Privacy Policy

1. Identity of the Data Controller

The data controller responsible for your personal data processed through the dmd365 Platform (dmd365.asia) is the operator of dmd365, operating under international gaming authority licensing. For all data-related enquiries, you may contact us using the details provided in Section 15 of this Policy.

2. Personal Data We Collect

2.1 Registration Data

When you create a dmd365 Account, we collect the following information:

• Full legal name
• Date of birth (for age verification — 21+ requirement)
• Email address
• Chosen username
• Password (stored in encrypted form — dmd365 staff cannot access your plaintext password)
• Mobile phone number (for two-factor authentication and account recovery)

2.2 Identity Verification (KYC) Data

In accordance with our regulatory obligations, dmd365 may request the following documents during Know Your Customer verification:

• Copy of a government-issued photo identity document (Malaysian MyKad, passport, or equivalent)
• Proof of address document (utility bill, bank statement, or equivalent dated within 3 months)
• Source of funds documentation where required by applicable regulations

2.3 Financial Data

When you make deposits or request withdrawals, dmd365 collects transaction data including payment method identifiers (such as partial bank account numbers or e-wallet references), transaction amounts, timestamps, and transaction statuses. dmd365 does not store full payment card numbers or full bank account credentials on its servers.

2.4 Usage and Technical Data

dmd365 automatically collects certain technical data when you access the Platform, including:

• IP address and approximate geolocation (country/region level)
• Device type, operating system, and browser version
• Session duration, pages visited, and navigation patterns within the Platform
• Game history, bet amounts, wagering activity, and win/loss records
• Login timestamps and device identifiers

2.5 Communications Data

dmd365 retains records of communications between you and our customer support team, including live chat transcripts and email correspondence, for quality assurance, dispute resolution, and compliance purposes.

3. How dmd365 Uses Your Personal Data

dmd365 processes your personal data for the following purposes:

• Account Management: Creating, maintaining, and securing your dmd365 Account, including verifying your identity and processing login authentication.
• Service Provision: Enabling you to use all features of the dmd365 Platform, including casino games, sportsbook, slots, poker, and lottery services.
• Payment Processing: Processing deposits and withdrawals via your chosen payment methods, including Touch 'n Go, DuitNow, Maybank2u, and other accepted Malaysian payment methods.
• Regulatory Compliance: Fulfilling our Know Your Customer, Anti-Money Laundering (AML), and responsible gaming obligations under applicable gaming regulations.
• Fraud Prevention and Security: Detecting, investigating, and preventing fraudulent activity, bonus abuse, money laundering, and unauthorised access to dmd365 Accounts.
• Customer Support: Responding to your enquiries, resolving disputes, and providing technical assistance.
• Responsible Gaming Monitoring: Identifying potentially problematic gambling behaviour and, where required or appropriate, intervening with responsible gaming tools or referrals.
• Platform Improvement: Analysing aggregate usage patterns to improve the functionality, performance, and content of the dmd365 Platform.
• Marketing Communications: Sending promotional offers and updates to Members who have opted in to receive such communications (see Section 12).

4. Legal Bases for Processing

dmd365 processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to perform the contract between you and dmd365 — i.e., to provide the services you have registered for.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including KYC, AML, and responsible gaming requirements.
• Legitimate Interests: Processing necessary for the legitimate interests of dmd365, including fraud prevention, platform security, and service improvement, where those interests are not overridden by your fundamental rights.
• Consent: Where you have provided explicit consent — for example, by opting in to receive marketing communications from dmd365.

5. Disclosure and Sharing of Personal Data

5.1 Service Providers

dmd365 engages trusted third-party service providers to assist in operating the Platform. These providers may process your personal data on our behalf and include: payment processing partners (including local Malaysian e-wallet and banking providers), identity verification and KYC service providers, IT infrastructure and cloud hosting providers, customer support platform providers, and fraud detection and security analytics services. All such providers are contractually obligated to process your data only as instructed by dmd365 and in accordance with applicable data protection standards.

5.2 Regulatory Authorities

dmd365 may disclose your personal data to relevant regulatory authorities, licensing bodies, law enforcement agencies, or courts where required to do so by law, by court order, or in connection with any legal proceedings.

5.3 No Sale of Data

dmd365 does not sell, rent, or otherwise transfer your personal data to third parties for their own commercial purposes. Any sharing of data is limited to the purposes described in this Policy.

6. International Data Transfers

Some of the third-party service providers engaged by dmd365 may be located outside of Malaysia. Where personal data is transferred internationally, dmd365 ensures that appropriate safeguards are in place — including contractual data protection clauses — to ensure that your data receives a level of protection equivalent to that required under applicable Malaysian data protection standards and our licensing obligations.

