diss88 Privacy Policy 🔒

1. Who We Are

This Privacy Policy is issued by the operator of diss88.net (referred to in this document as "diss88", "we", "us", or "our"). diss88 operates an online casino and sports betting platform serving players in Malaysia and other permitted jurisdictions.

diss88 is the data controller in respect of personal data collected from players and platform visitors in connection with the services described on diss88.net. Questions about this policy or your data may be directed to our support team as described in Section 15.

2. Personal Data We Collect

diss88 collects the following categories of personal data from players and platform visitors:

3. How We Collect Your Data

diss88 collects personal data through the following means:

3.1 Direct Provision

You provide data directly to diss88 when you register an account, complete identity verification, make a deposit or withdrawal, contact our support team, or update your account profile. This is the primary source of identity, contact, and financial data held by diss88.

3.2 Automated Collection

When you access the diss88 platform, we automatically collect technical data via server logs, browser cookies, and similar tracking technologies. This includes your IP address, device identifiers, and session behaviour data. See Section 7 for our full cookies policy.

3.3 Third-Party Sources

diss88 may receive personal data from third parties in the following contexts:

• Payment providers — confirmation of successful transactions and payment method status;
• Identity verification services — results of automated document and identity checks;
• Fraud prevention databases — alerts regarding accounts associated with known fraudulent activity;
• Responsible gaming databases — self-exclusion status checks where applicable.

4. How We Use Your Personal Data

diss88 uses the personal data we collect for the following purposes:

• Account management — creating and maintaining your diss88 player account, verifying your identity at registration and withdrawal, and processing account settings changes;
• Service delivery — enabling access to games, processing bets, settling wagers, and delivering all platform features;
• Payment processing — facilitating deposits and withdrawals via Touch n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, and USDT TRC20;
• Regulatory compliance — fulfilling know-your-customer (KYC) obligations, anti-money laundering (AML) checks, and age verification requirements;
• Fraud prevention and security — detecting and preventing fraudulent account activity, bonus abuse, multi-accounting, and other prohibited conduct;
• Customer support — responding to inquiries, resolving disputes, and maintaining records of player communications;
• Responsible gaming — monitoring for patterns consistent with problem gambling behaviour and enforcing self-exclusion and limit settings;
• Platform improvement — analysing aggregated and anonymised usage data to improve platform performance, game selection, and user experience;
• Legal obligations — responding to lawful requests from regulatory authorities, law enforcement, or courts.

5. Legal Basis for Processing

diss88 processes your personal data under the following legal bases:

• Contract performance — processing necessary to fulfil our obligations under the player account agreement, including payment processing, game delivery, and account administration;
• Legal obligation — processing required to comply with applicable laws, including KYC, AML, and age verification requirements;
• Legitimate interests — processing for fraud prevention, platform security, responsible gaming monitoring, and service improvement, where these interests are not overridden by your fundamental rights;
• Consent — where we process data based on your consent (such as for optional marketing communications, where applicable), you may withdraw consent at any time without affecting the lawfulness of prior processing.

6. Data Sharing and Disclosure

diss88 does not sell, rent, or trade personal data to third parties for marketing purposes. We may share your personal data with the following categories of recipients in the circumstances described:

6.1 Payment Service Providers

Personal and financial data is shared with payment processors (including e-wallet operators and banking partners) to facilitate deposit and withdrawal transactions. These providers are contractually bound to process data only for the stated purpose and in accordance with applicable data protection law.

6.2 Identity Verification Providers

During KYC verification, diss88 may share identity documents and personal details with licensed identity verification service providers. These services are used solely for verification purposes.

6.3 Fraud and Compliance Partners

diss88 may share data with fraud prevention services and responsible gaming databases for the purpose of detecting and preventing financial crime, bonus abuse, or problem gambling activity.

6.4 Legal and Regulatory Authorities

diss88 will disclose personal data to regulatory authorities, law enforcement agencies, or courts where required by applicable law or valid legal process. Where permitted by law, diss88 will notify affected players of such disclosures.

6.5 Corporate Transactions

In the event of a merger, acquisition, or sale of all or part of diss88's business, player data may be transferred to the acquiring entity. Affected players will be notified before their data is transferred and becomes subject to a different privacy policy.

