Privacy Policy

1 Introduction

This Privacy Policy (hereinafter referred to as the "Policy") is issued by dfkaya (hereinafter referred to as "the Platform", "we", "us", or "our") and governs the collection, use, storage, disclosure, and protection of personal data pertaining to all users (hereinafter "User", "Player", or "you") of the dfkaya website at https://dfkaya.cam and any associated services, features, or digital properties operated by dfkaya.

dfkaya operates as an online gaming and sports betting platform serving players primarily in Malaysia, including users located in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and other regions across the country. In the course of providing our services — which include live casino games, slot games, sports betting, and payment processing — we necessarily collect and process certain personal data about our users.

This Policy is designed to provide full transparency regarding our data handling practices in accordance with internationally recognised data protection principles. By accessing the dfkaya platform and registering an Account, you acknowledge that you have read, understood, and consent to the data processing practices described in this Policy.

2 Definitions

For the purposes of this Privacy Policy, the following definitions apply:

• "Account" — A registered user profile created on the dfkaya platform, through which the Player accesses services and manages funds.
• "Cookies" — Small text files placed on your Device by a website server to store preference information and facilitate session continuity.
• "Data Controller" — The entity that determines the purposes and means of processing personal data. For all processing activities described in this Policy, dfkaya acts as the Data Controller.
• "Data Processor" — A third party that processes personal data on behalf of the Data Controller under contractual obligation.
• "Device" — Any computer, smartphone, tablet, or other electronic device used to access the dfkaya platform.
• "KYC" — Know Your Customer: a mandatory identity verification process requiring submission of government-issued identification documents.
• "Personal Data" — Any information relating to an identified or identifiable natural person, including name, identification number, contact details, financial information, or online identifiers.
• "Processing" — Any operation or set of operations performed on Personal Data, including collection, storage, use, disclosure, and deletion.
• "Third Party" — Any person or entity other than the User and dfkaya, including payment processors, identity verification providers, and analytics partners.

3 Data We Collect

dfkaya collects personal data that is necessary to provide you with our services, comply with our legal obligations, and maintain the security and integrity of the platform. The categories of personal data we collect include:

dfkaya does not collect or process special categories of sensitive personal data (such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data) except where strictly required for identity verification under our KYC obligations.

4 How We Collect Data

dfkaya collects personal data through the following channels:

• Direct Collection: Data you provide voluntarily when registering an Account, completing KYC verification, making deposits or withdrawals via Malaysian payment channels (Maybank, CIMB, Public Bank, FPX, DuitNow, Touch 'n Go eWallet, Boost, GrabPay), contacting customer support, or responding to surveys.
• Automated Collection: Technical data automatically collected when you access the platform, including IP addresses, cookies, device identifiers, browser fingerprints, and session data.
• Third-Party Sources: Identity and fraud risk data received from licensed KYC verification service providers; financial data from payment processors and banking partners; risk and compliance data from third-party anti-fraud and anti-money laundering screening services.
• Inferred Data: Behavioural profiles and risk assessments derived from your gaming activity data for the purposes of responsible gambling monitoring and fraud prevention.

5 Data Processing & Use

dfkaya processes your personal data for the following specific purposes:

1. Account Management: To create, verify, maintain, and administer your registered Account on the dfkaya platform.
2. Identity Verification (KYC): To verify your identity and age (21+ requirement) in compliance with our international licensing obligations. This includes processing your government-issued identification documents.
3. Payment Processing: To process deposits and withdrawals in Malaysian Ringgit (MYR) via your selected payment method, including e-wallets, bank transfers via Maybank, CIMB, Public Bank, or Hong Leong Bank, FPX, DuitNow, and cryptocurrency channels.
4. Service Delivery: To provide you with access to live casino, slots, sports betting, and other gaming services available on the platform.
5. Fraud Prevention & Security: To detect, investigate, and prevent fraudulent transactions, money laundering, account takeovers, and other prohibited conduct. This includes automated risk-scoring and transaction monitoring.
6. Legal & Regulatory Compliance: To fulfil our obligations under applicable international gaming licensing requirements, anti-money laundering (AML) regulations, and data protection frameworks.
7. Responsible Gambling: To monitor gaming behaviour for indicators of problem gambling and to enforce responsible gambling tool settings such as deposit limits and self-exclusion orders.
8. Customer Support: To respond to your queries, process complaints, and resolve disputes submitted through live chat, email, or other support channels.
9. Marketing Communications: To send you promotional offers, bonus notifications, and platform updates, where you have provided your consent or where we have a legitimate interest to do so, subject always to your right to opt out.
10. Platform Improvement: To analyse aggregated usage data and improve the performance, usability, and content of the dfkaya platform.

