Bahasa MelayuPrivacy Policy
An account at DK88 cannot work without some information about you: a way to sign you in, a way to pay you, and a record of what you played. This page explains what that amounts to in practice, why each piece of it exists, who else ever sees it and what you can ask us to do with it. It sits alongside the Terms and Conditions and forms part of the same agreement.
What this policy covers
It covers everything you do on this site — the casino lobby, slots, instant games, the sports book, the Bonuses page, the VIP lobby and King's Market — and the Android and iOS apps linked in the footer. The English and Malay versions of the site are the same service and are covered by the same policy. Links that lead away from here, including the social accounts in the footer, land on other companies' platforms, and what happens to your data there is governed by their own rules rather than by this page.
What you give us
- The sign-up form: a username, a password of at least six characters, a phone number with its country code, an email address, an optional promo code and your confirmation that you are over 18.
- If you use the Google button instead, the name and email address that account passes to us.
- Payment details you enter to deposit or to be paid out — which of Touch 'n Go, DuitNow QR, FPX, online banking, Boost, GrabPay or ShopeePay you used, and the account, wallet or reference the money moved through.
- Anything you write to support, including screenshots and case correspondence.
- Documents confirming who you are, in the cases where we ask for them before a withdrawal or during an investigation.
What we record while you play
The rest builds up on its own as the account is used. Deposits and withdrawals with their amounts in MYR, bets placed and how they settled, casino and instant game rounds, spins, your Dash Coin balance and what you spent it on in King's Market, the turnover that decides your VIP tier, which bonuses you claimed and how far the wagering on them has gone, check-in streaks and quest progress.
Alongside that sits ordinary technical data: your IP address and the approximate region it points to, the device and browser you are on, the screen width the layout was rendered at, which of English or Malay you chose, which pages you opened and when, what you typed into the header search, and reports of errors the site ran into.
Why we hold it
- To run the account at all — signing you in, crediting deposits, settling bets and paying withdrawals.
- To decide whether an offer applies to you, to track wagering, and to calculate the VIP tier from turnover.
- To keep the site working and to see which parts of it are actually used.
- To spot duplicate accounts, automated play and payment fraud, which is a large part of why device and IP data exists at all.
- To act on a deposit limit, a cooling-off period or a self-exclusion the moment you ask for one.
- To answer support messages and to reach a decision in a dispute.
- To meet obligations of record keeping that apply to a business handling player money.
| Category of data | Why we hold it | Where it comes from |
|---|---|---|
| Sign-up details | To open the account and to sign you in | The sign-up form, or the Google button instead of it |
| Contact details | To confirm a withdrawal, send a security alert and reach you about an open case | The email address and the phone number you verify |
| Payment records | To credit deposits and to pay withdrawals in MYR | Touch 'n Go, DuitNow QR, FPX, online banking, Boost, GrabPay and ShopeePay |
| Play history | To settle bets, to track wagering and to work out the VIP tier | Bets, casino and instant game rounds and spins |
| Coins and bonuses | To decide whether an offer applies and to record what was spent in King's Market | Check-ins, quests, achievements and the Bonuses page |
| Technical data | To keep the site working and to spot duplicate accounts and payment fraud | Your browser, your device and your IP address |
| Support correspondence | To answer a message and to reach a decision in a dispute | Support and feedback in the site menu |
Cookies and what stays in your browser
A session cookie is what keeps you signed in from one page to the next; without it every click would log you out. Your language choice, the contents of the betslip and a handful of small display preferences are also kept locally so that the site looks the same when you come back. On top of that we count page views in aggregate to understand which sections earn their place.
You can clear all of it from your browser settings at any time. Doing so signs you out, empties the betslip and resets the language back to the default. Blocking cookies entirely leaves the site readable but stops login and the betslip from working.
Who else sees it
Payment providers receive what they need to move money and nothing more. Game studios receive a session identifier together with the stake and the result of the round they are running — not your name, your email or your phone number. Hosting, content delivery, support tooling and anti-fraud checks are handled by suppliers who work on our instruction and are not free to use your data for their own purposes. Beyond that, we hand data over only where we are legally required to. We do not sell it, and we do not pass your contact details to advertisers.
Messages you get from us
Two kinds of message come out of an account. The first is operational — a withdrawal confirmation, a security alert, an update on an open case — and it keeps arriving for as long as the account is open, because switching it off would leave you unable to be told about your own money. The second is promotional: offers by email or phone, and the announcements we post on the Telegram, Instagram, Facebook, X and WhatsApp channels linked in the footer. You can switch the promotional half off by asking support, and a self-exclusion switches it off automatically.
How long it is kept
Account and transaction records are kept while the account is open and for a period afterwards, long enough to settle payments, close out disputes and satisfy the record keeping we are subject to. Support correspondence is kept with the account it belongs to. Self-exclusion records outlive the rest deliberately: without them an exclusion could not be enforced against a new sign-up. Technical logs are shorter lived and are aggregated or discarded once they have served their purpose.
Your requests and how to make them
You can ask for a copy of the data held on your account, ask for something inaccurate to be corrected, ask for deletion of everything we are not obliged to keep, object to marketing, withdraw a consent you previously gave, or close the account outright. Send the request from the email address on the account through the support and feedback link in the site menu. We may ask you to confirm your identity first — not to slow you down, but because handing your data to somebody impersonating you would be the worse failure. We answer without unnecessary delay and tell you plainly if part of a request cannot be met and why.
Security, minors and changes
Choose a password you use nowhere else, verify your email and phone so there is a way to reach you, and do not stay signed in on a device other people share. Anything done under your login is treated as done by you. Nobody under 18 may open an account; where we find one, it is closed and the data behind it deleted apart from what we are required to retain. Changes to this policy are published on this page and take effect when they appear, so the version you are reading is always the current one. 18+.