Privacy Policy digi28 — Your Personal Data Protection

1Introduction

Digi28 ("we", "Platform" or "digi28.pro") is committed to protecting the privacy and security of the personal data of all users on our platform. This Privacy Policy clearly and transparently explains how we collect, use, store, transfer, and protect your personal information when you register for or use any services offered by digi28.

This policy applies to all users of the digi28 platform, including registered members, website visitors, and users of our mobile app. We encourage you to read this document carefully so you fully understand your rights and how we handle your data.

Digi28 complies with Malaysia's Personal Data Protection Act 2010 (PDPA) and all related regulations. We continuously update our privacy practices in line with legislative changes and the latest technological developments to ensure your data protection always remains at the highest level.

2Data We Collect

Digi28 only collects personal data that is genuinely necessary to provide our services effectively and securely. The following are the categories of data we collect:

We do not collect data that is irrelevant or exceeds the requirements of the stated purposes. Should we need to collect new categories of data in the future, we will notify you in advance and obtain appropriate consent.

3How We Collect Data

Your personal data is collected through the following channels:

• Account Registration: Information you provide when completing the registration form on the digi28 platform, including your name, email address, and phone number.
• KYC Process: Documents and information you submit during the identity verification process, including copies of your identification card and proof of address.
• Financial Transactions: Details collected when you make a deposit or submit a withdrawal request through the various available payment methods.
• Platform Usage: Data automatically generated when you use our platform, including activity logs, game history, and session data.
• Support Communication: Information you share when contacting our customer support team via live chat or email.
• Cookies & Similar Technologies: Data collected through cookies, tracking pixels, and similar technologies when you browse our website or use our app.

We do not purchase or acquire your personal data from third-party sources without your clear knowledge and consent.

4Purpose of Data Use

The personal data we collect is used solely for the following legitimate and stated purposes:

• Account Management: Creating, verifying, and managing your account on the digi28 platform, including secure login processes and two-factor authentication.
• Transaction Processing: Processing deposits, withdrawals, and any other financial transactions you make efficiently and securely.
• Legal Compliance: Fulfilling our obligations under anti-money laundering (AML) laws, the PDPA, and applicable licensing regulations.
• Platform Security: Detecting and preventing fraud, hacking, unauthorised access, and suspicious or unlawful activity.
• Service Enhancement: Analysing usage patterns to improve platform features, user experience, and overall technical performance.
• Communication: Sending account-related notices, platform updates, security alerts, and, with your consent, relevant promotional information.
• Customer Support: Providing technical assistance and resolving any issues you report promptly and effectively.

We will not use your data for any purpose other than those stated above without first obtaining your explicit consent.

5Data Sharing with Third Parties

Digi28 does not sell, rent, or disclose your personal data to third parties for their own marketing purposes. However, there are limited situations where we may need to share your data with certain parties:

• Payment Service Provider: Data required to process your deposit and withdrawal transactions is shared with authorised payment service providers such as FPX and e-wallet operators, subject to their own privacy policies.
• Identity Verification Provider: For KYC and AML compliance purposes, your identity information may be shared with approved third-party identity verification service providers.
• Statutory Authority: digi28 will disclose personal data to government authorities or law enforcement bodies when required to do so by law or court order.
• Technology Provider: Technical infrastructure providers such as cloud computing and security monitoring services may process some of your data in a technical capacity, subject to strict confidentiality agreements.

All third parties with whom we share data are bound by strict data protection agreements and are only permitted to use that data for the specified purposes.

6Cookies & Tracking Technologies

Digi28 uses cookies and similar tracking technologies to enhance your experience on the platform. The following are the types of cookies we use:

• Essential Cookies: These cookies are required for core platform functions such as login sessions, security, and navigation. They cannot be disabled without affecting platform functionality.
• Performance Cookies: Used to gather statistical information on how users interact with our platform, helping us identify areas for improvement.
• Functional Cookies: Storing your personal preferences such as language, display settings, and game preferences to provide a more personalised experience.
• Analytical Cookies: Helps us understand aggregate traffic patterns and user behaviour for platform improvement purposes.

You can manage cookie settings through your web browser. However, disabling certain cookies may affect the functionality and user experience of the digi28 platform. Please refer to your browser's guide for more information on how to manage cookies.

7Data Storage & Security

Digi28 implements comprehensive technical and organizational security measures to protect your personal data from unauthorized access, alteration, disclosure, or destruction:

• Encryption: All data transmitted through the platform is protected by 256-bit SSL/TLS encryption. Sensitive data at rest is also encrypted using the latest encryption algorithms.
• Access Control: Access to systems storing personal data is restricted to authorised personnel only, through a multi-factor authentication system.
• Continuous Monitoring: A 24/7 security monitoring system actively detects any suspicious activity or intrusion attempts in real time.
• Regular Backups: Data is regularly backed up to secure, separate locations to ensure service continuity in the event of a system failure.

Your personal data is retained for as long as necessary to fulfil the stated collection purposes or as required by applicable law. Generally, active account data is kept for the duration of account activity plus 7 years after account closure for legal compliance purposes.

8Your Rights

Under Malaysia's Personal Data Protection Act and digi28's policy, you have the following rights regarding your personal data:

• Right of Access: You have the right to obtain a copy of the personal data we hold about you at any time.
• Right to Rectification: If the personal data we hold about you is inaccurate or outdated, you have the right to request immediate correction.
• Right to Erasure: You may request the deletion of your personal data under certain circumstances, such as when the data is no longer needed for its original purpose.
• Right to Object: You have the right to object to the processing of your data for direct marketing purposes at any time.
• Right to Data Portability: You may request your data in a machine-readable format for transfer to another service provider.
• Right to Withdraw Consent: If your data processing is based on consent, you may withdraw that consent at any time.

To submit any request relating to the above rights, please contact our privacy team. All requests will be processed within 14 business days from the date of receipt. We may need to verify your identity before processing the request.

9Children's Data Protection

The digi28 platform is exclusively for users aged 18 and above. We do not knowingly collect or process personal data from individuals under the age of 18.

If we discover that personal data of a minor has been collected inadvertently, we will take immediate steps to delete such data and close the associated account. Parents or guardians who find that their child has registered on our platform without authorization are requested to contact our support team immediately.

10Privacy Policy Amendment

Digi28 reserves the right to amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technological developments. Any material amendments will be communicated via:

• A clear notice on the platform's home page prior to the amendment taking effect.
• A notification email will be sent to your registered email address at least 7 days before the effective date.
• Update the "Updated" date at the top of this document.

Your continued use of the digi28 platform after the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. If you do not agree with the changes, you have the right to close your account before the amendment takes effect.

11Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please contact our Data Protection Officer:

You also have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia if you are dissatisfied with how we have handled your complaint.