Dragon212 Privacy Policy – Malaysia Player Data Protection

Dragon212 is an online Sports Betting and casino platform operating to serve the needs of Malaysian players. As a platform that handles members' personal information and financial data, we take this responsibility very seriously.

This Privacy Policy applies to all information collected through the Dragon212 website at dragon212.best, any communication between you and Dragon212 via email, live chat, or other channels, as well as all financial transactions processed through our platform.

Dragon212 adheres to the principles of Malaysia's Personal Data Protection Act 2010 (PDPA) and is committed to ensuring that all processing of members' personal data is lawful, fair, transparent, and consistent with the purposes stated in this policy.

Dragon212 collects various types of information depending on how you interact with our platform. The following are the main categories of data we collect:

Registration Information:

• Full name as shown on your official identification document
• An active Malaysian phone number
• A valid email address
• Date of birth (for age verification)
• Passwords are stored in encrypted (hashed) form — we never store passwords in plain text

Financial & Transaction Information:

• Deposit and withdrawal history, including amounts, dates, and payment methods (Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX, Maybank2u, CIMB Clicks)
• Transaction reference numbers for verification and support purposes
• Win and loss records within the platform

Technical & Usage Data:

• IP address of the device used to access the platform
• Device type and operating system (e.g. Android, iOS, Windows)
• Web browser type and version
• Session data including pages visited, time spent, and actions taken
• General location information derived from IP address (for security and compliance purposes only)

Dragon212 collects personal information through several different methods as you use our platform:

• Directly from you — when you register an account, fill in a form, make a deposit, contact customer support, or update your profile information on Dragon212.
• Automatically via technology — when you browse the Dragon212 platform, our systems automatically record technical data such as your IP address, device information, and usage patterns via cookies and standard tracking technologies.
• From payment processors — when you make a transaction through Malaysian payment methods such as Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX, Maybank2u, or CIMB Clicks, we receive transaction confirmation details from the respective payment processor.
• From legitimate third parties — in certain cases, Dragon212 may receive information from identity verification agencies or fraud prevention services to ensure platform security and compliance with KYC requirements.

Dragon212 uses the data collected for legitimate and necessary purposes in operating a safe and effective platform. The following are the primary purposes for which your data is used:

Dragon212 does not sell, rent, or trade members' personal information with any party for marketing purposes. However, there are limited situations where Dragon212 needs to share certain information with trusted third parties:

• Payment Processors — to process your deposits and withdrawals via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX, Maybank2u, CIMB Clicks, and other supported Malaysian payment methods. These processors only receive the information necessary to complete the transaction.
• Technology Service Providers — companies that provide infrastructure, hosting, security, or analytics services to Dragon212. All such providers are bound by strict confidentiality agreements and may not use your data for their own purposes.
• Game Providers — live casino and sports software providers that supply gaming content to the Dragon212 platform. Minimum technical data required for game functionality may be shared.
• Authorities — where required by Malaysian law, a court order, or an official request from a law enforcement agency, Dragon212 will disclose the necessary information.
• Fraud Prevention — third-party services that assist Dragon212 in identifying and preventing fraudulent activity, money laundering, and platform abuse.

Dragon212 implements a range of technical and organisational security measures to protect your personal data from unauthorised access, loss, misuse, or disclosure:

• 256-bit SSL Encryption — all communications between your browser and Dragon212's servers are encrypted using the latest TLS/SSL protocols. This ensures that data in transit across our network cannot be intercepted by unauthorized parties.
• Hashed passwords — Dragon212 does not store your password in any readable form. All passwords are processed through a strong cryptographic hashing function before being stored, meaning even our staff cannot view your password.
• Internal access controls — only Dragon212 staff who require access to specific data to carry out their duties are permitted to do so. All access is logged and regularly monitored.
• 24/7 Security Monitoring — automated monitoring systems run around the clock to detect anomalies, unauthorised access attempts, or signs of a cyberattack.
• Regular security testing — Dragon212 conducts regular security audits and penetration testing to identify and patch any vulnerabilities before they can be exploited.
• Secure backup — data is regularly backed up to secure, encrypted locations to ensure service continuity in the event of a technical disaster.

While Dragon212 takes all reasonable steps to protect your data, no system can guarantee 100% security at all times. In the event of any security incident affecting your personal data, Dragon212 will notify you and the relevant authorities in accordance with legal requirements.

