Privacy Policy — dior88
At dior88, your privacy is not a compliance afterthought — it is a core commitment. This Privacy Policy explains in clear, structured terms exactly what personal data we collect from Malaysian players, how it is used, who it may be shared with, how long we retain it, and what rights you hold over your own information. Please read this document in full before registering or continuing to use the dior88 platform.
Six Privacy Commitments We Keep Every Day
Full legal detail follows in the sections below. These six cards summarise the principles that guide how dior88 handles your personal data.
Data Collection Is Purposeful Only
dior88 collects only the personal data that is strictly necessary for account management, identity verification, payment processing, and regulatory compliance. We do not collect personal information for the sake of it — every data point we hold has a defined purpose.
256-Bit SSL Encryption Throughout
All data transmitted between your browser or device and the dior88 platform is protected by 256-bit SSL encryption — the same standard used by major Malaysian financial institutions including Maybank and CIMB. Sensitive data at rest is additionally protected by server-level encryption.
We Never Sell Your Data
dior88 does not sell, rent, or trade your personal information to third parties for marketing or commercial purposes. Your data will only ever be shared with third parties where it is strictly necessary for the operation of your account or required by applicable law or regulation.
You Control Your Own Data
Registered dior88 players have the right to access, correct, and request deletion of their personal data at any time. Subject to legal retention requirements, we will honour verified data requests promptly. Simply contact our support team through the official live chat channel.
Defined Data Retention Periods
dior88 retains personal data only for as long as it is required for its stated purpose or as mandated by applicable legal or regulatory obligations. Once retention periods expire, data is securely deleted or anonymised in line with our internal data lifecycle policy.
Breach Notification Commitment
In the unlikely event of a data breach that materially affects your personal information, dior88 commits to notifying affected players without undue delay once the nature and scope of the breach have been assessed, in accordance with applicable data protection obligations.
Introduction
This Privacy Policy ("Policy") is issued by dior88 ("dior88", "we", "us", "our"), the operator of the online casino and sports betting platform accessible at https://dior88.cam. This Policy applies to all registered players, prospective players, and visitors to the dior88 website and platform, including those accessing dior88 from anywhere in Malaysia — Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and beyond.
dior88 is committed to protecting the privacy and personal data of all individuals who interact with our platform. This Policy explains how we collect, process, store, share, and protect your personal data, and sets out the rights you hold over your own information in your capacity as a dior88 player or platform visitor.
By registering an Account on dior88, completing any transaction, or continuing to use the dior88 platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. This Policy should be read alongside our Terms & Conditions, which govern your use of the dior88 platform as a whole.
Plain Language Summary: We collect your data to run your account, process your deposits and withdrawals via DuitNow, Touch 'n Go, FPX, and other Malaysian payment channels, verify your identity, and comply with applicable law. We do not sell your data to any third party. You can request a copy of your data or ask us to delete it at any time.
Definitions
For the purposes of this Privacy Policy, the following definitions shall apply:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information that identifies or can be used to identify a natural person, including name, identification number, contact details, financial information, and digital identifiers such as IP addresses and device IDs. |
| "Processing" | Any operation performed on Personal Data, including collection, recording, organisation, storage, retrieval, use, disclosure, transmission, or deletion. |
| "Data Subject" | The natural person to whom the Personal Data relates — in the context of this Policy, the registered or prospective dior88 Player. |
| "Data Controller" | The entity that determines the purposes and means of processing Personal Data. dior88 is the Data Controller for all Personal Data collected via the Platform. |
| "Data Processor" | A third party that processes Personal Data on behalf of the Data Controller, under binding contractual instruction — for example, payment processing partners such as DuitNow and FPX operators. |
| "Consent" | A freely given, specific, informed, and unambiguous indication of the Data Subject's agreement to the processing of their Personal Data for a stated purpose. |
| "Platform" | The dior88 website, mobile interface, and all associated digital services operated at https://dior88.cam. |
Data Controller
For the purposes of applicable data protection law, dior88 acts as the Data Controller in respect of all Personal Data collected through the Platform. As Data Controller, dior88 determines the purposes for which your Personal Data is collected and the means by which it is processed.
Where dior88 engages third-party service providers — including payment processors (e.g., DuitNow operators, FPX settlement partners, Touch 'n Go eWallet, Boost, GrabPay), game platform providers, identity verification services, and customer support platforms — those providers act as Data Processors under binding contractual agreements that prohibit the use of your data for any purpose other than the specific service they are contracted to provide.
dior88 maintains a current register of all Data Processors engaged on its behalf and conducts periodic reviews of third-party data handling standards. You may request information about the categories of Data Processors used by dior88 by contacting our support team.
