dfbocau Privacy Policy

1. Introduction

This Privacy Policy ("Policy") sets out how dfbocau ("we", "us", "our", "the Platform"), operating the website at https://dfbocau.cam, collects, uses, stores, discloses and protects personal data belonging to its registered users ("you", "User", "Player") and visitors to the Platform.

dfbocau is committed to responsible data management. This Policy has been prepared with reference to internationally recognised privacy principles, and reflects our obligations to Malaysian players who entrust us with personal information in connection with the online casino and sports betting services we provide.

By registering an account, accessing the Platform or submitting any personal data through the dfbocau website, you acknowledge that you have read and understood this Policy and that you consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you should not use the Platform.

This Policy should be read in conjunction with our Terms & Conditions, which govern the broader relationship between dfbocau and its users.

2. Definitions

The following terms have specific meanings throughout this Policy:

3. Data We Collect

dfbocau collects personal data only to the extent necessary for the purposes described in this Policy. The categories of personal data we collect are detailed in the table below:

3.1 Data You Provide Voluntarily

The majority of personal data dfbocau holds is data you submit directly: at registration, during identity verification, when contacting support, or when updating account settings. Providing accurate data is a condition of account eligibility. Submitting false, incomplete or misleading information may result in account suspension.

3.2 Data Collected Automatically

When you access the Platform, certain technical and usage data is collected automatically by our servers and analytics tools. This includes your IP address, the type of device and browser you are using, the pages you visit, the sequence of those visits and the approximate duration of your session. This data is used primarily for security monitoring, fraud prevention and service optimisation.

4. Data Processing & Lawful Basis

dfbocau processes personal data only where a lawful basis exists. Our primary lawful bases are as follows:

• Contractual necessity: Processing required to fulfil our obligations under the Terms & Conditions you agreed to at registration — including operating your account, processing deposits via Maybank, CIMB, DuitNow or FPX, settling withdrawals and providing customer support.
• Legal obligation: Processing required to comply with applicable law, including anti-money laundering (AML) obligations, Know Your Customer (KYC) verification requirements and responses to lawful requests from competent authorities.
• Legitimate interests: Processing carried out for fraud prevention, network security, internal analytics and the improvement of Platform services, where our legitimate interests do not override your privacy rights.
• Consent: Processing for optional purposes such as direct marketing communications and non-essential cookies, where we have obtained your specific, informed consent. You may withdraw consent at any time without affecting the lawfulness of processing already carried out.

5. How We Use Your Data

dfbocau uses personal data for the following defined purposes:

• Registering and managing your dfbocau account, including verifying your identity and age in accordance with the 21+ requirement.
• Processing financial transactions, including deposits via Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX and Malaysian bank transfers (Maybank, CIMB, Public Bank, Hong Leong Bank), as well as withdrawals and bonus payments.
• Detecting and preventing fraud, money laundering, collusion and any other prohibited conduct as defined in our Terms & Conditions.
• Responding to your support enquiries, resolving disputes and processing formal complaints.
• Conducting responsible gambling assessments, applying deposit limits, cooling-off periods or self-exclusions at your request, and monitoring for signs of problem gambling behaviour.
• Complying with regulatory, audit and legal obligations, including retaining transaction records and providing information to authorised bodies where required by law.
• Analysing aggregated usage data to improve Platform performance, game availability and user experience.
• Sending transactional communications, including account notifications, deposit confirmations and withdrawal status updates.
• Where you have given consent, sending promotional communications about offers, new games and sports betting markets relevant to Malaysian players.

6. Data Sharing

dfbocau does not sell, rent or trade your personal data to any third party for commercial purposes. Data is shared only in the following limited and controlled circumstances:

6.1 Service Providers and Data Processors

dfbocau works with third-party service providers that process data on our behalf under binding data-processing agreements. These include payment gateway operators (for processing MYR transactions via FPX, DuitNow and e-wallet integrations), identity verification platforms, cloud infrastructure providers, analytics services and customer support tools. All processors are contractually required to handle data in accordance with our instructions and applicable privacy standards.

6.2 Legal and Regulatory Disclosure

dfbocau may disclose personal data to competent law enforcement agencies, regulatory authorities or other public bodies where required to do so by applicable law, valid court order or where disclosure is necessary to prevent fraud, money laundering or other criminal activity. We will not disclose more data than is strictly required for the stated legal purpose.

6.3 Business Transfers

In the event of a merger, acquisition, restructuring or sale of assets involving dfbocau, personal data held at that time may be transferred to the relevant successor entity as part of that transaction. You will be notified of any such transfer and of any changes to data processing terms that may result.

7. Retention Periods

dfbocau retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or for longer periods where required by law or legitimate operational need. Our general retention principles are as follows:

• Account data: Retained for the duration of your active account relationship with dfbocau, plus a minimum of five (5) years following account closure to satisfy anti-money-laundering record-keeping obligations.
• Financial transaction records: Retained for a minimum of seven (7) years in line with standard financial record-keeping requirements applicable to gaming and payment processing activities.
• KYC documents: Retained for the lifetime of the account and for at least five (5) years post-closure or as required by applicable regulation.
• Support communications: Retained for up to three (3) years following the resolution of the relevant enquiry or dispute.
• Marketing data: Retained until you withdraw consent or opt out of marketing communications, after which data is deleted or anonymised within thirty (30) days.
• Technical and usage logs: Retained for up to twelve (12) months unless a longer retention is required for an active investigation or security review.

