Privacy Policy diss88 —
User Personal Data Protection

Welcome to the diss88 Privacy Policy. This document explains in detail how the diss88 platform — accessible via our official website at diss88.win and our mobile app — collects, processes, stores, and protects your personal information.

This Privacy Policy applies to all users of the diss88 platform, including website visitors, registered members, and anyone who interacts with our services in any capacity. By using the diss88 platform, you agree to the data management practices described in this policy.

Diss88 acts as the data controller under Malaysia's Personal Data Protection Act 2010 (PDPA). This means we bear full responsibility for how your personal data is managed and used within our platform.

Diss88 collects various categories of personal information depending on how you interact with our platform. Below is a summary of the data collected:

We collect only the data strictly necessary to provide our services, ensure platform security, and comply with legal requirements. We do not collect sensitive data categories such as health information or religious beliefs unless required by law.

Diss88 uses collected personal information solely for legitimate, clearly stated purposes. The following are the primary purposes for which your data is used:

• Account management: Create, verify, and manage your user account, including the secure login process.
• Transaction processing: Process deposits, withdrawals, and all financial transactions accurately and securely.
• Identity verification (KYC): Conduct background checks required by law to prevent fraud and money laundering.
• Customer support: Answer enquiries, resolve technical issues, and handle user complaints.
• Service improvement: Analyse usage patterns to develop new features and improve the user experience.
• Marketing communications: Send promotional information, special offers, and the latest updates — subject to your consent and unsubscribable at any time.
• Platform security: Detect and prevent fraudulent activity, unauthorised access, and other security threats.
• Legal compliance: Fulfil reporting and record-keeping obligations mandated by the relevant regulatory authorities.

Diss88 does not sell, rent, or trade your personal information to any third party for commercial purposes. However, there are certain situations where we may need to share your information:

• Payment service provider: Information required to process deposits and withdrawals is shared with trusted payment gateway providers that have passed strict security reviews.
• KYC service provider: Identity verification data is shared with licensed KYC partners to fulfil anti-money laundering compliance requirements.
• Legal authorities: diss88 will disclose required information when compelled by a court order, warrant, or lawful directive from Malaysian authorities.
• Technical service provider: Cloud infrastructure and hosting providers that help us operate the platform — subject to strict confidentiality agreements.

All third parties receiving diss88 user data are required to handle that information with a level of security at least equivalent to the standards we maintain ourselves.

Diss88 continuously invests in security infrastructure to ensure your personal data is always protected against unauthorised access, loss, or misuse. The key security measures we employ include:

• Data encryption at rest: All data stored in our databases is encrypted using AES-256, the highest industry standard.
• Data encryption in transit: All communications between your device and our servers use the latest TLS 1.3 protocol.
• Tiered access control: diss88 staff may only access user data according to their role and specific job requirements.
• Continuous monitoring: Our systems are monitored 24/7 to detect any suspicious activity or intrusion attempts.
• Periodic penetration testing: Security audits and penetration testing are conducted regularly by independent security experts.
• Two-factor authentication (2FA): Available to all user accounts and strongly recommended for maximum protection.

Diss88 retains your personal data for as long as necessary to fulfil the purpose for which it was collected, or for as long as required under applicable Malaysian law. General data retention guidelines are as follows:

• Active account data: Retained for the duration your account is active and for 5 years after account closure.
• Financial transaction records: Retained for a minimum of 7 years in accordance with Malaysia's anti-money laundering legal requirements.
• KYC documents: Retained for 5 years after the business relationship ends or as required by the relevant authorities.
• Support communication logs: Retained for 2 years for reference and dispute resolution purposes.
• Cookie and technical log data: Retained for 13 months from the date of collection.

Once the retention period expires, your data will be securely deleted or anonymised so it can no longer be linked to you personally.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have several important rights regarding the personal data held by diss88:

To exercise any of the above rights, please contact the diss88 customer support team via in-app live chat or our official email. We will process your request within 30 working days.

Diss88 uses cookies and similar tracking technologies to enhance the user experience, analyse platform traffic, and deliver more relevant content. The following are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as login sessions and security. These cookies cannot be disabled.
• Performance Cookies: Collect anonymous information on how users use the platform to help us improve our services.
• Functional Cookies: Remember user preferences such as language, display settings, and other preferences to deliver a more personalised experience.
• Analytics Cookies: Used to understand aggregated, anonymised usage patterns for platform development purposes.

You can manage or disable cookies through your browser settings. However, disabling certain cookies may affect the functionality of the diss88 platform. Information collected via cookies will not be used to personally identify you without your consent.

As a platform compliant with Anti-Money Laundering (AML) and Know Your Customer (KYC) regulations, diss88 is required to verify user identity before processing withdrawals or when certain thresholds are reached. Our KYC process is designed to be straightforward, secure, and respectful of your privacy.

• Documents accepted: Malaysian MyKad, valid passport, or valid driving licence.
• Proof of address: Bank statement or utility bill dated within the last 3 months.
• Payment method verification: A screenshot or statement confirming ownership of the bank account or digital wallet.

All KYC documents submitted are processed through an encrypted system and are accessible only by trained compliance personnel. Your documents will not be used for any purpose other than identity verification and regulatory compliance.

Diss88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our practices, new legal requirements, or service improvements. Any material changes will be communicated to users via:

• Prominent notice on the diss88 website homepage.
• Email notification to all registered users.
• In-app notifications on the diss88 mobile app.

The "Last Updated" date at the top of this policy indicates when this document was most recently reviewed. We encourage users to check this Privacy Policy periodically to stay informed about how we manage your personal information.

Continued use of the diss88 platform after any Privacy Policy amendment takes effect will be considered your acceptance of the updated terms. If you disagree with any amendment, you may contact us to close your account.