Privacy Policy diy88 — Your Data, Our Responsibility

Diy88 collects players' personal information only when necessary and for legitimate purposes. We divide the data we collect into three main categories:

Every piece of information we collect is used for a clear and legitimate purpose. diy88 does not process personal data beyond the scope stated here:

• Verifying player identity and processing new account registrations
• Securely processing deposits, withdrawals, and all financial transactions
• Providing effective customer support via live chat, email, or other channels
• Detecting and preventing fraud, money laundering, and other illegal activities
• Complying with applicable legal and regulatory requirements, including reporting to authorities when required
• Sending promotional information, bonuses, and platform updates — only to players who have consented to receive marketing communications
• Analyzing usage patterns to improve platform design and functionality
• Implementing responsible gaming programs including self-imposed deposit limits and self-exclusion breaks

Diy88 ensures that every instance of data processing has a valid legal basis, whether grounded in contract, legal obligation, legitimate platform interest, or consent provided by the player.

Diy88 does not sell or rent players' personal data to any third party for commercial purposes. However, under certain circumstances, we may share data with the following parties:

All third parties we work with are required to comply with the same data protection standards as diy88 through legally binding data processing agreements.

Diy88 continuously invests in the latest security infrastructure to protect players' personal data from unauthorized access, loss, or misuse. Key security measures we implement include:

• 256-bit SSL/TLS encryption for all communications between browser and server
• Encryption at rest for all sensitive records in the database
• Role-based access control (RBAC) — only staff who require it may access player data
• Mandatory two-factor authentication (2FA) for all internal staff access to sensitive systems
• Regular security audits by independent third-party firms
• 24/7 system monitoring with intrusion detection systems (IDS) and automated incident response
• Daily automated data backups at secure, geographically separate locations
• Mandatory cybersecurity awareness training for all diy88 staff

Diy88 uses cookies and similar tracking technologies to enhance the user experience, analyze traffic, and ensure platform security. The following are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as login authentication and session management. Cannot be disabled.
• Performance Cookies: Collecting data on how players use the platform to help us improve site speed and usability.
• Functional Cookies: Storing player preferences such as language, display settings, and login details for your convenience.
• Analytics Cookies: Helping us understand usage patterns, the most visited pages, and time spent on the platform for improvement purposes.

You can manage or delete cookies at any time through your internet browser settings. Please note that disabling certain cookies may affect the functionality of diy88.

Diy88 retains personal data only for as long as necessary for the stated purposes or as required by Malaysian law. The following are our data retention period guidelines:

• Active account data: Retained throughout the active account period plus 5 years after account closure
• Financial transaction records: 7 years after the transaction occurs, in line with Malaysia's financial legal requirements
• KYC documents: 5 years after the end of the business relationship or account closure
• Customer support communication logs: 2 years after the issue is resolved
• Anonymised analytics data: May be retained indefinitely as no personally identifiable information is involved
• Marketing data (for players who have consented): Until the player withdraws consent or closes their account

Once the retention period expires, data will be securely deleted or converted to an anonymized format that cannot be linked to any individual.

In the context of diy88's global operations, players' personal data may be transferred to and processed outside Malaysia for server hosting, technical support or payment processing purposes. diy88 ensures that all such data transfers are protected by appropriate safeguards:

• Binding standard data processing agreements with all international partners
• Data protection assessments before any new data transfer is approved
• Transfers only to countries or organizations with equivalent or higher data protection standards
• Use of recognized standard contractual clauses to protect player rights during data transfers

Diy88 is a betting platform restricted to individuals aged 18 and above only. We do not knowingly collect personal data from anyone under the age of 18.

Diy88 reserves the right to update or modify this Privacy Policy at any time as necessary, whether due to changes in law, changes in our business practices, or improvements in how we protect your data.

• Material changes will be communicated to all registered players via email at least 14 days before taking effect
• A prominent notice will be displayed on the diy88 homepage for a reasonable period following any updates
• The "Last Updated" date at the top of this document will always reflect the latest version
• Continued use of the platform after changes take effect is considered acceptance of the updated terms

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, the diy88 data privacy team is here to help.