Privacy Policy

This Privacy Policy ("Policy") is issued by deras88 ("the Company", "we", "us", "our"), the operator of the online gaming and sports betting platform accessible at deras88.cam. This Policy explains how deras88 collects, uses, stores, shares, and protects the personal data of individuals ("Users", "Players", "you") who access or use our Platform, whether accessed from a desktop browser or a mobile device in Kuala Lumpur, Penang, Johor Bahru, Shah Alam, Petaling Jaya, or anywhere else in Malaysia.

deras88 is committed to responsible data stewardship. We process personal data only where we have a legitimate, clearly defined purpose for doing so, and we apply appropriate technical and organisational measures to safeguard the data we hold.

This Policy should be read in conjunction with our Terms & Conditions and our Responsible Gambling Policy, both of which form part of your agreement with deras88.

For the purposes of this Policy, the following terms have the meanings assigned below:

• "Personal Data" — any information relating to an identified or identifiable natural person; an identifiable person is one who can be identified, directly or indirectly, by reference to an identifier such as a name, identification number, location data, or an online identifier.
• "Processing" — any operation performed on Personal Data, including collection, recording, storage, adaptation, retrieval, consultation, use, disclosure, dissemination, erasure, or destruction.
• "Data Controller" — deras88, being the entity that determines the purposes and means of processing Personal Data collected through the Platform.
• "Data Processor" — a third party that processes Personal Data on behalf of deras88, strictly according to our documented instructions.
• "Cookies" — small text files placed on your device by the Platform to store session information, preferences, and usage analytics.
• "KYC" — Know Your Customer procedures requiring the verification of a User's identity, age, and payment method ownership before withdrawals are processed.
• "AML" — Anti-Money Laundering obligations that may require deras88 to collect additional financial information or transaction records for compliance purposes.

deras88 collects the following categories of personal data in the course of providing the Platform and its associated services:

deras88 collects personal data through the following channels:

• Directly from you — when you complete the account registration form, submit KYC documents, make a deposit, place a bet, request a withdrawal, or contact our support team via live chat or email.
• Automatically through the Platform — when you access or browse deras88.cam, our servers automatically record technical data such as your IP address, device identifiers, browser information, and page interaction events via cookies and similar technologies.
• From payment service providers — when you make a deposit via FPX, DuitNow, Maybank, CIMB, Public Bank, Hong Leong, Touch 'n Go eWallet, Boost, GrabPay, or cryptocurrency channels (BTC, USDT), our payment processors may share transaction confirmation details with deras88 for reconciliation and fraud prevention purposes.
• From identity verification services — where we engage third-party KYC verification providers to authenticate submitted identity documents, those providers may return a verified/unverified status and a confidence score to deras88.
• From publicly available sources — where required for AML compliance, deras88 may cross-reference information against publicly available sanctions lists, politically exposed persons (PEP) registers, or adverse media databases.

deras88 processes personal data only where we have a clearly identified purpose and a legitimate legal basis for doing so. The following table summarises our primary processing activities:

Where processing is based on your consent (e.g., marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

deras88 may share your personal data with the following categories of third parties, strictly on a need-to-know basis and only to the extent necessary for the defined purpose:

• Payment Service Providers — licensed processors handling MYR transactions via FPX, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, and cryptocurrency networks. These processors receive only the data necessary to authorise and settle transactions.
• KYC and Identity Verification Providers — third-party services engaged to verify identity documents and perform AML screening. These providers act as Data Processors under contractual agreement with deras88 and may not use your data for their own purposes.
• IT and Infrastructure Providers — hosting, database, and security service providers that maintain the technical infrastructure of the deras88 Platform, operating under strict data processing agreements.
• Regulatory and Legal Authorities — where deras88 is required by applicable law, court order, or regulatory direction to disclose personal data. Such disclosures will be made only to the extent strictly required.
• Business Successors — in the event of a merger, acquisition, or sale of substantially all assets of deras88, your personal data may be transferred to the successor entity, which will be bound by privacy obligations no less protective than those set out in this Policy.

All third-party Data Processors engaged by deras88 are required to maintain appropriate technical and organisational measures to protect the personal data they handle on our behalf, and are prohibited from processing such data for any purpose other than providing their contracted service to deras88.

deras88 uses cookies and similar tracking technologies to operate and improve the Platform, personalise your experience, and support security functions. The following cookie types are used:

• Strictly Necessary Cookies — essential for the Platform to function. These include session authentication tokens, load-balancing cookies, and security cookies. These cannot be disabled without impairing Platform functionality.
• Functional Cookies — remember your preferences, such as language settings and last-used game categories, to improve usability across sessions.
• Analytics Cookies — collect aggregated, anonymised data about how Users interact with the Platform (pages visited, time spent, navigation paths) to help us identify areas for improvement.
• Security and Fraud Prevention Cookies — help detect suspicious login patterns, unusual device changes, and other indicators of fraudulent account activity.

