Your privacy is a core commitment at dafakaya — not a compliance afterthought. This Privacy Policy explains exactly what personal data we collect, why we collect it, how we use it, and what rights you hold over your own information.
Our Privacy Commitments
We collect only the personal data that is genuinely necessary to provide the dafakaya service and fulfil our regulatory obligations. No data is collected for convenience or commercial resale.
dafakaya does not sell, rent, or trade your personal data to any third party for commercial marketing purposes. Your information is not a product we monetise.
All personal and financial data stored on dafakaya's systems is encrypted at rest. All data transmitted between your browser and our servers uses industry-standard TLS encryption.
You retain the right to access, rectify, restrict, and request deletion of your personal data at any time. dafakaya honours all legitimate data rights requests within the timeframes set out in this Policy.
Personal data is retained only for as long as is necessary to fulfil the purposes for which it was collected or to comply with applicable legal and regulatory retention requirements. We do not hold data indefinitely.
In the event of a data breach that poses a risk to your rights, dafakaya will notify affected players and relevant authorities within the timeframes required by applicable data protection obligations.
Your Data Rights
As a dafakaya player, you hold meaningful rights over your personal data. These rights are not conditional on your account status — they apply to all users who have provided personal data to us.
You may request a copy of all personal data dafakaya holds about you. We will provide this within 30 days of a verified request.
If any personal data we hold is inaccurate or incomplete, you have the right to request its correction or completion at any time.
Subject to our legal retention obligations, you may request the deletion of your personal data. Regulatory data required for AML compliance may be exempt.
You may request that we limit how we process your data in certain circumstances — for example, where you contest its accuracy pending verification.
Where technically feasible and legally applicable, you may request your personal data in a structured, machine-readable format for transfer to another service.
You have the right to object to processing of your personal data for direct marketing purposes. Objections will be honoured immediately upon receipt.
Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.
If you believe dafakaya has mishandled your personal data, you have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.
dafakaya is committed to protecting the privacy and personal data of all individuals who interact with our platform. This Privacy Policy ("Policy") describes how dafakaya ("we", "us", "the Platform") collects, processes, stores, and discloses personal data obtained from players and visitors ("you", "User") in the course of operating the dafakaya online casino and sports betting service.
This Policy applies to all personal data collected through the dafakaya website, mobile interface, customer support channels, and any other touchpoints through which you interact with our service. It should be read alongside our Terms & Conditions and Responsible Gambling Policy, which together form the complete agreement governing your relationship with dafakaya.
dafakaya serves players across Malaysia — including Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, and Shah Alam — and we are committed to handling all personal data with the care and respect that our community of players deserves. Our data practices are designed to be transparent, proportionate, and fully aligned with our players' legitimate expectations of privacy.
Your continued use of dafakaya following publication of this Policy, or any subsequent revisions to it, constitutes your acknowledgement of and agreement to the data practices described herein. If you do not agree to this Policy, please discontinue use of the Platform and contact us to request account closure.
For the purposes of this Privacy Policy, the following terms carry the meanings defined below:
dafakaya collects personal data through multiple channels in the course of providing our service. The categories of personal data we collect are as follows:
When you create a dafakaya Account, we collect the information you provide during registration, including your email address, username, and password (stored in encrypted form). As part of KYC verification, we subsequently collect full legal name, date of birth, nationality, country of residence, residential address, and government-issued identification document details (such as MyKad or passport number for Malaysian players).
To facilitate deposits and withdrawals, we collect information necessary to process financial transactions. This includes payment method details (such as e-wallet account references for Touch'n Go eWallet, Boost, GrabPay, or bank account details for Maybank, CIMB, Public Bank, DuitNow, and FPX transactions), transaction amounts, timestamps, and reference numbers. We do not store full card numbers or full bank account numbers on our servers — these are handled by our regulated payment processing partners.
When you access the dafakaya Platform, we automatically collect certain technical data, including IP address, device type and operating system, browser type and version, session duration, pages viewed, features accessed, and in-game activity data. This information is used for platform security, fraud detection, and service improvement purposes.
If you contact dafakaya via live chat, email, or any other support channel, we retain records of those communications — including the content of your messages, the date and time of contact, and the resolution provided — for quality assurance, dispute resolution, and regulatory record-keeping purposes.
| Data Category | Examples | Primary Purpose |
|---|---|---|
| Identity Data | Full name, date of birth, MyKad / passport | KYC, account verification, age compliance |
| Contact Data | Email address, phone number, residential address | Account management, support, notifications |
| Financial Data | E-wallet references, bank account references, transaction history | Payment processing, AML compliance, dispute resolution |
| Technical Data | IP address, device ID, browser, session logs | Security, fraud prevention, platform optimisation |
| Gaming Activity Data | Bets placed, games played, win/loss history | Responsible gambling monitoring, player protection |
| Communication Data | Live chat transcripts, support email content | Quality assurance, dispute resolution, record-keeping |
dafakaya uses personal data strictly for purposes that are necessary, proportionate, and directly connected to the provision of our service or our regulatory obligations. The specific purposes for which we process personal data include:
dafakaya processes personal data under one or more of the following lawful bases, depending on the nature of the processing and the applicable legal framework:
Where dafakaya relies on legitimate interests as its lawful basis, we have conducted an assessment confirming that those interests are not overridden by the data subjects' interests, rights, or freedoms. Players may request further information about these assessments by contacting our support team.
dafakaya does not sell, rent, or trade personal data to third parties for commercial purposes. Personal data may be shared with the following categories of recipients solely to the extent necessary to provide the service or comply with legal obligations:
To process deposits and withdrawals, we share necessary transaction data with regulated payment service providers supporting Malaysian payment methods including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and major Malaysian banks (Maybank, CIMB, Public Bank, Hong Leong). These providers process data under their own regulated privacy frameworks and are contractually bound to protect data shared with them.
