Privacy Policy dpboss — Personal Data Protection for Malaysia Players

Welcome to the dpboss Privacy Policy. This document is designed to help you clearly understand how we handle the personal information you provide to us when using the dpboss platform at dpboss.vin.

We at dpboss believe that trust is the foundation of our relationship with every member. As such, we are fully committed to ensuring your personal data is handled with care, stored securely, and never misused. We operate in accordance with the provisions of the Personal Data Protection Act 2010 (PDPA Malaysia) and international data protection best practices.

This Privacy Policy applies to all users of the dpboss platform, including registered members, website visitors, and anyone who interacts with any of our services. By using the dpboss platform, you agree to the terms set out in this Privacy Policy.

Dpboss only collects information that is genuinely necessary to provide you with a secure, efficient, and personalised service. We never collect data beyond the operational needs of our platform. The following are the categories of information we may collect:

All financial information such as bank account numbers and e-wallet details is not stored directly in dpboss systems. This data is processed through certified payment gateways protected by industry-standard encryption.

Dpboss uses your personal data solely for lawful and stated purposes as outlined below. We do not use your data for any other purpose without first obtaining your explicit consent.

• Account management — Personal Data Protection for Malaysia Players
• Transaction processing — Processing deposits, withdrawals, bonus payments, and all financial transactions related to your account securely and accurately.
• Platform security — Detecting and preventing fraud, account misuse, unauthorised access, and any suspicious activity that could compromise the security of the platform and other members.
• Legal compliance — Meeting legal obligations including anti-money laundering (AML) requirements and reporting to relevant authorities when required by law.
• Customer service — Providing responsive technical support and customer service when you contact the dpboss support team.
• Important communications — Sending account notifications, security alerts, terms and conditions updates, and other important information related to your account.
• Platform improvement — Analysing usage patterns in aggregate (not individually) to improve the functionality, performance, and user experience of the dpboss platform.
• Marketing (with consent) — Sending promotional offers, exclusive bonuses, and the latest campaign information only to members who have consented to receive marketing communications.

Dpboss does not sell, rent, or disclose your personal data to third parties for marketing purposes without your consent. However, there are limited situations where we need to share certain information with relevant parties to ensure the platform operates safely and in compliance with the law:

• Technical service providers — Cloud computing providers, server hosting services, and game software providers that help us operate the dpboss platform. All such providers are bound by strict data confidentiality agreements.
• Payment gateway — Authorised payment processors such as FPX, DuitNow, Touch 'n Go eWallet, and GrabPay to facilitate secure financial transactions. Data shared is limited strictly to information required to process the transaction.
• Legal authorities — Government agencies, regulatory bodies, or law enforcement authorities when we are legally required to do so, including financial crime or money laundering investigations.
• Analytics providers — Web analytics tools that help us understand platform usage patterns in aggregate. This data never contains information that directly identifies any individual.

Protecting your personal data is a core responsibility of dpboss. We continuously invest in the latest security infrastructure to ensure your information is always safeguarded against unauthorised access, data breaches, or misuse.

• 256-bit SSL Encryption — All data transmitted between your device and dpboss servers is protected with bank-grade 256-bit SSL encryption, ensuring no third party can intercept or read your data in transit.
• Secure data storage — Personal data is stored on servers protected by multi-layered access controls, advanced firewalls, and intrusion detection systems (IDS) operating 24 hours a day.
• Internal access controls — Only authorised dpboss staff who require access for their specific job responsibilities may view your personal data. All internal access is logged and continuously monitored.
• Two-factor authentication (2FA) — dpboss provides two-factor authentication for all member accounts. You are strongly encouraged to enable this feature for an additional layer of security.
• Regular security audits — The dpboss platform undergoes regular independent penetration testing and security audits to identify and resolve any vulnerabilities before they can be exploited.
• Incident Response — dpboss maintains a tested incident response procedure. Should any data breach occur that affects your information, we will notify you and the relevant authorities within the timeframe prescribed by law.

Dpboss uses cookies and similar tracking technologies to enhance your experience on our platform, ensure security features function correctly, and understand how our platform is used.

• Session cookies — Temporary cookies that are active only during your browsing session and are automatically deleted when you close your browser. These cookies are essential for login functionality and account session security.
• Persistent cookies — Cookies stored on your device for a set period to remember your preferences, chosen language, and platform settings so you do not need to reconfigure them each time you log in.
• Security cookies — Cookies used to verify user identity, prevent unauthorised access, and detect suspicious activity within your account.
• Analytics cookies — Cookies that help us understand how visitors use our platform in aggregate — which pages are most popular, where users encounter difficulties, and how we can improve the overall user experience.

You can manage cookie usage through your web browser settings. However, disabling certain cookies may affect the functionality of the dpboss platform, particularly the login and account security features.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data that we hold:

To exercise any of the rights above, please contact the dpboss support team via live chat on the platform. We will process your request within 21 business days as required under PDPA 2010.

Dpboss retains your personal data only for as long as necessary to fulfil the purposes stated in this policy or to comply with applicable legal requirements. The following are general guidelines for our data retention periods:

• Active account data — For as long as your account remains active and you continue as a dpboss platform member.
• Financial transaction data — Minimum 7 years after a transaction occurs, in accordance with Malaysia's Companies Act and anti-money laundering regulations.
• KYC and identity verification data — Minimum 5 years after account closure, in line with financial compliance requirements.
• Support communication logs — 2 years from the date of communication, to allow for reference should any dispute arise.
• Aggregated analytics data — Indefinitely, as this data contains no information that can identify any individual.

When data is no longer needed and there is no legal requirement to retain it, dpboss will securely delete or anonymise it using industry-recognised methods.

Dpboss reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or service improvements. Any changes take effect immediately upon publication on this page.

For significant and material changes, dpboss will endeavour to notify you through:

• In-platform notifications on dpboss during your login session.
• Email to the address registered in your account.
• Notices prominently displayed on the dpboss.vin homepage.

It is your responsibility to review this Privacy Policy page periodically. Continued use of the dpboss platform after any changes take effect will be considered your acceptance of the updated terms.

If you have any questions, concerns, or requests regarding this Privacy Policy or how dpboss handles your personal data, our team is available 24 hours a day, 7 days a week.

• Live chat — The fastest way to get an immediate response. Click the live chat button located at the bottom corner of the dpboss platform.
• Support email — [email protected]
• Response Time — All privacy enquiries are answered within 24 business hours. Formal requests under PDPA are processed within 21 business days.