Diss88 Privacy Policy – Personal Data Protection for Malaysian Players

Diss88 understands that the trust of Malaysian players depends not only on fair gameplay and reliable payouts, but also on how we handle something far more personal — information about you. This Privacy Policy is an official document that clearly and honestly explains what data we collect, how it is used, who it is shared with, how long it is retained, and what rights you have over that data.

This Privacy Policy applies to all personal information collected through the diss88 platform — including the diss88.best website, the diss88 mobile app, Live Chat service, email communications, and all other interactions between you as a member and diss88 as the platform operator.

Diss88 operates in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and is committed to meeting all legal requirements relating to personal data protection in Malaysia. We take this responsibility seriously — not merely as a legal obligation, but as a core part of our commitment to player trust.

Diss88 collects your personal data in several ways — directly when you provide it to us, and automatically as you use the platform. Below is a full breakdown of the types of data collected:

A. Data You Provide Directly

• Full name as shown on your MyKad or official Malaysian identification document.
• An active Malaysian phone number used for account registration and verification.
• An active email address for account communications, promotions, and security notifications.
• Date of birth to verify age eligibility (18 years and above) as required by diss88's policy.
• Payment method details — the phone number linked to Touch 'n Go, GrabPay, Boost, or ShopeePay; and your bank account number for withdrawals via DuitNow or FPX.
• A copy of your identity document (MyKad or passport) submitted during the KYC process for identity verification.
• Information you share when communicating with the diss88 customer support team via Live Chat or email.

B. Automatically Collected Data

• IP address and general location information (state, city) for security purposes and geographic eligibility verification.
• Device type, operating system, browser version and technical device information used to access diss88.
• Your browsing history and activity within the platform — pages visited, games played, and time spent in each session.
• Full transaction history — deposits, withdrawals, bets, winnings and bonus usage.
• Cookie data and similar technologies to enhance the user experience and for analytics purposes (further details in Section 6).

Personal data collected by diss88 is used solely for purposes related to the provision of platform services and legal compliance. Below is how we use each category of data:

Diss88 does not use your personal data to make automated decisions that have a significant impact on you without human involvement. All major account decisions — such as account closures, KYC reviews, and withdrawals requiring additional scrutiny — involve review by diss88's human staff.

Diss88 understands that data sharing with external parties is one of the most sensitive concerns for our players. We want to be fully transparent about this. diss88 may share your personal information with third parties only in the following limited circumstances:

• Payment Service Providers — Information required to process your deposits and withdrawals is shared with the relevant payment providers (Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, FPX via Maybank2u or CIMB Clicks). Such sharing is strictly limited to the information necessary to complete the transaction.
• KYC Service Providers — For identity verification purposes, documents you submit may be processed by a third-party KYC service provider that has signed a strict confidentiality agreement with diss88.
• Game Providers — Third-party game operators (such as slots or live casino providers) receive only the minimum information necessary to deliver the gaming experience to you — typically a session ID only, not your full personal details.
• Legally Authorised Authorities — diss88 will disclose required information to Malaysian authorities (police, the Malaysian Anti-Corruption Commission, Bank Negara Malaysia and others) when mandated by law, court order or official directive.

All third-party service providers working with diss88 are required to sign data processing agreements that bind them to data protection standards no lower than diss88's own. diss88 conducts regular compliance checks on third-party providers against these agreements.

Diss88 continually invests in security infrastructure to ensure your personal data remains protected at all times. The technical and organisational security measures we employ include:

• 256-bit SSL Encryption — All communications between your device and diss88's servers are encrypted using TLS 1.3 protocol with a 256-bit key length. This is the strongest commercially available standard at this time.
• Encrypted Data Storage — Personal data stored in diss88's databases is encrypted at rest using AES-256, meaning the data remains unreadable even if someone gains physical access to the storage.
• Strict Access Controls — Only diss88 employees with a legitimate operational need are permitted to access member personal data, and every access is recorded in an audit log that is continuously monitored.
• 24/7 Monitoring — The diss88 IT security team monitors system activity around the clock to detect and respond to any unauthorised access attempts or suspicious activity in real time.
• Two-Factor Authentication (2FA) — diss88 provides and strongly encourages the use of 2FA for all member accounts. With 2FA enabled, accessing your account requires more than just a password.
• Regular Security Audits — diss88's infrastructure is subject to penetration testing and security audits conducted periodically by third-party security specialists to identify and address potential vulnerabilities.