To fulfil our identity verification obligations, we may share document and identity data with specialist KYC service providers who verify authenticity and cross-reference against relevant databases. All such providers operate under contractual data processing agreements with dafakaya.
Technical and transaction data may be shared with fraud prevention and cybersecurity service providers to detect and prevent prohibited conduct, account takeovers, and financial fraud. These providers act as Data Processors under dafakaya's instruction.
dafakaya may disclose personal data to competent regulatory bodies, law enforcement authorities, or courts where required to do so by law, a court order, or in response to a lawful regulatory request. Such disclosures will be made in strict accordance with applicable legal requirements.
In the event of a merger, acquisition, restructuring, or sale of assets involving dafakaya, personal data held by dafakaya may be transferred to the acquiring or successor entity. Players will be notified of any such transfer and the privacy terms applicable to their data under the new entity.
dafakaya operates as an internationally licensed gaming platform. In certain circumstances, your personal data may be processed by service providers or infrastructure located outside of Malaysia. Where such transfers occur, dafakaya ensures that appropriate safeguards are in place to protect your personal data to a standard equivalent to that afforded under applicable Malaysian and international data protection frameworks.
Safeguards for international transfers include the use of data processing agreements incorporating standard contractual clauses, reliance on adequacy determinations where applicable, and the use of service providers who maintain recognised international data protection certifications (such as ISO 27001).
Players who require further information about specific international transfer arrangements may request this by contacting our data privacy team via the support channels listed in Section 14of this Policy.
dafakaya retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. Our general retention approach is as follows:
Upon the expiry of the applicable retention period, personal data will be securely deleted or anonymised in manner that prevents reconstruction of the original personal data.
dafakaya implements a comprehensive set of technical and organisational security measures designed to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. Key security measures include:
Notwithstanding the above, no system of data security is entirely infallible. dafakaya cannot provide an absolute guarantee against all forms of security breach but commits to responding to any identified breach promptly, in accordance with the notification obligations described in this Policy.
dafakaya uses cookies and similar tracking technologies on its Platform for the purposes of session management, platform functionality, security, and — where consent is obtained — analytics and performance optimisation. The categories of cookies used are as follows:
You may manage your cookie preferences through your browser settings at any time. Please note that disabling certain categories of cookies may affect the functionality of specific Platform features. dafakaya does not use third-party advertising cookies or cross-site tracking technologies for commercial advertising purposes.
The data rights set out in this Policy may be exercised by contacting the dafakaya data privacy team through any of the support channels described in Section 14. To protect your privacy and prevent unauthorised access to your data, all rights requests will require identity verification before processing.
dafakaya will acknowledge receipt of a data rights request within five (5) business days and will complete the request within thirty (30) days of the date of acknowledgement. Where a request is particularly complex or where you have submitted multiple concurrent requests, we may extend this period by a further thirty (30) days, with prior notification to you.
Where dafakaya is unable to fulfil a data rights request — for example, because it conflicts with a legal retention obligation or because the data requested does not exist — we will explain the reason in writing.
dafakaya will not charge a fee for handling data rights requests in ordinary circumstances. However, we reserve the right to charge a reasonable administrative fee where requests are manifestly unfounded, repetitive, or excessive in nature.
dafakaya's Platform and services are intended solely for individuals who are 21 years of age or older. We do not knowingly collect, process, or retain personal data from individuals under the age of 21.
Registration and use of the Platform by minors constitutes a breach of ourTerms & Conditions. Where dafakaya becomes aware that personal data has been collected from an individual under the age of 21, that Account will be closed immediately, all associated personal data will be deleted, and any deposited funds will be returned via the original payment method following identity verification.
If you have reason to believe that a minor has created an Account with dafakaya, please contact our support team immediately via live chat or at the email address listed in Section 14 so that the matter may be investigated and resolved promptly.
dafakaya reserves the right to update, revise, or amend this Privacy Policy from time to time to reflect changes in our data practices, operational requirements, or applicable legal obligations. Where amendments are material — meaning they affect how your personal data is collected, used, or disclosed in ways that could affect your privacy rights — dafakaya will provide reasonable advance notice.
Notice of material amendments will be communicated via a prominent notice on the dafakaya Platform, an email to your registered Account address, or both, depending on the nature and significance of the change. Non-material updates — such as typographical corrections or clarifications that do not affect the substance of our data practices — may be made without prior notice.
The effective date displayed at the top of this Policy will be updated with each revision. We encourage all players to review this Policy periodically. Your continued use of the Platform following a material amendment constitutes your acceptance of the revised Policy.
For all enquiries, requests, or concerns relating to this Privacy Policy or the processing of your personal data by dafakaya, please use the following contact channels:
When submitting a data privacy enquiry, please provide your registered Account username and a clear description of your request. Identity verification will be required before we process any data rights request. dafakaya aims to acknowledge all privacy enquiries within five (5) business days of receipt.
For enquiries about our platform's overall terms of service, please refer to our Terms & Conditions. For responsible gambling support resources and tools, please visit our Responsible Gambling page.
dafakaya is committed to resolving all privacy enquiries fairly and promptly. If you are not satisfied with our response to a privacy concern, you retain the right to escalate the matter to the relevant data protection authority in your jurisdiction of residence.
Stay Informed
dafakaya handles your personal data with the same precision and care we apply to every aspect of our platform. If you have questions about this Policy or want to exercise a data right, our team is available24/7. For players aged 21 and above only.
Privacy enquiries: [email protected] — or reach us via live chat, available 24/7.