Dota88's Privacy Commitment – Six Core Principles
These are the core principles that govern how dota88 handles the personal data of every Malaysian player
All data transmitted between your device and dota88's servers is protected with SSL 256-bit encryption – the same security technology used by Malaysian banking institutions such as Maybank and CIMB. This means your name, MyKad number, account information, and transaction details cannot be intercepted or read by any third party while in transit.
SSL 256-bitDota88 has never sold, rented, or transferred players' personal data to any third party for commercial purposes, and never will. Your information belongs to you — it is used solely to manage your account, process transactions, and improve your experience on the dota88 platform. This is not merely a promise; it is a non-negotiable operating principle.
Data Not SoldAll of dota88's data handling practices comply with Malaysia's Personal Data Protection Act 2010 (PDPA). This means data collection is limited to what is necessary, used only for stated purposes, stored securely, and not retained longer than required. PDPA compliance is our legal obligation to all Malaysian players.
PDPA 2010You have the right to access, correct, request a copy of, or ask for the deletion of your personal data held by dota88 at any time. Such requests can be submitted through the dota88 support team and will be processed within 14 business days. You may also withdraw consent to receive marketing communications at any time.
Guaranteed Player RightsWithin dota88, access to players' personal data is restricted to staff who genuinely need it to carry out their duties – such as the customer support and finance teams. All dota88 employees are bound by strict confidentiality agreements and undergo regular data security training.
Restricted AccessIn the event of any data security breach that may affect your personal information, dota88 is committed to notifying affected players within 72 hours of becoming aware of the incident – in line with international best practices in data protection. We will also take immediate action to contain and remediate the situation.
72-Hour NotificationWhy Data Privacy Matters to dota88 Players
When you register a dota88 account and make your first deposit via Touch 'n Go eWallet or DuitNow, you are entrusting us with highly personal information – your full name, phone number, e-wallet account details, and financial transaction records. That trust is not something we take lightly. It is the foundation of the relationship between dota88 and each of our more than 250,000 registered members across Malaysia.
In today's digital age, personal data is a valuable asset – and unfortunately, it is also a target for bad actors. dota88 takes this risk very seriously. We continuously invest in security infrastructure, staff training, and monitoring systems to ensure your data remains safe in our care.
This Privacy Policy is written in plain, straightforward language — not confusing legal jargon. Our goal is to ensure you genuinely understand what happens to your data, rather than simply signing a lengthy document no one reads. If any section is unclear, the dota88 support team is available to explain it 24 hours a day.
As a platform operating in Malaysia and serving Malaysian players, dota88 is bound by the Personal Data Protection Act 2010 (PDPA). This Act sets the minimum standards for how companies may collect, use, and store the personal data of Malaysians. dota88 does not merely meet these minimum standards – we strive to go beyond the legal requirements in many aspects of our data protection practices.
A common concern among new dota88 players is the security of their payment method. When you make a deposit via FPX Maybank2u or CIMB Clicks, your banking information is never stored on dota88's servers – the transaction is processed directly by the respective payment provider, which operates its own independently certified security systems. dota88 only receives confirmation that the payment was successful, not your bank account details.
The same applies to GrabPay, Boost, and ShopeePay – all payment processing takes place on each provider's own platform, and dota88 does not retain your e-wallet account information. This additional security layer gives players the assurance that their financial information remains protected even in the event of a security incident on dota88's end.
Important Note: This dota88 Privacy Policy applies to all information collected through the dota88.express website, the dota88 iOS and Android mobile apps, and all written communications between players and the dota88 support team. This Policy forms part of the broader dota88 Terms & Conditions and should be read alongside that document.
- 1. Data We Collect
- 2. How We Use Your Data
- 3. Legal Basis
- 4. Information Sharing
- 5. Data Security
- 6. Retention Period
- 7. Your Rights
- 8. Cookie Policy
- 9. Children's Data
- 10. Policy Updates
- 11. Contact Us
Dota88 collects your personal data only when you voluntarily provide it during registration, platform use, or when communicating with our support team. We do not collect more data than is necessary for the purposes stated in this Privacy Policy.
Data You Provide Directly
- Identity information: full name, MyKad number, date of birth, gender, and nationality.
- Contact information: Malaysian mobile number, email address, and residential address.
- Financial information: payment provider names (Touch 'n Go, DuitNow, GrabPay, etc.) and transaction records for deposits and withdrawals.
- Verification documents: copies of MyKad, bank statements, or utility bills submitted for the KYC process.
- Communications: records of live chat sessions, emails, and any written correspondence with the dota88 support team.
Automatically Collected Data
- Technical data: IP address, web browser type, device operating system, and screen resolution.
- Gaming activity data: game history, account balance, betting records, and platform usage statistics.
- Location data: general geographic location derived from your IP address (state/city) – not precise GPS coordinates.
- Cookie and tracking technology data: session information, language preferences, and display settings you have saved.
Payment Information Security
Dota88 does not store your bank account numbers, credit card numbers, or e-wallet passwords. All financial transactions are processed directly by authorised payment providers (FPX, Touch 'n Go, DuitNow, and others). dota88 only receives payment status confirmations – not your financial account details.
