D123 Privacy Policy – Our Commitment to Protecting the Personal Data of Malaysian Members

1. Personal Data We Collect

D123 collects various types of personal information from members depending on how you interact with our platform. We only collect data that is necessary for the specific purposes stated in this policy – nothing more, nothing less.

A. Information You Provide Directly

• Registration Information: Full name, Malaysian identity card number (IC), date of birth, active Malaysian phone number, email address, and the password you set when creating your d123 account.
• Profile Information: Your residential address in Malaysia, bank name, bank account number, and payment method details you have registered — Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX via Malaysian banks.
• KYC Verification Documents: Copies of your identity card, passport, Malaysian utility bills, or bank statements submitted for the identity verification process.
• Communications: Records of live chat conversations, emails and any other communications between you and the d123 support team.

B. Automatically Collected Information

• Technical Data: IP address, device type and operating system, browser type and version, screen resolution and other technical information related to your device.
• Usage Data: The pages you visit on d123, time spent in each section, games played, bets placed, and deposits and withdrawals made.
• Location Data: General location information based on your IP address to verify that you are accessing the platform from Malaysia. d123 does not collect your precise GPS location unless you have given express consent.
• Cookie Data: Information collected through cookies and similar tracking technologies as described in Section 6 of this document.

2. How d123 Uses Your Personal Data

D123 uses the personal data it collects for the following purposes, all of which are directly related to providing you with our betting platform services in Malaysia.

• Account Management: Creating and maintaining your d123 account, processing login requests and ensuring the security of your account at all times.
• Transaction Processing: Verify and process all deposits and withdrawals via Malaysian payment methods such as Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX, Maybank2u, and CIMB Clicks.
• KYC Verification & Fraud Prevention: Verify your identity to meet the platform's compliance requirements, and to detect and prevent fraudulent activity, money laundering, and platform abuse.
• Service Provision: Lets you bet on sports such as Malaysia Super League football, badminton, MPL Malaysia e-sports and VALORANT, as well as access all casino games including baccarat, poker and slots on the d123 platform.
• Customer Support: Responding to enquiries, resolving complaints, and providing technical assistance in Bahasa Malaysia via live chat and email.
• Platform Communications: Sending important account notifications such as deposit confirmations, withdrawals, password changes, and security alerts.
• Marketing (with Consent): Sending promotional information, bonus offers and the latest d123 platform news — only if you have agreed to receive marketing communications. You may withdraw this consent at any time.
• Responsible Gaming: Analysing usage patterns to identify members who may need support related to responsible gaming, and offering appropriate assistance or self-exclusion tools.
• Platform Improvements: Analysing usage data in aggregate and anonymised form to improve the design, functionality, and overall experience of the d123 platform.

3. Sharing Data with Third Parties

D123 takes a highly restricted and cautious approach to sharing members' personal data. As a general rule, we do not share your personal data with third parties except in the following specific and necessary circumstances.

• Technical Service Provider: Companies that provide the technical infrastructure for the d123 platform, including server hosting providers, cloud services, and payment processing systems. All such providers are bound by strict confidentiality agreements and may only use the data we share with them for the specific purposes we direct.
• Malaysian Payment Providers: Payment platforms such as Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and local Malaysian banks that process your financial transactions. Only the minimum information required to complete each transaction is shared.
• Legal Compliance: If required by Malaysian law or a valid court order, d123 may be required to disclose members' personal information to the relevant authorities. We will notify you should such a disclosure occur, unless prohibited from doing so by law.
• Anti-Fraud Agency: In cases involving fraud, money laundering, or financial crime, d123 may share relevant information with the appropriate Malaysian authorities or financial crime prevention agencies.

All third parties with whom we share data are bound by strict data processing agreements and must adhere to data protection standards equivalent to or higher than those we practise at d123.

4. d123 Data Security Measures

D123 continually invests in the latest security technologies and procedures to ensure your personal data remains protected at all times. Below are the key security measures we have in place.

