Digi28 Privacy Policy — Our Commitment to Protecting
Malaysian Member Personal Data

1. Introduction & Scope

Digi28 ("we", "the digi28 platform") is fully committed to protecting the privacy and personal data security of all members using our online Sports Betting and casino platform in Malaysia. This Privacy Policy sets out in detail how digi28 collects, processes, stores, and discloses your personal data when you access https://digi28.bet, use the official digi28 mobile app, or interact with any services provided by the digi28 platform.

This Privacy Policy applies to all users and registered members of digi28 in Malaysia, regardless of whether you registered via the website or mobile app. By registering as a digi28 member or continuing to use our platform after this Privacy Policy has been updated, you consent to the handling of your personal data as described in this document.

Digi28 operates in compliance with the Personal Data Protection Act 2010 (PDPA) Malaysia and all applicable data protection regulations in Malaysia. If you have any questions regarding this Privacy Policy, please contact our Data Protection Officer at support@digi28.bet.

2. Personal Data We Collect

Digi28 collects various categories of personal data from our members for legitimate and specified purposes. Below is a summary of the data collected:

Data Category	Example Information	Collection Method
Identity Data	Full name, date of birth, identification number (MyKad), gender	Registration form, KYC verification
Contact Data	Mobile number, email address, residential address	Registration form, profile updates
Financial Data	Bank account number, digital wallet details (TNG, GrabPay, Boost), transaction history	Deposit/Withdrawal Process
Usage Data	Betting history, games played, login times, sports preferences	Automatic platform activity
Technical Data	IP address, device type, web browser, operating system, mobile device ID	Automatic server logs
Communications Data	Live chat records, support emails, filed complaints	Interactions with the support team

2.1 Voluntarily Provided Data

This is data you provide directly to digi28 during the registration process, KYC verification, form submissions, or when communicating with our customer support team. Without this data, we are unable to provide digi28 services to you in a secure and legally compliant manner.

2.2 Automatically Collected Data

When you use the digi28 platform, our systems automatically collect certain technical and usage data through cookies, server logs, and similar tracking technologies. This data helps us understand how users interact with the digi28 platform and allows us to continually improve your experience.

3. How digi28 Uses Your Data

Digi28 uses collected personal data for the following legitimate and stated purposes:

• Account Management: Creating and maintaining your digi28 account, including the registration process, identity verification (KYC), and profile management.
• Service Delivery: Processing deposits and withdrawals via Touch 'n Go eWallet, GrabPay, DuitNow, FPX and other Malaysian payment methods; settling bets; and delivering all features of the digi28 platform.
• Security & Fraud: Detecting and preventing fraud, money laundering, multi-account usage and any activity that violates digi28's Terms & Conditions.
• Legal Compliance: Fulfilling legal obligations under Malaysia's PDPA, anti-money laundering (AML) requirements, and know your customer (KYC) regulations.
• Customer Support: Responding to enquiries, resolving complaints and providing technical support to digi28 members.
• Marketing & Promotions: Sending relevant promotional information, bonuses and exclusive digi28 offers — subject to your consent and withdrawable at any time.
• Platform Improvements: Analysing usage patterns to improve the performance, interface design, and overall experience of the digi28 platform.
• Responsible Gaming: Monitoring betting patterns to identify members who may benefit from responsible gaming support.

4. Legal Basis for Data Processing

Digi28 processes your personal data on valid legal grounds under the Personal Data Protection Act 2010 (PDPA) Malaysia, including:

• Consent: Where you have given explicit consent for specific data processing activities, such as receiving marketing communications from digi28.
• Contract Performance: Processing necessary to fulfil the contract between you and digi28, including providing betting services and processing payments.
• Legal Obligation: Processing required to comply with applicable Malaysian law, including AML/KYC requirements.
• Legitimate Interests: Processing for the purposes of digi28's legitimate interests, such as fraud prevention and platform security enhancement, provided these interests do not override your fundamental rights.