The diss88 platform uses cookies and similar tracking technologies to enhance the user experience, maintain session security and understand how players interact with the platform. Cookies are small text files stored on your device when you visit diss88.best.

Types of cookies used by diss88:

• Essential Cookies — Required for the diss88 platform to function. These include login session cookies, security cookies, and cookies that store your language preferences. These cookies cannot be disabled as they are necessary for the platform to operate correctly.
• Analytics Cookies — Helps diss88 understand how players use the platform — which pages are visited most often, where users encounter difficulties, and how the overall platform flow performs. This data is used for platform improvements and is collected in aggregate form without directly identifying individuals.
• Functional Cookies — Saves your personal preferences such as display theme, favourite game settings and betting limits you have set, so you don't need to reconfigure them every time you log in.

You can control and manage cookies through your browser settings. However, disabling essential cookies may affect the overall functionality of the diss88 platform. For specific instructions on managing cookies in your browser, please refer to the official documentation for the browser you are using.

As a platform that involves financial transactions, diss88 understands the particular sensitivity of your financial data. We handle all financial transaction data to the highest standards of security and privacy.

When you make a deposit via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow or FPX through Maybank2u or CIMB Clicks, the transaction is processed directly by the respective payment provider using their own security infrastructure. diss88 only receives confirmation that the transaction was successful and the amount received — we do not store your full bank account number, FPX password or e-wallet PIN.

Your transaction history on diss88 — including records of deposits, withdrawals, bets, and winnings — is retained as part of anti-money laundering (AML) legal requirements mandated under Malaysian law. These records are kept for a minimum period of five years as required by the relevant legislation.

As a diss88 member residing in Malaysia, you have the following rights regarding your personal data held by diss88, as guaranteed under Malaysia's Personal Data Protection Act 2010 (PDPA):

To exercise any of the rights above, please contact the diss88 team by email at support@diss88.best stating the type of request and relevant details. We will verify your identity before processing the request to safeguard your data security.

Diss88 retains your personal data only for as long as it is needed for the purposes outlined in this Privacy Policy, or as required under applicable Malaysian law. The following are general data retention guidelines:

• Active Account Data — Retained for the duration your account is active and for five years after account closure, in compliance with Malaysia's AML legal requirements.
• Financial Transaction Records — Retained for a minimum of five years as required under the Anti-Money Laundering, Anti-Terrorism Financing and Proceeds of Unlawful Activities Act 2001.
• KYC Documents — Retained for the same period as transaction records. Document copies are updated whenever a new document is submitted.
• Support Communication Logs — Live Chat conversation records and emails are retained for two years for quality control and dispute resolution purposes.
• Analytics Cookie Data — Aggregated analytics data that cannot be used to identify any individual is retained for a maximum of 24 months.

Once the retention period has lapsed and there is no legal obligation preventing deletion, diss88 will securely delete or anonymise your personal data. The deletion process is carried out using methods that ensure the data cannot be recovered.

The diss88 platform is strictly for individuals aged 18 and above. diss88 does not knowingly collect or store personal data from individuals under the age of 18. If diss88 discovers that personal data belonging to a minor has been collected, we will take immediate steps to delete that data and close the account in question.

If you have reason to believe that someone under the age of 18 has registered an account on diss88, please notify us by email at support@diss88.best as soon as possible. diss88 takes the protection of minors extremely seriously and will respond promptly to any such report.

Diss88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our privacy practices, new legal requirements, or changes in how the platform operates. When significant changes are made, diss88 will notify members through the following means:

• In-platform notifications on diss88 displaying a summary of key changes when you next log in.
• An email notification to your registered email address at least 14 days before significant changes take effect.
• The "Last Updated" date at the top of this document is always kept current to reflect the date of the most recent revision.

Continued use of the diss88 platform after any changes to this Privacy Policy take effect will be considered acceptance of the updated Privacy Policy. If you do not agree with the changes made, you have the right to close your account and request deletion of your personal data, subject to any applicable legal retention obligations.

For any enquiries, requests or complaints relating to this Privacy Policy or how diss88 handles your personal data, you may reach us through the following channels:

• 24/7 Live Chat — The fastest way to get an immediate response for general privacy enquiries. Typical response time is under 2 minutes.
• Email: support@diss88.best — For formal requests relating to privacy rights (access, correction, deletion). All email requests are acknowledged within 24 business hours and processed within the stipulated timeframe.

When contacting us regarding privacy matters, please clearly state the nature of your request along with sufficient identifying information (full name and registered email) so we can verify your identity before processing your request. This verification step is in place to protect the security of your own data.