At the expiry of applicable retention periods, personal data is securely deleted or irreversibly anonymised so that it can no longer be attributed to an identified individual.

8. Cookies & Tracking Technologies

dfbocau uses cookies and similar browser-based technologies on the Platform. Cookies are small data files stored on your device that help the Platform recognise you between sessions and provide core functionality.

8.1 Categories of Cookies Used

• Strictly necessary cookies: Required for the Platform to function correctly. These include session management tokens, security identifiers and authentication cookies. These cookies cannot be disabled without preventing the Platform from operating.
• Functional cookies: Store your preferences such as language settings, display preferences and last-visited game categories to improve your experience between sessions.
• Analytics cookies: Collect aggregated, anonymised data about how users navigate the Platform — including which pages are visited most frequently and how long sessions typically last. This data is used solely for internal service improvement.
• Marketing cookies (consent-based): Used only where you have provided consent, to deliver relevant promotional content based on your interaction history with the Platform.

8.2 Managing Your Cookie Preferences

You may review and adjust your cookie preferences at any time through your browser settings. Please note that disabling strictly necessary cookies will affect your ability to log in and use the Platform's core features. Instructions for managing cookies vary by browser; consult your browser's help documentation for guidance.

9. Data Security

dfbocau implements a range of technical and organisational measures designed to protect personal data against unauthorised access, accidental loss, destruction and disclosure. These measures include:

• Secure HTTPS connections for all data transmission between your device and the dfbocau Platform.
• Encrypted storage of sensitive data fields, including passwords (hashed and salted) and financial identifiers.
• Role-based access controls ensuring that staff members can access only the personal data necessary for their specific function.
• Regular security assessments, vulnerability scanning and patch management across Platform infrastructure.
• Documented incident response procedures to identify, contain and report data security incidents within required timeframes.

In the event of a personal data breach that poses a significant risk to your rights and interests, dfbocau will notify affected users without undue delay and will cooperate with any applicable regulatory investigation.

10. User Rights

Subject to applicable law and verification of your identity, you hold the following rights in respect of your personal data held by dfbocau:

To exercise any of the above rights, please submit a written request to our Data Privacy team using the contact details provided in Section 14. We will acknowledge all requests within five (5) business days and aim to provide a substantive response within thirty (30) days. Where a request is complex or numerous, we may extend this period and will inform you accordingly.

11. Children and Minors

The dfbocau Platform is intended exclusively for adults aged 21 (twenty-one) years and above. We do not knowingly collect personal data from individuals below this age. If you are under 21, you must not register an account, submit any personal data or use any feature of the Platform.

If dfbocau becomes aware, or has reasonable grounds to suspect, that personal data has been submitted by a person under the age of 21, the associated account will be immediately closed and all personal data collected from that individual will be deleted as promptly as technically possible, subject to any overriding legal obligations to retain specific transaction records.

If you are a parent or guardian and believe that your child has submitted personal data to dfbocau without your consent, please contact us immediately using the details in Section 14. We will treat such notifications as a priority matter.

12. Third-Party Services

The dfbocau Platform integrates with third-party payment gateways, identity verification services, game content providers and analytics platforms to deliver its services. When you interact with these integrated services — for example, by initiating a deposit via DuitNow, Touch 'n Go eWallet or a Malaysian bank's FPX portal — that third party's own privacy policy and data terms will apply to the portion of data they collect and process independently.

dfbocau is not responsible for the privacy practices of third-party services that operate outside of our direct control. We encourage you to review the privacy policies of any third-party payment provider, e-wallet service or external platform before submitting personal data to them. Links to or integrations with any such service are provided for operational purposes only and do not constitute an endorsement of their data practices.

All third-party processors who handle data on dfbocau's behalf operate under binding data-processing agreements that require them to implement appropriate security measures and to process data only for purposes authorised by dfbocau.

13. Policy Amendments

dfbocau reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, regulatory guidance or Platform functionality. Where a change is material, we will provide reasonable advance notice by displaying a prominent notice on the Platform or by sending an email notification to the address registered to your account.

The "Effective date" shown at the top of this page indicates the version currently in force. Continued use of the Platform following the effective date of any updated Policy constitutes your acceptance of the revised terms. We encourage you to review this page periodically to stay informed about how your personal data is being handled.

If you object to any amended Policy, your recourse is to submit a data erasure request and to close your dfbocau account before the amendment takes effect.

14. Contact Us

For all enquiries relating to this Privacy Policy, including data subject rights requests, questions about specific processing activities or concerns about how your personal data is being handled, please contact our team through the following channels:

When submitting a data rights request, please include your registered account username, a clear description of your request (e.g., access, correction, deletion), and confirmation of the email address associated with your account. Identity verification will be required before any personal data is disclosed or modified.

For questions about the dfbocau Terms & Conditions or your account's operational rules, please refer to our Terms & Conditions page. For responsible gambling tools and self-exclusion requests, visit our Responsible Gambling page.