dg186 Privacy Policy

Introduction

This Privacy Policy ("Policy") applies to all personal data processed by dg186 ("dg186", "we", "us", "our") in connection with the dg186 website, mobile-optimised interface and all related online casino, live dealer, sports betting and promotional services (collectively, the "Platform"). The Platform serves adult users across Malaysia, including players from Kuala Lumpur, Petaling Jaya, Johor Bahru, Shah Alam, Penang and beyond.

Personal data is handled with care, transparency and proportionality. dg186 does not sell personal information to third parties. Data is processed only for the purposes described in this Policy and for as long as reasonably necessary to fulfil those purposes or to comply with applicable legal obligations.

Definitions

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

"Personal Data"

Any information that identifies or could reasonably be used to identify a living individual, directly or in combination with other data. This includes a name, email address, phone number, government-issued identification number, financial account details and device identifiers.

"Data Controller"

dg186, which determines the purposes and means by which personal data is processed in connection with the operation of the Platform.

"Data Processor"

A third party that processes personal data on dg186's behalf under written instruction, for example a payment gateway provider or identity verification service.

"Processing"

Any operation carried out on personal data, whether automated or manual, including collection, storage, organisation, retrieval, use, disclosure, erasure and destruction.

"KYC"

Know Your Customer — the identity and document verification process conducted before a Player's first withdrawal and, where required, at other stages of the account lifecycle.

"Player" / "User" / "you"

Any individual who registers for or accesses a dg186 account, including prospective users who provide information during the registration process.

"Sensitive Data"

A subset of personal data that warrants stronger protection, including financial information, government identity document numbers, and information relating to health or gambling behaviour where applicable.

Data We Collect

dg186 collects the minimum personal data necessary to operate the Platform, comply with legal obligations and deliver a secure experience. The categories of data we collect are summarised below.

How We Collect Personal Data

4.1 Directly From You

The majority of personal data processed by dg186 is provided directly by the Player. This occurs when you register an account, complete the KYC verification process, make a deposit or withdrawal, contact customer support, respond to a promotion or voluntarily update your account details.

4.2 Automatically

When you visit the dg186 Platform — whether on a desktop browser, a mobile browser or a native application — technical data is collected automatically. This includes your IP address, device identifiers, browser type, operating system and details of pages visited. This data is collected via server logs and cookies as described in Section 10.

4.3 From Third Parties

dg186 may receive information about you from third parties in limited, lawful circumstances, including:

• Payment providers such as Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank and Hong Leong — to confirm the outcome of a transaction and to identify the payment method registered to your name;
• Identity verification services used to cross-reference submitted KYC documents against authoritative databases;
• Fraud detection and AML screening services used to assess whether a transaction or account presents a financial crime risk.

Purposes of Processing

dg186 processes personal data for the following clearly defined purposes:

• Account creation and management: to create, maintain and administer your dg186 account, including updating your balance and managing your profile;
• Transaction processing: to process deposits and withdrawals in MYR via supported Malaysian payment channels and to maintain accurate financial records;
• Identity verification (KYC): to verify your identity and age (21+) before processing withdrawals, as required under applicable gaming and financial regulations;
• Fraud prevention and security: to detect and prevent fraud, money laundering, account takeover, bonus abuse and other prohibited conduct described in the Terms & Conditions;
• Customer support: to respond to your enquiries, resolve disputes and maintain records of support interactions for quality assurance;
• Regulatory compliance: to meet obligations under applicable gaming licence conditions, anti-money laundering rules and financial crime prevention requirements;
• Responsible gambling: to monitor account activity for signs of problem gambling behaviour and to administer deposit limits, cooling-off periods and self-exclusion requests;
• Platform improvement: to analyse usage patterns, identify technical issues and improve the stability, speed and design of the dg186 Platform;
• Marketing communications: to send promotional offers, bonus notifications and platform updates where you have provided valid consent or where permitted under applicable law. You may withdraw consent at any time.

Legal Bases for Processing

dg186 relies on the following legal bases when processing personal data:

6.1 Contractual Necessity

Processing necessary to perform the agreement between dg186 and the Player — including account setup, transaction execution and customer support — is carried out on the basis that it is necessary to deliver the services you have requested.

6.2 Legal Obligation

Certain processing activities, particularly KYC verification, transaction record-keeping and anti-money laundering screening, are required by the conditions of dg186's gaming licence and applicable financial regulations. dg186 cannot waive these obligations.

6.3 Legitimate Interests

dg186 processes technical and behavioural data for fraud prevention, platform security and internal analytics on the basis of its legitimate interest in operating a secure and commercially sustainable platform. This processing is balanced against the interests and rights of Players and is limited to what is necessary.

6.4 Consent

Where dg186 relies on your consent — for example, to send marketing emails or to process optional preference data — that consent is obtained clearly and separately. You may withdraw consent at any time by contacting dg186 support. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

Data Sharing & Disclosure

dg186 does not sell, rent or trade personal data to third parties for their own commercial purposes. Personal data may be shared with third parties in the following limited circumstances:

7.1 Service Providers

dg186 engages carefully selected third-party service providers who process data on our behalf under written data processing agreements. Categories include payment processing partners, identity verification and KYC providers, cloud hosting and infrastructure services, fraud detection and AML screening vendors, and customer support platform operators.

