PlayDash SG Privacy Policy – User Data Protection

Introduction

PlayDash SG ("we", "platform", or "company") is committed to protecting the privacy and personal data security of every member using our platform. This Privacy Policy is drafted in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and serves as a comprehensive guide on how we handle your information.

Privacy is more than just a word at PlayDash SG. From day one, we have made serious investments in security infrastructure and robust data protection policies. We believe your trust in us depends not only on the quality of the games we offer, but also on how we safeguard your personal information.

This Privacy Policy explains:

• What personal data we collect from you.
• How and why we collect that data.
• Who your data is shared with and under what circumstances.
• How long your data is retained.
• What your rights are and how you can exercise them.

Personal Data We Collect

Depending on how you use the platform PlayDash SG, we may collect the following categories of data:

How We Collect Your Data

PlayDash SG collect your personal data through the following channels:

• Account Registration Form – Information you provide when creating a new account, including your name, email, and phone number.
• Identity Verification Process (KYC) – Documents you upload for verification purposes, such as your MyKad or passport.
• Financial Transactions – Information collected when you make a deposit via Touch 'n Go eWallet, GrabPay, DuitNow, FPX, Boost, or ShopeePay, as well as when you submit a withdrawal request.
• Platform Usage – Data collected automatically as you browse the website, play slots, Live Casino, roulette, Poker, or place Sports Betting wagers.
• Communications with Us – Information you share when contacting customer support via live chat or email.
• Cookies and Tracking Technologies – Data collected through cookies, pixels, and similar technologies as described in Section 8.

Data Processing Purposes

We only process your personal data for legitimate and necessary purposes. Below are the primary data processing purposes at PlayDash SG:

• Account Management – Create, verify, and maintain your member account, and ensure the security of your login.
• Transaction Processing – Securely and accurately processes deposits and withdrawals via your preferred Malaysian payment methods.
• KYC & Anti-Money Laundering (AML) Compliance – Verify your identity and ensure the platform is not misused for unlawful activities.
• Gaming Services Provision – Gives you access to all games including slots, Live Casino, roulette, poker, and Sports Betting such as badminton and cricket.
• Customer Support – Helping you resolve technical issues, account enquiries, or transaction-related matters.
• Security & Fraud Prevention – Detect and prevent suspicious activity, fraud, or platform abuse.
• Marketing Communications – Sending promotional offers, the latest bonuses, and platform updates (only with your consent).
• Platform Improvements – Analysing usage patterns to improve the user experience on PlayDash SG.

Data Sharing with Third Parties

PlayDash SG does not sell or rent your personal data. However, in certain limited circumstances, your data may be shared with:

• Payment Processors – Providers such as Touch 'n Go, GrabPay, DuitNow, and FPX, which require certain information to complete your financial transactions. They are subject to their own privacy policies.
• Game Software Providers – Third-party gaming companies that provide slots and Live Casino games on our platform. Data sharing is limited strictly to what is necessary.
• Relevant Authorities – Law enforcement agencies, courts, or regulatory bodies when we are legally required to do so under Malaysian law.
• IT Service Providers – Server hosting providers, cloud services, and cybersecurity partners that help us operate the platform. All such parties are bound by strict confidentiality agreements.

Every third party that works with PlayDash SG are required to comply with data protection standards equal to or higher than those we uphold.

Data Retention Period

We retain your personal data for as long as necessary for the purposes outlined in this Privacy Policy, or as required by Malaysian law. General data retention guidelines are as follows:

• Active Account Data – Retained for the duration that your account remains active with PlayDash SG.
• Data After Account Closure – Retained for 7 years after account closure to meet legal, tax, and AML compliance requirements.
• Financial Transaction Records – Retained for a minimum of 7 years in compliance with Malaysia's Income Tax Act and financial regulations.
• Support Communication Logs – Retained for 3 years for reference and dispute resolution purposes.
• Non-Essential Cookie Data – Automatically deleted after the set validity period, typically between 30 days and 12 months.

When data is no longer needed, it will be securely deleted using methods that ensure it cannot be recovered.

Data Security Measures

PlayDash SG implement multiple layers of security to protect your personal data from unauthorised access, loss, or misuse:

• 256-bit SSL/TLS Encryption – All data transmitted between your device and our servers is fully encrypted.
• Two-Factor Authentication (2FA) – An additional layer of security for logins and high-risk transactions.
• Firewall and Intrusion Detection System – Continuous 24/7 monitoring for cyber threats and intrusion attempts.
• Regular Security Testing – Independent security audits and penetration testing are conducted regularly by third-party security specialists.
• Role-Based Access – Our staff can only access the data necessary for their specific role.
• Secure Data Backup – Data backups are performed automatically and stored in a secure, separate location.

Cookies and Tracking Technologies

PlayDash SG uses cookies and similar tracking technologies to enhance your experience on our platform. Below are the types of cookies we use:

• Essential Cookies – Required for core platform functions such as login, game sessions, and security. These cookies cannot be disabled.
• Performance Cookies – Collects information on how you use our platform to help us improve its performance. Data is collected anonymously.
• Functional Cookies – Stores your preferences such as language, display settings, and your favourite game selections.
• Analytics Cookies – Helps us understand overall platform usage patterns for continuous improvement purposes.

You can manage your cookie settings through your web browser. Please note that disabling essential cookies may affect the functionality of the platform PlayDash SG.

Your Rights Under the PDPA

As a data subject under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by PlayDash SG:

• Right to Access – You have the right to request a copy of the personal data we hold about you.
• Right to Rectification – You may request that we correct any data that is inaccurate or incomplete.
• Right to Deletion – Under certain circumstances, you may request that we delete your personal data.
• Right to Object – You may object to the processing of your data for direct marketing purposes at any time.
• Right to Data Portability – You may request that we transfer your data in a machine-readable format.
• Right to Withdraw Consent – You may withdraw any consent you have given at any time, without affecting the validity of any processing carried out prior to that withdrawal.

To exercise any of the rights above, please submit a written request to privacy@playdashsg.net. We will process your request within 14 working days. In complex cases, this period may be extended by up to 30 business days, with prior notice given to you.

Contact Our Privacy Officer

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please contact our Data Protection Officer (DPO):

• Privacy Email: privacy@playdashsg.net
• General Support Email: support@playdashsg.net
• Response Time: 14 working days for standard requests
• Language of Service: Bahasa Malaysia and English

If you are not satisfied with our response, you have the right to lodge a complaint with Malaysia's Department of Personal Data Protection (JPDP), the regulatory body for PDPA matters in this country.