Data We Collect
dior88 collects the following categories of Personal Data from players and platform visitors:
4.1 Registration & Identity Data
- Full legal name (as it appears on your government-issued identification)
- Date of birth (for age verification — you must be 21 or above to register at dior88)
- Gender
- Nationality and country of residence
- Malaysian MyKad number or passport number (for KYC verification)
- Residential address
4.2 Contact Data
- Email address (used for account communications, promotional messages where consented, and verification)
- Malaysian mobile phone number (used for OTP verification and account security)
4.3 Financial & Transaction Data
- Payment method details (e.g., Maybank account reference, CIMB account reference, Touch 'n Go eWallet identifier, GrabPay account reference) — dior88 does not store full bank account numbers or card numbers
- Deposit and withdrawal history, amounts, and timestamps
- DuitNow or FPX transaction reference numbers
- Cryptocurrency wallet addresses used for deposits or withdrawals (BTC, ETH, USDT)
- Balance history and betting activity records
4.4 Technical & Usage Data
- IP address and geolocation data (derived from IP)
- Device type, operating system, browser type and version
- Login timestamps, session duration, and access logs
- Pages visited, games accessed, and betting patterns on the Platform
- Cookies and similar tracking technologies (see Section 9)
4.5 Communication Data
- Records of communications with dior88 customer support via live chat, email, or other supported channels
- Complaints, feedback, and dispute correspondence
Special Category Data: dior88 does not intentionally collect special category Personal Data — including health data, racial or ethnic origin, political opinions, or religious beliefs — as part of standard account management. If such data is inadvertently disclosed to us in support communications, it will not be processed for any purpose beyond resolving the immediate support request.
How We Collect Data
dior88 collects Personal Data through the following means:
- Directly from you — when you register an Account, complete KYC verification, make a deposit or withdrawal, contact customer support, or update your account settings.
- Automatically — through cookies, web beacons, and server-side logging as you interact with the dior88 Platform. Technical and usage data is collected automatically whenever you access the Platform, regardless of whether you are logged in.
- From third-party payment providers — transaction confirmation data, reference numbers, and payment status information are received from Malaysian payment partners including DuitNow, FPX operators, Touch 'n Go eWallet, Boost, and GrabPay when you initiate deposits or request withdrawals.
- From identity verification services — where dior88 uses third-party KYC service providers to verify identity documents, those providers may transmit verification results and risk assessment data to dior88 for compliance purposes.
- From fraud detection and AML screening tools — dior88 may receive risk signals or screening flags from automated compliance tools used to detect fraudulent or money laundering activity on the Platform.
Legal Basis for Processing
dior88 processes your Personal Data on the following legal bases:
| Legal Basis | Processing Activities |
|---|---|
| Contractual Necessity | Account registration, deposit and withdrawal processing, KYC verification, VIP tier management, game activity, and customer support resolution — all necessary to fulfil our obligations to you under our Terms & Conditions. |
| Legal Obligation | Anti-money laundering (AML) compliance, age verification (21+ requirement), responsible gambling obligations, financial record-keeping, and cooperation with regulatory or law enforcement enquiries. |
| Legitimate Interests | Fraud detection, security monitoring, platform performance analytics, and responsible gambling risk monitoring — where our legitimate interest in operating a secure platform is balanced against your data protection rights. |
| Consent | Marketing communications (promotional emails, bonus notifications) — processed only where you have provided explicit consent. You may withdraw consent to marketing communications at any time by contacting support. |
How We Use Your Data
dior88 uses your Personal Data for the following purposes:
7.1 Account Management & Platform Operation
To create, verify, and maintain your dior88 Account; to process login sessions and authenticate your identity; to manage your Real Money balance, Bonus Fund balance, and VIP tier status; and to provide you with access to the full range of dior88 gaming products including live casino, slots, sports betting, and esports markets.
7.2 Payment Processing
To process deposits made via Maybank2u, CIMB Clicks, Public Bank, Hong Leong Connect, Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and cryptocurrency channels; to process withdrawal requests to your verified payment method; and to maintain accurate financial records in compliance with applicable accounting obligations.
7.3 Identity Verification & KYC Compliance
To verify your age (21+), identity, and address as required by our responsible gambling and anti-money laundering obligations; to assess source-of-funds documentation where required for high-value transactions; and to maintain KYC records for the legally required retention period.
7.4 Fraud Prevention & Security
To detect, investigate, and prevent fraudulent activity including multi-accounting, bonus abuse, and money laundering; to monitor for unauthorised account access and potential security breaches; and to protect the integrity of the dior88 platform and the safety of all registered players.
7.5 Responsible Gambling Monitoring
To identify players who may be exhibiting signs of problem gambling through analysis of betting patterns, deposit frequency, and self-declared limits; to proactively reach out to players who may benefit from responsible gambling support; and to enforce self-exclusion and cooling-off period requests. See our Responsible Gambling page for full details.