5. Data Sharing & Disclosure

Digi28 does not sell your personal data to any third party. However, we may share your data with certain parties in the following limited circumstances:

• Payment Service Providers: Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow and FPX providers (Maybank2u, CIMB Clicks) receive the data necessary to process your financial transactions.
• Game Software Providers: Slots, Live Casino and sports game providers that partner with digi28 may receive the technical data necessary to deliver the gaming experience.
• Identity Verification Services: Third-party KYC service providers who assist digi28 in verifying the identities of new members.
• Legal Authorities: digi28 will disclose personal data to Malaysian government authorities or law enforcement bodies when required to do so by law or court order.
• Analytics & IT Services: Technical service providers who assist us in maintaining and improving the digi28 platform infrastructure, subject to strict confidentiality agreements.

6. Cookies & Tracking Technologies

The digi28 platform uses cookies and similar tracking technologies to enhance your experience. Below are the types of cookies we use:

• Essential Cookies: Required for core digi28 platform functions such as login, session management, and security. These cookies cannot be disabled.
• Performance Cookies: Collecting information on how you use the digi28 platform to help us improve performance and user experience.
• Functional Cookies: Remembering your preferences such as language, display settings and login details to deliver a more personalised experience.
• Analytics Cookies: Helping us understand platform traffic and usage patterns on an aggregated, anonymised basis for improvement purposes.

You can manage your cookie settings through your web browser at any time. Please note that disabling certain cookies may affect the functionality and your experience on the digi28 platform.

7. Data Retention Period

Digi28 retains your personal data only for as long as necessary for the purposes outlined in this Privacy Policy or as required by applicable Malaysian law. In general:

• Active account data is retained for as long as your digi28 account remains active and for a reasonable period following account closure.
• Financial transaction records are retained for a minimum of 7 years to comply with Malaysia's accounting and AML legal requirements.
• Customer support communication logs are retained for 3 years from the date of last interaction.
• Technical data and system logs are retained for 12 months for security and troubleshooting purposes.

When your personal data is no longer required, digi28 will securely delete or anonymise it in accordance with our internal procedures.

8. Your Rights Under PDPA

As a digi28 member and data subject under Malaysia's PDPA, you have the following rights regarding your personal data:

To exercise any of the rights above, please submit a written request to us at support@digi28.bet, specifying the right you wish to exercise and your digi28 account details. We will process your request within 14 working days and may require additional identity verification before the request is processed.

Please note that certain requests may not be fully fulfilled if they conflict with digi28's legal obligations or the legitimate rights of third parties.

9. Data Security Measures

Digi28 implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration or inadvertent disclosure:

• In-transit data encryption using 256-bit TLS/SSL protocols.
• At-rest encryption for all sensitive member information.
• Strict role-based access control for digi28 staff.
• Regular security audits and penetration testing.
• Real-time threat monitoring and 24/7 intrusion detection systems.
• Documented incident response procedures to address any data breaches.
• Mandatory data security awareness training for all digi28 staff who handle personal data.

While digi28 takes all reasonable measures to protect your data, no security system can be guaranteed to be completely risk-free. In the event of a data breach involving your personal data, digi28 will notify you in accordance with applicable legal requirements.

10. Children's Privacy

Should digi28 discover that personal data of an individual under the age of 18 has been collected without proper age verification, we will take immediate action to delete that data and close the account in question. Parents or guardians who become aware that their child has registered on digi28 without authorisation are required to contact us promptly at support@digi28.bet.

11. Amendments to the Privacy Policy

Digi28 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data handling practices, new legal requirements, or improvements to the digi28 platform. Any material amendments will be communicated to you via:

• A prominent notice on the digi28 platform homepage.
• A notification email will be sent to your registered email address.
• In-account notifications on your digi28 account when you log in.

The "Last Updated" date at the top of this document will always reflect the date of the most recent amendment. Your continued use of the digi28 platform after any amendments are published constitutes your acceptance of the updated Privacy Policy. We encourage you to review this Privacy Policy periodically.

12. Contact Us About Privacy

If you have any questions, concerns, or complaints regarding digi28's Privacy Policy or the handling of your personal data, please contact our Data Protection Officer:

• Email: support@digi28.bet
• Live Chat: Available 24/7 on the digi28 platform
• Response Time: Within 2 hours (live chat) or 24 working hours (email)

We are happy to address all data privacy enquiries in both Bahasa Malaysia and English. If you are not satisfied with how digi28 has handled your privacy complaint, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia through their official channels.