dipo4d Privacy Policy — How We Handle Your Personal Data

1. Introduction

dipo4d (referred to in this policy as "we", "us" or "our") is an online sports betting and casino platform accessible at https://dipo4d.lat. This Privacy Policy explains how we collect, process, store, share and protect the personal data of every individual ("you", "your" or "player") who registers an account, visits the website or contacts our support team.

By accessing dipo4d, completing registration or making use of any feature on the platform, you acknowledge that you have read this Privacy Policy and understand how your personal data will be handled. If you do not agree with any part of this policy, you should not use dipo4d.

This policy applies in addition to the dipo4d Terms & Conditions. Where those documents overlap on a data-related matter, this Privacy Policy governs.

2. Definitions

"Personal data" means any information that identifies or could reasonably be used to identify a natural person — including name, identification number, contact details, financial information and device identifiers.

"Processing" covers any operation carried out on personal data, including collection, storage, access, use, disclosure, transfer, deletion and destruction.

"Data controller" refers to dipo4d in its capacity as the entity that determines the purposes and means of processing your personal data. "Data processor" refers to a third-party entity that processes personal data on behalf of dipo4d under a binding agreement.

"Cookies" refers to small data files placed on your device by the dipo4d website to facilitate functionality, analytics and security. "KYC" (Know Your Customer) refers to the identity and document verification process required for account security and compliance purposes.

3. Personal Data We Collect

dipo4d collects personal data through multiple channels — registration forms, identity verification submissions, payment transactions, platform usage behaviour and communications with support staff.

3.1 Registration and Account Data

When you create a dipo4d account we collect your full legal name, date of birth, email address, chosen username, password (stored in hashed form and never visible to staff) and your declared country of residence. For players based across Malaysia — including Kuala Lumpur, Petaling Jaya, Penang, Shah Alam and Johor Bahru — we may also ask for a Malaysian mobile number for account security purposes.

3.2 Identity and KYC Documents

To comply with age verification and anti-money laundering obligations, we may request a copy of your MyKad or passport, a proof-of-address document (such as a recent utility bill or bank statement), a selfie for biometric confirmation and, in higher-stakes cases, evidence of the source of your funds. All KYC documents are handled with the highest level of access restriction.

3.3 Financial and Payment Data

We record details of each deposit and withdrawal transaction, including amount, date, currency (MYR), the payment method used (such as Touch 'n Go eWallet, DuitNow, FPX, Boost, GrabPay, Maybank transfer or CIMB transfer) and transaction reference numbers. We do not store full card numbers or complete e-wallet credentials on dipo4d servers.

3.4 Behavioural and Technical Data

We automatically collect device type, operating system, browser, IP address, session duration, pages visited, click patterns, bet history and game activity. This data is used to improve the platform, detect fraud, and provide a better experience for Malaysian players on desktop and mobile.

3.5 Communications Data

When you contact dipo4d via live chat or email, we retain records of the conversation content, timestamps and any attachments provided. These records may be used for quality assurance, dispute resolution and fraud prevention.

4. How We Use Your Personal Data

dipo4d processes your personal data for the following purposes:

• Creating and maintaining your player account, including password resets and session management.
• Verifying your identity, age (21+) and the legitimacy of your payment methods before processing withdrawals.
• Processing MYR deposits and withdrawals through your selected Malaysian payment channel, including reconciling transaction discrepancies.
• Calculating, crediting and auditing bonus entitlements, cashback, VIP loyalty points and promotional rewards.
• Detecting and preventing fraud, multi-accounting, bonus abuse, collusion and other prohibited conduct described in the Terms & Conditions.
• Monitoring account activity to identify early signs of problem gambling and applying responsible gambling controls where necessary.
• Responding to support enquiries, complaints and disputes submitted via live chat or email.
• Analysing aggregated, anonymised platform usage data to improve sportsbook markets (Liga Super Malaysia, EPL, UFC), casino features and the overall user experience.
• Sending transactional communications — deposit confirmations, withdrawal updates, security alerts and verification requests.
• Fulfilling any legal, regulatory or licensing obligation applicable under the framework under which dipo4d operates.

5. Legal Bases for Processing

Each processing activity carried out by dipo4d rests on one or more of the following recognised lawful bases:

• Contractual necessity — processing required to fulfil the player agreement, including account operation, payment processing, settlement and support.
• Legitimate interests — fraud prevention, platform security, anti-money laundering monitoring and internal analytics, where those interests are not overridden by your fundamental privacy rights.
• Consent — for optional marketing communications and non-essential cookie categories. Consent may be withdrawn at any time by contacting support or adjusting cookie preferences.
• Legal obligation — data retained to comply with licensing, anti-money laundering, fraud reporting and other applicable compliance requirements.

6. Cookies and Tracking Technologies

dipo4d uses first-party and selected third-party cookies. Strictly necessary cookies enable core functionality — login sessions, betting slip management and secure page navigation — and cannot be disabled without breaking the platform. Functional cookies remember your preferences, such as language and odds format. Analytical cookies help us understand how Malaysian players navigate the site so that we can improve it.

You may manage non-essential cookie categories through your browser settings or the cookie preference option on the platform. Please note that disabling certain cookies may affect how some features, including live betting markets and personalised promotions, function.

We do not use tracking technologies to build detailed profiles for sale to third-party advertising networks. Aggregate analytics data is used only for internal platform improvement purposes.