6 Legal Basis for Processing

dfkaya processes your personal data on one or more of the following legal grounds, consistent with internationally recognised data protection principles:

• Contractual Necessity: Processing required to enter into and perform the contract with you — specifically, to provide you with gaming services, process payments, and manage your Account in accordance with our Terms & Conditions.
• Legal Obligation: Processing required to comply with our obligations under applicable licensing requirements, anti-money laundering regulations, and other applicable laws — including mandatory KYC identity verification.
• Legitimate Interests: Processing for purposes of fraud prevention, platform security, responsible gambling monitoring, and general platform improvement, where such interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing for marketing communications and the placing of non-essential cookies, where your freely given, specific, informed, and unambiguous consent has been obtained. You may withdraw this consent at any time.

7 Data Sharing & Disclosure

dfkaya does not sell, rent, or trade your personal data to third parties for commercial or marketing purposes. We may disclose your personal data only in the following strictly defined circumstances:

• Payment Service Providers: We share necessary financial and identity data with licensed payment processors and financial institutions to facilitate deposits and withdrawals via your chosen Malaysian payment channel (Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong Bank, or cryptocurrency processors).
• Identity Verification Providers: We share identity data with licensed KYC verification service providers solely for the purpose of verifying your identity and age in compliance with our licensing obligations.
• Anti-Fraud & AML Services: We share transaction and identity data with licensed fraud prevention and anti-money laundering screening services to detect and prevent financial crime.
• Technology Infrastructure Partners: We share limited technical data with cloud hosting, content delivery, and platform security service providers who process such data on our behalf under binding data processing agreements.
• Legal & Regulatory Authorities: We may disclose personal data to relevant regulatory bodies, law enforcement agencies, or courts where legally required to do so under applicable law or pursuant to a valid legal order.
• Business Transfers: In the event of a merger, acquisition, or sale of all or substantially all of dfkaya's assets, your personal data may be transferred to the successor entity, subject to equivalent privacy protections.

8 Cookies & Tracking Technologies

dfkaya uses cookies and similar tracking technologies on its platform. Cookies are small data files stored on your Device that help us deliver a functional, personalised, and secure user experience.

We use the following categories of cookies:

• Strictly Necessary Cookies: Essential for the operation of the platform. These include session authentication cookies, security tokens, and load-balancing identifiers. These cookies cannot be disabled without impairing platform functionality.
• Functional Cookies: Used to remember your preferences, such as language settings, responsible gambling limit configurations, and display preferences.
• Analytics Cookies: Used to collect aggregated, anonymised data about how users interact with the platform — including pages visited, session duration, and navigation paths — to help us improve the platform.
• Security Cookies: Used to detect and prevent fraudulent account access, identify suspicious session behaviour, and enforce our security policies.

You may control non-essential cookie categories through your browser settings. Note that disabling certain cookies may affect the performance and functionality of the dfkaya platform.

9 Data Retention

dfkaya retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or licensing obligations.

