Privacy Policy dg10 – Our Commitment to Protecting Malaysian Players' Personal Data

1 Introduction — Who is dg10 and Why Privacy Matters

Dg10 is an online casino platform operating under the domain dg10.my, catering exclusively to adult players aged 18 and above in Malaysia. As a platform operator that stores and processes members' personal information, dg10 is fully aware of the significant responsibility we bear in safeguarding the security and confidentiality of that data.

This Privacy Policy ("Policy") has been established to transparently and clearly explain how dg10 collects, stores, uses, shares, and protects your personal data across all your interactions with our platform. We take every aspect of data protection seriously, treating member privacy as a priority equal in importance to the technical security of our systems.

As a Malaysia player who has registered and uses dg10, you have the right to know exactly what happens to the information you provide us — from your name and phone number at registration, to your financial transaction details via Touch 'n Go eWallet, GrabPay, DuitNow, FPX, or any other Malaysia payment method you use. This document is our response to the trust you have placed in dg10.

2 Types of Personal Data dg10 Collects

Dg10 only collects personal data that is strictly necessary to operate our services safely and effectively. We do not collect data beyond what is required for legitimate operational purposes. The following are the categories of data we collect:

Dg10 does not collect data classified as sensitive under Malaysia's data protection laws unless it is strictly required for compliance with identity verification (KYC) or anti-money laundering (AML) obligations mandated by legislation.

3 How dg10 Collects Your Personal Data

Dg10 collects personal data through several different channels, depending on how you interact with our platform:

• Account Registration: When you complete the dg10 registration form, you provide your identity and contact information directly to us via a secure form protected by SSL encryption.
• Financial Transactions: Every time you make a deposit via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX, or withdraw winnings to your account, transaction information is automatically recorded in dg10's system.
• Platform Usage: Your gaming activity — games selected, bet amounts, session outcomes — is automatically recorded as part of dg10's normal platform operations.
• Support Communications: When you contact the dg10 customer support team via Live Chat, email, or WhatsApp, the content of those communications may be stored for training and service improvement purposes.
• Cookies and Tracking Technologies: The dg10 platform uses cookies and similar technologies to identify your session, save your preferences, and analyse platform usage patterns in aggregate.

4 How dg10 Uses Your Personal Data

Dg10 uses the personal data we collect solely for legitimate purposes that are necessary to deliver a high-quality service to you. The following are the specific purposes for which your data is used:

• Account Management: Creating, verifying, and maintaining your dg10 account — including OTP verification, password resets, and profile information updates.
• Transaction Processing: Processing your deposits and withdrawals securely via registered Malaysian payment methods, including verification of payment account ownership.
• Gaming Service Delivery: Running all dg10 games — Magic Fruits, Prosperity Lion, Two Hand Holdem, Safari Wilds, Oracle Roulette, Lucky Blackjack, and Joker Poker — properly, and retaining session records for audit and dispute resolution purposes.
• Fraud Prevention & Security: Detecting, investigating, and preventing fraudulent activity, money laundering, multi-account abuse, and other security threats that may harm the platform or its members.
• Service Communications: Sending you important notifications about your account, changes to our terms, active promotions you qualify for, and technical information relevant to your use of dg10.
• Responsible Gaming: Monitor gameplay activity patterns to identify signs of problem gambling and provide appropriate support or protection tools as needed.
• Legal Compliance: Fulfilling legal obligations such as KYC and AML requirements, as well as any directives issued by the relevant authorities.

Dg10 will not use your data for any purpose beyond those stated above without first obtaining your explicit consent.

5 Data Sharing with Third Parties

Dg10 understands how sensitive the matter of personal data sharing is. We do not sell, rent, or trade your data to third parties for their own marketing or commercial purposes. However, in the course of operating the platform, there are limited circumstances where dg10 needs to share your data with trusted parties:

• Payment Service Providers: Transaction information that must be shared with eWallet providers (Touch 'n Go, GrabPay, Boost, ShopeePay), DuitNow, and FPX providers to securely process your deposits and withdrawals.
• Game Providers: Game software providers that operate titles within dg10's collection may receive the session data necessary to run the games correctly, subject to strict confidentiality agreements.
• Technical Support Service Providers: Third parties that provide infrastructure, technical support, or analytics services to dg10 may access data necessary to carry out their functions, subject to contractual confidentiality obligations.
• Statutory Authorities: dg10 will disclose required data to Malaysian authorities when mandated by law, court order, or a valid official investigation — and we will notify you of such disclosure wherever possible, unless prohibited by law.

All third parties that receive data from dg10 are bound by data protection agreements requiring them to use it solely for specified purposes and to safeguard it to a standard equal to or higher than that of dg10.

6 dg10 Data Security Measures

Dg10 continually invests in the latest security infrastructure to ensure your personal data remains protected at all times. The security measures we have in place include:

• 256-bit SSL/TLS Encryption: All communications between your browser and dg10's servers are fully encrypted using 256-bit SSL/TLS protocols — the same encryption standard employed by global financial institutions and Malaysia's leading banks.
• Data Encryption at Rest: Sensitive data stored in dg10's databases — including passwords (stored in hashed form) and financial information — is encrypted using the latest algorithms to ensure protection even in the event of unauthorised server access.
• Firewalls and Intrusion Detection Systems: dg10's servers are protected by multiple layers of firewalls and an intrusion detection system (IDS) that continuously monitors incoming traffic for suspicious activity.
• Strict Access Controls: Access to members' personal data within dg10's internal systems is restricted to staff who genuinely require it to carry out their duties — the "least privilege" principle is strictly enforced.
• 24/7 Security Monitoring: dg10's technical security team monitors systems around the clock to identify and respond to any security threats or anomalies.
• Regular Data Backups: dg10 data is regularly backed up to secure, separate locations to ensure swift recovery in the event of any unexpected technical disruption.