The personal data we collect is used solely for purposes related to delivering dota88 services to you. The table below provides a concise overview of each data type and how it is used:
| Data Type | Purpose of Use |
|---|---|
| Identity Information | Account verification (KYC), fraud prevention, AML legal compliance, and duplicate account detection. |
| Contact Information | Customer support communications, delivery of important account-related notifications, OTP verification, and security alerts. |
| Transaction Records | Processing deposits and withdrawals, resolving financial disputes, conducting internal audits, and meeting statutory reporting requirements. |
| Game Activity Data | Calculating VIP bonuses and cashback, identifying problematic gaming patterns, improving game recommendations, and analysing platform performance. |
| Technical Data | Detecting unauthorised access, optimising platform performance, resolving technical issues, and analysing usage patterns for new feature development. |
| Communication Data | Resolution of support queries, training and quality control for the dota88 support team, and settlement of disputes between players and the platform. |
Dota88 may also use your anonymised and aggregated data for internal research and analysis to improve our services. Data in this form cannot be used to identify you as an individual.
Dota88 processes your personal data on valid legal grounds under Malaysia's Personal Data Protection Act 2010 (PDPA). These grounds include:
- Consent: You give explicit consent when you register a dota88 account and agree to these Terms & Conditions and this Privacy Policy. You may withdraw your consent at any time, although this may limit our ability to provide services to you.
- Performance of Contract: Certain data processing is necessary to fulfil the service contract between you and dota88 — for example, processing deposits and withdrawals requires your financial information.
- Legal Obligation: dota88 is required under Malaysian law to retain certain records for anti-money laundering (AML) compliance and financial reporting purposes.
- Legitimate Interest: dota88 has a legitimate interest in processing data for platform security, fraud prevention, and protecting other players from unlawful activity.
Dota88 does not sell or rent your personal data to any third party. However, in certain situations, we may need to share limited information with the following parties for service operation purposes:
- Payment Provider: Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, and FPX (Maybank2u, CIMB Clicks) receive the information necessary to process your financial transactions. Each of these providers has their own applicable privacy policy.
- Game Software Provider: Licensed game providers partnering with dota88 may receive a unique player identifier (not your full name or personal details) for the purpose of game session management.
- Security Service Provider: Third-party cybersecurity firms that assist dota88 with fraud detection and security threat monitoring may process limited technical data under strict confidentiality agreements.
- Statutory Authorities: dota88 will disclose personal data to Malaysian authorities (such as the PDRM or the Inland Revenue Board) when required by law, court order, or valid legal process.
Important: Every third party that receives your data from dota88 is bound by contractual agreements requiring them to protect that data to a standard equivalent to dota88's Privacy Policy. dota88 is not responsible for the privacy practices of third parties you access directly outside our platform.
Dota88 makes serious investments in security infrastructure to protect the personal data of all players. The security measures we have implemented cover multiple layers of technical and organisational protection:
Technical Security
- 256-bit SSL encryption for all communications between the player's browser/app and dota88 servers.
- Data is stored in certified data centres with strict physical access controls, redundant cooling systems, and protection against natural disasters.
- An Intrusion Detection System (IDS) that monitors network traffic around the clock to identify suspicious activity.
- Regular data backups and a disaster recovery system to ensure no data is lost even in the event of a system failure.
- Two-factor authentication (2FA) is available for all player accounts and mandatory for all dota88 administrator accounts.
Organisational Security
- Access to players' personal data is restricted to dota88 staff with a legitimate business need only.
- All staff undergo regular data security training and are bound by confidentiality agreements.
- Regular internal and external security audits are conducted to identify and address vulnerabilities.
- A clearly defined and tested incident response procedure to ensure a swift response in the event of a security breach.
While dota88 takes all reasonable measures to protect your data, no security system can guarantee 100% protection against every threat. We encourage you to take precautions on your end as well, such as using a strong password and enabling 2FA on your dota88 account.
Dota88 does not retain your personal data longer than necessary for the purposes stated in this Privacy Policy, or longer than required under applicable Malaysian law. The following are general guidelines on data retention periods:
- Active Account Data: Retained for the duration your account is active and for 7 years after account closure, in line with Malaysian legal requirements for financial records.
- Transaction Records: Retained for a minimum of 7 years from the date of each transaction, in accordance with the Anti-Money Laundering Act 2001.
- Support Communication Records: Retained for 3 years from the date of communication for dispute resolution and quality control purposes.
- Cookie & Session Data: Session cookies are deleted automatically when you close your browser. Preference cookies are stored until you delete them or until the relevant cookie expires.
- Marketing Data: Retained until you withdraw your consent to receive marketing communications from dota88.
When data is no longer needed, it is securely deleted or anonymised using methods that ensure it cannot be recovered or reused.
As a dota88 player who is a Malaysian citizen or resident, you have the following rights regarding your personal data under the Personal Data Protection Act 2010:
You have the right to request a copy of the personal data dota88 holds about you. Requests will be processed within 14 business days.