Dragon212 does not retain your personal data for longer than is necessary for the purposes for which it was collected, or beyond the minimum retention periods required under applicable Malaysian law.

• Active account data — retained for as long as your Dragon212 account remains active, and for a defined period after account closure for support purposes and resolution of any outstanding issues.
• Financial transaction records — retained for a minimum of seven (7) years from the date of the transaction, in line with Malaysian accounting and tax legal requirements.
• Customer support communication logs — retained for two (2) years to allow review of issue history and service improvements.
• Technical data and system logs — retained for a period not exceeding twelve (12) months, unless required for an ongoing security investigation.
• Identity verification documents (KYC) — retained for the duration of account activity and five (5) years following account closure, in line with anti-money laundering record retention requirements.

Once the applicable retention period has expired, data is securely deleted or anonymised so that it can no longer be linked to any specific individual.

Dragon212 uses cookies and similar tracking technologies to enhance your experience on our platform. The following are the types of cookies we use:

• Essential Cookies — required for core Dragon212 platform functionality, such as maintaining your login session and remembering your language preference. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies — collects anonymous information about how visitors use the Dragon212 platform, such as the most frequently visited pages. This helps us improve the user experience.
• Functional Cookies — allows Dragon212 to remember your preferences (such as your username and display settings) to deliver a more personalised experience.
• Security Cookies — used to detect and prevent fraudulent activity, helping Dragon212 identify the device you use to access your account for security purposes.

You can manage cookie usage through your web browser settings. Please be aware that disabling certain cookies may affect the functionality and user experience of the Dragon212 platform. Essential cookies cannot be disabled as they are required for the platform to operate correctly.

As a Dragon212 member and data subject under Malaysia's Personal Data Protection Act 2010, you hold certain rights regarding your personal information. Dragon212 respects and facilitates the exercise of these rights:

• Right of Access — you have the right to request a copy of the personal data we hold about you. Requests can be submitted by email to support@dragon212.best and we will process them within thirty (30) days.
• Right to Rectification — if you find that any information Dragon212 holds about you is inaccurate or out of date, you have the right to request a correction. This can be done through your account settings or by contacting our customer support team.
• Right to Erasure — you have the right to request deletion of your personal data under certain circumstances, such as when the data is no longer needed for its original purpose, subject to applicable legal record retention requirements.
• Right to Restriction of Processing — in certain circumstances, you may request that Dragon212 restrict how we process your data, for example while you are disputing the accuracy of that data.
• Right to Object — you have the right to object to the processing of your personal data for certain purposes, including direct marketing where applicable.
• Right to Withdraw Consent — where data processing is based on your consent, you have the right to withdraw that consent at any time without affecting the validity of any processing carried out prior to the withdrawal.

Dragon212 strictly prohibits individuals under the age of 21 from registering or using our platform. Dragon212 is intended exclusively for adults and contains betting content that is not suitable for children or minors.

Dragon212 does not knowingly collect any personal information from individuals under the age of 21. Should Dragon212 discover that we have inadvertently collected information from an individual below this age threshold, we will take immediate steps to delete that information and close the associated account.

If you are a parent or guardian who believes your child under the legal age has registered for or used the Dragon212 platform, please contact us immediately at support@dragon212.best so that prompt action can be taken.

Dragon212 reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or the addition of new services to the platform.

When significant changes are made to this Privacy Policy, Dragon212 will:

• Updating the "Last Updated" date at the top of this page
• Sending a notification to the email address registered to your account for material changes
• Displaying a clear notice within the platform for a reasonable period after changes take effect

You are encouraged to review this Privacy Policy page periodically to stay informed about how Dragon212 protects your information. Continued use of the Dragon212 platform following any changes to this policy will be considered your acceptance of the updated policy.

If you have any questions, concerns, or requests regarding Dragon212's Privacy Policy or how we handle your personal data, we encourage you to reach out to us directly. Our team is ready to assist you.

• Email: support@dragon212.best — for privacy enquiries requiring a written response or data rights request processing
• Live Chat: available 24 hours a day, 7 days a week within the Dragon212 platform — for general enquiries requiring an immediate response

When contacting us regarding privacy, please clearly state:

• Your full name and the email address registered to your Dragon212 account
• The type of request or enquiry (e.g., data access request, correction, deletion)
• Specific details relevant to your request

Dragon212 is committed to responding to all valid privacy enquiries within thirty (30) days of receipt. For complex requests, this period may be extended with prior notice to you.