The following general retention principles apply:

• Active Accounts: Personal data associated with an active Account is retained for the duration of your Account's existence plus a minimum period required by applicable AML and gaming licensing regulations after Account closure.
• KYC & Identity Documents: Identity verification documents are retained for a minimum period of five (5) years from the date of Account closure or the last transaction, in accordance with anti-money laundering compliance requirements.
• Transaction Records: Financial transaction data, including deposit and withdrawal records, is retained for a minimum of five (5) years from the date of the transaction.
• Support Communications: Customer support records are retained for a period of two (2) years from the date of the interaction.
• Marketing Data: Where consent is the legal basis for marketing communications, data is retained until you withdraw your consent or request deletion, whichever occurs earlier.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be attributed to any identifiable individual.

10 Data Security

dfkaya implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. Our security framework includes:

• Encryption: All data transmitted between your Device and the dfkaya platform is encrypted using industry-standard 256-bit SSL/TLS protocols.
• Access Controls: Access to personal data is strictly limited to authorised personnel who require it to perform their job functions, and is governed by role-based access control policies.
• Two-Factor Authentication: Account access may be protected by two-factor authentication (2FA) to mitigate the risk of unauthorised account access.
• Penetration Testing: dfkaya engages independent security professionals to conduct regular penetration testing and vulnerability assessments of our platform.
• Incident Response: dfkaya maintains a documented data breach incident response procedure. In the event of a data breach that poses a risk to your rights and freedoms, we will notify affected users and relevant authorities within the timeframes required by applicable law.
• Segregated Data Storage: Player funds and personal data are stored in environments separate from general operational systems.

11 Your Rights

Subject to applicable law and our legal obligations, you have the following rights in relation to your personal data held by dfkaya. You may exercise any of these rights by contacting our support team via live chat or email.

dfkaya will respond to all valid data rights requests within thirty (30) days of receipt. In complex cases, this period may be extended by a further two (2) months, in which case you will be notified of the extension and the reasons for it.

12 International Transfers

As an internationally licensed platform serving Malaysian users, dfkaya may transfer your personal data to countries outside of Malaysia for the purposes of payment processing, identity verification, cloud infrastructure hosting, and platform security. Such transfers may include countries that have different data protection laws than those applicable in Malaysia.

Where personal data is transferred internationally, dfkaya ensures that appropriate safeguards are in place to protect your data, including:

• Transfers only to recipients located in countries that provide an adequate level of data protection as determined by applicable standards.
• Use of contractual clauses with data recipients that impose equivalent data protection obligations.
• Transfers to service providers who are certified under recognised international data protection frameworks.

13 Minors & Age Policy

dfkaya's services are strictly intended for persons aged 21 years and above. We do not knowingly collect, process, or retain personal data from individuals under the age of 21.

As part of our mandatory KYC process, all Account holders are required to submit government-issued photo identification confirming their age. Any Account identified as being held by an individual under the age of 21 will be suspended immediately, and any personal data collected in connection with such an Account will be deleted as soon as legally permissible.

14 Third-Party Links

The dfkaya platform may contain references or links to third-party websites or services, including payment providers and responsible gambling support organisations. dfkaya has no control over the content, privacy practices, or data handling of any third-party website and accepts no responsibility or liability for their privacy policies or practices.

We encourage you to review the privacy policies of any third-party services you access in connection with your use of dfkaya. The presence of a reference to a third-party service on the dfkaya platform does not constitute an endorsement of that service's privacy practices.

15 Policy Amendments

dfkaya reserves the right to update, amend, or modify this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform operations. All updates will be published on this page with a revised "Last Updated" date displayed prominently at the top of the document.

Where amendments are material in nature — meaning they significantly affect your rights or the way we handle your personal data — dfkaya will endeavour to notify registered Account holders via email or on-platform notification a minimum of seven (7) days before the changes take effect.

Your continued use of the dfkaya platform after the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. If you do not agree to the updated Policy, you must discontinue use of the platform and close your Account.

16 Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy, your personal data, or the exercise of your data rights, please contact the dfkaya data protection team through the following channels:

We take data privacy seriously and are committed to handling all requests with professionalism, confidentiality, and respect for your rights as a platform user.