Privacy Policy dorahoki – Comprehensive Personal Data Protection for Malaysian Players

Dorahoki ("we", "Platform") is fully committed to protecting the privacy of every individual who interacts with our platform. This Privacy Policy applies to all information collected through the dorahoki.wine website, mobile app, and all related services we provide to members in Malaysia.

We recognise that your trust is our most valuable asset. That is why we ensure every decision regarding your personal data is made with care, transparency, and in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and applicable international data protection standards.

This policy describes:

• The types of personal data we collect from you;
• The purpose and legal basis for collecting such data;
• How we store, protect, and process your data;
• Your rights regarding the personal data we hold;
• How you can contact us with any privacy-related enquiries.

Dorahoki only collects data that is genuinely necessary to provide you with a safe, fair, and seamless experience. The data we collect falls into several categories:

We do not collect sensitive data categories such as health information, political views, or religious beliefs except in very specific circumstances and with your explicit consent.

The personal data we collect is used solely for legitimate purposes that were stated at the time of collection. The following are the primary purposes for which your data is used at dorahoki:

• Account Management: Creating, verifying, and maintaining your member account, including secure login and two-factor authentication.
• Transaction Processing: Processing deposits, withdrawals, and all financial transactions securely and accurately using the payment information you provide.
• KYC Verification: Meeting legal requirements related to identity verification to prevent fraud, money laundering, and illicit financing.
• Customer Support: Providing technical support and resolving any complaints or enquiries you submit to our team.
• Platform Security: Detecting and preventing fraudulent activity, multiple account usage, and other security threats that could affect the platform and other members.
• Responsible Gaming: Monitoring gameplay patterns to identify signs of problem gambling and provide appropriate intervention.
• Service Communications: Sending important notifications relating to your account, transactions, policy changes, and security information.
• Platform Improvement: Analysing aggregated and anonymised usage data to improve the user experience and platform performance.

Dorahoki does not use your personal data for third-party advertising or automated decision-making that significantly affects you without human intervention.

Dorahoki does not sell, rent, or distribute your personal data to third parties for marketing purposes. However, in operating a safe and efficient platform, we may need to share certain personal data with the following parties under limited and controlled circumstances:

• Payment Processing Providers: Required financial transaction information is shared with trusted payment gateway providers to process your deposits and withdrawals. All such providers are bound by strict data protection agreements.
• KYC Service Providers: Identity verification documents are shared with certified KYC partners for verification purposes only and are not retained longer than necessary.
• Game Providers: Certain game session data is shared with game software providers to ensure game integrity and smooth gameplay.
• Legal Authorities: dorahoki will disclose personal data to government authorities or law enforcement when required by Malaysian law or a valid court order.
• Technical Service Providers: Cloud infrastructure and cybersecurity providers that help us maintain the platform may have limited access to data within the scope of their services only.

All third parties we work with are required to comply with privacy policies that are equivalent to or stricter than dorahoki's own Privacy Policy.

Dorahoki employs multiple layers of the latest security technology to ensure your personal data is always protected against unauthorized access, disclosure, alteration, or destruction:

• Data Encryption at Rest: All data stored in our database is protected with AES-256 encryption, including account information, transaction records, and KYC documents.
• Data Encryption in Transit: All communications between your device and dorahoki servers are secured with TLS 1.3 protocol, ensuring no data can be intercepted during transmission.
• Layered Access Controls: Access to personal data is restricted on a least-privilege basis — only staff who require access for their specific duties are permitted to view the relevant data.
• 24/7 Monitoring: Our security monitoring system operates around the clock to detect and respond to any threats or suspicious activity in real time.
• Regular Security Audits: dorahoki conducts regular security audits and penetration testing by independent parties to identify and address any system vulnerabilities.

Data Retention Period: dorahoki retains your personal data for as long as your account is active or as long as necessary for the stated purposes. After account closure, data is retained for a minimum period of 7 years to meet legal and audit requirements, after which it will be securely deleted or anonymized.

Dorahoki uses cookies and similar tracking technologies to enhance your browsing experience and ensure the platform functions correctly. The following are the types of cookies we use:

• Essential Cookies (Required): These cookies are required for the platform to function properly. Without them, services such as secure login and session verification cannot operate. These cookies cannot be disabled.
• Performance Cookies: These cookies collect information about how you use the platform, such as the most frequently visited pages and error messages received. All information is aggregated and anonymised.
• Functional Cookies: These cookies allow the platform to remember your preferences such as language, region, and display settings to deliver a more personalised experience.
• Security Cookies: Used to detect suspicious activity, prevent fraud, and protect your account from unauthorised access.

You can manage cookie settings through your web browser. Please note that disabling certain cookies may affect platform functionality. dorahoki does not use third-party cookies for targeted advertising purposes.

As a dorahoki member, you have the following rights regarding your personal data that we hold. We are committed to respecting and facilitating the exercise of these rights:

To exercise any of the above rights, please contact the dorahoki Privacy Team by email at [email protected]. We will process your request within 14 business days at no charge.

The dorahoki platform is exclusively for individuals aged 18 and above. We do not knowingly collect or store any personal data from individuals under the age of 18.

If we discover that personal data of a minor has been collected without our knowledge, we will take immediate action to delete such data and close the associated account. Parents or guardians who believe their child may have registered an account at dorahoki are advised to contact us immediately through our customer support team.

Dorahoki also uses an integrated age verification system during the KYC process to ensure the platform is only accessible to eligible adult users.

In the course of its global operations, dorahoki may need to transfer your personal data to servers or processing facilities located outside Malaysia. Any such data transfer is carried out with adequate safeguards, including:

• Use of internationally recognised standard contractual clauses between dorahoki and data recipients;
• Transfers only to countries or organisations with equivalent or higher data protection standards;
• Data protection impact assessments conducted prior to any new transfer being implemented;
• Data encryption throughout the entire transfer process without exception.

By using the dorahoki platform, you agree that your personal data may be transferred and processed outside Malaysia under protected conditions as described above.

Dorahoki reserves the right to update or modify this Privacy Policy at any time to reflect changes in our practices, new legal requirements, or improvements in the security technology we use.

Any material changes to this Policy will be communicated to you through:

• Prominent in-platform notifications on dorahoki after you log in;
• Email to the address registered in your account;
• Updates are effective as of the "Last Updated" date shown at the top of this page.

Continued use of the platform after changes take effect constitutes your acceptance of the updated Privacy Policy. If you do not agree with any changes, you have the right to close your account and request deletion of your personal data.

If you have any questions, concerns, or complaints regarding how dorahoki handles your personal data, we strongly encourage you to contact us directly. Our Privacy Team is ready to assist you.

• Privacy Email: [email protected]
• General Support: [email protected]
• Response Time: Within 14 business days for personal data-related enquiries
• Live Chat: Available 24 hours a day, 7 days a week via the chat icon on the platform

If you are not satisfied with how we handle your privacy complaint, you also have the right to lodge a complaint with the relevant Malaysian Personal Data Protection Commissioner.