• 256-bit SSL Encryption: All data transmitted between your device and d123's servers is protected by 256-bit SSL encryption — the same encryption technology used by leading banking and financial institutions in Malaysia and worldwide.
• Data Encryption at Rest: Sensitive personal data stored in d123's databases is also encrypted — meaning that even if someone were to gain unauthorised access to the database, they would be unable to read your personal information without the encryption key.
• Strict Access Controls: Only d123 staff with a legitimate business need who have passed rigorous background checks are permitted to access members' personal data. Every access is logged and monitored automatically.
• 24/7 Monitoring: d123's cybersecurity team monitors our systems around the clock to detect any suspicious activity or intrusion attempts. Automated threat detection systems also operate on a continuous basis.
• Regular Security Audits: d123 conducts regular independent security audits by qualified third-party cybersecurity experts to identify and address any vulnerabilities in our systems.
• Two-Factor Authentication (2FA): d123 provides 2FA for all member accounts as an additional security layer. You are strongly encouraged to enable 2FA in your d123 account settings.
• Fund Segregation: Member funds are held in accounts separate from d123's operational accounts to ensure full financial protection.

5. Your Rights as a d123 Member

As a d123 member, you have certain rights regarding your personal data, all of which we fully respect. These rights can be exercised at any time by contacting the d123 support team.

To exercise any of the above rights, please contact the d123 support team via live chat or email support@d123.click, stating the right you wish to exercise along with your account details. All requests will be verified first to ensure your account's security before being processed.

6. Cookies and Tracking Technologies

D123 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit the d123 website.

• Essential Cookies (Mandatory): These cookies are required for the d123 platform to function properly. They store your login session information, language preferences and security settings. Without them, the platform cannot operate correctly and you will not be able to log in to your account.
• Performance Cookies: Helps us understand how members use the d123 platform — which pages are visited most, where members spend their time, and where technical issues may exist. This data is collected in aggregate and anonymised form.
• Functional Cookies: Saving the preferences you have set on the d123 platform — such as your preferred language, display format, and other settings — so you do not need to reconfigure them each time you log in.
• Marketing Cookies (with Consent): Used only if you have consented to receive marketing communications. Helps us understand the overall effectiveness of d123 promotional campaigns.

You can manage your cookie settings through your web browser. Most modern browsers allow you to view, delete, or block cookies. Please note that blocking essential cookies may affect the functionality of the d123 platform. For guidance on managing cookies in your browser, refer to the official documentation for the browser you are using.

7. Data Retention

D123 retains your personal data only for as long as necessary to fulfil the purposes set out in this Privacy Policy, or as required by applicable Malaysian law.

• Active Account Data: While your d123 account remains active, we retain all personal data necessary to operate your account securely.
• After Account Closure: When you close your d123 account, we will begin the process of deleting or anonymising your personal data within 30 days, subject to the exceptions outlined below.
• Legal Obligation: Financial transaction records and KYC information may need to be retained for a longer period (typically 5 to 7 years) to meet legal compliance requirements related to financial regulations and anti-money laundering laws in Malaysia.
• Active Investigation: If your account is under investigation for fraud or a dispute, the relevant data will be retained until the investigation is fully resolved.

Once the retention period has ended, your data will be securely deleted or permanently anonymised so that it can no longer be linked to you.

8. Child Protection

The d123 platform is intended for adults aged 21 and above only. d123 does not knowingly collect or process personal data from individuals under the age of 21.

If you are a parent or guardian and believe that your underage child has registered an account on d123, please contact us immediately at support@d123.click. We will investigate the matter promptly and take appropriate action, including closing the account and deleting all associated data.

9. Changes to the Privacy Policy

D123 reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technological developments. When we make material changes, we will notify you through the following means:

• Updating the "Last Updated" date shown at the top of this document
• Sending a notification email to your registered d123 email address
• Posting a prominent notice on the d123 platform for at least 14 days before the changes take effect

Your continued use of the d123 platform after a Privacy Policy change takes effect will be considered acceptance of the updated policy. If you do not agree with any changes, you have the right to close your account before those changes come into effect.

10. Contact d123's Privacy Officer

If you have any questions, concerns, or complaints about how d123 handles your personal data, or if you wish to exercise any of your privacy rights, please contact us through the following channels:

• Privacy Email: support@d123.click – Please include "Privacy Enquiry" in the subject line of your email
• Live Chat: Available 24/7 from the d123 platform – the fastest way to get help with urgent enquiries
• Language of Service: Full Bahasa Malaysia
• Response Time: General enquiries within 24 hours; formal privacy rights requests within 14 business days

D123 takes all privacy-related complaints seriously. Every complaint received will be thoroughly investigated and a meaningful response provided. If you are not satisfied with how we have handled your complaint, you have the right to escalate the matter to the relevant data protection authority in Malaysia. See also Terms & Conditions and Responsible Gaming ours for a full picture of how we operate and protect the interests of d123 members.