dorex8 Privacy Policy

1. Introduction and Data Controller

This Privacy Policy ("Policy") describes how dorex8 ("dorex8", "we", "us", "our"), the operator of the online gaming platform at dorex8.app ("Platform"), collects, processes, stores, and discloses personal data relating to users of the Platform ("you", "your", "User"). dorex8 acts as the data controller in respect of personal data processed under this Policy.

By registering an account on the dorex8 Platform, accessing our services, or browsing the dorex8 website, you acknowledge that you have read and understood this Policy and consent to the collection and use of your personal data as described herein. This Policy should be read alongside our Terms & Conditions and Responsible Gaming Policy.

2. Personal Data We Collect

dorex8 collects personal data through your interactions with the Platform, including during account registration, KYC verification, deposits and withdrawals, game play, customer support contacts, and general website browsing. The categories of personal data we collect include:

• Identity Data: Full name, date of birth, gender, nationality, and government-issued identification document details (e.g., Malaysian MyKad number or passport number).
• Contact Data: Email address, Malaysian mobile phone number, and residential address.
• Financial Data: Bank account details, e-wallet identifiers (such as Touch n Go eWallet or Boost account references), deposit and withdrawal history, and transaction records.
• Account Data: Username, account balance, game play history, bet records, bonus and promotion history, and VIP tier status.
• Technical Data: IP address, device type and operating system, browser type and version, session identifiers, login timestamps, and geolocation data where applicable.
• Communication Data: Records of your communications with the dorex8 support team via live chat, email, or any other channel.
• Responsible Gaming Data: Deposit limit settings, self-exclusion elections, and any information provided in connection with responsible gaming requests.

We do not knowingly collect personal data from individuals under 21 years of age. If we become aware that a minor has provided personal data to dorex8, we will take steps to delete that data and close the associated account promptly.

3. How We Collect Personal Data

dorex8 collects personal data through the following means:

• Direct interactions: Data you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting support, or updating your account settings.
• Automated technologies: Technical data collected automatically when you access the Platform, including through cookies, web beacons, server logs, and similar tracking technologies.
• Third parties: Identity verification agencies engaged by dorex8 for KYC purposes, payment processors handling your MYR transactions, and fraud prevention service providers.

4. How We Use Your Personal Data

dorex8 processes your personal data for the following purposes and on the following lawful bases:

• To create and maintain your dorex8 account, verify your identity, and provide access to Platform services — performance of contract.
• To process deposits, withdrawals, and in-game transactions in MYR — performance of contract.
• To comply with our obligations under our international gaming authority licence, including KYC, anti-money laundering (AML), and counter-terrorism financing (CTF) requirements — legal obligation.
• To detect, investigate, and prevent fraud, cheating, prohibited conduct, and other illegal activities — legitimate interest / legal obligation.
• To administer promotions, bonuses, and the VIP loyalty programme — performance of contract / legitimate interest.
• To provide customer support and respond to your enquiries — performance of contract.
• To send you service-related communications, including account notifications, security alerts, and mandatory regulatory notices — performance of contract / legal obligation.
• To send you optional marketing communications regarding dorex8 promotions and new features, where you have provided consent or where we have a legitimate interest to do so, and subject to your right to opt out at any time.
• To conduct platform analytics, monitor performance, and improve the dorex8 user experience — legitimate interest.
• To enforce our Terms & Conditions and protect dorex8's legal rights — legitimate interest.

5. Cookies and Tracking Technologies

dorex8 uses cookies and similar technologies on the Platform. Cookies are small text files stored on your device that enable us to recognise your browser, maintain your login session, remember your preferences, and analyse how the Platform is used.

We use the following categories of cookies:

• Strictly necessary cookies: Required for the Platform to function, including session management and security tokens. These cannot be disabled without affecting Platform functionality.
• Analytics cookies: Used to collect anonymised information about how visitors use the Platform, helping us improve performance and user experience.
• Functional cookies: Used to remember your preferences, such as language settings, and to personalise your experience on the Platform.