7. Data Sharing and Disclosure

dipo4d does not sell personal data. We may share your information with:

• Payment processors and e-wallet providers — such as those facilitating DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, bank transfers and card payments, to the extent necessary to complete your transaction.
• KYC and identity verification service providers — third-party specialists engaged to verify identity documents and detect fraudulent submissions.
• Game content studios and data providers — for the sole purpose of operating the games and sports markets available on dipo4d. These providers do not receive financial account details.
• Customer support tooling providers — platforms used to manage live chat and email ticket systems, subject to strict data-processing agreements.
• Fraud and security service providers — specialist systems used to detect suspicious login patterns, payment anomalies and multi-account activity.
• Legal and regulatory authorities — when required by a valid legal process, licensing obligation or where disclosure is necessary to protect the rights, property or safety of dipo4d or its players.

All third-party data processors engaged by dipo4d are required to handle personal data in a manner consistent with this Privacy Policy and to maintain appropriate technical and organisational security measures.

8. International Data Transfers

dipo4d operates under international licensing and utilises infrastructure and service providers located in multiple jurisdictions. As a result, personal data submitted by Malaysian players may be transferred to and processed in countries outside Malaysia. Where such transfers occur, dipo4d takes steps to ensure that recipient parties maintain data protection standards broadly consistent with internationally recognised frameworks, such as contractual safeguards in data-processing agreements.

By using dipo4d, you acknowledge that your personal data may be processed outside Malaysia and that data protection standards in those countries may differ from those applicable locally.

9. Data Retention

dipo4d retains your personal data for as long as your account remains active. After closure, data is retained for a further period in line with licensing and compliance obligations — typically a minimum of five years for financial transaction records and identity documents, to satisfy anti-money laundering requirements.

Anonymised and aggregated analytics data may be retained indefinitely because it can no longer be used to identify an individual. Support communications may be retained for up to three years for dispute resolution purposes. Cookies and session logs are retained in accordance with each cookie's specified expiry.

When retention periods expire, personal data is securely deleted or irreversibly anonymised. You may request early deletion of certain data categories where no overriding legal obligation requires continued retention — see Section 11 for how to exercise that right.

10. Security Measures

dipo4d implements a range of technical and organisational measures to protect your personal data against unauthorised access, accidental loss, alteration or disclosure. These include:

• 256-bit TLS/SSL encryption on all data in transit between your device and dipo4d servers.
• Hashed and salted storage of all account passwords — plain-text passwords are never stored or visible to any member of staff.
• Role-based access controls limiting internal access to personal data on a strict need-to-know basis.
• Regular internal security reviews, vulnerability assessments and monitoring for unusual access patterns.
• Two-factor authentication options for player accounts to reduce the risk of unauthorised login.

Despite these measures, no internet transmission or electronic storage system is completely immune to risk. In the unlikely event of a data breach affecting your rights, dipo4d will notify affected players and take appropriate remedial action in a timely manner.

11. Your Rights as a Data Subject

Subject to the limitations imposed by applicable legal and compliance obligations, you hold the following rights in relation to your personal data held by dipo4d:

• Right of access — you may request a copy of the personal data dipo4d holds about you.
• Right to rectification — you may request correction of inaccurate or incomplete personal data.
• Right to erasure — you may request deletion of your personal data where no overriding legal obligation requires its continued retention.
• Right to restrict processing — you may ask dipo4d to limit how certain data is used while a request or dispute is being considered.
• Right to data portability — you may request a machine-readable export of data you have actively provided to dipo4d.
• Right to withdraw consent — where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.
• Right to object — you may object to processing carried out on the basis of legitimate interests, including direct marketing.

To exercise any of the above rights, contact dipo4d support via live chat or by sending a written request to the support email address. We aim to acknowledge rights requests within 72 hours and to provide a substantive response within 30 days. Identity verification may be required before a request is actioned.

12. Minors and Age Verification

dipo4d is strictly intended for players aged 21 years and above. We do not knowingly collect personal data from individuals under this age. Registration requires submission of date of birth, and KYC verification requires a government-issued identity document confirming that the applicant has reached the minimum age threshold.

If dipo4d becomes aware that personal data has been collected from a person who does not meet the minimum age requirement, that account will be suspended, the personal data will be reviewed and any funds involved will be handled in accordance with the Terms & Conditions.

13. Changes to This Privacy Policy

dipo4d may update this Privacy Policy from time to time to reflect changes in our data practices, the services we offer, the payment providers we work with, or applicable compliance requirements. When a material change is made, we will update the effective date at the top of this page and, where reasonably practical, notify registered players through the platform before the change takes effect.

Your continued use of dipo4d after an updated Privacy Policy takes effect constitutes your acceptance of the revised terms. If you do not agree with a change, you should stop using the platform and request account closure before the effective date.

14. Contact Us

If you have any questions about this Privacy Policy, wish to exercise a data subject right or want to raise a data-related concern, please contact the dipo4d support team. Our support is available via live chat around the clock, operating on Malaysia Time (MYT, UTC+8).

For written enquiries relating to this Privacy Policy, you may write to the plain-text support address listed below. Please include your registered username and a clear description of your request so that we can respond efficiently. Do not include your password, one-time authentication codes or full payment credentials in any communication.

Support email (plain text — not a clickable link):

[email protected]

Response time: within 4 hours for email enquiries. Live chat: real-time, 24/7.