Privacy Policy — Dragon88 Malaysia Online Casino & Sportsbook
Dragon88 is committed to protecting the privacy and personal data of every member. This Privacy Policy explains what information we collect, why we collect it, how we use it, and the rights you hold over your data as a Dragon88 user based in Malaysia.
How Dragon88 Handles Your Data
Before reading the full policy, here is a plain-English overview of the six core privacy principles Dragon88 applies to every member's personal data.
What We Collect
We collect identity information (name, Malaysian IC, date of birth), contact details (email, phone number), financial data (payment method details, transaction history), device and usage data, and KYC verification documents.
Why We Collect It
Your data is collected to operate your Dragon88 account, process deposits and withdrawals in MYR, perform identity and age verification, comply with anti-money laundering obligations, and improve your platform experience.
Who We Share It With
We share data only with verified payment processors (Touch 'n Go, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong), identity verification providers, and regulatory authorities where legally required. We never sell your data.
How We Protect It
All data in transit is protected by 256-bit SSL/TLS encryption. Data at rest is stored in secured, access-controlled environments. Access to personal data is restricted to authorised Dragon88 personnel on a strict need-to-know basis.
Your Rights
You have the right to access, correct, delete, and port your personal data. You may also object to certain processing activities and withdraw consent where processing is consent-based. Submit requests to our support team at any time.
Cookies & Tracking
Dragon88 uses essential session cookies to operate the platform and analytics cookies to understand usage patterns. Preference and marketing cookies require your consent. You may manage cookie preferences at any time via your browser settings.
Full Privacy Policy Text
Introduction
This Privacy Policy ("Policy") is issued by Dragon88 ("Dragon88", "We", "Us", "the Operator") and applies to all personal data collected and processed in connection with the Dragon88 online casino and sports betting platform, accessible at https://dragon88.casa ("the Platform").
Dragon88 recognises that your personal data belongs to you. We are committed to handling it responsibly, transparently, and in accordance with applicable data protection legislation. This Policy explains in plain English what data we collect, why we collect it, how it is processed, how long it is retained, and what rights you have in respect of your personal information.
By registering an account on Dragon88, accessing the Platform, or using any of our services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you must not use the Dragon88 Platform.
Definitions
For the purposes of this Privacy Policy, the following terms shall have the meanings set out below:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information relating to an identified or identifiable natural person, including name, contact details, financial data, device identifiers, and behavioural data. |
| "Data Controller" | Dragon88, as the entity that determines the purposes and means of processing personal data collected through the Platform. |
| "Data Processor" | A third party that processes personal data on Dragon88's behalf, such as payment service providers and identity verification partners. |
| "Processing" | Any operation performed on personal data, including collection, storage, use, disclosure, erasure, or destruction. |
| "KYC Data" | Identity and address verification documents submitted by members in compliance with Know Your Customer obligations, including copies of Malaysian MyKad or passport. |
| "Cookies" | Small text files placed on your device by the Dragon88 Platform to store session information, preferences, and analytical data. |
| "Consent" | A freely given, specific, informed, and unambiguous indication of your agreement to the processing of your personal data for a stated purpose. |
Data We Collect
Dragon88 collects the following categories of personal data from members and visitors to the Platform:
3.1 Identity & Contact Data
- Full legal name (as appearing on your Malaysian Identity Card or passport)
- Date of birth (for age verification — members must be 21 years or older)
- Residential address, including city (e.g. Kuala Lumpur, Petaling Jaya, Penang, Johor Bahru, Shah Alam)
- Email address
- Malaysian mobile telephone number
- Username and encrypted password
3.2 Identity Verification (KYC) Data
- Copy of Malaysian MyKad (National Identity Card) — front and back
- Copy of passport (where MyKad is unavailable)
- Proof of residential address (utility bill or bank statement)
- Selfie photograph or video taken during live verification
3.3 Financial & Transaction Data
- Deposit and withdrawal transaction records, denominated in Malaysian Ringgit (MYR)
- Payment method details (e-wallet registered phone number, bank account number, card details where applicable)
- Account balance and wagering history
- Bonus claims and promotional participation records
3.4 Technical & Device Data
- IP address and approximate geographic location
- Device type, operating system, and browser version
- Login timestamps and session duration records
- Clickstream data and pages visited within the Platform
3.5 Communications Data
- Live chat transcripts and support ticket records
- Email correspondence with Dragon88 support
- Feedback, complaints, and dispute records
How We Collect Your Data
Dragon88 collects personal data through the following primary channels:
- Account Registration: When you create a Dragon88 account, you directly provide identity, contact, and security credential data.
- KYC Verification: When you submit identity documents to complete the Know Your Customer process prior to or at the time of first withdrawal.
- Deposits and Withdrawals: When you initiate financial transactions through any of our supported Malaysian payment methods — Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, or Hong Leong Bank.
- Platform Usage: Automatically via server logs, cookies, and analytics tools as you browse and interact with Dragon88.
- Customer Support Interactions: When you contact our support team via live chat, email, or any other channel.
- Third-Party Verification Providers: Where Dragon88 engages licensed identity verification or fraud prevention services to supplement data provided directly by members.
Legal Basis for Processing
Dragon88 processes personal data on one or more of the following legal grounds:
| Legal Basis | Application to Dragon88 |
|---|---|
| Contractual Necessity | Processing required to fulfil the Terms & Conditions agreement with you — including account management, payment processing, and game delivery. |
| Legal Obligation | Processing required to comply with applicable laws, including anti-money laundering (AML) obligations, identity verification requirements, and regulatory reporting duties. |
| Legitimate Interests | Processing for fraud prevention, platform security, responsible gambling monitoring, and service improvement, where our interests are not overridden by your privacy rights. |
| Consent | Processing for marketing communications, non-essential cookies, and analytics, where you have provided clear, specific consent that you may withdraw at any time. |
How We Use Your Data
Dragon88 uses your personal data solely for the following stated purposes:
- Account Management: Creating, maintaining, and securing your Dragon88 member account.
- Identity & Age Verification: Confirming that you are at least 21 years of age and that your identity details are accurate and consistent with your KYC documents.
- Payment Processing: Facilitating deposits and withdrawals in Malaysian Ringgit (MYR) through your nominated payment method — including e-wallets, DuitNow, FPX, and bank transfers.
- Regulatory Compliance: Fulfilling obligations under applicable anti-money laundering (AML), counter-terrorism financing (CTF), and data protection laws.
- Fraud Prevention: Detecting, investigating, and preventing fraudulent account activity, payment fraud, bonus abuse, and identity theft.
- Responsible Gambling Monitoring: Identifying patterns of play that may indicate problem gambling behaviour and implementing protective measures where appropriate.
- Customer Support: Responding to your queries, complaints, and support requests in a timely and accurate manner.
- Service Improvement: Analysing usage data and feedback to improve platform features, game selection, payment flows, and the overall member experience.
- Marketing Communications: Sending you information about Dragon88 promotions, bonuses, and relevant updates — only where you have provided specific consent, and with a clear option to opt out at any time.
Data Sharing & Disclosure
Dragon88 may share your personal data with the following categories of third parties, strictly on a need-to-know basis and only to the extent necessary to fulfil the stated purpose:
7.1 Payment Service Providers
To process your MYR deposits and withdrawals, Dragon88 shares the minimum necessary payment and identity data with its verified Malaysian payment partners, including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB Bank, Public Bank, and Hong Leong Bank. These providers process data under their own privacy policies and applicable financial regulations.
7.2 Identity Verification Providers
Dragon88 may engage licensed third-party identity verification services to assist in the KYC process. These providers access only the minimum data required to confirm identity and age, and are contractually bound to use such data solely for verification purposes.
7.3 Regulatory Authorities
Dragon88 may be required by law to disclose personal data to regulatory bodies, law enforcement agencies, or financial intelligence units upon receipt of a lawful request or court order. Dragon88 will comply with such requests to the extent required by applicable law.
7.4 Corporate Transactions
In the event of a merger, acquisition, business transfer, or reorganisation, personal data held by Dragon88 may be disclosed to prospective or actual parties to such a transaction. Members will be notified of any material change to the data controller arising from such an event.
International Data Transfers
Some of Dragon88's data processors, including certain payment technology providers and gaming platform infrastructure providers, may operate servers or process data outside of Malaysia. Where personal data is transferred internationally, Dragon88 implements appropriate safeguards to ensure that your data receives a level of protection equivalent to that afforded in Malaysia.
Such safeguards may include contractual data transfer clauses, data processing agreements incorporating internationally recognised privacy standards, or transfers to jurisdictions that have been determined to provide an adequate level of data protection.
Data Retention
Dragon88 retains personal data for only as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law.
| Data Category | Retention Period |
|---|---|
| Account identity & contact data | Duration of account plus 5 years following closure, unless a longer period is required by law. |
| KYC verification documents | Minimum 5 years from the date of verification, in compliance with anti-money laundering regulations. |
| Financial transaction records | 7 years from the date of each transaction, consistent with standard financial record-keeping requirements. |
| Customer support communications | 3 years from the date of each communication, or longer where the matter relates to an ongoing dispute. |
| Technical & device logs | Up to 12 months, used for security monitoring and fraud detection purposes. |
| Marketing consent records | Until consent is withdrawn, plus a reasonable period thereafter to evidence compliance. |
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents reconstruction of the original information.
