Privacy Policy

This Privacy Policy ("Policy") is published by dadu44 ("the Company", "we", "us", "our"), the operator of the online sportsbook and live casino platform accessible at dadu44.cam ("the Platform"). This Policy applies to all registered players, visitors, and users of the Platform ("you", "your", "the Data Subject").

dadu44 takes the privacy and security of personal data seriously. This Policy sets out, in clear and transparent terms, the categories of personal data we collect, the legal basis and purposes for which that data is processed, the circumstances in which it may be shared with third parties, the measures we employ to protect it, and the rights you hold in relation to your personal information.

By registering an account on the Platform or by continuing to use the Platform, you acknowledge that you have read and understood this Policy. If you do not agree with any aspect of this Policy, you should discontinue your use of the Platform and contact our support team to request account closure.

The following defined terms are used throughout this Privacy Policy:

• Personal Data means any information that directly or indirectly identifies a natural person, including name, identification number, contact details, IP address, device identifiers, and financial account information.
• Processing means any operation performed on personal data, including collection, recording, storage, retrieval, use, disclosure, and deletion.
• Data Controller means dadu44, which determines the purposes and means of processing personal data collected through the Platform.
• Data Processor means any third party that processes personal data on behalf of dadu44 under a binding data processing agreement (e.g., payment processors, KYC verification providers).
• KYC means Know Your Customer — the identity and age verification procedure required before withdrawals are processed and as required by our anti-money laundering obligations.
• Cookies means small data files stored on your device by the Platform's web server for the purposes of session management, security, and optional analytics.
• AML means Anti-Money Laundering, referring to the regulatory compliance framework that requires financial service operators to identify and report suspicious transactions.

dadu44 collects personal data in the following categories, depending on the nature of your interaction with the Platform:

3.1 Registration & Account Data

When you create an account on dadu44, we collect: your full legal name, date of birth, nationality, email address, mobile phone number, and the username you select. This information is required to create and administer your account and to verify that you meet the Platform's minimum age requirement of 21 years.

3.2 Identity Verification (KYC) Data

Before processing withdrawal requests above specified thresholds, we may require you to submit identity documents including: a copy of your national identity card (MyKad), passport, or equivalent government-issued photo ID; proof of residential address (utility bill, bank statement); and proof of the payment method used (e.g., screenshot of your Touch'n Go eWallet, Boost app, or bank account in your name).

3.3 Financial Transaction Data

We record details of all deposits and withdrawals processed through your account, including: transaction amounts in MYR, the payment method used (DuitNow, FPX, Maybank2u, CIMB Clicks, Public Bank Online, Hong Leong Connect, GrabPay, Boost, Touch 'n Go eWallet, or cryptocurrency), transaction reference numbers, and timestamps. We do not store full bank account credentials or full card numbers.

3.4 Betting & Gaming Activity Data

We maintain records of your betting and gaming activity on the Platform, including sports bets placed (market, odds, stake, outcome), casino game sessions, slot game play history, and bonus redemption records. This data is used for account management, dispute resolution, and AML compliance.

3.5 Technical & Device Data

Automatically collected technical data includes: your IP address, device type and operating system, browser type and version, screen resolution, referring URL, pages visited on the Platform, session duration, and cookie identifiers. This data is used for security monitoring, fraud detection, and platform performance optimisation.

3.6 Communications Data

If you contact our customer support team via live chat or email, we retain records of those communications — including the content of your messages, the channel used, timestamps, and the resolution — for quality assurance, dispute resolution, and training purposes.

dadu44 processes personal data only where a lawful basis for doing so exists. The applicable legal bases are as follows:

• Contractual Necessity: Processing is necessary to perform the contractual obligations between dadu44 and the player, including account creation, payment processing, bet settlement, and customer support. Without this processing, the Platform services cannot be delivered.
• Legal Obligation: Processing is required to comply with applicable legal and regulatory obligations, including anti-money laundering (AML) regulations, Know Your Customer (KYC) requirements, financial record-keeping obligations, and cooperation with law enforcement or regulatory authorities.
• Legitimate Interests: Processing is carried out in pursuit of dadu44's legitimate business interests, including fraud prevention, platform security, detecting and preventing prohibited conduct, and improving the reliability and performance of the Platform, provided that such interests are not overridden by your fundamental rights and freedoms.
• Consent: Where processing is not covered by the above bases — for example, the use of optional analytics cookies or the sending of personalised promotional communications — we rely on your freely given, informed, and specific consent, which you may withdraw at any time without detriment.

Personal data collected by dadu44 is used for the following specific purposes:

• Account Administration: Creating, maintaining, and managing your dadu44 account, including verifying your identity and age at registration and throughout the account lifecycle.
• Payment Processing: Facilitating deposits via Malaysian payment methods (DuitNow, FPX, Maybank2u, CIMB Clicks, Touch 'n Go eWallet, Boost, GrabPay, Public Bank Online, Hong Leong Connect) and processing withdrawal requests in MYR or cryptocurrency equivalent.
• KYC & AML Compliance: Verifying player identity, confirming the source of funds where required, screening against relevant sanctions and politically exposed persons (PEP) lists, and reporting suspicious transactions as required by applicable law.
• Fraud Prevention & Security: Monitoring account activity to detect suspicious patterns, unauthorised access attempts, account takeovers, and prohibited conduct as defined in our Terms and Conditions.
• Customer Support: Responding to enquiries, resolving disputes regarding bet settlement or transactions, and providing technical assistance.
• Responsible Gambling: Monitoring betting patterns to identify potential indicators of problem gambling and to apply deposit limits, cooling-off periods, or self-exclusion as requested or required under our Responsible Gambling policy.
• Platform Improvement: Analysing aggregated, anonymised usage data to improve the performance, stability, and features of the Platform.
• Communications: Sending transactional notifications (account confirmations, deposit receipts, withdrawal confirmations) and, where consent has been given, promotional communications about relevant offers and bonuses.

dadu44 does not sell, rent, or trade personal data. Data may be shared with the following categories of recipients only in the circumstances described:

6.1 Payment Processors

Personal data necessary to execute payment transactions is shared with authorised payment processors including the operators of DuitNow, FPX, Maybank2u, CIMB Clicks, Touch 'n Go eWallet, Boost, GrabPay, and cryptocurrency network infrastructure. These processors operate under binding data processing agreements and are prohibited from using the data for any purpose other than executing the relevant transaction.

6.2 Identity Verification Providers

KYC document data may be shared with third-party identity verification service providers to confirm the authenticity of identification documents. These providers are contractually bound to treat the data as confidential and to process it only for the purposes of verification.

6.3 Legal and Regulatory Authorities

dadu44 may disclose personal data to law enforcement agencies, regulatory bodies, or courts of competent jurisdiction where required by applicable law, valid legal process, or a binding regulatory direction. We will, where permitted, notify you of such disclosures.

6.4 Corporate Transactions

In the event of a merger, acquisition, or sale of all or a material part of dadu44's assets, personal data held on the Platform may be transferred to the acquiring entity as part of the transaction. In such circumstances, you will be notified in advance and the acquiring entity will be required to honour the terms of this Privacy Policy.

dadu44 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, unless a longer retention period is required by applicable law.

• Account Data: Retained for the duration of the account relationship and for a period of five (5) years following account closure, in line with financial record-keeping obligations.
• KYC Documents: Retained for a minimum of five (5) years from the date of verification or from the date of account closure, whichever is later, as required by AML legislation.
• Transaction Records: Retained for five (5) years from the date of each transaction.
• Betting Activity Logs: Retained for two (2) years from the date of each session for dispute resolution and audit purposes, unless a longer period is required for an ongoing regulatory matter.
• Technical / Device Data: Retained for twelve (12) months from collection, after which it is anonymised or deleted.
• Communications Records: Retained for two (2) years from the date of the final communication in a support thread.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in manner that prevents re-identification.

dadu44 implements technical and organisational measures designed to protect personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include, but are not limited to:

• 256-bit SSL/TLS Encryption: All data in transit between your device and dadu44's servers is encrypted using industry-standard Transport Layer Security (TLS 1.2 or higher).
• Encrypted Data at Rest: Sensitive personal data — including KYC documents and financial records — is encrypted at rest using AES-256 encryption on access-controlled server infrastructure.
• Access Controls: Access to personal data is restricted to authorised dadu44 personnel with a documented operational need. Access rights are reviewed quarterly and revoked promptly upon a staff member's departure.
• Intrusion Detection: Automated monitoring systems detect and alert on anomalous access patterns and potential security incidents in real time.
• Security Assessments: dadu44 conducts periodic internal security reviews of the Platform's data handling practices.

While dadu44 applies robust security measures, no internet-based service can guarantee absolute security. You are responsible for maintaining the confidentiality of your own account credentials. If you suspect that your account has been compromised, please contact our support team via live chat immediately.

dadu44 uses cookies and similar tracking technologies on the Platform. Cookies are small text files stored on your device that help the Platform function correctly and allow us to improve your experience.