7. Data Retention

dmd365 retains your personal data for as long as your Account remains active and for a period thereafter as required by applicable law and regulatory obligations. Specifically:

• Account and KYC records are retained for a minimum of five years following Account closure, in compliance with anti-money laundering regulations.
• Transaction records are retained for a minimum of five years from the date of the transaction.
• Customer support communications are retained for three years.
• Marketing consent records are retained for the duration of your consent and for a reasonable period thereafter for compliance purposes.

Upon expiry of the applicable retention period, your personal data will be securely deleted or anonymised.

8. Security of Your Personal Data

dmd365 implements a range of technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, or alteration. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and dmd365 servers
• Encrypted storage of passwords and sensitive credentials
• Strict internal access controls limiting data access to authorised personnel on a need-to-know basis
• Regular security audits and vulnerability assessments
• Two-factor authentication available for all Member accounts
• Secure, redundant server infrastructure with intrusion detection systems

9. Cookies and Tracking Technologies

9.1 What Are Cookies?

Cookies are small text files placed on your device when you visit a website. dmd365 uses cookies and similar technologies (such as web beacons and session storage) to operate and improve the Platform.

9.2 Types of Cookies Used by dmd365

• Essential Cookies: Required for the Platform to function correctly, including maintaining your login session and security tokens. These cannot be disabled.
• Analytics Cookies: Used to understand how Members use the Platform — such as which pages are visited most frequently and how long sessions last — so that dmd365 can improve the user experience.
• Preference Cookies: Used to remember your settings and preferences, such as language preference or display settings.
• Marketing Cookies: Used only where you have provided consent, to deliver relevant promotional content and measure the effectiveness of marketing campaigns.

9.3 Managing Cookies

You can manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the dmd365 Platform. Instructions for managing cookies in popular browsers (Chrome, Firefox, Safari, Edge) are available through those browsers' official help resources.

10. Your Data Rights

Subject to applicable law, you have the following rights in relation to the personal data held about you by dmd365:

• Right of Access: You may request a copy of the personal data dmd365 holds about you.
• Right to Rectification: You may request that inaccurate or incomplete personal data be corrected.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to overriding legal retention obligations.
• Right to Restriction: You may request that dmd365 restrict the processing of your personal data in certain circumstances.
• Right to Object: You may object to the processing of your personal data where dmd365 relies on legitimate interests as the legal basis, or where data is used for direct marketing.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

To exercise any of these rights, please contact dmd365 using the details in Section 15. dmd365 will respond to all data rights requests within 30 days. In some cases, verification of your identity may be required before your request can be processed.

11. Children's Privacy

The dmd365 Platform is strictly restricted to individuals aged 21 and above. dmd365 does not knowingly collect personal data from persons under the age of 21. If dmd365 becomes aware that personal data has been collected from a person under the age of 21, that Account will be immediately suspended and all associated data will be deleted in accordance with applicable law. Parents or guardians who believe their child may have registered on the dmd365 Platform should contact us immediately at the address in Section 15.

12. Marketing Communications

dmd365 may send promotional emails, SMS notifications, and in-Platform messages to Members who have opted in to receive marketing communications. You may opt out of marketing communications at any time by:

• Clicking the "unsubscribe" link in any dmd365 marketing email
• Updating your communication preferences in your dmd365 Account settings
• Contacting dmd365 customer support directly

Opting out of marketing communications will not affect the delivery of transactional or account-related communications (such as withdrawal confirmations, security alerts, or KYC requests), which are sent as part of the dmd365 service provision and cannot be disabled while your Account is active.

13. Third-Party Links

The dmd365 Platform may contain links to third-party websites or services for informational purposes. dmd365 has no control over the privacy practices or content of such third-party sites and is not responsible for their data handling. We encourage you to review the privacy policies of any third-party sites you visit.

14. Updates to This Privacy Policy

dmd365 reserves the right to update or amend this Privacy Policy at any time. Where changes are material, dmd365 will notify Members via the registered email address or by prominent notice on the Platform. The "Last updated" date at the top of this Policy reflects the most recent revision. Your continued use of the dmd365 Platform following notification of any material change constitutes your acceptance of the revised Policy.

15. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the personal data dmd365 holds about you, please contact our Data Protection team:

dmd365 customer support and data requests are handled 24 hours a day, 7 days a week. Written requests submitted to the above email address will receive a response within 30 calendar days. For urgent account security concerns, live chat on dmd365.asia is available with typical response times under 60 seconds.

This Privacy Policy was last reviewed in June 2026 and applies to all personal data processed through the dmd365 Platform at dmd365.asia.