered an account on the Platform, please contact our Customer Support team immediately via live chat.

14 Policy Amendments

dapat44 reserves the right to amend or update this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, our business operations, or Platform functionality. When material changes are made to this Policy, we will notify registered Members via email notification or a prominent notice on the Platform prior to the changes taking effect.

The effective date displayed at the top of this page indicates when the most recently published version of this Policy came into force. Your continued use of the Platform after any amendment takes effect constitutes your acceptance of the revised Policy. We recommend reviewing this Policy periodically to remain informed of how your Personal Data is handled.

15 Contact & Data Enquiries

For any enquiries relating to this Privacy Policy, to exercise your data rights, or to raise a data protection concern or complaint, please contact the dapat44 Data Support team through the following channels:

• Live Chat: Available 24/7 directly on the Platform — the fastest method for urgent data queries and account-related privacy concerns.
• Email (plain text — not a clickable link): [email protected] — please include "Privacy Request" in the subject line of your message for routing to the appropriate team.

dapat44 will acknowledge all formal data subject requests within five (5) business days and will endeavour to fully resolve them within thirty (30) calendar days of receipt, in accordance with applicable data protection obligations. Where a request is particularly complex or involves a high volume of data, we may extend the response period by an additional thirty (30) days, in which case we will notify you of the extension and the reasons for it.

Our customer support team operates on Malaysia Standard Time (MYT, UTC+8) with extended coverage for overnight and weekend queries.

This Privacy Policy was last updated on 1 January 2026. Previous versions are available upon written request to Customer Support.