Privacy Policy

Darma88 ("we", "us", "our", "the Platform") operates the online gaming and sports betting platform accessible at https://darma88.cam. We understand that your personal data is important to you, and we take our responsibility to handle it with care very seriously.

This Privacy Policy ("Policy") describes the categories of personal data we collect from users ("you", "Player", "User") of the Darma88 Platform, the purposes for which that data is processed, the legal bases relied upon for such processing, how long we retain your data, your rights in relation to that data, and how to contact us regarding privacy matters.

This Policy applies to all personal data collected in connection with your registration, use of our services, interactions with our support team, participation in promotions, and any other activity conducted through the Darma88 Platform. It applies to users accessing Darma88 from anywhere in Malaysia, including Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and all other locations.

By registering an account or using the Darma88 Platform, you acknowledge that you have read, understood, and consent to the data processing practices described in this Policy. This Policy should be read alongside our Terms & Conditions and Responsible Gambling Policy.

For the purposes of this Privacy Policy, the following terms have the meanings set out below:

• "Personal Data" means any information that identifies or can be used to identify a specific individual, directly or indirectly. This includes name, identity card number, email address, phone number, IP address, device identifiers, and financial account details.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, organisation, structuring, adaptation, retrieval, use, disclosure, restriction, erasure, or destruction.
• "Data Controller" means Darma88, which determines the purposes and means of Processing your Personal Data.
• "Data Processor" means a third party that processes Personal Data on behalf of and under the instructions of the Data Controller.
• "Consent" means freely given, specific, informed, and unambiguous indication of the Data Subject's agreement to the Processing of their Personal Data.
• "KYC" (Know Your Customer) means the identity and address verification process conducted by Darma88 in compliance with anti-money laundering and responsible gambling obligations.
• "Cookie" means a small text file placed on your device by the Platform to enable certain functionality, track session state, and collect usage data.
• "Platform" means the Darma88 website, mobile interface, and all associated services operated at https://darma88.cam.

Darma88 acts as the Data Controller in respect of all Personal Data collected and processed through the Platform. As Data Controller, Darma88 is responsible for determining how and why your Personal Data is processed, and for ensuring that such Processing is conducted lawfully, fairly, and transparently in accordance with applicable data protection principles.

Any enquiries relating to the processing of your Personal Data, the exercise of your rights as described in Section 12 of this Policy, or any privacy-related complaint should be directed to our Data Privacy contact channel as set out in Section 16 (Contact Us) below.

We collect Personal Data across several categories depending on how you interact with the Darma88 Platform. The table below summarises the main categories of data we collect and the context in which each arises.

5.1 Directly From You

The majority of Personal Data we hold is information you provide to us directly. This occurs when you:

• Register for a Darma88 account by completing the registration form;
• Submit identity and address documents as part of the KYC verification process;
• Make a deposit or request a withdrawal using any supported Malaysian payment method;
• Contact our support team via live chat or email at [email protected];
• Participate in promotions, refer a friend, or claim bonus offers;
• Update your Account profile or communication preferences;
• Submit a complaint or feedback through any available channel.

5.2 Automatically Through Platform Use

When you access and use the Darma88 Platform, certain Technical and Usage Data is collected automatically by our systems. This includes information transmitted by your browser or device, your interaction history with platform features, session timestamps, and game activity logs. This data is collected using cookies, server logs, and similar technologies as described in Section 9.

5.3 From Third-Party Service Providers

We may receive Personal Data about you from third-party service providers in certain circumstances, including:

• Payment processors confirming transaction status for deposits made via Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, or bank channels;
• Identity verification services used to cross-check KYC documents;
• Fraud prevention and anti-money laundering screening services;
• Analytics providers that provide aggregated or pseudonymised behavioural data.

Darma88 processes your Personal Data on one or more of the following legal bases, depending on the category of data and the purpose of processing:

• Contractual Necessity: Processing is necessary for the performance of the contract between you and Darma88 — specifically, the account agreement established when you register. This covers account management, payment processing, game provision, and support services.
• Legal Obligation: Processing is required to comply with applicable legal and regulatory obligations, including Know Your Customer (KYC) verification, anti-money laundering (AML) monitoring, responsible gambling obligations (including age verification for the mandatory 21+ requirement), and financial record-keeping.
• Legitimate Interests: Processing is necessary for Darma88's legitimate business interests where those interests are not overridden by your rights. This includes fraud prevention, platform security, abuse detection, business analytics, and service improvement.
• Consent: Where we rely on your consent as the legal basis — primarily for optional marketing communications — you may withdraw that consent at any time by updating your account notification preferences or contacting our support team.

