Privacy Policy Dadu Games – Our Commitment Data Protection Every Malaysian Player

This Privacy Policy describes how Dadu Games ("dadu", "we", "us") collects, uses, discloses, and protects your personal information when you access or use our platform — including the dadu.games website, the dadu mobile app, and all associated services.

This policy applies to all users of the dadu platform, including visitors browsing the site without registering, players with active accounts, and former members whose accounts have been closed. By accessing any part of the dadu platform, you acknowledge that you have read, understood, and agreed to be bound by this Privacy Policy.

Dadu collects various categories of information from users of our platform. This information is necessary to enable us to provide a safe, fair, and high-quality service to Malaysian players. The following are the categories of information we collect:

Dadu collects this information through several means: directly from you during registration and platform use; automatically via technologies such as cookies and server logs; and, in limited cases, from legitimate third parties such as identity verification service providers.

Every use of personal data at dadu has a clear legal basis and a legitimate purpose. We use the information you provide for the following purposes:

• Account Management: Creating and managing your dadu account, processing your registration, and verifying your identity.
• Transaction Processing: Processing deposits and withdrawals in MYR through your chosen payment method — whether Touch 'n Go eWallet, GrabPay, DuitNow, FPX, Maybank2u, or CIMB Clicks — securely and efficiently.
• Service Provision: Allowing you to access and enjoy all dadu games, receive eligible bonuses and make full use of every platform feature.
• Security & Fraud Prevention: Detecting and preventing fraudulent activity, money laundering, account abuse, and other security threats to the dadu platform and our players.
• Legal Compliance: Fulfilling compliance obligations including KYC (Know Your Customer), AML (Anti-Money Laundering), and relevant directives from Malaysian authorities.
• Responsible Gaming: Monitoring gameplay patterns to identify signs of problem gambling and reaching out to players who may need support or limits on their dadu account.
• Service Communications: Sending you important notifications about your account, transactions, policy updates and relevant security information.
• Marketing Communications (with consent only): Sending information about dadu promotions, new games, and exclusive offers — only provided you have given consent to receive such communications.
• Platform Improvement: Analysing aggregated usage data to understand how players interact with dadu and to make meaningful improvements to the user experience.

Dadu takes a highly cautious and limited approach to sharing player data with external parties. We does not sell your personal data to anyone. Disclosure to third parties only occurs under the following circumstances:

• Payment Service Providers: To process your deposit and withdrawal transactions via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX, Maybank2u and CIMB Clicks. Only the minimum information necessary to complete each transaction is shared.
• Identity Verification Service Providers: To verify your identity for KYC compliance purposes. All such providers are bound by strict data protection agreements with dadu.
• Technology Service Providers: Server operators, security software providers and analytics companies that help us run the dadu platform. All such parties are bound by strict confidentiality obligations and are permitted to use your data solely for the purposes we specify.
• Legal Requirements: When required by Malaysian law, a court order, or a directive from a legitimate authority — such as tax authorities, law enforcement agencies, or a relevant regulatory body.
• Protection of dadu's Rights: To defend our legal rights, prevent fraud, or ensure the safety of the dadu platform and its players in situations that require legal action.

Whenever your data is shared, dadu ensures that the receiving party maintains a level of data protection equal to or exceeding our own standards. We conduct regular compliance reviews of all our service partners.

Platform dadu uses cookies and similar tracking technologies to enhance your gaming experience, ensure account security, and understand how players use our platform. The following are the types of cookies used by dadu:

You can manage your cookie preferences through the privacy control panel in your dadu account or via your browser settings. Please note that disabling essential cookies may affect certain dadu platform functions and your ability to log in or process transactions smoothly.

Dadu retains your personal data only for as long as necessary to fulfil the purposes set out in this Privacy Policy, or as required by Malaysian law. dadu's data retention policy is as follows:

• Active Account Data: Retained for as long as your dadu account remains active and for 5 years after the account is closed, to meet legal compliance requirements.
• Financial Transaction Records: Retained for a minimum of 7 years in accordance with Malaysia's accounting and tax legal requirements applicable to transactions in Ringgit Malaysia (RM).
• Support Communication Logs: Conversation records with the dadu support team are retained for 3 years for dispute resolution and service quality improvement purposes.
• Session Data & Technical Logs: Server logs and session data are retained for 90 days for security and threat-detection purposes, after which they are automatically deleted or anonymised.
• Identity Verification Data: KYC documents such as MyKad copies are retained for the duration of the active account plus 5 years, in line with Malaysia's AML compliance requirements.