7.6 Customer Support
To respond to your support queries, complaints, and account-related requests; to investigate disputes relating to game outcomes, bonus calculations, and payment discrepancies; and to maintain records of resolved support cases for quality assurance purposes.
7.7 Marketing Communications (Consent-Based Only)
Where you have provided explicit consent, to send you promotional offers, bonus notifications, and platform news by email. You may withdraw your consent to marketing communications at any time by contacting support. Withdrawal of marketing consent does not affect the lawfulness of any prior processing carried out on the basis of that consent.
Data Sharing & Disclosure
dior88 does not sell, rent, or commercially trade your Personal Data to any third party. Your data may be shared only in the following strictly defined circumstances:
- Payment Processing Partners: Transaction data is shared with Malaysian payment providers — including DuitNow operators, FPX settlement banks, Touch 'n Go eWallet, Boost, and GrabPay — only to the extent necessary to process your deposits and withdrawals. These providers are bound by their own applicable data protection regulations and are not authorised to use your data for any other purpose.
- Identity Verification Providers: KYC and identity document data may be transmitted to authorised third-party verification service providers for the purpose of verifying your identity and age. These providers operate under strict contractual data protection obligations.
- Game Technology Providers: Limited account and gameplay data may be shared with certified game providers on the dior88 platform where necessary for game operation, bet settlement, and RTP verification. Game providers do not receive financial or contact data beyond what is strictly required for game operation.
- Regulatory and Law Enforcement Authorities: dior88 is required to disclose Personal Data to competent regulatory authorities, financial intelligence units, or law enforcement agencies where legally obligated to do so — including in connection with anti-money laundering investigations, legal proceedings, or formal regulatory enquiries. Such disclosures are made only to the extent required by applicable law.
- Internal Group Entities: Where dior88 operates through affiliated group companies, limited operational data may be shared within the group for internal administrative and compliance purposes only. All group entities are bound by the same data protection standards as dior88.
- Professional Advisers: Legal, accounting, audit, and compliance advisers engaged by dior88 may access Personal Data where strictly necessary for the provision of their professional services, subject to binding confidentiality obligations.
International Transfers: Where any third-party Data Processor operates outside Malaysia, dior88 ensures that appropriate contractual safeguards — including standard contractual clauses or equivalent binding commitments — are in place to protect your Personal Data to a standard equivalent to that afforded under applicable Malaysian data protection law.
Cookies & Tracking Technologies
dior88 uses cookies and similar tracking technologies to operate, secure, and improve the Platform. A cookie is a small text file placed on your device when you visit the dior88 website. We use the following categories of cookies:
-
Strictly Necessary Cookies
Required for the Platform to function correctly. These include session cookies that keep you logged into your Account, security tokens for 2FA, and cookies that maintain your language and currency preferences. These cookies cannot be disabled without rendering the Platform non-functional.
-
Performance & Analytics Cookies
Used to understand how players interact with the Platform — which pages are visited, how long sessions last, and which games are most popular. This data is aggregated and anonymised where possible and is used solely to improve the dior88 player experience.
-
Functional Cookies
Store your stated preferences on the Platform — such as your preferred deposit method (e.g., DuitNow or Touch 'n Go), notification settings, and responsible gambling limit configurations — so you do not need to re-enter them on each visit.
You may manage your cookie preferences through your browser settings. Disabling certain non-essential cookies may affect the functionality of some Platform features. dior88 does not use third-party advertising or behavioural tracking cookies.
Data Security
dior88 implements a comprehensive set of technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, alteration, or destruction. These measures include:
- Transport Layer Security (TLS 1.3) / 256-bit SSL Encryption: All data in transit between your device and the dior88 platform is encrypted using industry-standard TLS 1.3 protocol. This is the same encryption standard used by major Malaysian banks for internet banking.
- Server-Side Data Encryption: Sensitive Personal Data stored on dior88 servers — including KYC documentation and payment references — is encrypted at rest using AES-256 encryption.
- Two-Factor Authentication (2FA): All dior88 Accounts have access to 2FA, which requires a secondary OTP verification step on each login. We strongly encourage all players to enable 2FA on their Account.
- Access Controls: Internal access to Personal Data is restricted on a strict need-to-know basis. Only authorised personnel with a legitimate operational or compliance reason are permitted to access player Personal Data, and all such access is logged and auditable.
- Regular Security Audits: dior88 conducts periodic security reviews and penetration testing to identify and remediate potential vulnerabilities in the Platform infrastructure before they can be exploited.
- Segregated Player Funds: Player Real Money balances are held in accounts that are operationally separated from dior88's own operating funds, reducing financial risk exposure to players in the event of operational difficulties.
Incident Response: In the event of a data security incident that poses a material risk to your Personal Data, dior88 will notify affected players without undue delay and will take immediate steps to contain the incident, assess its scope, and prevent recurrence. Affected players will receive clear guidance on any protective actions they should consider taking.
Data Retention
dior88 retains your Personal Data for the periods set out below, after which data is securely deleted or permanently anonymised:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account & Registration Data | Duration of active account + 5 years post-closure | Legal / AML obligation |
| KYC / Identity Documents | 5 years from account closure or last transaction | Regulatory obligation |
| Transaction & Payment Records | 7 years from transaction date | Financial record-keeping law |
| Betting & Gaming History | 5 years from account closure | Contractual / dispute resolution |
| Support Communications | 3 years from resolution date | Legitimate interest |
| Marketing Consent Records | Until consent is withdrawn + 1 year | Consent accountability |
| Technical / Log Data (IP, device) | 12 months from collection | Security / fraud prevention |
| Self-Exclusion Records | Duration of exclusion + 7 years | Responsible gambling obligation |
Where data is retained beyond the stated period due to an ongoing legal dispute, regulatory investigation, or pending enforcement action, the data will be retained until that matter is fully resolved and the applicable limitation period has expired.
Your Rights as a Data Subject
As a dior88 player and data subject, you have the following rights in respect of your Personal Data. These rights are subject to applicable legal limitations and will be assessed on a case-by-case basis:
Right of Access
You have the right to request a copy of the Personal Data dior88 holds about you. We will respond to verified access requests within a reasonable timeframe.
Right to Rectification
You have the right to request correction of any inaccurate or incomplete Personal Data held by dior88. Corrections can be initiated via the account settings page or through support.
Right to Erasure
You may request deletion of your Personal Data where it is no longer necessary for its original purpose, subject to our legal retention obligations under AML and financial record-keeping law.
Right to Restrict Processing
You have the right to request that dior88 restricts the processing of your Personal Data in certain circumstances — for example, while a rectification request is being assessed.
Right to Data Portability
Where processing is based on your consent or on contract, you may request that your Personal Data be provided to you in a structured, commonly used, machine-readable format.
Right to Withdraw Consent
Where processing is based on your consent — such as marketing communications — you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of prior processing.
To exercise any of the above rights, please contact the dior88 support team via live chat or email. We may need to verify your identity before processing your request. We aim to respond to all verified rights requests within 30 calendar days. Where a request cannot be fulfilled or can only be partially fulfilled due to legal limitations, we will provide a clear written explanation.
Children's Privacy
The dior88 platform is strictly for individuals aged 21 years and above. We do not knowingly collect or process Personal Data from individuals under the age of 21. Age verification is a mandatory step in the dior88 registration and KYC process, and all Accounts are subject to periodic age verification checks.
If dior88 becomes aware that a registered Account belongs to, or has been used by, an individual under the age of 21, that Account will be immediately suspended, all associated transactions will be reviewed, and any balance remaining in the Account will be handled in accordance with our Terms & Conditions and applicable law. Any Personal Data collected from an underage individual will be deleted as soon as this is confirmed.
If you are a parent or guardian and believe that your child may have registered an Account on dior88, please contact our support team immediately.
Third-Party Links
The dior88 Platform does not contain links to third-party websites for commercial or advertising purposes. Where references to third-party payment services (such as DuitNow, FPX, Touch 'n Go eWallet, Boost, or GrabPay) appear on the Platform, these references relate solely to the integrated payment functionality available within the dior88 platform environment.
dior88 is not responsible for the privacy practices or data handling standards of any external third-party service providers accessed outside the dior88 Platform environment. Players who choose to access third-party services outside of the dior88 Platform do so at their own risk and are encouraged to review the privacy policies of those services independently.
Policy Amendments
dior88 reserves the right to amend, update, or replace this Privacy Policy at any time. The most current version will always be available at https://dior88.cam/privacy-policy. The "Last Updated" date at the top of this page reflects when the most recent revision was made effective.
Where amendments are material — meaning they substantively affect how we collect, use, or share your Personal Data — dior88 will provide advance notice to registered players via their registered email address or through a prominent notice on the Platform. Continued use of the Platform following the effective date of an amended Policy constitutes acceptance of the revised terms.
We encourage all players to review this Privacy Policy periodically to stay informed of how dior88 protects and manages their Personal Data.
Contact Us
For all privacy-related enquiries, Personal Data access requests, consent withdrawal requests, or data protection complaints, please contact the dior88 support team through the following official channels:
If you are not satisfied with dior88's response to a privacy complaint, you have the right to escalate your complaint to the relevant data protection authority in your jurisdiction.
Privacy Questions? Our Team Is Ready to Help.
Understanding your privacy rights is important. If anything in this Policy is unclear — or if you would like to exercise any of your data subject rights — our live support team is available 24 hours a day on Malaysian time.
For players aged 21 and above only. dior88 is operated for entertainment purposes. Play responsibly. Visit our Responsible Gambling page for player support resources.