Dk7 Privacy Policy — Malaysian User Personal Data Protection

This Privacy Policy ("Policy") is published by dk7 and applies to all users who access or use the dk7 platform, including the official website at dk7.ad, the dk7 mobile app and all services provided by us. This policy clearly and transparently explains how we collect, process, store, share and protect your personal information.

We understand that your trust is our most valuable asset. That is why dk7 takes an extremely careful and responsible approach to every aspect of data management. We only collect information that is genuinely necessary to deliver the best service to you, and we will never misuse the trust you place in us.

This Policy should be read together with Terms and Conditions dk7. In the event of any conflict between the two documents regarding data protection, this Privacy Policy shall prevail.

Dk7 collects various types of information to enable us to provide you with a secure, personalised, and high-quality service. Below is a summary of the categories of data we collect:

We do not collect any sensitive information such as biometric data, health information or political views unless specifically required by applicable law. Every instance of data collection is carried out with a legitimate purpose proportionate to service requirements.

The information we collect is used solely for legitimate, pre-stated purposes. dk7 uses your personal data for the following:

• Account management: Create, verify, and manage your user account, including the KYC process required to keep the platform free from fraud.
• Transaction processing: Process deposits, withdrawals, and other financial transactions securely and accurately using your preferred payment method.
• Platform security: Detect and prevent unauthorised access, fraud, money laundering, and other suspicious activities.
• Service communications: Send important notifications relating to your account, transactions, policy changes, and security information.
• Product improvement: Analyse usage patterns to continuously improve the platform, games, and overall user experience.
• Responsible gaming: Monitor gaming activity to identify patterns that may indicate a need for responsible gaming support.
• Legal compliance: Fulfil legal obligations, including reporting requirements to relevant authorities.

Dk7 does not sell, rent, or disclose your personal information to third parties for their own commercial marketing purposes. However, there are certain situations where we need to share data with specific parties for legitimate operational purposes:

• Payment service providers: Transaction data is shared with approved payment gateway and digital wallet providers to process your deposits and withdrawals. All such providers are bound by strict confidentiality agreements.
• Game software providers: Game details required to process wagers are shared with licensed game software providers. This data is limited strictly to what is needed to run the games.
• Regulatory authorities: dk7 will disclose information to the relevant authorities when required by law, court order, or licensing compliance obligations.
• Audit and compliance: Third-party auditors and compliance firms appointed by dk7 may access certain data for auditing purposes only, subject to binding confidentiality agreements.

Dk7 retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. Retention periods vary by data category:

• Active account data: Retained for as long as your account is active and for a specified period after account closure, as required by licensing compliance obligations.
• Financial transaction records: Retained for a minimum of five (5) years after a transaction occurs, in line with anti-money laundering legal requirements.
• Communication logs: Customer support conversation records are retained for three (3) years for quality and dispute resolution purposes.
• Technical data and logs: System access logs and technical data are retained for twelve (12) months for security and fraud detection purposes.

When data is no longer needed and the mandatory retention period has ended, dk7 will securely destroy or anonymise that data using industry-recognised methods. You may also request deletion of your account and data by contacting our support team.

Dk7 uses cookies and similar technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website. The types of cookies we use are as follows:

• Essential Cookies: Required for core platform functions such as login authentication and session security. These cookies cannot be disabled without affecting the platform's key functionality.
• Performance Cookies: Collect information on how you use the platform to help us improve website performance and usability.
• Functional Cookies: Remember your preferences such as language, currency, and display settings to deliver a more personalised experience.
• Analytics Cookies: Help us understand aggregate usage patterns for continuous product improvement.

You can control and manage cookies through your browser settings. Please note that disabling certain cookies may affect the functionality and your user experience on the dk7 platform.

As a dk7 user, you have certain rights regarding your personal data. dk7 respects and facilitates the exercise of these rights:

To exercise any of the above rights, please contact the dk7 customer support team, available 24/7. We aim to process all requests within thirty (30) business days from the date the request is received.

Dk7 continuously invests in the latest security infrastructure to ensure your personal data is protected at all times. The technical security measures we implement include:

• Data encryption in transit: All communications between your device and dk7 servers are protected by TLS 1.3 / 256-bit SSL encryption, ensuring no third party can intercept or read your data in transit.
• Data encryption at rest: Sensitive data stored in dk7's databases is also encrypted using modern encryption algorithms, ensuring data remains unreadable even in the event of unauthorised physical access.
• Two-factor authentication (2FA): dk7 offers two-factor authentication for all user accounts, adding an extra layer of security to ensure only you can access your account.
• 24/7 security monitoring: The dk7 cybersecurity team continuously monitors the platform to detect and respond to any threats or suspicious activity in real time.
• Regular penetration testing: dk7 conducts regular security testing and vulnerability assessments by independent security experts to identify and address any system weaknesses.

Dk7 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our privacy practices, legal requirements, or platform service developments. Any material amendments will be communicated to you via:

• Prominent notices on the dk7 platform homepage.
• Notification emails to your registered email address.
• In-app notifications on the dk7 mobile app (where applicable).

The effective date of each version of the Privacy Policy will be clearly stated at the top of this document. Continued use of the dk7 platform after any amendments take effect constitutes your acceptance of the latest version of this Privacy Policy.