You may manage cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of the dorex8 Platform.

6. Disclosure of Personal Data

dorex8 does not sell, rent, or trade your personal data. We may disclose your personal data to the following categories of recipients in the circumstances described:

• Service providers: Third-party companies engaged by dorex8 to provide services including payment processing (e.g., Touch n Go eWallet, Boost, Maybank, CIMB, Public Bank integrations), KYC and identity verification, fraud detection, IT infrastructure, and customer support platforms. These service providers are contractually bound to process personal data only as instructed by dorex8 and to maintain appropriate security measures.
• Regulatory authorities: Our international gaming authority licensor, financial intelligence units, and other competent regulatory or law enforcement authorities where we are required or permitted by law to make such disclosures.
• Group companies: Affiliated entities within the dorex8 corporate group where necessary for operational or compliance purposes, subject to equivalent data protection obligations.
• Business transfers: In the event of a merger, acquisition, or sale of substantially all of dorex8's assets, personal data held by dorex8 may be transferred as part of that transaction, subject to appropriate confidentiality obligations.

7. Data Retention

dorex8 retains personal data for as long as necessary to fulfil the purposes for which it was collected, including to satisfy applicable legal, regulatory, accounting, and reporting requirements. In particular:

• Account data and transaction records are retained for a minimum of five years following account closure, as required by our gaming licence and applicable anti-money laundering regulations.
• KYC identity documents are retained for the duration required by applicable law, typically five years from the date of the last transaction.
• Support communication records are retained for three years from the date of the communication.

Where personal data is no longer required, dorex8 will securely delete or anonymise it in accordance with our internal data retention procedures.

8. Data Security

dorex8 implements appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include 256-bit TLS encryption for all data in transit, encrypted storage of sensitive data at rest, access controls limiting data access to authorised personnel on a need-to-know basis, regular security assessments, and two-factor authentication options for player accounts.

Notwithstanding these measures, no method of data transmission or storage over the internet is completely secure. In the unlikely event of a data breach that poses a risk to your rights and freedoms, dorex8 will notify affected users and the relevant regulatory authority in accordance with applicable obligations.

9. Your Rights

Subject to applicable law and our legitimate regulatory obligations, you have the following rights in relation to your personal data held by dorex8:

• Right of access: You may request a copy of the personal data dorex8 holds about you.
• Right to rectification: You may request correction of inaccurate or incomplete personal data.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our retention obligations.
• Right to restrict processing: You may request that we restrict processing of your data in certain circumstances.
• Right to object: You may object to processing of your data for direct marketing purposes at any time.
• Right to data portability: Where processing is based on consent or contract, you may request a copy of your data in a structured, machine-readable format.

To exercise any of these rights, please contact the dorex8 support team via live chat on the Platform or by email at [email protected]. We will respond to requests within 30 days. We may require identity verification before processing a request.

10. Marketing Communications

With your consent, or where we have a legitimate interest to do so, dorex8 may send you promotional communications relating to our games, bonuses, and Platform features. You may opt out of marketing communications at any time by contacting our support team or updating your communication preferences in your dorex8 account settings. Opting out of marketing will not affect service-related communications necessary for your account.

11. Links to Third-Party Content

The dorex8 Platform may contain references to third-party payment processors or game suppliers. This Policy applies only to data processed by dorex8. Where you interact directly with third-party services (for example, when completing a Touch n Go eWallet transaction on their own interface), those third parties' own privacy policies will apply to that data processing.

12. Changes to This Privacy Policy

dorex8 reserves the right to update this Privacy Policy at any time. Material changes will be communicated to registered Users by email or by a notice on the Platform prior to the change taking effect. The date of the most recent revision is displayed at the top of this page. Continued use of the Platform following notification of a change constitutes your acceptance of the revised Policy.

13. Contact

For any questions, concerns, or requests relating to this Privacy Policy or dorex8's data practices, please contact our support team via live chat on the Platform or at [email protected]. Support is available 24 hours a day, 7 days a week.