Dampbell Privacy Policy – Malaysian Player Personal Data Protection

This Privacy Policy explains how dampbell ("we", "Platform") collects, processes, stores and protects your personal information when you use the dampbell website, mobile app and all related services.

We operate in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and internationally recognised data protection standards. Every action we take involving personal data is solely aimed at providing you with a safe, personalised and high-quality gaming experience.

By registering or using the dampbell platform, you agree to the collection and use of your personal data as described in this Privacy Policy. If you do not agree with any provision, please discontinue use of the platform and contact us for available options.

Dampbell collects your personal data through several means — directly when you register and use the platform, and automatically through legitimate tracking technologies. Below are the categories of data we collect:

The data we collect is used strictly for the following purposes and nothing beyond:

• Account management: Creating, verifying, and maintaining your dampbell account, including the KYC process required by law.
• Financial transaction processing: Processing deposits, verifying withdrawals, and securely managing your financial activity on the platform.
• Security & fraud prevention: Detecting suspicious activity, preventing money laundering, and protecting platform integrity from abuse.
• Personalize your experience: Personalizing game recommendations, promotional offers, and platform content based on your interests and playing habits.
• Customer support: Responding to enquiries, resolving complaints, and providing effective technical support.
• Service communications: Sending important notifications about your account, transactions, terms changes, and security updates.
• Responsible gaming: Monitoring gameplay patterns to identify early signs of problem wagering and offering appropriate support.
• Legal compliance: Meeting reporting obligations to authorities as required under Malaysian law.

Every data processing action we carry out is grounded in a valid legal basis under Malaysia's Personal Data Protection Act 2010 (PDPA):

• Your consent: For opted-in marketing communications and personalising your experience — you may withdraw this consent at any time through your account settings.
• Contract performance: Processing necessary to deliver platform services in accordance with the Terms and Conditions you agreed to at registration.
• Legal obligations: Processing required under Malaysian law, including PDPA requirements, AML legislation, and regulatory body directives.
• Legitimate interests: Processing for platform security, fraud prevention, and service improvement purposes that do not affect your fundamental rights.

Dampbell does not sell, rent, or trade your personal data to any third party for their own commercial purposes. Your data is only shared in the following limited situations:

• Approved service providers: Payment processors, game software providers, cloud hosting providers, and audit firms that help us operate the platform — all bound by strict data protection agreements.
• Regulatory authorities: Licensing authorities, law enforcement agencies and courts when required by Malaysian law or a valid court order.
• Identity verification partners: Registered and approved third-party KYC and AML screening providers engaged to carry out required identity verification.
• Business transfers: In the event of a merger, acquisition or asset sale — you will be notified in advance and your rights will be fully preserved.

Dampbell continuously invests in cybersecurity infrastructure to ensure your personal data remains protected at all times. Our technical and organisational security measures include:

• 256-bit SSL encryption: All data transmitted between your device and dampbell's servers is protected by banking-grade encryption.
• Data-at-rest encryption: Sensitive data stored in our databases, including financial information and KYC documents, is encrypted at rest.
• Layered access controls: Only staff with specific authorisation may access user data, and every access is logged for audit purposes.
• 24/7 Monitoring: An active intrusion detection system monitors all activity across dampbell's infrastructure around the clock.
• Regular security audits: Vulnerability assessments and penetration testing are conducted periodically by independent third parties.
• Two-factor authentication (2FA): An additional security layer is available for all member accounts and is mandatory for platform administrators.

Dampbell uses cookies and similar tracking technologies to enhance your experience on the platform. Below are the types of cookies we use:

Essential cookies cannot be disabled as they are required for basic platform functionality. Functional and analytics cookies can be managed through your web browser settings. However, disabling certain cookies may affect your experience on the dampbell platform.

Dampbell only retains your personal data for as long as necessary to fulfil the purpose of collection or to meet legal obligations. Our retention policy is as follows:

• Active account data: Retained for the entire duration your account remains active at dampbell.
• Data after account closure: Retained for 7 years after the account closure date to meet Malaysia's financial and AML legal requirements.
• Financial transaction records: Retained for 7 years as required by applicable accounting and tax legislation.
• Customer support communication records: Retained for 3 years for reference and dispute resolution purposes.
• Security and access logs: Retained for 2 years for digital forensics and security audit purposes.

After the retention period expires, your data will be securely deleted or anonymised so it can no longer be linked to your identity.

As a dampbell platform user, you have the following rights regarding your personal data, exercisable at any time:

The dampbell platform is exclusively for users aged 18 and above. We do not knowingly collect or process personal data of minors.

If we discover that personal data of an individual under 18 years of age has been collected without our knowledge, the account in question will be closed immediately and all related data will be deleted as soon as possible.

Dampbell reserves the right to update this Privacy Policy from time to time to reflect changes in our data practices, applicable legal changes, or new platform operational requirements.

Any material amendments — those that significantly change how we use or protect your data — will be communicated to you through:

• In-platform notifications on dampbell when you log in
• Email to the address registered with your account
• Update the "Last Updated" date shown at the top of this document

Continued use of the dampbell platform after amendments take effect constitutes acceptance of the updated Privacy Policy.

Dampbell has appointed a Data Privacy Officer (DPO) responsible for ensuring compliance with the PDPA and our internal privacy policies. If you have any questions, concerns, or wish to exercise your privacy rights, please contact us:

• Privacy Email: [email protected]
• General Support Email: [email protected]
• Live Chat: Available 24/7 through the dampbell platform in Malay and English
• Response time: Within 30 calendar days for all privacy-related requests

If you are not satisfied with how we handled your privacy complaint after our response, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia.