Official Privacy Policy

Privacy Policy dana123 – Personal Data Protection for Malaysian Members

Your privacy is a priority at dana123. This document clearly explains how we collect, use, store, and protect your personal information as a member of our platform. We have written it in plain language – no confusing legal jargon.

Updated: 1 January 2026 Language: Malay Applicable to: All Malaysian members
Privacy Policy Contents
Information We Collect
How We Use Your Data
Disclosure to Third Parties
Security & Data Encryption
Your Privacy Rights
Cookie Policy
Data Retention Period

Dana123 Privacy Policy – Key Summary

The key things you need to know about how dana123 manages your personal data.

256-bit SSL Encryption

All your personal and financial transaction data is protected by 256-bit SSL encryption — the same security standard used by leading Malaysian banks such as Maybank and CIMB.

No Data Sales

Dana123 has never sold, rented, or traded your personal data to any third party for marketing or commercial purposes, and we never will — without your explicit consent.

You Control Your Data

You have the right to access, correct, download, or request deletion of your personal data from dana123's systems at any time — through your account settings or by contacting our support team.

Malaysian Legal Compliance

The dana123 privacy policy complies with Malaysia's Personal Data Protection Act 2010 (PDPA) and all applicable data protection legislation in Malaysia.

Your Marketing Communication Preferences

You can choose to receive or opt out of marketing communications from dana123 at any time. Your preference is fully respected and updated within 48 hours.

Data Securely Stored

All member data is stored on secure servers with multi-layered protection. Player funds are held separately from the company's operational funds and remain available for withdrawal at all times.

Dana123's Commitment to Your Privacy

Six core pillars of privacy protection that dana123 upholds to maintain the trust of every Malaysian member.

Bank-Grade Security

Dana123 uses 256-bit SSL encryption for all communications between your browser and our servers — the same standard used by Maybank2u and CIMB Clicks. Two-factor authentication (2FA) is also available for an added layer of protection.

256-bit SSL 2FA Advanced Firewall
Data Minimisation Principle

Dana123 only collects information that is strictly necessary to provide our services to you. We do not collect excessive data, nor do we retain it for longer than required for the stated purposes.

Data Minimisation Clear Purpose Limited Period
Malaysia PDPA Compliance

All data management practices at dana123 comply with Malaysia's Personal Data Protection Act 2010 (PDPA). We appoint an internal Data Protection Officer (DPO) to ensure ongoing compliance with applicable legislation.

PDPA 2010 DPO Appointed Regular Audits
Strict Access Controls

Access to dana123 members' personal data is strictly limited to staff who require it to perform their duties. All access is logged and audited on a regular basis. Staff are required to complete mandatory privacy and data security training.

Restricted Access Audit Logs Mandatory Training
Data Breach Notification

In the event of any data security breach that may affect your information, dana123 is committed to notifying affected members within 72 hours and taking immediate remediation action.

72-Hour Notification Immediate Action Rapid Recovery
Policy in Bahasa Melayu

Dana123 provides this privacy policy in Bahasa Melayu so that every Malaysian member can clearly understand their rights without needing to rely on a translation. Transparency starts with clear communication.

Bahasa Melayu Easy to Understand No Hidden Tricks

1. Introduction & Scope of Privacy Policy

Welcome to the dana123 Privacy Policy. This document explains how the dana123 platform, accessible via https://dana123.biz and our official mobile app ("Platform"), collects, uses, discloses, stores and protects your personal information.

Dana123 is committed to respecting and protecting the privacy of all our members. We understand that your trust is our most valuable asset — and that trust can only be maintained when we are transparent about how we manage your personal data.

This Privacy Policy applies to all individuals who register an account on the dana123 Platform, visit our website without registering, use the dana123 mobile app, or interact with us through communication channels such as email, live chat, or WhatsApp.

Malaysia PDPA Compliance: This Privacy Policy is prepared in accordance with the requirements of Malaysia's Personal Data Protection Act 2010 (PDPA). dana123 is registered as a data processor under the Act and adheres to all prescribed data protection principles.

By using the dana123 Platform, you agree to the collection and use of your information as described in this Privacy Policy. If you do not agree with any part of this policy, please do not use our Platform.

2. Information We Collect

Dana123 collects various types of information depending on how you interact with our Platform. We follow the principle of data minimisation – we only collect what is truly necessary.

A. Information You Provide Directly:

  • Registration Information: Full name, Malaysian phone number, email address, date of birth, and password;
  • Identity Verification Information: MyKad identification number, copies of identity documents when required for verification;
  • Payment Information: Bank account number, e-wallet account number (Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow) for deposit and withdrawal purposes;
  • Communications: The content of messages you send to the dana123 support team via live chat, email, or WhatsApp.

B. Automatically Collected Information:

  • Usage Data: Betting history, games played, session duration, login frequency and activity on the Platform;
  • Device Data: Device type, operating system, phone model, screen resolution, and app version;
  • Network Data: IP address, browser type, internet service provider (ISP), and general location based on IP;
  • Cookie Data: Session information, user preferences and analytics data are collected via cookies and similar tracking technologies.
Data Category Sample Information Primary Purpose
Identity Name, IC number, date of birth Identity verification & legal compliance
Contact Email address, phone number Account communication & customer support
Finance Bank account number, e-wallet Deposit & withdrawal processing
Transactions Deposit, withdrawal, and wagering history Account management & anti-fraud
Technical IP address, device type, browser Platform security & improvement
Usage Games played, session duration Personalised experience & responsible gambling

3. How We Use Your Data

Dana123 uses collected personal information solely for legitimate, stated purposes. We do not use your data for anything unrelated to the delivery of our services.

The primary purposes for which dana123 uses your data are:

  • Account Management: Creating and managing your member account, processing registration, identity verification, and profile maintenance;
  • Payment Processing: Processing deposits via Touch 'n Go eWallet, DuitNow, FPX (Maybank2u, CIMB Clicks), GrabPay, Boost and ShopeePay, and processing winnings withdrawals within 3 to 10 minutes;
  • Service Provision: Operating all Platform features including Live Casino, Sports Betting, slots, lottery, and live matches;
  • Security & Anti-Fraud: Detecting and preventing fraudulent activity, money laundering, multi-account usage, and security breaches;
  • Customer Support: Responding to enquiries, resolving complaints and providing technical assistance;
  • Responsible Gaming: Monitoring gameplay patterns to identify signs of problem gambling and enforcing limits set by members;
  • Service Communications: Sending important notifications about your account, transactions, changes to terms, and security updates;
  • Marketing (with your consent): Sending relevant promotional offers, bonuses and new game updates – you may unsubscribe at any time;
  • Legal Compliance: Fulfilling legal obligations including anti-money laundering (AML) requirements, Know Your Customer (KYC) compliance, and reporting to authorities as required by law.
Personalise Your Experience: Dana123 uses your usage data to personalise game recommendations and bonus offers relevant to your preferences. You can turn off this personalisation in your account settings if you do not wish to use this feature.

4. Legal Basis for Data Processing

Dana123 processes your personal data on valid legal bases in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA). Depending on the type of processing, the applicable legal bases are:

  • Contract Performance: Processing required to fulfil contractual obligations between you and dana123 – including account management, payment processing, and the provision of gaming services;
  • Legitimate Interest: Processing for security purposes, fraud prevention, platform improvement, and business analytics that does not impact your fundamental privacy rights;
  • Legal Obligation: Processing required to comply with applicable Malaysian laws, including AML and KYC requirements;
  • Consent: For marketing communications and preference personalisation, we rely on your explicit consent, which you may withdraw at any time.

5. Disclosure of Data to Third Parties

Dana123 respects your privacy and does not sell or trade your personal data. However, there are specific circumstances where we need to share your information with selected third parties:

  • Payment Processors: Transaction information is shared with the payment providers we use to process deposits and withdrawals – including payment gateways for Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay and FPX. All payment processors are bound by strict confidentiality agreements;
  • Technology Service Providers: Third-party companies that provide technical infrastructure, hosting, analytics, security software and operational support services for the dana123 platform. They may only use your data in accordance with our specific instructions;
  • Game Providers: Third-party game software providers whose games are available on the dana123 Platform. Only the minimum information required to operate the games may be shared;
  • Authorities: Where required by law, court order or a competent regulatory body in Malaysia, dana123 may disclose relevant information;
  • Law Enforcement: In cases involving suspected fraud, money laundering or financial crime, we may disclose information to the relevant law enforcement authorities.
Dana123 does not share your personal data with any advertising companies, data aggregators, or third-party data brokers for marketing purposes without your explicit consent. This is a principle we have never compromised on.

6. International Data Transfers

As an online entertainment platform operating globally, certain aspects of dana123's operations may involve the transfer of personal data outside Malaysia – for example, for server hosting, international payment processing, or the use of cloud technology services.

When data transfers outside Malaysia are carried out, dana123 ensures adequate protection through the following measures:

  • Using data transfer agreements that require recipients to comply with data protection standards equivalent to Malaysia's PDPA;
  • Ensuring that the recipient country or jurisdiction has recognised data protection laws in place;
  • Periodically assessing data transfer risks and implementing additional technical safeguards where necessary.
Continuous Protection: Regardless of where your data is stored or processed, the same technical protection standards — including 256-bit SSL encryption and strict access controls — apply without exception.

7. Data Security

Dana123 takes serious investment in technical and organisational security measures to protect your personal data from unauthorised access, loss, destruction, or accidental disclosure.

Key security measures we have implemented include:

  • Data Encryption in Transit: All data transmitted between your device and dana123's servers is encrypted using TLS 1.3 protocol with a 256-bit SSL certificate;
  • Data Encryption at Rest: Sensitive data such as financial information and passwords are encrypted at the database level using AES-256 encryption;
  • Role-Based Access Control: dana123 staff may only access data that is relevant to their specific role. Privileged access requires additional authentication;
  • 24/7 Monitoring System: Our security system continuously monitors for suspicious activity and sends immediate alerts whenever an anomaly is detected;
  • Regular Penetration Testing: dana123 conducts regular security assessments (penetration testing) by independent security experts to identify and address vulnerabilities;
  • Two-Factor Authentication (2FA): We strongly encourage all members to enable 2FA and require it for high-risk activities such as large withdrawals.

Despite all these security measures, no system can be guaranteed 100% secure. You also play an important role in keeping your account safe — use a strong password, never share your login credentials, and report any suspicious activity to the dana123 support team immediately.

8. Data Retention Period

Dana123 retains your personal data only for as long as necessary for the stated purposes, or as required by applicable law. Retention periods vary by data type:

  • Active Account Data: For the duration your account remains active on the dana123 Platform, and for a minimum of 7 years after account closure to meet legal requirements;
  • Financial Transaction Records: Minimum 7 years from the date of transaction, in line with Malaysia's financial and tax reporting legal requirements;
  • Identity Verification (KYC) Data: A minimum of 5 years after the business relationship ends, in line with anti-money laundering requirements;
  • Support Communication Logs: 2 years after the last interaction for quality control and dispute resolution purposes;
  • Marketing Data: Until you withdraw your consent or request deletion;
  • Technical Log Data: 90 days for standard access logs; 1 year for logs related to security incidents.

Once the retention period expires and there is no legal requirement to keep the data, it will be securely deleted or anonymised using approved procedures.

9. Your Privacy Rights as a dana123 Member

As a dana123 member based in Malaysia, you have specific rights regarding your personal data under the Personal Data Protection Act 2010 (PDPA). dana123 respects and supports the exercise of these rights.

Right of Access

You have the right to request a copy of the personal data we hold about you. We will fulfil this request within 14 business days.

Right to Rectification

If your data is inaccurate or out of date, you have the right to request a correction. Updates can be made through your account settings or by contacting our support team.

Right to Erasure

You may request deletion of your data under certain circumstances. Please note that some data must be retained for legal compliance purposes even after account closure.

Right to Object

You have the right to object to the processing of your data for direct marketing purposes. This preference can be updated in your dana123 account settings at any time.

Right to Data Portability

You have the right to request your data in a machine-readable format (such as CSV or JSON) for transfer to another platform of your choice.

Right to Restriction of Processing

In certain situations, such as when there is a dispute regarding the accuracy of your data, you may request that dana123 restrict the processing of your data while the matter is being resolved.

To exercise any of the above rights, contact the dana123 Data Protection Officer by email at support@dana123.biz with the subject line "Privacy Rights Request" along with your account number. We will process your request within 14 business days.

Identity Verification Required: To protect your privacy, all requests relating to privacy rights will require identity verification beforehand. This ensures that no other party can access or request the deletion of your data without your authorisation.

10. Cookie Policy

Dana123 uses cookies and similar tracking technologies to enhance your experience on our Platform. Cookies are small text files stored on your device when you visit our website or use our app.

You can manage cookie usage through your browser settings. Please note that disabling certain cookies may affect the functionality and user experience of the dana123 Platform. For analytics and preference cookies, you can manage your choices through the cookie settings panel available on your first visit to the Platform.

11. Children's Privacy

The dana123 platform is not intended for individuals under the age of 18. dana123 does not knowingly collect personal data from children or minors who have not yet reached 18 years of age.

Should we discover that personal data has been collected from individuals under the age of 18 without appropriate age verification, we will take the following steps immediately:

  • Deleting all related data from our systems;
  • Immediately closing the account in question;
  • Refunding any verifiable deposits to the original payment method.
Parents and guardians who have reason to believe their underage child has registered an account at dana123 should contact us immediately at support@dana123.biz. We will handle the situation with the utmost priority and full discretion.

12. Third-Party Links & Services

The dana123 platform may contain links or integrations to third-party services such as game providers, payment gateways, and analytics tools. This Privacy Policy applies solely to data collection and processing carried out by dana123.

Dana123 is not responsible for the privacy practices or content of any third-party websites, apps, or services you may access through our Platform. We encourage you to read the privacy policy of each third-party service you use.

All third-party service providers working with dana123 are required to sign data processing agreements obligating them to protect your data in accordance with dana123's standards and to use it solely for purposes directed by us.

13. Privacy Policy Amendments

Dana123 reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service improvements. We are committed to keeping you informed of any material changes.

When material changes are made to this Privacy Policy, dana123 will:

  • Sending notifications to your registered email address at least 14 days before the changes take effect;
  • Displaying clear notices on the Platform's homepage and in the Privacy Policy section;
  • Updating the "Last Updated" date at the top of this document.

For minor changes that do not materially affect your fundamental rights, we may update this policy without prior notice. It is your responsibility to review this policy periodically. Continued use of the Platform after any changes take effect constitutes your acceptance of the updated terms.

14. Contact Us – Data Protection Officer

If you have any questions, concerns, or complaints regarding this Privacy Policy or how dana123 handles your personal data, please contact our Data Protection Officer through the following channels:

  • Email: support@dana123.biz (Subject: "Data Privacy Inquiry")
  • Live Chat: Available 24/7 via the dana123 Platform or app
  • Response Time: Under 2 minutes for live chat; within 72 hours for privacy enquiries via email

For formal requests relating to privacy rights — such as data access, correction, or deletion — please clearly state the type of request and include your account number to facilitate identity verification and prompt processing.

Complaints to Authorities: If you are not satisfied with how dana123 has handled your privacy complaint, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia, who is responsible for overseeing PDPA compliance in Malaysia.

The latest version of this Privacy Policy takes effect from 1 January 2026. This document fully supersedes all previous versions.

dana123's Privacy Commitment: We take the protection of your data seriously. All personal information – including account details, betting history, and financial transaction data – is secured with 256-bit SSL encryption. Dana123 does not sell or share your data with third parties without your explicit consent and is fully compliant with Malaysia's PDPA. For enquiries, contact us at support@dana123.biz or read Terms & Conditions us.

FAQ – dana123 Privacy Policy

Answers to the questions our members ask most frequently about how dana123 manages their personal data.

Dana123 does not sell or trade your personal data to third parties. We only share information with parties necessary to deliver our services – such as payment processors for Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, and FPX to process your transactions, as well as technology service providers that support the operation of our Platform. All such parties are bound by strict confidentiality agreements. We may also disclose information when required to do so under Malaysian law.

You may request a copy of the personal data we hold about you by contacting the dana123 support team via email at support@dana123.biz with the subject line "Data Access Request" along with your account number. We will verify your identity and process the request within 14 business days. Your data will be sent in a secure format to your registered email address.

Yes, you may request deletion of your personal data under certain circumstances. However, please note that dana123 is required under Malaysian law to retain certain records — in particular, financial transaction records and identity verification (KYC) data — for the minimum retention periods stipulated by anti-money laundering legislation. Records not subject to any legal retention obligation will be deleted within 30 days of a valid request being received and verified.

Yes. dana123 uses 256-bit SSL encryption for all financial transactions. Sensitive payment information such as bank account numbers and e-wallet details is transmitted directly to registered payment processors and is not stored on dana123's servers in readable form. dana123 does not store your credit card numbers or e-wallet password information. Our systems comply with the international PCI DSS payment security standard.

You can opt out of marketing emails from dana123 in several ways: click the "Unsubscribe" link at the bottom of any marketing email you receive, update your communication preferences in your dana123 account settings, or contact our support team via live chat. Requests will be processed within 48 hours. Please note that unsubscribing from marketing communications will not affect important transactional and security emails related to your account.

When your dana123 account is closed, we will promptly delete personal data that is no longer required. However, we are legally obligated to retain financial transaction records for a minimum of 7 years and KYC data for a minimum of 5 years after account closure, in accordance with Malaysia's Anti-Money Laundering Act. Retained data is stored securely with strictly limited access and is used solely to fulfil our legal obligations.

Your Privacy Protected – Join dana123 with Complete Confidence

A secure, transparent platform that genuinely respects the privacy of Malaysian members. Live Casino, Malaysia Super League football, IPL cricket, lottery, and over 500 slots — all in one account protected by 256-bit SSL encryption. Withdrawals in 3–10 minutes via Touch 'n Go, DuitNow, and more.

SSL 256-bit encrypted data · No data selling · PDPA Malaysia compliant · For users aged 18 and above only

Bahasa Melayu