Dhuffle Privacy Policy – Player Personal Data Protection

Your privacy is our priority. This policy transparently explains how dhuffle collects, uses, stores, and protects your personal information in accordance with Malaysia's Personal Data Protection Act (PDPA).

Updated: 1 January 2026 Malaysia PDPA Bahasa Melayu
This Privacy Policy is effective from 1 January 2026. Your continued use of the dhuffle platform after this date constitutes your acceptance of the updated terms.

01Introduction

Dhuffle Entertainment Sdn. Bhd. ("dhuffle", "we") is committed to protecting the privacy and security of your personal data. This Privacy Policy explains our practices regarding the collection, use, storage, and disclosure of personal information you provide while using the dhuffle platform via dhuffle.pro.

This document is prepared in accordance with the requirements of Malaysia Personal Data Protection Act 2010 (PDPA) and any relevant regulations. As a responsible data processor, we only collect data that is strictly necessary, use it solely for the stated purposes, and protect it using industry-standard security measures.

By registering or using the dhuffle platform, you agree to the collection and use of your information as described in this Privacy Policy. If you do not agree, please discontinue use of the platform and contact us to close your account.

02Personal Data We Collect

Dhuffle collects various types of information depending on how you interact with our platform. Below is a summary of the data categories we collect and their purposes:

Data Category Example Information Source
Identity Information Full name, date of birth, identification card number, gender Provided by you during registration / KYC
Contact Information Email address, mobile number, mailing address Provided by you during registration
Financial Information Bank account number, account holder name, transaction history Provided by you during deposit / withdrawal
Platform Usage Data Gaming history, wagering, login activity, account activity Automatically generated during use
Technical Data IP address, device type, web browser, operating system Collected automatically
KYC Data MyKad / passport copy, verification selfie, proof of address Provided by you during the verification process

We do not collect sensitive data categories such as health information, religious beliefs, or political affiliations unless specifically required by applicable law.

03How We Use Your Data

Dhuffle uses your personal data solely for lawful and necessary purposes in operating the platform. We will not use your data for any other purpose without obtaining your consent first.

  • Account Management: Creating and maintaining your account, verifying your identity, and processing logins securely.
  • Transaction Processing: Processing deposits, withdrawals, and all financial transactions related to your account.
  • Legal Compliance: Meeting KYC, AML (Anti-Money Laundering), and reporting obligations to the relevant authorities as required by law.
  • Platform Security: Detecting, investigating, and preventing fraud, account misuse, and other security threats.
  • Customer Support: Handling enquiries, complaints, and support requests you submit to our team.
  • Service Improvement: Analysing usage patterns to improve the platform experience, interface, and game selection.
  • Marketing Communications: Sending promotional information, bonuses, and exclusive offers – only if you have consented to receive them.
  • Responsible Gaming: Monitoring gaming activity to identify signs of at-risk gaming behaviour and provide appropriate support.

You may opt out of receiving marketing communications at any time via your account settings or by contacting the dhuffle support team. Unsubscribing from promotional emails will not affect important operational communications such as transaction and security notices.

04Data Sharing & Disclosure

Dhuffle does not sell, rent, or trade your personal data to any third party for their commercial purposes. However, in the course of operating the platform, we may share your information with the following parties in certain circumstances:

  • Payment Service Providers: Payment processors, banks, and e-wallet providers required to execute your financial transactions. These parties are bound by strict confidentiality agreements.
  • Game Providers: International-standard game software providers that operate the games on the dhuffle platform. Only the minimum data required for smooth gameplay will be shared.
  • Legal Authorities: Government agencies, regulatory bodies, or law enforcement authorities when required by law, court order, or regulatory obligation.
  • Technology Service Providers: Companies that provide IT infrastructure, analytics, cybersecurity, and technical support services required for platform operations.
  • Anti-Fraud Agency: Entities that assist us in detecting and preventing fraud, money laundering, and other illegal activities.

In all of the above cases, data sharing is limited to what is strictly necessary for the stated purpose. All third parties involved are required to comply with data protection standards equivalent to or higher than those we uphold.

05Data Storage & Security Measures

All personal data collected by dhuffle is stored on secure servers with strict access controls. We use 256-bit SSL encryption to protect all data in transit, and stored data is further safeguarded with additional encryption and multi-layered access controls.

Retention Period: dhuffle retains your personal data for as long as your account is active and for any additional period required by law — typically five (5) to seven (7) years after account closure to meet AML compliance and financial record-keeping requirements. Once the required retention period ends, your data will be securely deleted or anonymised.

  • Data encryption during transmission and at rest (encryption at rest and in transit).
  • Role-based access control (RBAC) – only staff who need access to specific data are permitted to view it.
  • Regular access log audits to detect any unauthorised access.
  • Two-factor authentication (2FA) for all internal systems containing player data.
  • Penetration testing and vulnerability scanning are conducted regularly by independent parties.
  • A clear incident response plan in the event of a data breach.

While we take all reasonable steps to protect your data, no digital system can be guaranteed completely secure. We encourage you to use a strong password and enable 2FA on your dhuffle account for added protection.