7.2 Regulatory and Legal Disclosure

dg186 may disclose personal data to regulators, licensing authorities, law enforcement agencies or courts where required by law or where dg186 determines such disclosure is necessary to protect the rights, property or safety of dg186, its Players or others.

7.3 Business Transfers

In the event of a merger, acquisition, restructure or sale of all or part of dg186's business, personal data may be transferred to the acquiring entity. Any such transfer will be subject to equivalent data protection obligations, and affected Players will be notified as required by applicable law.

Data Retention

dg186 retains personal data only for as long as necessary to fulfil the purposes described in this Policy, including compliance with legal and regulatory retention obligations.

• Active accounts: Personal data associated with an active account is retained for the full duration of the account relationship;
• Closed accounts: Following account closure, dg186 retains identity, transaction and communication records for a minimum period as required by applicable gaming licence conditions and financial regulations. This period is typically five (5) to seven (7) years;
• Marketing data: Consent records and email marketing preferences are retained until withdrawn and for a reasonable period thereafter to evidence that consent was valid;
• Technical and session data: Log data and device identifiers are generally retained for a shorter period, typically up to twelve (12) months, unless required for a specific fraud investigation or legal proceeding.

When data is no longer required, it is securely deleted or anonymised in accordance with dg186's data lifecycle management procedures.

Security Measures

dg186 employs a range of technical and organisational security measures to protect personal data against unauthorised access, loss, alteration or disclosure:

• Encryption: All data transmitted between your device and the dg186 Platform is protected using 256-bit SSL/TLS encryption. Data at rest is encrypted using industry-standard algorithms;
• Access controls: Logical access to personal data is restricted to authorised personnel on a strict need-to-know basis, enforced through role-based access controls and multi-factor authentication;
• Infrastructure security: dg186's hosting infrastructure is maintained with regular security patching, vulnerability scanning and penetration testing;
• Fraud monitoring: Automated and manual systems monitor for unusual account activity and suspicious transactions in real time;
• Staff training: Personnel who handle personal data receive data protection and security awareness training on a regular basis.

While dg186 takes commercially reasonable steps to protect your data, no system can guarantee absolute security. You are responsible for protecting your own login credentials and for notifying dg186 immediately if you suspect your account has been compromised.

Cookies & Tracking Technologies

10.1 What Are Cookies

Cookies are small text files stored on your device when you visit a website. dg186 uses cookies and similar technologies such as pixel tags and local storage to operate the Platform, maintain session state and analyse usage patterns.

10.2 Types of Cookies Used

• Strictly necessary cookies: Required for the Platform to function, including session management, authentication and security tokens. These cannot be disabled without affecting core functionality;
• Functional cookies: Store your preferences such as display settings and language to improve your experience across sessions;
• Analytics cookies: Help dg186 understand how the Platform is used, which pages are most visited and where technical errors occur. Data collected is aggregated and not linked to individual identities;
• Session cookies: Temporary cookies deleted when you close your browser, used to maintain your logged-in state during a single session.

10.3 Managing Cookies

Most browsers allow you to control cookies through their settings. Disabling strictly necessary cookies will impair or prevent access to the Platform. For other cookie types, adjusting browser settings will not affect your ability to use dg186 but may reduce the quality of your experience.

Your Rights Regarding Personal Data

As a dg186 Player, you have the following rights in relation to your personal data. To exercise any of these rights, contact the dg186 support team with a clear description of your request. dg186 will respond within a reasonable timeframe and in accordance with applicable law.

Children & Minors

The dg186 Platform is strictly for adults. Registration and use are limited to individuals who are at least 21 years of age. dg186 does not knowingly collect personal data from individuals under 21.

Where dg186 discovers or has reasonable grounds to believe that an account has been registered by or on behalf of an individual under the age of 21, the account will be suspended immediately, all pending transactions will be voided and any deposited funds may be subject to verification and controlled return under dg186's underage gambling procedures.

Changes to This Privacy Policy

dg186 may update this Privacy Policy from time to time to reflect changes in applicable law, regulatory guidance, business practices or Platform features. Where changes are material, dg186 will use reasonable endeavours to notify affected Players by publishing a revised version on the Platform and updating the "Last Updated" date shown at the top of this page.

Continued use of the dg186 Platform following the publication of a revised Policy constitutes your acceptance of the updated terms. If you do not agree to any revisions, you should stop using the Platform and may request account closure in accordance with the Terms & Conditions.

We encourage you to review this page periodically to remain informed of how your personal data is managed.

Contact Us

If you have any questions about this Privacy Policy, wish to exercise a data right or have a concern about how your personal information has been handled, please contact the dg186 privacy and data team through the channels below. Contact details are provided as plain text only and are not clickable.

Where a complaint cannot be resolved directly, you may have the right to refer the matter to the relevant data protection authority in your jurisdiction. dg186 will cooperate in good faith with any such authority investigation.