Darma88 uses the Personal Data we collect for the following specific purposes:

7.1 Account Management and Service Delivery

To create, maintain, and manage your Darma88 account; to process deposits and withdrawals via Malaysian payment channels including DuitNow, FPX, Touch 'n Go eWallet, Boost, Maybank, CIMB, Public Bank, and Hong Leong; to provide access to games and sports betting markets; and to administer bonuses, VIP tier rewards, birthday bonuses, and referral program benefits.

7.2 Identity Verification and Compliance

To verify your identity and age (you must be 21 years or older to use Darma88) through our KYC process; to comply with anti-money laundering and counter-terrorism financing obligations; and to fulfil any other regulatory requirements applicable to the Platform's operations.

7.3 Fraud Prevention and Security

To detect, investigate, and prevent fraudulent transactions, bonus abuse, money laundering, account sharing, and any other prohibited conduct as defined in our Terms & Conditions; to monitor for suspicious account activity; and to take appropriate remedial action where violations are confirmed.

7.4 Customer Support

To respond to your enquiries submitted via live chat or email; to process and investigate complaints; to assist with account recovery requests; and to document support interactions for quality assurance purposes.

7.5 Responsible Gambling

To administer deposit limits, loss limits, session time controls, cool-off periods, and self-exclusion orders; to identify patterns of play that may indicate gambling harm; and to comply with our responsible gambling obligations including mandatory age verification.

7.6 Platform Improvement and Analytics

To understand how Players use the Platform; to identify technical issues, bugs, or performance bottlenecks; to test new features and improve existing ones; and to conduct internal reporting and business analysis using anonymised or aggregated data where possible.

7.7 Marketing Communications (Consent Only)

Where you have opted in to receive promotional communications, to send you information about relevant promotions, new games, bonus offers, and platform updates. We will not send marketing communications without a valid opt-in consent, and you may withdraw consent at any time.

Darma88 does not sell or rent your Personal Data. We share your data with third parties only where necessary, under strict conditions, and for limited purposes as described below.

8.1 Payment Service Providers

We share transaction-related data with payment processors and financial institutions that facilitate deposits and withdrawals. This includes providers supporting Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and Malaysian banking channels (Maybank, CIMB, Public Bank, Hong Leong). These providers receive only the data necessary to complete a transaction and are contractually prohibited from using it for any other purpose.

8.2 Identity Verification Partners

KYC documents and identity data may be shared with third-party identity verification service providers for the purpose of verifying your identity and age. These providers operate under strict data processing agreements and security standards.

8.3 Fraud Prevention and AML Screening

We may share data with specialist fraud prevention, risk assessment, and anti-money laundering screening services to protect the Platform and its users. Where required by law, we may also disclose data to relevant law enforcement authorities or financial intelligence units.

8.4 Legal and Regulatory Disclosure

We may disclose your Personal Data where required to do so by applicable law, court order, regulatory authority, or governmental request. In such cases, we will disclose only the minimum data necessary to comply with the applicable requirement.

8.5 Corporate Transactions

In the event of a merger, acquisition, restructuring, or sale of all or part of Darma88's business, your Personal Data may be transferred to the successor entity, subject to an equivalent level of data protection. You will be notified of any such transfer where legally required.

Darma88 uses cookies and similar tracking technologies to operate the Platform, remember your preferences, maintain your session state, and collect anonymised usage analytics.

9.1 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the Platform to function correctly. These include session authentication cookies that keep you logged in and security tokens that protect against cross-site request forgery. These cannot be disabled without breaking core functionality.
• Functional Cookies: Remember your preferences such as language settings, notification preferences, and last-used deposit method. These improve your experience but are not required for basic operation.
• Analytics Cookies: Collect anonymised or pseudonymised data about how users navigate and use the Platform. This helps us identify usability issues, measure feature adoption, and improve overall platform performance.
• Security and Fraud Detection Cookies: Help us identify suspicious behaviour, detect bot activity, and protect accounts from unauthorised access.

9.2 Managing Cookies

Most web browsers allow you to manage cookie preferences through your browser settings. You may choose to block, delete, or restrict certain types of cookies. Please note that disabling Strictly Necessary cookies will impair your ability to use the Platform, including logging in and processing transactions.

For detailed instructions on managing cookies in your specific browser, refer to your browser's help documentation.

Darma88 retains your Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention periods apply:

• Account and Identity Data: Retained for the duration of your active account relationship with Darma88, and for a minimum of five (5) years following account closure, to comply with anti-money laundering record-keeping requirements.
• KYC Verification Documents: Retained for a minimum of five (5) years from the date of verification completion, in accordance with AML compliance obligations.
• Financial Transaction Records: Retained for a minimum of seven (7) years from the date of each transaction, in accordance with applicable financial record-keeping requirements.
• Support Communications: Retained for up to three (3) years from the date of the last interaction, for quality assurance and dispute resolution purposes.
• Usage and Analytics Data: Retained in anonymised or aggregated form for up to three (3) years for product improvement purposes. Individually identifiable usage logs are retained for up to twelve (12) months.
• Marketing Preference Records: Retained for the duration of your account plus a reasonable period thereafter to evidence consent history.

Upon expiry of the applicable retention period, Personal Data will be securely deleted or anonymised in a manner that prevents re-identification.

Darma88 implements appropriate technical and organisational measures to protect your Personal Data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security measures include:

• Encryption in Transit: All communications between your device and the Darma88 Platform are encrypted using 256-bit SSL/TLS protocols. You can verify this by checking for the padlock icon in your browser's address bar.
• Encryption at Rest: Sensitive data stored on our servers — including identity information and financial data — is encrypted at rest using industry-standard encryption algorithms.
• Access Controls: Access to Personal Data within Darma88 is restricted on a strict need-to-know basis. Staff members only access data necessary to perform their specific role, and all access is logged and audited.
• Infrastructure Security: Our Platform is hosted on secure infrastructure with multiple layers of network-level protection including firewalls, intrusion detection systems, and DDoS mitigation.
• Regular Security Reviews: We conduct regular internal security reviews and maintain security incident response procedures to address any data breach promptly and in compliance with applicable notification requirements.

Subject to applicable legal limitations and our legitimate obligations as a regulated platform operator, you hold the following rights in respect of your Personal Data held by Darma88:

To exercise any of the rights above, please contact our support team via live chat or email as detailed in Section 16. We will respond to valid requests within a reasonable timeframe and no later than thirty (30) calendar days of receipt. In some cases — particularly for complex or multiple requests — we may extend this period by up to an additional thirty days, in which case we will notify you in advance.

Please note that we may require you to verify your identity before processing certain requests to protect your data from unauthorised access by third parties.

The Darma88 Platform is strictly intended for individuals aged 21 years and above. We do not knowingly collect Personal Data from any individual under the age of 21. Age verification is a mandatory step in our KYC process, and any account found to belong to a person under 21 will be immediately suspended and all associated data will be deleted in accordance with our legal obligations.

If you are a parent or guardian and believe that a minor has accessed Darma88 or provided us with their Personal Data without your consent, please contact us immediately at [email protected]. We will take immediate steps to investigate, close any such account, and delete the associated data.

The Darma88 Platform may contain references to or integrations with third-party services — including payment processors (such as DuitNow gateway providers, FPX, and e-wallet platforms such as Touch 'n Go, Boost, and GrabPay), identity verification providers, analytics services, and game content providers.

Where the Platform integrates with third-party payment systems, your interaction with those systems is governed by the third-party's own privacy policy and terms of service. Darma88 is not responsible for the data practices of third-party service providers, though we engage only providers who meet our data security and contractual requirements.

We do not embed links to external third-party websites for general browsing. Where integration with payment or verification systems is required, this is conducted through secure API connections, not through publicly accessible links that could expose your data to unintended parties.

Darma88 reserves the right to amend, update, or replace this Privacy Policy at any time. We will provide reasonable advance notice of any material changes via email to registered account holders or through a prominent notice on the Platform prior to the effective date of the change.

The "Last Updated" date at the top of this page indicates when the most recent revision was made. We encourage you to review this Policy periodically to stay informed about how we are protecting your information.

Your continued use of the Darma88 Platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised Policy. If you disagree with any material change, you should close your account and cease using the Platform prior to the effective date of the change.

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way Darma88 handles your Personal Data, please contact us through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week via your Account dashboard. For privacy requests, please clearly state "Privacy Request" at the start of your message. Average first response: under 2 minutes.
• Email: [email protected] — please use the subject line "Privacy Policy Enquiry" or "Data Subject Request" for privacy-related correspondence. Responses are provided within 24 hours for standard queries and within 30 days for formal Data Subject Requests.

When submitting a Data Subject Request (access, rectification, erasure, portability, restriction, or objection), please include your full name, registered email address, account username, and a clear description of the right you wish to exercise. We may request identity verification before processing the request.