7 Data Retention Period

Dg10 retains your personal data for as long as necessary to fulfil the purposes stated in this Privacy Policy, or as required by applicable laws and regulations.

In general, dg10's data retention principles are as follows:

• Active Account Data: For as long as your account remains active, and for a reasonable period after closure, for service and audit purposes.
• Financial Transaction Records: A minimum of seven (7) years from the date of transaction, in accordance with Malaysia's applicable accounting and financial legislation requirements.
• Security & Audit Logs: Between twelve (12) months and five (5) years, depending on the type of log and applicable legal compliance requirements.
• Support Communication Data: Two (2) years from the date of communication, for the purposes of service improvement and resolution of any disputes that may arise.
• Cookie Data: Depending on the type of cookie — session cookies expire when your browser is closed, while persistent cookies have a set expiry period as described in Section 9.

When data is no longer needed for any legitimate purpose, dg10 will securely delete or anonymise it to ensure it cannot be re-identified.

8 Your Privacy Rights as a dg10 Member

Dg10 fully respects the privacy rights of every member. As a dg10 member, you have the following rights regarding the personal data we hold about you:

• Right of Access: You have the right to request a copy of the personal data dg10 holds about you at any time.
• Right to Rectification: If any data we hold about you is inaccurate or outdated, you have the right to request that we correct it promptly.
• Right to Erasure ("Right to be Forgotten"): You may request the deletion of your personal data in certain circumstances — for example, when the data is no longer needed for the purpose for which it was originally collected.
• Right to Restrict Processing: You have the right to request that dg10 restrict how we process your data under certain circumstances.
• Right to Data Portability: You have the right to receive your personal data in a structured, machine-readable format for transfer to another service provider of your choice.
• Right to Object: You have the right to object to the processing of your data for direct marketing purposes or in certain other circumstances.
• Right to Withdraw Consent: Where data processing is based on your consent, you may withdraw that consent at any time — though this does not affect the validity of any processing carried out prior to the date of withdrawal.

To exercise any of the rights above, please contact the dg10 team by email at [email protected] or via the in-platform 24/7 Live Chat. dg10 is committed to processing your request within a reasonable timeframe, and no later than thirty (30) business days from the date the request is received.

9 Cookies and Tracking Technologies

Dg10 uses cookies and similar tracking technologies to enhance your experience and ensure the platform functions correctly. Cookies are small text files stored in your browser when you visit dg10.my.

Dg10 uses the following types of cookies:

• Essential Cookies: Required for the platform to function correctly — including login session management and form security. These cookies cannot be disabled without affecting the core functionality of dg10.
• Preference Cookies: Save your preferences such as display language and game settings so you don't have to reconfigure them each time you log in to dg10.
• Analytics Cookies: Helps dg10 understand how members use our platform in aggregate — information we use to improve dg10's design and functionality. This data contains no personally identifiable information.
• Security Cookies: Helping dg10 detect suspicious activity and protect your account from unauthorised access.

You can manage cookies through your browser settings. However, disabling certain cookies may affect the functionality of the dg10 platform. For more information on managing cookies in your browser, refer to your browser's help documentation.

10 Financial & Transaction Data Protection

Your financial data receives the highest level of protection within dg10's systems, in keeping with the critical sensitivity of this information. When you make a deposit via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX (Maybank2u / CIMB Clicks), all transaction details are processed through fully encrypted channels.

Dg10 does not store your full bank account or credit card number in our systems. Only unique tokens issued by payment providers are retained, enabling future transactions to be processed without requiring you to re-enter your payment details each time.

Every financial transaction at dg10 is protected by:

• Two-factor authentication (2FA) via SMS OTP for withdrawal transactions exceeding a specified threshold
• Real-time transaction monitoring to identify suspicious patterns or fraudulent activity
• Automatic account lockout upon detection of repeated suspicious access attempts
• Strict auditing of transaction records to ensure all payments are processed accurately and transparently

11 Changes to the Privacy Policy

Dg10 reserves the right to update this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements, or changes in how the dg10 platform operates. Any changes made will be communicated to members via:

• A prominent notice on the dg10.my Privacy Policy page stating the date of the latest revision
• Email notifications sent to the registered email address on the member's account, specifically for material changes
• In-platform notices on dg10 prompting members to review and accept the updated policy

Your continued use of the dg10 platform after any changes take effect will be considered acceptance of the updated Privacy Policy. We therefore encourage you to review this page periodically to stay informed of how dg10 manages your data.

If you disagree with any material changes to this Privacy Policy, you have the right to close your dg10 account before the changes take effect by contacting our support team.

12 Contact dg10 for Privacy Enquiries

If you have any questions, concerns, or complaints regarding this Privacy Policy or how dg10 handles your personal data, we warmly encourage you to reach out to us through the following channels:

• Privacy Email: [email protected] — include "Privacy Inquiry" in your email subject line to ensure it is handled by the right team
• 24/7 Live Chat: Available directly within the dg10 platform — the fastest way to get an immediate response in Bahasa Melayu
• WhatsApp: Check the latest number in the contact us section on the dg10 platform

Dg10 is committed to responding to all privacy-related enquiries within twenty-four (24) business hours. For formal privacy rights requests — such as data access, correction, or deletion — processing may take up to thirty (30) business days depending on the complexity of the request.