Privacy Policy DK7 –
Member Personal Data Protection

1 Introduction

This Privacy Policy is issued by dk7 ("we", "the Company", or "the Platform") and applies to all users of the website dk7.cx, the dk7 mobile app, and all services we provide.

We understand that your personal data is a trust you place in us. That is why dk7 takes a serious and responsible approach to every aspect of handling personal information — from how we collect it to how it is protected and deleted when no longer needed.

This Privacy Policy is drafted in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and internationally recognised data protection standards. By using the dk7 platform, you confirm that you have read and fully understand this policy.

2 Personal Data We Collect

Dk7 only collects data that is strictly necessary to provide safe, efficient, and responsible services. Below are the types of data we collect and their purposes:

We never collect sensitive data such as medical information, religious beliefs, or political affiliations unless required by applicable law.

3 How We Use Your Data

The personal data we collect is used responsibly for the following purposes only:

• Account management: Creating, verifying, and maintaining your member account on the dk7 platform.
• Transaction processing: Processing deposits, withdrawals, and any financial transactions related to your account.
• KYC Verification: Verifying your identity to meet anti-money laundering (AML) compliance and fraud prevention requirements.
• Service communications: Sending important account-related information, security updates, transaction notifications, and changes to the terms of service.
• Platform improvement: Analyzing usage patterns in aggregate (without identifying individuals) to improve the interface and user experience.
• Responsible gaming: Monitoring gameplay patterns to identify early signs of problem gambling and providing appropriate support.
• Security: Detecting and preventing fraudulent activity, bot usage, collusion, and other security threats.

4 Data Sharing With Third Parties

Dk7 understands that your trust is our most valuable asset. We only share your personal data in limited and lawful circumstances as follows:

• Service providers: Payment processing companies, gaming platform providers, and KYC service providers acting on our behalf — subject to strict confidentiality agreements.
• Legal requirement: When required by a court, regulatory authority, or Malaysian law enforcement agency through a lawful process.
• Interest protection: Where necessary to prevent fraud, manage security risks, or protect the legitimate rights of dk7 and its users.
• Business transfer: Should dk7 be involved in any merger, acquisition, or asset sale, user data may be transferred to the successor entity — with appropriate notice provided to you.

All third parties we work with are required to comply with data protection standards as stringent as our own, and must sign legally binding data processing agreements.

5 Data Security

Dk7 invests seriously in security infrastructure to ensure your data is always protected. The technical and organisational security measures we implement include:

• 256-bit SSL/TLS Encryption for all data in transit between your browser and our servers.
• Data-at-rest encryption — data stored on our servers is encrypted using the AES-256 algorithm.
• Two-factor authentication (2FA) available for all member accounts as an additional layer of security.
• Multi-layered access control — only specifically authorised personnel may access member personal data, and all access is logged and audited regularly.
• 24/7 security monitoring using intrusion detection systems (IDS) and real-time threat analytics.
• Penetration testing and independent security audits conducted periodically by accredited cybersecurity firms.
• Incident response plan that has been tested — in the event of any data breach, you will be notified within 72 hours.

6 Data Retention Period

Dk7 only retains your personal data for as long as it is needed for the purposes stated in this policy or as required by Malaysian law.

• Active account data: Retained for the duration your account remains active on the dk7 platform.
• Financial transaction data: Stored for a minimum of 7 years after the transaction date, in compliance with Malaysia's taxation and AML legal requirements.
• KYC Data: Stored for a minimum of 5 years after the account closure date or the last transaction date, whichever is later.
• Security and access logs: Stored for 2 years for fraud investigation and detection purposes.
• Support communication data: Stored for 3 years for reference and resolution of any future disputes.

Once the retention period has expired and there is no legal requirement to continue storing it, your data will be securely deleted or anonymised using industry-standard methods.

7 Your Rights

Under Malaysia's Personal Data Protection Act 2010, you have the following rights regarding your personal data held by dk7:

To exercise any of the above rights, please contact the dk7 customer support team via live chat or our official email. We will process your request promptly and respond within the stipulated timeframe.

8 Cookies and Tracking Technologies

The dk7 platform uses cookies and similar tracking technologies to enhance your experience and ensure the platform runs smoothly. Below are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as login, session management, and security. These cookies cannot be disabled without affecting platform functionality.
• Preference Cookies: Saving your preferences such as language, display settings, and game preferences so you do not need to reset them every time you log in.
• Analytics Cookies: Helping us understand how users interact with the platform in aggregate. This data is used to improve the platform's design and performance.
• Security Cookies: Used to detect suspicious activity, prevent fraud, and ensure every login session is legitimate.

You can manage your cookie preferences through your browser settings. However, disabling certain cookies may affect the functionality of the dk7 platform. Please note that essential cookies cannot be disabled as they are required for the security and core functionality of your account.

9 Children's Data Protection

The dk7 platform is strictly prohibited for use by individuals under the age of 18. We do not knowingly collect any personal data from children or minors.

If we discover that we have inadvertently collected personal data from a minor, we will take the following immediate steps:

• Suspending the account in question immediately while an investigation is conducted.
• Deleting all personal data related to the minor from our systems.
• Reporting the incident to the relevant authorities if necessary.

Parents or guardians who believe their child or dependent has registered an account on dk7 without permission should contact our support team immediately so that prompt action can be taken.

10 Changes to the Privacy Policy

Dk7 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or service improvements. The "Updated" date at the top of this document will always reflect the latest applicable version.

When we make significant changes to this policy, we will:

• Sending email notifications to all registered members at least 14 days before the changes take effect.
• Displaying a clear notice on the dk7 platform's home page.
• Sending in-app notifications on the dk7 mobile app to users who have installed the application.

Continued use of the dk7 platform after the effective date of any changes to this Privacy Policy constitutes your acceptance of the updated version. If you disagree with the changes made, you have the right to close your account before they take effect.

11 Contact Us About Privacy

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, we encourage you to contact us directly.

The dk7 Data Protection Team can be contacted via:

• Live Chat: Available 24/7 via the chat icon at the bottom corner of the platform.
• Email: [email protected] — we aim to respond to all privacy enquiries within 2 business days.
• Support Centre: Visit page FAQ us for answers to frequently asked questions about privacy and data security.

You also have the right to lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP) if you believe your privacy rights have been violated and the matter cannot be resolved directly with us.