You may control cookie settings through your browser preferences. Note that disabling strictly necessary cookies will prevent you from logging in or using core Platform features. Changes to cookie preferences take effect on your next session.

deras88 implements a comprehensive set of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Key measures include:

• Transport Layer Security (TLS/SSL) — all data transmitted between your device and the deras88 Platform is encrypted using 256-bit TLS encryption;
• Encryption at Rest — sensitive personal data and financial records stored in our database are encrypted at rest using industry-standard algorithms;
• Access Controls — access to personal data within deras88's internal systems is restricted on a strict need-to-know basis, with role-based access permissions and audit logging;
• Two-Factor Authentication — available to all Users for account login, and mandatory for deras88 administrative accounts;
• Regular Security Audits — the Platform undergoes periodic security assessments, including penetration testing, to identify and remediate vulnerabilities;
• Incident Response Plan — deras88 maintains a documented data breach response procedure. In the event of a breach that poses a risk to User rights, affected Users will be notified promptly.

deras88 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. Retention periods are determined with reference to the following principles:

• Active Accounts — personal data associated with an active deras88 Account is retained for the duration of the account relationship plus any applicable statutory retention period.
• Closed Accounts — following account closure, identity and financial transaction records are retained for a minimum of five (5) years to satisfy AML, tax, and regulatory obligations.
• Gaming History — records of bets, wagers, and game outcomes are retained for a minimum of five (5) years to support dispute resolution and regulatory reporting.
• KYC Documents — identity verification documents are retained for five (5) years following account closure, after which they are securely destroyed.
• Support Communications — chat logs and email correspondence relating to support queries are retained for three (3) years from the date of the interaction.
• Marketing Data — marketing preference records are retained for two (2) years following the last substantive interaction with the Platform, unless earlier erasure is requested.

Upon the expiry of the applicable retention period, personal data is either securely deleted or irreversibly anonymised in accordance with our internal data lifecycle procedures.

As an individual whose personal data is processed by deras88, you hold the following rights. You may exercise any of these rights by contacting our support team at the details provided in Section 15 of this Policy.

deras88 will respond to all valid data subject requests within a reasonable timeframe. We may need to verify your identity before fulfilling a request. Some requests may be subject to limitations where legal retention obligations or legitimate business interests apply — we will explain any such limitations clearly when they arise.

deras88 implements age verification as a mandatory step during the account registration process. Any account where the registered User is found to be under 21 years of age will be immediately closed, all winnings generated by underage play will be forfeited, and the deposited amount will be returned to the originating payment source.

If you believe that a person under 21 has registered an account on deras88 using false information, please contact our support team immediately so that we can investigate and take appropriate action.

In order to deliver certain Platform features — including payment processing, KYC verification, and infrastructure hosting — personal data held by deras88 may be transferred to and processed in jurisdictions outside Malaysia. Such transfers occur only where:

• The recipient country provides an adequate level of personal data protection as assessed by deras88's compliance team;
• Appropriate contractual safeguards are in place with the Data Processor, including contractual clauses requiring data protection standards equivalent to those applied by deras88; or
• The transfer is necessary for the performance of a contract with you (e.g., processing a cryptocurrency withdrawal via an international blockchain network).

Where cross-border data transfers occur, deras88 ensures that recipient parties are bound by obligations that afford a level of protection to your personal data that is materially equivalent to the protections described in this Policy.

The deras88 Platform may contain references to or integrations with third-party services such as payment gateways and identity verification providers. This Policy applies solely to the personal data collected and processed by deras88. Third-party service providers operate under their own independent privacy policies, which deras88 does not control.

deras88 encourages Users to review the privacy policies of any third-party services they interact with in connection with their use of the Platform, particularly payment service providers such as Touch 'n Go eWallet, Boost, GrabPay, and the FPX banking network.

deras88 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or Platform features. Material changes will be communicated to registered Users by publishing a notice on the Platform or, where appropriate, by direct notification to the email address associated with your Account.

The "Last Updated" date displayed at the top of this page reflects the most recent revision. Your continued use of the deras88 Platform following the effective date of any amendment constitutes your acceptance of the revised Policy. If you do not agree with the amended Policy, you should cease using the Platform and request account closure.

For any question, concern, or request relating to this Privacy Policy — including data access, rectification, erasure, portability, or withdrawal of consent — please contact the deras88 support team through the channels below. Please include "Privacy Request" in the subject line or opening message so that your enquiry is routed to our compliance team for priority handling.

For queries specifically relating to responsible gambling, self-exclusion requests, or deposit limit adjustments, please visit our Responsible Gambling page. For matters relating to account access, bonus eligibility, or payment disputes, please refer to our Terms & Conditions.