Digi28 Privacy Policy – Malaysian Player Data Protection

01Types of Personal Data We Collect

Digi28 collects various categories of personal information from our players during registration, platform use, and interaction with our services. Below are the data categories we collect, along with specific examples for each.

Personal Identification Data: Full name as per identity card, MyKad or passport number, date of birth, gender, and nationality. This data is required to meet Know Your Customer (KYC) requirements and to verify that players meet digi28's minimum age criteria.

Contact Information: An active Malaysian phone number, email address, and residential address. This information is used for account verification, important notices, and communications related to your digi28 account.

Financial Data: Supported payment methods include Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX via Maybank2u and CIMB Clicks. digi28 does not store credit card details or full bank account numbers — only transaction identifiers and payment method types are recorded.

Platform Usage Data: Game records, betting history, login and logout activity, IP addresses, device type, operating system, and browser information. This data is used to analyse platform performance and detect any unusual activity.

02Purpose of Personal Data Use

Every piece of data digi28 collects serves a specific and legitimate purpose. We do not collect data beyond what is necessary to provide our services to you.

• Account Management: Creating, verifying, and managing your digi28 account, including password recovery and profile updates.
• Transaction Processing: Processing deposits and withdrawals in MYR efficiently and securely via supported Malaysian payment methods.
• Security & Verification: Detecting and preventing fraud, money laundering, and unauthorised access to digi28 player accounts.
• Legal Compliance: Fulfilling legal obligations under PDPA 2010 and applicable KYC requirements.
• Service Improvement: Analysing usage patterns to improve the platform experience and introduce new features more relevant to Malaysian players.
• Marketing Communications: Sending information about bonuses, promotions, and exclusive offers — only to players who have given their consent.

03Third-Party Data Sharing

Digi28 takes player data confidentiality seriously. We do not share, sell, or disclose players' personal information to third parties for marketing or commercial purposes under any circumstances. However, there are limited situations where data sharing may occur for legitimate reasons:

• Technology Service Providers: Technical infrastructure providers involved in operating the digi28 platform, including cloud service providers and live game studio operators, are bound by strict confidentiality agreements.
• Payment Processors: Minimal transaction information is shared with payment processors such as DuitNow and FPX solely for the purpose of processing deposits and withdrawals.
• Relevant Authorities: digi28 will disclose information to Malaysian authorities where required by law, court order, or official investigative requirements.
• Fraud Prevention: Limited information may be shared with fraud prevention agencies to protect digi28 players and the integrity of our platform.

04digi28 Data Security Measures

Protecting the personal data of Malaysian players is one of digi28's top priorities. We continuously invest in security infrastructure and procedures to ensure your data remains safe at all times.

• 256-bit SSL/TLS encryption for all data communications between your browser and digi28's servers
• Password storage using one-way hashing algorithms that cannot be decrypted
• Two-factor authentication (2FA) is available for all digi28 accounts as an added layer of protection
• Real-time account activity monitoring to detect suspicious logins
• Regular internal security audits and independent penetration testing
• Strict access controls on our database — only authorised digi28 staff with a legitimate business need are permitted to access sensitive data

05Your Rights Under the digi28 Privacy Policy

As a registered digi28 player, you have certain rights regarding your personal data guaranteed under the PDPA 2010 and our internal policies. These rights are summarised in the table above, and below you'll find further details on how to exercise them.

To request access to your data, make a correction, or submit a deletion request, please contact the digi28 privacy team by email at privacy@digi28.ws. Please include your full name, digi28 account number, and the nature of your request. All requests will be acknowledged within 3 business days and resolved within the stated timeframe.

07Data Retention Period

Digi28 does not retain players' personal data longer than necessary. Retention periods vary depending on the type of data and applicable legal requirements:

• Active Account Data: Retained for the duration your account remains active and for 7 years after account closure, in compliance with financial record-keeping requirements.
• Transaction Records: Retained for 7 years in accordance with Malaysian financial legal requirements.
• Communication Logs: Emails and customer support records are retained for 3 years.
• Cookie Data: Session cookies are deleted when you close your browser. Persistent cookies are retained for a maximum of 12 months.

08Changes to This Privacy Policy

Digi28 reserves the right to update this Privacy Policy at any time to reflect changes in our practices or applicable legal requirements. Where significant changes are made, we will notify players via their registered email or through a prominent notice on the platform at least 14 days before the changes take effect.

The date of the most recent update is always displayed at the top of this page. Continued use of the digi28 platform following any policy changes will be considered your acceptance of the updated policy.