Privacy Policy DCG55 —
Your Data Security, Our Priority

When you register and use DCG55, we collect several categories of personal data to ensure the platform operates smoothly and securely for all users. The data we collect is divided into three main categories:

Every piece of data we collect has a clear and legitimate purpose. We do not use your data for any other purpose without your consent. The following are the primary purposes for which data is used at DCG55:

• Platform Operations: Allows you to log in, play games, make deposits, and withdraw your winnings seamlessly.
• Identity Verification (KYC): Verifies that you are an individual aged 18 or above and not a resident of a restricted region.
• Fraud Prevention: Identifies and stops unauthorised activities such as money laundering, bonus abuse, and unauthorised access.
• Legal Compliance: Meets applicable regulatory and legal requirements, including mandatory financial transaction reporting.
• Customer Support: Provides relevant and effective assistance when you contact our support team.
• Service Communications: Sends important notifications relating to your account, security, and updates to the terms of service.
• Platform Improvements: Analyses usage patterns in aggregate (not individually) to improve the experience for all users.

DCG55 does not sell or disclose your personal data to third parties for their own marketing purposes. However, there are limited situations where data sharing is necessary and legally permitted:

• Payment Service Providers: DuitNow, FPX, Touch 'n Go, Boost, GrabPay, and crypto gateway providers require minimal transaction information to process your payments securely.
• Game Software Providers: Third-party game providers registered on the dcg55 platform may receive game session data necessary to ensure games function correctly and fairly.
• Regulatory Body: We are required to disclose certain information to the relevant authorities when mandated by law or court order.
• Security Services: Fraud detection and risk assessment companies we engage may receive the technical data necessary to protect the platform and players.

DCG55 uses cookies and similar technologies to enhance the user experience and ensure platform security. There are four types of cookies we use:

• Essential Cookies: Required for the platform to function properly, including login sessions and security settings. These cookies cannot be disabled.
• Functional Cookies: Stores your preferences such as language, display settings, and game configurations to deliver a more personalised experience.
• Analytics Cookies: Helps us understand how users interact with the platform in aggregate, enabling us to improve design and functionality.
• Security Cookies: Used to identify suspicious login attempts, prevent CSRF attacks, and protect your account from unauthorised access.

You can manage your cookie settings through your internet browser. Please note that disabling certain cookies may affect platform functionality. Session cookies expire automatically when you log out or close your browser.

DCG55 retains your personal data only for as long as necessary for the stated purposes or as required by law. The following are our data retention guidelines:

• Active Account Data: Retained for the duration your account remains active and in good standing.
• Financial Transaction Data: Retained for a minimum of 7 years to comply with accounting and anti-money laundering legal requirements.
• KYC Data: Retained for 5 years after account closure or the period specified by the relevant regulator.
• Security Logs: Retained for 90 days for security incident investigation purposes.
• Support Communications: Retained for 2 years for reference and service improvement purposes.

Once the retention period expires, your data will be securely deleted or anonymised so it can no longer be linked to your identity.

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and the data protection principles we adhere to, you have the following rights regarding your personal data:

• Access Rights: You may request a copy of the personal data we hold about you at any time.
• Right to Rectification: If your data is inaccurate or out of date, you may request an immediate correction.
• Right to Erasure: You may request that your data be deleted, subject to applicable legal retention requirements.
• Right to Restrict Processing: You may request that we restrict how we process your data in certain circumstances.
• Right to Object: You may object to the processing of your data for direct marketing purposes at any time.
• Right to Data Portability: You may request that your data be delivered to you in a machine-readable format.

DCG55 implements comprehensive technical and organisational security measures to protect your personal data from unauthorised access, loss, destruction, or accidental disclosure:

• 256-bit SSL/TLS encryption for all data transmitted over the internet.
• Sensitive data such as passwords is encrypted using the bcrypt algorithm with a unique salt.
• Two-factor authentication (2FA) is available and strongly recommended for all accounts.
• Round-the-clock real-time cyber threat monitoring with automated responses to suspicious activity.
• Regular data backups with frequent recovery testing to ensure continuity of service.
• Environment separation — production data is never used in test environments.
• Security audits by independent third parties are conducted annually.

DCG55 is a platform dedicated to individuals aged 18 years and above only. We do not knowingly collect, store, or process personal data of children under the age of 18.

If we discover that a child's data has been collected without our knowledge, we will take immediate action to delete that data and close the account in question. Parents or guardians who suspect their child has registered at DCG55 are encouraged to contact us immediately through our support channels.

DCG55 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or platform improvements. When we make significant changes:

• We will update the "Last Updated" date at the top of this document.
• We will send a notification to your registered email address and/or via in-platform notification.
• For highly material changes, we may request your consent again before they take effect.

We encourage you to review this Privacy Policy periodically. Continued use of the dcg55 platform after a change notification is considered acceptance of the updated policy.