Cookies & Tracking Technologies
Dragon88 uses cookies and similar tracking technologies to operate the Platform, improve the member experience, and gather analytics on usage patterns. The categories of cookies used on Dragon88 are as follows:
| Cookie Type | Consent Required | Purpose |
|---|---|---|
| Essential | No | Required for core Platform functionality: maintaining login sessions, processing payments, and enforcing security policies. Cannot be disabled without breaking core site features. |
| Analytics | Yes | Used to understand how members interact with Dragon88 — including pages visited, time spent, and navigation paths — to inform product improvements. Data is aggregated and pseudonymised. |
| Preference | Yes | Stores your language preferences, display settings, and other personalisation choices to enhance your experience on return visits. |
| Marketing | Yes | Used to track engagement with Dragon88 promotional content and measure the effectiveness of marketing campaigns. Requires explicit consent prior to activation. |
You may manage cookie preferences at any time through your browser settings. Note that disabling essential cookies may impair the functionality of the Dragon88 Platform.
Your Data Rights
As a Dragon88 member, you hold the following rights in respect of your personal data. To exercise any of these rights, please contact our support team using the details set out in Section 16.
Right of Access
Request a copy of all personal data Dragon88 holds about you, together with information about how it is being processed.
Right to Rectification
Request correction of any inaccurate or incomplete personal data held on your Dragon88 account.
Right to Erasure
Request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to legal retention obligations.
Right to Restriction
Request that Dragon88 restricts processing of your data in certain circumstances, such as while a dispute regarding data accuracy is resolved.
Right to Portability
Receive a copy of your personal data in a structured, machine-readable format, where processing is carried out by automated means on the basis of your consent or a contract.
Right to Object
Object to processing of your personal data carried out on the basis of Dragon88's legitimate interests, including for direct marketing purposes.
Right to Withdraw Consent
Where processing is based on your consent (e.g., marketing emails, non-essential cookies), you may withdraw that consent at any time without affecting the lawfulness of prior processing.
Right to Complain
Lodge a complaint with Dragon88's Data Protection contact or with an applicable data protection supervisory authority if you believe your privacy rights have been infringed.
Security Measures
Dragon88 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. These measures include, but are not limited to:
- Encryption: All data transmitted between your device and the Dragon88 Platform is encrypted using 256-bit SSL/TLS protocols. Sensitive data at rest, including KYC documents and financial records, is stored in encrypted form.
- Access Controls: Access to personal data within Dragon88 is restricted to authorised personnel with a documented operational need. Role-based access controls are enforced throughout all internal systems.
- Intrusion Detection: Dragon88's infrastructure is monitored continuously for signs of unauthorised access, unusual activity, and potential data breaches.
- Secure Payment Handling: Dragon88 does not store full card numbers or payment credentials on its own servers. Payment processing is delegated to PCI-DSS compliant payment partners including established Malaysian e-wallet and banking providers.
- Incident Response: Dragon88 maintains a documented data breach response procedure. In the event of a significant breach affecting your personal data, you will be notified in a timely manner in accordance with applicable legal obligations.
Third-Party Links
The Dragon88 Platform may contain links to third-party websites, services, or resources that are not operated by Dragon88. This Privacy Policy applies only to the Dragon88 Platform and does not extend to any third-party websites that you may access via links on our Platform.
Dragon88 has no control over, and accepts no responsibility for, the content, privacy practices, or data handling of third-party websites. We strongly encourage you to review the privacy policy of any third-party website before providing personal information to that site.
Protection of Minors
The Dragon88 Platform is strictly intended for adults aged 21 years and above. Dragon88 does not knowingly collect, process, or retain personal data from individuals under the age of 21. Age verification is conducted at account registration and at the point of first withdrawal as a mandatory control measure.
If Dragon88 becomes aware that personal data has been collected from a person under the age of 21 without appropriate consent, we will take immediate steps to delete such data and close the associated account. If you believe that a minor has accessed or registered on Dragon88, please contact our support team immediately.
Amendments to This Policy
Dragon88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or operational procedures. Where material changes are made, Dragon88 will provide advance notice to registered members by email or via a prominent notice on the Platform.
The date of the most recent revision is displayed at the top of this Policy. Your continued use of the Dragon88 Platform following publication of a revised Privacy Policy constitutes your acceptance of the amended terms. If you do not accept the revised Policy, you should cease using the Platform and contact support to request account closure.
Contact Us
For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, you may contact Dragon88 through the following channels. Please note that all contact details are provided as plain text only — no clickable links are associated with email addresses or telephone numbers.
- Email: [email protected]
- Live Chat: Available 24 hours a day, 7 days a week via the Dragon88 Platform — the fastest channel for privacy-related queries and data rights requests.
Dragon88 will acknowledge all privacy-related inquiries within 5 business days. Where your inquiry concerns a formal data rights request (access, erasure, portability, etc.), we will aim to respond fully within 30 calendar days.
Your Privacy Is Our Priority
Dragon88 is built on trust. Every policy we operate — from data protection to responsible gambling — reflects our commitment to the safety and wellbeing of our Malaysian members. Explore the platform knowing your data is in safe hands.
Dragon88 is strictly for adults aged 21 and above. Please gamble responsibly.