Privacy Policy dana50 —
Member Personal Data Protection

1 Information We Collect

Dana50 collects various types of information from members to ensure the platform operates smoothly, securely, and delivers the best experience. The information collected can be divided into two main categories:

Information You Provide Directly:

• Full name, date of birth, and identification card number for identity verification (KYC) purposes.
• Email address, mobile number, and residential address.
• Bank account or e-wallet details registered for deposits and withdrawals.
• A copy of your identity document such as MyKad or passport is required for account verification.
• Feedback, complaints, and communications you send to our support team.

Information Collected Automatically:

• IP address, device type, operating system, and web browser type you use.
• Usage data such as pages visited, time spent, games played, and wagering patterns.
• Cookie data and similar tracking technologies to enhance user experience.
• Transaction logs including the date, time, amount, and payment method for each financial activity.

2 How We Use Your Information

Every piece of information we collect has a clear and lawful purpose. dana50 uses your personal data for the following purposes:

• Account Management — To create, verify, and manage your member account, including the mandatory KYC process.
• Transaction Processing — To securely and accurately process your deposits, withdrawals, and all financial transactions.
• Platform Security — To detect and prevent fraud, money laundering, unauthorised access, and any suspicious activity.
• Customer Support — To respond to enquiries, resolve complaints, and provide technical assistance.
• Service Communications — To send important notifications related to your account, transactions, policy updates, and security information.
• Service Improvement — Analyses usage patterns to improve platform features, games, and the overall user experience.
• Legal Compliance — To fulfil legal obligations, regulations, and requirements of relevant regulatory bodies.
• Responsible Gaming — Monitors gaming patterns to identify signs of problematic gaming and provide appropriate intervention.

3 Legal Basis for Data Processing

The processing of your personal data by dana50 is based on the following legal grounds in accordance with Malaysia's PDPA 2010:

4 Information Sharing and Disclosure

Dana50 understands the importance of your data confidentiality. We do not disclose your personal information to third parties except in the following circumstances:

• Payment Service Providers — Transaction information is shared with payment processors such as FPX, DuitNow, Touch 'n Go eWallet, GrabPay, and Boost solely for the purpose of processing your financial transactions.
• Technology Service Providers — Technology partners who help operate the platform, server infrastructure, and customer support systems, subject to strict confidentiality agreements.
• Regulatory Bodies and Enforcement Agencies — When required by law, court order, or directive from a legitimate authority in Malaysia.
• Audit and Compliance — External auditors and certification bodies that verify our platform's compliance with industry standards.
• Protection of dana50's Rights — Where necessary to protect the rights, property, or safety of dana50, our members, or the public.

All third parties we work with are required to uphold data protection standards equal to or higher than our own. We will not disclose your information to advertisers or any party for third-party marketing purposes.

5 Cookies and Tracking Technologies

Dana50 uses cookies and similar tracking technologies to enhance your user experience. There are several types of cookies we use:

• Essential Cookies — Required for core platform functions such as login session authentication and account security. These cookies cannot be disabled.
• Performance Cookies — Collects information about how you use our platform to help us understand and improve website performance.
• Functional Cookies — Allows the platform to remember your preferences such as language, display settings, and login information for your convenience.
• Analytics Cookies — Used to analyse aggregated usage patterns to help us make better decisions in platform development.

You can control and manage cookies through your web browser settings. Please note that disabling certain cookies may affect the functionality and user experience of the dana50 platform.

6 Data Retention Period

Dana50 retains your personal data only for as long as necessary to fulfil the processing purpose or as required by law:

Once the retention period has ended, your data will be securely deleted or anonymised in accordance with established procedures.

7 Your Rights as a Data Subject

Under Malaysia's PDPA 2010, you have certain rights regarding the personal data held by dana50. We fully respect and uphold these rights:

To exercise any of the above rights, please contact our customer support team via Live Chat or email. We will process your request within 21 business days from the date a complete request is received.

8 Data Security

Dana50 takes comprehensive technical and organisational measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction:

• Data Encryption — All sensitive data is encrypted using AES-256 at rest and SSL/TLS 1.3 in transit.
• Multi-Factor Access Control — Access to internal systems containing user data requires multi-factor authentication and role-based access controls.
• Continuous Monitoring — A 24/7 security monitoring system that detects and instantly alerts on any suspicious activity.
• Penetration Testing — Regular security audits and penetration testing by independent security experts to identify and address vulnerabilities.
• Staff Training — All dana50 staff undergo comprehensive data security training and are bound by strict confidentiality agreements.
• Incident Response Plan — Clear incident response procedures to address any data breaches promptly and effectively.

In the event of a data breach that may pose a risk to your rights and freedoms, we will notify you and the relevant authorities within the timeframe required by law.

9 Cross-Border Data Transfer

In the course of operating the dana50 platform, some of your personal data may be processed or stored outside Malaysia, particularly when we use cloud infrastructure services from internationally accredited providers.

• Any cross-border data transfer is only made to countries or entities that provide a level of data protection equivalent to or higher than PDPA 2010.
• All service providers outside Malaysia that handle your data are required to sign a data processing agreement that complies with international data protection standards.
• We ensure that appropriate safeguards, including standard contractual clauses, are in place before any data transfer is carried out.

10 Children's Privacy

The dana50 platform is strictly for individuals aged 18 and above. We do not intentionally collect or process personal data of anyone under the age of 18.

Parents and guardians are advised to always monitor their children's online activities and ensure they do not access platforms that are not age-appropriate.

11 Privacy Policy Changes

Dana50 reserves the right to update this Privacy Policy from time to time to reflect changes in our privacy practices, legal requirements, or service improvements. Whenever we make significant changes, we will:

• Displaying a clear notice on the dana50 platform's home page.
• Sending an email notification to your registered address at least 14 days before the changes take effect.
• Updating the "Last Updated" date at the top of this document.

Continued use of the dana50 platform after the effective date of any changes constitutes your acceptance of the updated Privacy Policy. We encourage you to review this page periodically.

12 Contact Us About Privacy

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, we are here to help:

• Live Chat — The fastest way to get an immediate response from our dedicated privacy team, available 24 hours a day, 7 days a week.
• Email — [email protected] (please type this address manually in your email application).
• FAQ — Visit FAQ page us for answers to frequently asked questions about privacy and data security.

We are committed to responding to all privacy-related enquiries within 3 business days and resolving written complaints within 21 business days from the date of receipt.