9.1 Essential Cookies

These cookies are strictly necessary for the Platform to operate. They manage your login session, maintain your account state between pages, and protect against cross-site request forgery (CSRF) attacks. Essential cookies cannot be disabled without significantly impairing your ability to use the Platform.

9.2 Analytics Cookies

With your consent, dadu44 uses analytics cookies to collect aggregated, anonymised data about how players navigate the Platform — including pages visited, time spent per page, and referring sources. This data is used solely to improve Platform performance and user experience. Analytics cookies do not identify you personally.

9.3 Preference Cookies

Preference cookies remember your settings — such as your preferred language or display options — so that you do not need to reconfigure them on each visit. These are optional and can be cleared via your browser settings.

9.4 Managing Cookies

You may manage or delete cookies at any time through your browser's settings. Please note that disabling essential cookies may prevent certain features of the Platform from functioning correctly. Disabling analytics or preference cookies will not affect your ability to place bets, make deposits, or withdraw funds.

Subject to applicable law and our legal retention obligations, you have the following rights in relation to the personal data dadu44 holds about you:

• Right of Access: You may request a copy of the personal data we hold about you, together with information about how it is processed.
• Right to Rectification: If any personal data we hold is inaccurate or incomplete, you may request that it be corrected. For account details, many fields can be updated directly via your account settings.
• Right to Erasure ("Right to Be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (where consent is the legal basis), or where the data has been unlawfully processed. Note that erasure requests are subject to our mandatory legal retention obligations — we cannot delete records we are legally required to retain.
• Right to Restriction of Processing: In certain circumstances, you may request that we restrict the processing of your data — for example, while the accuracy of data is being contested or during the investigation of a legitimate objection.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity and is carried out by automated means, you may request a structured, machine-readable copy of the personal data you have provided to us.
• Right to Object: You have the right to object to processing carried out on the basis of our legitimate interests. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

To exercise any of the above rights, please contact our support team via live chat or by sending a written request to [email protected]. We will acknowledge your request within 5 business days and provide a substantive response within 30 days, or notify you if additional time is required.

The dadu44 Platform is strictly intended for adults aged21 years and above. We do not knowingly collect personal data from individuals under the age of 21. Our registration form requires users to confirm their date of birth, and we conduct age verification as part of the KYC process.

If dadu44 becomes aware that personal data has been collected from an individual under the age of 21 — whether through a misrepresentation of age at registration or any other means — the associated account will be immediately suspended, all Bets voided, and any Balance refunded to the deposit source before the account is permanently closed. Any personal data collected in connection with such an account will be deleted as soon as it is no longer required for the purposes of the account closure process.

If you have reason to believe that a minor has registered on the dadu44 Platform, please contact our support team via live chat immediately so that appropriate action can be taken.

The dadu44 Platform does not contain links to external third-party websites. All navigation within the Platform directs to pages within the dadu44.cam domain. This Policy applies solely to personal data processed by dadu44 in connection with the Platform.

dadu44 is not responsible for the privacy practices of third-party payment processors, such as the operators of DuitNow, FPX, Maybank2u, Touch 'n Go eWallet, Boost, or GrabPay, when you are redirected to their own interfaces to complete a transaction. You should review the privacy policies of those services independently before entering your financial credentials on their platforms.

dadu44 may update this Privacy Policy from time to time to reflect changes in applicable law, our data processing practices, or the services we provide. Where changes are material — that is, where they significantly affect your rights or the way we process your personal data — we will notify you by email to the address registered on your account at least 14 days before the changes take effect.

The effective date at the top of this Policy reflects the date on which the current version came into force. Previous versions of the Policy are available on request from our support team. Your continued use of the Platform after the effective date of any revision constitutes your acknowledgement of the updated Policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or to dadu44's data processing practices, please contact us through the following channels:

• Live Chat Support: Available 24/7 via the support widget on the Platform. This is the recommended channel for urgent data-related requests or enquiries requiring prompt attention.
• Email: [email protected] — formal written privacy requests, including data access, rectification, erasure, or portability requests. Please allow up to 5 business days for acknowledgement and up to 30 days for full resolution.

When submitting a privacy request by email, please include your registered account username, the email address associated with your account, a clear description of your request, and any supporting information that may assist us in locating the relevant data. Identity verification will be required before any data is disclosed or deleted.