06Cookies & Tracking Technologies

Dhuffle uses cookies and similar tracking technologies to enhance your experience on the platform. Cookies are small text files stored on your device when you visit our website. They help us recognise you on return visits and ensure the platform functions correctly.

Cookie Type Purpose Duration
Required Maintaining login sessions, account security, and basic platform preferences Session / 30 days
Analytics Understanding how players use the platform to improve the overall experience Up to 2 years
Marketing Displaying relevant promotional content based on your interests Up to 1 year

You can manage or delete cookies through your web browser settings. Please note that disabling required cookies (essential cookies) may affect certain features of the dhuffle platform, including the ability to stay logged in.

07Your Rights Regarding Personal Data

As a data subject under Malaysia's PDPA, you have certain rights regarding your personal data held by dhuffle. We respect these rights and will facilitate their exercise upon request.

To exercise any of the rights below, please contact the dhuffle support team. We will process your request within a reasonable timeframe and may require identity verification before fulfilling it.

08Children's Data

The dhuffle platform is strictly for individuals aged 18 and above. We do not intentionally collect or store personal data from individuals under the age of 18.

If we discover that personal data of an individual under the age of 18 has been collected without proper age verification, we will take immediate steps to delete that data and close the relevant account. Parents or guardians who become aware that their child has registered on the dhuffle platform without consent are welcome to contact us immediately.

Dhuffle employs an age verification system during registration. Any attempt to circumvent the age verification process is a serious violation of our Terms and Conditions and may be reported to the relevant authorities.

09Third-Party Links & Integrations

The dhuffle platform integrates with certain third-party services such as payment providers and gaming systems to ensure smooth operations. While we carefully select our third-party partners and require them to meet high privacy standards, dhuffle is not responsible for the privacy practices of third parties operating under their own policies.

Your interactions with payment providers during deposit or withdrawal transactions are subject to those providers' own privacy policies. We recommend reading the privacy policy of any third-party service you use alongside the dhuffle platform.

10Amendments to This Privacy Policy

Dhuffle reserves the right to amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service improvements. Any material changes will be communicated to you via in-platform notifications or email at least seven (7) days before taking effect.

The "Updated" date at the top of this document will always reflect the currently applicable version. We encourage you to review this Privacy Policy periodically to stay informed about how we manage your data. Continued use of the dhuffle platform after any amendments take effect will be considered acceptance of those changes.

11Contact Us About Privacy

If you have any questions, concerns, or wish to exercise your personal data rights, please contact the dhuffle Data Protection Officer (DPO) through the following channels:

  • Privacy Email: [email protected]
  • Live Chat: Available 24/7 within the dhuffle platform
  • Response Time: We aim to respond to all privacy enquiries within 5 business days

We also accept complaints relating to data protection. If you are not satisfied with our response, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia in accordance with the procedures set by that authority.

Dhuffle's live support team is the fastest way to get help with any privacy or account data queries. Use the live chat icon at the bottom corner of the platform to reach our team at any time.

Your Personal Data Rights under the PDPA

Dhuffle fully respects your rights as the owner of your personal data. The following are rights you may exercise at any time.

Right of Access

You have the right to request a copy of the personal data we hold about you at any time.

Right to Rectification

If any of your data is inaccurate or incomplete, you have the right to request a correction.

Right to Erasure

In certain circumstances, you may request that your data be deleted, subject to legal requirements.

Right to Object

You may object to the processing of your data for direct marketing purposes at any time.

Right to Restriction

You may request a restriction on data processing in certain situations, such as during a dispute.

Right to Portability

You may request your data in a structured format that can be transferred to another platform.

Withdraw Consent

If processing is based on consent, you may withdraw that consent at any time.

Right to Complain

You have the right to lodge a complaint with the PDPA Commissioner if you are not satisfied with our response.

How dhuffle Protecting Your Data

Data protection is more than a legal obligation for us – it is a responsibility we take seriously in order to earn and keep the trust of every player.

Advanced Encryption

All data transmitted between your device and dhuffle's servers is protected with 256-bit SSL encryption — the same standard used by leading banking institutions in Malaysia.

Integrated & Secure KYC

Dhuffle's identity verification (KYC) process is conducted through a secure, encrypted system. Your identification documents are only accessed by authorised staff for verification purposes.

Malaysia PDPA Compliance

Dhuffle operates in full compliance with Malaysia's Personal Data Protection Act 2010 (PDPA). We have a designated Data Protection Officer (DPO) responsible for ensuring ongoing compliance.

Data Minimisation

We only collect data that is strictly necessary for the stated purposes. Our data minimisation principle means you need not worry about excess information being stored without clear reason.

Clear Retention Policy

Dhuffle maintains a clear data retention schedule. Data that is no longer needed is securely deleted or anonymised according to defined retention periods, rather than stored indefinitely without purpose.

Regular Security Audits

The dhuffle system undergoes regular independent security testing and audits. Any identified vulnerabilities are addressed promptly to ensure your data remains protected at all times.

Your Data is Safe, Your Gaming is Worry-Free

Now you know dhuffle's commitment to protecting your privacy. Register an account today and enjoy over 1,000 games with full confidence that your personal data is in trusted hands.

Have more questions about privacy? Our 24/7 support team is ready to help.

Bahasa Melayu