If any data held by dota88 about you is inaccurate or out of date, you have the right to request a correction.
You may request the deletion of your personal data, subject to dota88's legal obligations to retain certain records.
You may object to the processing of your data for direct marketing purposes at any time by contacting the dota88 support team.
You have the right to receive your personal data in a machine-readable format for transfer to another service provider if required.
You may withdraw your consent to data processing at any time, though this may affect our ability to provide certain services.
To exercise any of the above rights, please contact the dota88 support team via live chat or email at support@dota88.express with the subject line "PDPA Rights Request". We will verify your identity before processing your request and will respond within 14 working days.
Dota88 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored in your web browser when you visit the dota88 website.
Types of Cookies We Use
- Essential Cookies (Required): Required for core platform functions – login, game sessions, account security, and transaction processing. Cannot be disabled without affecting platform functionality.
- Preference Cookies: Saves your display preferences, language, and settings so you don't need to reconfigure them each time you log in.
- Analytics Cookies: Helps us understand how players use the platform so we can improve its design and functionality. This data is collected in aggregate and does not personally identify you.
- Security Cookies: Used to detect suspicious sessions, unauthorised login attempts, and abnormal traffic patterns.
You can manage or delete cookies through your web browser settings at any time. However, disabling essential cookies may affect your ability to log in and use key features of the dota88 platform.
Dota88 Mobile App
The dota88 mobile app for iOS and Android uses technologies equivalent to cookies, such as local device storage, for the same purposes as website cookies. You can manage these permissions through your device's privacy settings.
The dota88 platform is intended exclusively for adults aged 18 and above. dota88 does not knowingly collect, store, or process personal data of individuals under the age of 18.
If you are a parent or guardian who believes your child under the age of 18 has registered an account at dota88 without your consent, please contact the dota88 support team immediately via live chat or email at support@dota88.express. We will investigate and take prompt action, including closing the account and deleting all associated data.
Important Notice: Registering an account on behalf of someone under 18 or allowing a minor to use your account is a serious violation of dota88's Terms & Conditions and may constitute a criminal offence. dota88 employs age verification systems and reserves the right to suspend any account suspected of being owned or used by a minor.
Dota88 reserves the right to amend or update this Privacy Policy at any time to reflect changes in our data handling practices, new legal requirements, or changes to the services we offer. The date of the most recent update will always be displayed at the top of this document.
When significant changes are made to this Privacy Policy — particularly those affecting how we use your data or your rights — dota88 will notify players via:
- An email notification sent to your registered email address.
- In-app or on-site notifications on dota88 when you log in.
- A prominent announcement displayed on the dota88.express homepage.
We encourage you to review this Privacy Policy periodically to stay informed about how we protect your data. Continued use of the dota88 platform following any updates will be considered acceptance of the revised Privacy Policy.
If you have any questions, concerns, or requests regarding dota88's Privacy Policy or how we handle your personal data, please reach out to us through the following channels:
- Live Chat: Our fastest channel – average response time under 3 minutes, operating 24/7 in Bahasa Malaysia.
- Email: support@dota88.express – use the subject line "Privacy Policy Inquiry" for faster processing.
All privacy-related inquiries will be handled with complete confidentiality. If you are not satisfied with dota88's response, you have the right to lodge a complaint with the Department of Personal Data Protection, Ministry of Communications and Digital Malaysia.
Dota88's Ongoing Commitment to Your Privacy
This Privacy Policy is version 3.1, effective from 1 January 2026. dota88 is committed to continuously improving our data protection practices in line with technological developments and changes in legislation. Your trust is our most valuable asset — and we do not take it for granted.
Summary of Your Privacy Rights at dota88
These are your rights guaranteed under Malaysia's PDPA 2010 – exercise them whenever you need to
Request a copy of all personal data dota88 holds about you. Processed within 14 working days through official support channels.
If any information dota88 holds about you is inaccurate, you have the right to request an immediate correction through our support team.
Request deletion of your personal data when it is no longer needed, subject to dota88's legal record-retention obligations.
Withdraw your consent for marketing communications at any time via your account settings or by contacting the dota88 support team.
Receive a copy of your data in a machine-readable format for transfer to another service, in accordance with your data portability rights.
Contact the dota88 support team 24/7 for any privacy concerns. If you remain unsatisfied, you may file a complaint with Malaysia's JPDP.
dota88 PDPA Compliance: All personal data handling practices on the dota88 platform are conducted in compliance with Malaysia's Personal Data Protection Act 2010. We are committed to protecting every player's privacy and ensuring your personal data is used only for purposes you have consented to. Read Terms & Conditions in full for broader context.
Your Data is Safe at dota88 – Register with Confidence Today
Dota88 safeguards the personal data of over 250,000 Malaysian players with SSL 256-bit encryption, PDPA 2010 compliance, and a strict no-data-sale policy. Register for a free account and enjoy over 500 games, Malaysia Super League Sports Betting, poker, and more – with complete peace of mind.