Once the retention period has ended, dadu securely deletes or anonymises your data using industry-standard methods. You may request further information about the specific retention periods for your data by contacting the dadu privacy team.

Under Malaysia's Personal Data Protection Act 2010 (PDPA 2010), you have specific rights regarding the personal data held by dadu. We respect and facilitate the exercise of all these rights:

To exercise any of the above rights, contact the dadu privacy team by email at [email protected], clearly stating the right you wish to exercise and your account details. We will acknowledge receipt of your request within 48 hours and provide a full response within 30 days.

Dadu continually invests in a comprehensive security infrastructure to protect our players' personal data. The technical and organisational measures we have in place include:

• Data Encryption: All data in transit is protected by TLS 1.3 (256-bit SSL encryption). Sensitive data stored in our databases is also encrypted using AES-256.
• Strict Access Controls: Principle of least privilege – every dadu staff member has access only to the data strictly necessary for their role. Access to sensitive data requires multi-factor authentication.
• 24/7 Monitoring: Automated monitoring systems that detect and alert on any suspicious activity or unauthorised access attempts to dadu's servers.
• Independent Security Audit: Regular security audits conducted by independent cybersecurity firms to identify and address vulnerabilities within dadu's systems.
• Penetration Testing (Pentest): Regularly scheduled penetration testing to simulate cyberattacks and ensure dadu's systems remain resilient against the latest threats.
• Staff Training: All dadu staff undergo regular data security and privacy training to ensure they fully understand and comply with our data protection protocols.
• Incident Response Plan: Clear, tested procedures for responding to data security incidents, including notification timelines that comply with PDPA 2010 requirements.

Platform dadu is not directed at individuals under the age of 18, and we do not knowingly collect personal data from minors. dadu takes a range of measures to prevent underage registration:

• All applicants are required to confirm that they are at least 18 years of age at the time of dadu account registration.
• The identity verification (KYC) process requires your MyKad number, enabling accurate age verification.
• Dadu's monitoring systems are constantly on watch for usage patterns that may indicate an underage user.

Should dadu discover that personal data belonging to an individual under 18 has been collected inadvertently, we will take immediate steps to delete that data and close the account in question. If you are a parent or guardian who suspects your child has registered on dadu while underage, please contact us immediately at [email protected].

In the context of global operations, your data may be processed or stored outside Malaysia — for example, where dadu uses cloud servers or technical service providers operating from other locations. When this occurs, dadu ensures:

• Data transfers only take place to countries or entities that offer a level of data protection equivalent to or higher than that of Malaysia.
• Data transfer agreements compliant with international standards are signed with all recipient parties.
• All data processing, regardless of the physical location of the servers, is subject to dadu's privacy policy and applicable Malaysian law.

In all circumstances, your rights under Malaysia's PDPA 2010 remain fully intact, regardless of where your data is physically processed. dadu is committed to ensuring that Malaysian data protection standards are never compromised by any technical or operational consideration.

Dadu may update this Privacy Policy from time to time to reflect changes in our data management practices, new legal requirements, or developments in dadu's products and services. When changes are made:

• The latest version with an updated effective date will always be published on this page.
• For significant or material changes, dadu will notify all registered players by email or via in-app notification at least 14 days before the changes take effect.
• Continued use of the dadu platform after a change notification is considered acceptance of the updated Privacy Policy.
• If you disagree with any changes made, you have the right to close your dadu account before those changes take effect.

We encourage you to review this page periodically, especially before submitting new information or carrying out significant financial transactions on the dadu platform.

If you have any questions or concerns, or wish to exercise your privacy rights, the dadu privacy team dadu is always on hand to help. We operate 24 hours a day, 7 days a week.