Dipo4d Privacy Policy – Data Protection & User Security

Welcome to the dipo4d Privacy Policy. This document explains in detail how dipo4d collects, processes, stores, and protects your personal information when you use our platform, whether through the official website at dipo4d.wine or through our mobile app.

Dipo4d is an online gaming and casino platform operating for users in Malaysia. We take our responsibilities as a data controller seriously and are committed to handling your personal information with full integrity, transparency, and security. This policy is drafted in accordance with the Malaysian Personal Data Protection Act 2010 (PDPA) and international industry best practices.

This Privacy Policy applies to all users who register an account, browse the platform, contact customer support, or interact with any service provided by dipo4d. By continuing to use our platform, you confirm that you have read and understood this Privacy Policy.

Dipo4d collects various categories of personal information necessary to provide our users with a safe, lawful, and high-quality service. Below is a summary of the types of data we collect and their purposes:

We only collect data that is strictly necessary for the stated purposes. dipo4d does not collect sensitive information such as biometric data or medical records unless there is a specific requirement and you have given your explicit consent.

Personal data collected is used solely for legitimate and transparent purposes. dipo4d ensures every use of data has a clear justification and is carried out within the limits permitted by law.

• Identity verification and KYC: To verify that you are a legitimate user, aged 18 and above, and meet all applicable legal compliance requirements.
• Financial transaction processing: To securely and accurately process deposits, withdrawals, and any financial transactions you make on the platform.
• Account management: To create, maintain, and recover your account, and to ensure the security of your login at all times.
• Fraud prevention and AML: To detect and prevent fraudulent activity, money laundering, and unauthorised access to the platform.
• Service improvement: To analyse usage patterns for the purpose of improving platform performance, enhancing user experience, and introducing new features.
• Service communications: To send important notifications relating to your account, transactions, policy updates, and security information.
• Legal compliance: To fulfil obligations under Malaysian law and the requirements of relevant authorities when legally required.
• Customer Support: To identify you, understand the context of your issue, and provide accurate and efficient assistance.

Dipo4d understands that you trust us with your personal information. We do not share your personal data indiscriminately. Data sharing only occurs in limited situations and for clearly defined reasons as follows:

• Payment service providers: Third parties that process your financial transactions, such as FPX, Touch 'n Go, MAE, and GrabPay. They only receive data necessary to process the relevant transaction and are bound by strict confidentiality agreements.
• Game providers: Gaming software companies that operate games on the dipo4d platform receive only the minimum technical data required solely for game functionality.
• Legal authorities: dipo4d will disclose data when required by a court order, direction from a relevant authority, or a lawful criminal investigation under Malaysian law.
• AML/KYC partners: Third-party identity verification services we use to conduct required KYC checks and AML compliance.
• Business transfers: In the event of a company restructuring, user data may be transferred as part of the business assets, subject to equivalent privacy protections.

In all data sharing instances, dipo4d ensures that recipients comply with data protection standards equal to or higher than our own. Legally binding data processing agreements are signed with all third-party service providers.

Dipo4d uses cookies and similar tracking technologies to enhance platform functionality, understand how users interact with our services, and ensure the security of your login session.

Types of cookies used by dipo4d:

• Essential Cookies: Required for core platform functions such as login verification, session management, and security. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies: Collects information on how users interact with the platform to help us improve performance and page speed.
• Functional Cookies: Stores your preferences such as language, display settings, and game history to deliver a more personalised experience.
• Analytics Cookies: Helps us understand aggregate usage patterns without identifying specific individuals, used for continuous platform improvement.

You can manage your cookie settings through your web browser at any time. However, disabling essential cookies may affect your ability to log in and use certain features on the dipo4d platform. For the best experience, we recommend allowing the necessary cookies to function.

Dipo4d continually invests in the latest security infrastructure to ensure your personal data is always protected against unauthorised access, loss, destruction, or accidental disclosure.

• 256-bit SSL Encryption for all data communications between users and dipo4d servers.
• Password storage using hashing that is irreversible — dipo4d staff themselves cannot view your password.
• Two-factor authentication (2FA) available to all accounts as an additional layer of security.
• Intrusion Detection System (IDS) that monitors suspicious activity 24 hours a day, 7 days a week.
• Regular security audits by internal security teams and independent external experts.
• Tiered access control ensuring that only authorised personnel with specific job requirements can access user data.
• Encrypted data backups stored at physically separate locations for disaster recovery.

While we take all reasonable steps to protect your data, no system can be guaranteed 100% secure. We encourage you to play your part in keeping your account safe by using a strong password and enabling 2FA.

As a dipo4d user, you have certain rights regarding your personal data under Malaysia's PDPA. dipo4d fully respects and facilitates the exercise of these rights:

To exercise any of the above rights, please contact the dipo4d customer support team. We will process your request within 30 calendar days from the date of receipt of a complete request.

Dipo4d retains your personal data for as long as necessary to fulfil the purpose for which it was collected, or for as long as required by applicable law. The following are general guidelines for data retention periods:

• Active account data: Retained for the duration your account is active and up to five (5) years after account closure for legal compliance purposes.
• Financial transaction records: Retained for seven (7) years in accordance with Malaysia's tax and AML legal requirements.
• KYC Documents: Retained for five (5) years after the business relationship ends, in line with anti-money laundering requirements.
• Customer support communication logs: Retained for two (2) years for service quality and dispute resolution purposes.
• Technical data and logs: Retained for 90 days for security and technical troubleshooting purposes.

When data is no longer needed and there is no legal obligation to retain it, dipo4d will securely delete or anonymise that data using appropriate methods.

Dipo4d is a platform dedicated exclusively to individuals aged 18 and above. We take the prevention of underage access very seriously. The following measures are in place to protect children's privacy:

• Account registration requires date of birth verification and identity verification (KYC) confirming a minimum age of 18.
• Dipo4d does not intentionally collect any personal information from individuals under the age of 18.
• Should we discover that data belonging to an individual under the age of 18 has been collected, we will immediately take steps to delete that information and terminate the associated account.
• Parents or guardians who believe their child has registered a dipo4d account are urged to contact our customer support team immediately.

Dipo4d reserves the right to modify or update this Privacy Policy at any time to reflect changes in our business practices, new legal requirements, or improvements in how we protect your data.

• Any significant amendments will be communicated to you via in-platform notifications or your registered email at least 14 days before the changes take effect.
• The "Last Updated" date at the top of this page will be updated to reflect the date of the most recent revision.
• Your continued use of the dipo4d platform after any amendments take effect will be considered your acceptance of the latest version of the Privacy Policy.
• Previous versions of the Privacy Policy are retained and may be requested through customer support for your reference.

We encourage you to review this Privacy Policy page from time to time to ensure you are always informed about how we protect your information.

If you have any questions, concerns, or requests regarding this Privacy Policy or how dipo4d handles your personal data, we are here to help. Our data protection team is committed to providing accurate and thorough responses to every inquiry.

• Support Email: [email protected]
• Response Time: We aim to respond to all privacy-related inquiries within 3 business days.
• Live Support: 24/7 Live Chat is available within the platform for immediate enquiries.

For formal requests regarding data subject rights (access, correction, deletion, etc.), please clearly state the type of request, your full name, and your account number in the relevant email. This will help expedite the processing of your request.