Dpboss Privacy Policy – Protection of Your Personal Data

1 Introduction

This Privacy Policy ("Policy") describes how dpboss ("we", "Platform") collects, uses, discloses, and protects your personal information when you use our website, mobile app, and all related services we provide.

By registering an account or using the dpboss platform, you consent to the collection and use of information as described in this Policy. If you do not agree with this Policy, please discontinue use of the platform and contact us for further enquiries.

Dpboss takes a transparent and responsible approach to privacy. We only collect data that is genuinely necessary to operate the platform, meet legal requirements, and deliver a personalised experience to each member. We never collect data beyond what is needed for those purposes.

2 Information We Collect

Dpboss collects various categories of information depending on how you interact with our platform. Below is a detailed description of each category:

Information You Provide Directly

• Registration information: Full name, date of birth, email address, phone number and the username you choose when creating your account
• Identity Verification (KYC): Copies of identity cards, passports, or other official documents required to meet compliance obligations
• Financial information: Bank account or digital wallet details for deposit and withdrawal purposes
• Support communications: Content of your correspondence with our customer support team
• Feedback and surveys: Responses you provide in satisfaction surveys or feedback forms

Automatically Collected Information

• Log data: IP address, browser type, operating system, pages visited, and access timestamps
• Device data: Device type, unique device identifier and mobile app version
• Activity data: Game history, betting records, financial transactions, and platform usage patterns
• Location data: General location information based on IP address for compliance and security purposes
• Cookie data: Session information and preferences stored via cookies and similar tracking technologies

3 How We Use Your Data

Dpboss uses the personal information collected for the following purposes, all of which are necessary to operate the platform effectively and securely:

• Processing account registration and verifying your identity through the required KYC process
• Safely handling and processing deposit and withdrawal transactions
• Providing responsive and effective customer support services
• Sending important account notices, security updates and policy changes
• Complying with legal and regulatory requirements including anti-money laundering (AML) and counter-terrorism financing (CFT)
• Detecting and preventing fraud, suspicious activity and security breaches
• Analysing usage patterns to improve platform performance, interface and features
• Personalising your platform experience including relevant game recommendations and promotions
• Sending marketing communications where you have given your consent to receive them
• Assisting in dispute investigations and legal claims involving your account

4 Sharing of Information with Third Parties

Dpboss does not sell, rent, or disclose your personal information to third parties for their own commercial purposes. However, we may share your data in the following limited circumstances:

Trusted Service Providers

We work with carefully selected third-party service providers to help operate the platform, including payment processors, identity verification providers, cloud service providers and customer support systems. All are bound by strict confidentiality agreements and are only permitted to process your data under our instructions.

Legal Requirements and Authorities

Dpboss may disclose your personal information to competent authorities when required by law, court order, or a valid request from law enforcement agencies. In such cases, we will notify you in advance if permitted to do so by law.

Business Transfers

Should dpboss be involved in a merger, acquisition, or asset sale, your personal information may be transferred as part of that transaction. We will provide reasonable notice and ensure the receiving party upholds equivalent data protection standards.

5 Data Security

Dpboss continuously invests in the latest security infrastructure to ensure your personal data is always protected. The security measures we implement encompass multiple layers of protection:

• 256-bit SSL/TLS Encryption: All data transmitted between your browser or app and the dpboss servers is protected with industry-grade encryption
• Encryption of data at rest: Sensitive data stored in our databases is also encrypted using robust encryption algorithms
• Two-factor authentication (2FA): We offer and encourage the use of 2FA on all member accounts to add an extra layer of protection
• Real-time threat monitoring: Our systems are monitored 24/7 to detect and respond to any suspicious activity promptly
• Regular security audits: We conduct regular penetration testing and security audits by qualified independent parties
• Internal access controls: Access to member data within dpboss is restricted based on the principle of least privilege

While we take every reasonable measure to protect your data, no security system can be guaranteed 100% foolproof. You also play an important role in keeping your account secure by choosing a strong password and not sharing it with anyone.

6 Cookies & Tracking Technologies

Dpboss uses cookies and similar tracking technologies to enhance your experience on the platform, understand usage patterns, and maintain the security of your session. The following are the types of cookies we use:

You can manage cookie settings through your browser. However, disabling essential cookies may affect platform functionality. For analytics and marketing cookies, your consent is required and can be withdrawn at any time via your account privacy settings.

7 Cross-Border Data Transfers

In the course of platform operations, your personal data may be processed or stored on servers located outside Malaysia. dpboss ensures that all cross-border data transfers are carried out with appropriate safeguards, including:

• Data processing agreements that meet internationally recognised data protection standards
• Use of cloud services compliant with international security certifications such as ISO 27001 and SOC 2
• Standard contractual clauses ensuring continued protection of your data wherever it is processed

8 Your Rights

As a dpboss member and under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data:

• Right to Access: You have the right to obtain a copy of the personal data we hold about you at any time
• Right to Rectification: You have the right to request correction of inaccurate or incomplete data
• Right to Erasure: Under certain circumstances, you may request the deletion of your personal data
• Right to Restrict Processing: You may request a restriction on the processing of your data under certain circumstances
• Right to Data Portability: You have the right to receive your data in a machine-readable format
• Right to Object: You may object to the processing of your data for direct marketing purposes at any time
• Right to Withdraw Consent: You may withdraw any consent previously given without affecting the validity of prior processing

To exercise any of these rights, contact our privacy team through customer support. We will process your request within 30 calendar days. Please note that certain requests may be subject to legal requirements that prevent us from fulfilling them in full — in such cases, we will explain the reasons to you.

9 Data Retention Period

Dpboss retains your personal data only for as long as necessary to fulfil the purposes stated in this Policy or as required by law. Our general data retention guidelines are as follows:

• Active account data: Retained for the duration your account is active and up to 7 years after account closure for legal compliance purposes
• Financial transaction records: Retained for a minimum of 7 years in accordance with accounting and AML legal requirements
• KYC documents: Retained for 5 years after the business relationship ends, or longer if required by law
• Support communication logs: Retained for 3 years for reference and dispute resolution purposes
• Analytics data: Anonymised data is retained indefinitely; related personal data is retained for 12 months

Once the retention period expires, your data will be securely deleted or anonymised using methods that ensure it cannot be recovered.

10 Children's Privacy

The dpboss platform is strictly for individuals aged 18 and above. We do not knowingly collect, process, or store personal data of children under the age of 18.

If we discover that we have inadvertently collected personal data from someone under the age of 18, we will take immediate steps to delete that data and close the associated account. If you believe we may hold data belonging to a minor, please contact us immediately.

11 Links to Third-Party Sites

The dpboss platform may contain links or integrations with third-party services such as payment providers and licensed game providers. This Privacy Policy applies solely to the dpboss platform and does not cover the privacy practices of any third-party websites or services.

Dpboss is not responsible for the privacy practices of third parties. We encourage you to read the privacy policy of each third-party service you use. Your use of those third-party services is at your own risk and subject to their respective terms.

12 Amendments to the Privacy Policy

Dpboss reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technological developments. When we make significant amendments, we will:

• Updating the "Last Updated" date at the top of this document
• Displaying a prominent notice on the platform's home page for a minimum of 14 days
• Sending notifications via your registered email for significant amendments

Continued use of the platform after any amendments take effect constitutes your acceptance of the updated Policy. If you do not agree with the changes, you should discontinue use of the platform and contact us to request account closure.

13 Contact Us

If you have any questions, concerns or requests regarding this Privacy Policy or how we handle your personal data, we are here to help. You may reach the dpboss privacy team via:

• Live Chat: Available 24/7 via the live chat icon at the bottom corner of the platform
• Privacy Email: [email protected]
• General Support: [email protected]

We are committed to responding to all privacy-related enquiries within 5 business days. For formal data subject rights requests, we aim to respond within 30 calendar days in accordance with applicable legal requirements.