Privacy Policy dark168 — Security Your Personal Data

Dark168 values the privacy of every member who entrusts us with their personal information. As a leading online casino and sports betting platform in Malaysia, we understand that trust is the foundation of our relationship with our members.

This Privacy Policy is designed to explain clearly and transparently: what data we collect, why we need it, how it is used, who can access it, and what your rights are as the owner of that data. We have written this document in plain, easy-to-understand language, not confusing legal jargon.

Dark168 operates in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and international best practices in personal data management. We have never sold, rented, or transferred your personal data to third parties for their own marketing purposes without your explicit consent, and we never will.

If you have any questions about this policy, our Data Protection Officer (DPO) team is available to assist via email [email protected] who can be contacted at any time.

Dark168 collects several categories of personal data to ensure a safe, compliant, and high-quality service for all members. Below is a full breakdown of the data we collect and the reasons why:

The data we collect is used only for legitimate purposes directly related to delivering dark168 services. We do not use your data for any purpose not stated in this policy without first obtaining your consent.

• Account management: Registering, verifying and managing your member account, including KYC and age verification processes as required by law.
• Transaction processing: Processing your deposits, withdrawals and account balance management securely and accurately through integrated payment channels.
• Platform security: Detecting and preventing fraud, hacking, money laundering and any activity that violates dark168's Terms and Conditions.
• Customer support: Providing effective technical assistance and troubleshooting when you contact our support team.
• Legal compliance: Meeting reporting obligations to relevant authorities in accordance with applicable Malaysian law, including AML requirements.
• Responsible gaming: Monitoring gameplay patterns to identify members who may require responsible gaming support and taking appropriate proactive action.
• Service improvement: Analysing aggregated and anonymised usage data to improve the platform, user interface and overall experience for dark168 members.
• Marketing communication: Sending you promotional information, bonuses and exclusive offers — only if you have given consent to receive such communications.

Dark168 does not sell or rent your personal data to any party. However, there are limited situations where we need to share data with certain parties to enable our services to function properly:

• Payment service providers: Required transaction data is shared with FPX, DuitNow, Touch 'n Go eWallet, Boost, and GrabPay providers solely to process your financial transactions.
• Game software providers: Game session data is shared with third-party game providers operating on the dark168 platform for the purpose of maintaining game integrity.
• Identity verification services: KYC documents are shared with licensed identity verification providers to fulfil legal obligations.
• Legal authority: dark168 will disclose required data to Malaysian authorities when mandated by a court order, warrant, or valid legal requirement.
• Cloud and infrastructure services: dark168's technical infrastructure providers may have limited access to data in their technical capacity, subject to strict confidentiality agreements.

Dark168 continuously invests in cutting-edge security infrastructure to ensure your personal data is protected from all threats. The security measures we implement encompass multiple layers of protection:

• Data encryption in transit: All communications between your browser or app and dark168's servers use TLS 1.3 protocol with 256-bit encryption.
• Data encryption at rest: Sensitive data such as financial information and identity documents are stored encrypted using AES-256 encryption.
• Two-factor authentication (2FA): dark168 supports 2FA for all member accounts as an additional security layer, which we strongly encourage all members to enable.
• 24/7 Monitoring: Our automated monitoring system operates around the clock to detect any suspicious activity or unauthorised access attempts.
• Regular penetration testing: dark168 engages independent cybersecurity experts to conduct penetration testing at least twice a year.
• Patch management: All systems and software are regularly updated to ensure known security vulnerabilities are patched promptly.

Dark168 uses cookies and similar tracking technologies to enhance your experience on our platform. The following are the types of cookies we use:

• Essential cookies: Required for core platform functions such as login session verification and security. These cookies cannot be disabled as they are critical to platform operation.
• Performance cookies: Collecting information on how you use the dark168 platform (pages visited, time spent) to help us improve our services. Data is collected anonymously.
• Functional cookies: Storing your preferences such as language, display settings and saved login information to make repeat visits easier.
• Analytics cookies: Used to understand overall platform usage patterns for strategic improvement purposes. All data is processed in aggregate.

You can manage your cookie settings through your web browser. However, disabling essential cookies may affect the functionality of the dark168 platform. Session cookies are automatically deleted when you log out or close your browser.

Dark168 retains your personal data only for as long as necessary to fulfil the purpose for which it was collected or to comply with applicable legal obligations. Our retention policy is as follows:

• Active account data: Retained for the duration your account remains active on dark168 and updated whenever changes occur.
• Financial transaction records: Retained for 7 years from the transaction date in accordance with Malaysian financial and tax legal requirements.
• KYC documents: Retained for 5 years after account closure or end of business relationship in accordance with AML requirements.
• Support communication logs: Retained for 3 years for dispute resolution and service quality assurance purposes.
• Technical data and system logs: Retained for 12 months for security and threat analysis purposes.
• Following account closure: Personal data no longer required for legal purposes will be securely deleted within 90 days of account closure.

As a data subject under Malaysia's PDPA, you have several important rights regarding your personal data held by dark168. We are committed to processing all requests related to these rights within 14 business days:

To exercise any of the above rights, send a written request to [email protected] by including your account number and a copy of your identification document for verification purposes. dark168 may request additional information to confirm the request is made by the legitimate account owner.

In the course of its operations, dark168 may need to transfer your personal data to servers or business partners located outside Malaysia. When such transfers occur, dark168 ensures:

• The recipient country or region has data protection laws equivalent to or stronger than those of Malaysia.
• Comprehensive data processing agreements are signed with data recipients.
• Standard protection mechanisms such as Standard Contractual Clauses are applied where appropriate.
• Data transfers are limited to the minimum information required only (data minimisation principle).

Dark168 reserves the right to amend or update this Privacy Policy from time to time to reflect changes in our business practices, legal requirements, or the technologies we use. When any material changes occur:

• Notifications will be sent to all active members via email or in-app notification at least 14 days before changes take effect.
• The "Updated" date at the top of this page will be changed to reflect the latest version
• Previous versions of the Privacy Policy will be archived and available upon request by members for reference
• Continued use of the dark168 platform after the effective date of any changes shall be deemed acceptance of the updated terms.

We encourage you to review this page regularly to ensure you always understand how dark168 handles your personal data.

If you have any questions, concerns, or requests regarding this Privacy Policy or how dark168 handles your personal data, please contact our Data Protection Officer (DPO):

If you are not satisfied with dark168's response to your privacy complaint, you have the right to lodge a complaint with the Department of Personal Data Protection (PDPD) of Malaysia or the relevant regulatory body.