7. Cookies and Tracking Technologies

diss88 uses cookies and similar tracking technologies to operate and improve the platform. A cookie is a small text file stored on your device by your browser. diss88 uses the following categories of cookies:

• Essential cookies — strictly necessary for the platform to function. These include session authentication cookies that keep you logged in to your diss88 account during a session. These cannot be disabled without breaking core platform functionality;
• Functional cookies — remember your preferences, such as language settings and last-played games, to improve your experience;
• Analytics cookies — collect anonymised and aggregated data about platform usage to help diss88 understand how players navigate the site and where improvements can be made. These do not identify individual players;
• Security cookies — used to detect and prevent fraudulent activity and protect the integrity of player accounts.

diss88 does not use third-party advertising or behavioural tracking cookies. You may adjust your browser settings to control or delete cookies, though disabling essential cookies will affect your ability to use the diss88 platform.

8. Data Security

diss88 implements technical and organisational security measures appropriate to the risk posed by the processing of your personal data. These measures include:

• TLS 1.3 encryption for all data in transit between your device and diss88 servers;
• Encryption of sensitive stored data, including password hashes and financial identifiers;
• Access controls limiting staff access to personal data to those with a legitimate operational need;
• Regular security assessments and penetration testing of platform infrastructure;
• Multi-factor authentication requirements for administrative access to player data systems;
• Incident response procedures for detecting, containing, and reporting data security incidents.

While diss88 takes data security seriously, no system is completely immune to breach. In the event of a data breach affecting your rights and freedoms, diss88 will notify affected players in accordance with applicable regulatory requirements.

9. Data Retention

diss88 retains personal data for the following periods:

• Active account data — retained for the lifetime of your diss88 account plus a minimum of 5 years following account closure, to comply with AML, KYC, and financial record-keeping obligations;
• Transaction records — retained for a minimum of 5 years from the date of the transaction in accordance with applicable financial regulations;
• Support communications — retained for 3 years following resolution of the matter, or longer if subject to an ongoing dispute;
• Technical logs (IP addresses, session data) — retained for up to 12 months from collection, subject to earlier deletion once no longer required for security or fraud investigation purposes;
• Identity verification documents — retained for 5 years following account closure.

Upon expiry of the applicable retention period, personal data is either securely deleted or anonymised such that it can no longer be attributed to an identified individual.

10. Your Data Rights

As a diss88 player, you have the following rights in relation to your personal data:

To exercise any of the above rights, contact diss88 support via live chat or email at [email protected]. We will respond within 30 days. We may require identity verification before processing your request to protect against fraudulent access to another player's data.

11. Children's Privacy

The diss88 platform is strictly for persons aged 21 and above. diss88 does not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from a person under 21, we will immediately close the associated account and delete all personal data collected in connection with it.

If you believe a minor has accessed or registered on the diss88 platform, please contact our support team immediately via live chat or email.

12. International Data Transfers

diss88 operates with infrastructure that may involve the transfer of personal data to countries outside Malaysia. Where such transfers occur, diss88 ensures that appropriate safeguards are in place — including contractual data processing agreements with receiving parties that reflect applicable data protection standards — to ensure that your personal data receives the same level of protection regardless of where it is processed.

Identity verification and fraud prevention partners used by diss88 are selected in part on the basis of their data security and privacy compliance standards.

13. Third-Party Services

The diss88 platform integrates game content from third-party providers (including Pragmatic Play, PG Soft, Evolution Gaming, and others). These providers deliver game content via their own certified platforms. While diss88 controls the overarching player account environment, game providers may process technical data (such as session tokens and bet data) independently in their role as game operators. diss88 ensures that all game providers used on the platform operate under internationally recognised gaming licences with their own applicable data protection obligations.

This Privacy Policy does not extend to any external websites that may be accessible from diss88 platform links (such as responsible gaming resource sites). You should review the privacy policies of those external platforms separately.

14. Changes to This Privacy Policy

14.1 diss88 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or regulatory requirements. The effective date of the current version is displayed at the top of this page.

14.2 Where changes are material — meaning they significantly affect how we collect, use, or share your personal data — diss88 will notify registered players via email to their registered address prior to the changes taking effect, giving players the opportunity to review the updated policy.

14.3 Your continued use of the diss88 platform following notification of material policy changes constitutes your acceptance of the updated Privacy Policy.

15. How to Contact Us

For any questions about this Privacy Policy, to exercise your data rights, or to raise a concern about how diss88 handles your personal data, please contact us via:

• Live Chat: Available 24/7 via the support widget on the diss88 platform — the fastest route for urgent queries;
• Email: [email protected] (plain text — please copy this address manually; do not click).

diss88 targets a response to privacy-related enquiries within 5 business days and to formal data subject access requests within 30 calendar days of receipt.