Dafasports
Privacy Policy
At dafasports, your privacy is not an afterthought — it is a core responsibility. This Policy explains clearly what personal data we collect, why we collect it, how it is used and protected, and what rights you hold over your own information as a registered player on our platform.
Introduction
This Privacy Policy (hereinafter "the Policy") is issued by Dafasports (hereinafter "the Company", "we", "us", or "our"), the operator of the online sports betting and live casino platform accessible at dafasports.cam (hereinafter "the Platform"). This Policy governs the collection, storage, use, disclosure, and protection of personal data relating to all individuals who visit the Platform or register a Player Account with us.
We are committed to handling personal data responsibly and in accordance with applicable data protection legislation. This Policy should be read alongside our Terms & Conditions and Responsible Gambling Policy, both of which complement the protections set out herein.
By accessing the Platform, creating an account, or using any of our services — including placing bets, depositing funds via Touch 'n Go eWallet, Maybank FPX, DuitNow, or other supported payment channels, or contacting our customer support team — you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.
Definitions
For the purposes of this Policy, the following terms shall carry the meanings set out below:
Key Terms
- "Personal Data" — any information that directly or indirectly identifies a living natural person, including names, identification numbers, contact details, location data, and online identifiers.
- "Processing" — any operation performed on personal data, whether automated or manual, including collection, recording, storage, use, disclosure, erasure, or destruction.
- "Data Controller" — the entity that determines the purpose and means of processing personal data. In this context, the Data Controller is Dafasports.
- "Data Processor" — a third party that processes personal data on behalf of the Data Controller under documented instructions.
- "Player" / "User" — any individual who has registered an account on the Platform or who accesses the Platform as a visitor.
- "Consent" — a freely given, specific, informed, and unambiguous indication of the Player's agreement to the processing of their personal data.
- "Sensitive Data" — a category of personal data that warrants heightened protection, including but not limited to financial account information, government identity numbers, and health data.
Data Controller Identity
The Data Controller responsible for personal data collected and processed through the Platform is the Company operating under the brand name Dafasports at the domain dafasports.cam. The Company is responsible for all decisions regarding the purpose, scope, and manner in which personal data relating to Players and website visitors is processed.
For all data protection enquiries, subject access requests, or complaints relating to the handling of your personal data, please contact our Data Protection point of contact using the details provided in Section 15 of this Policy. We aim to respond to all privacy-related correspondence within ten (10) business days of receipt.
Personal Data We Collect
We collect personal data from you through several channels: directly when you register an account or interact with the Platform, automatically through technical systems as you use our services, and occasionally from trusted third-party sources where necessary for verification or fraud prevention purposes.
| Category | Examples of Data Collected | Collection Method |
|---|---|---|
| Identity Data | Full legal name, date of birth, MyKad or passport number, gender | Registration & KYC |
| Contact Data | Email address, mobile number, residential address (city, postcode) | Registration form |
| Financial Data | Deposit and withdrawal records, payment method identifiers (partial e-wallet IDs, partial bank account references) | Transaction processing |
| Account Activity | Login timestamps, bet history, game session records, bonus usage, customer support interactions | Automated — platform activity |
| Technical Data | IP address, device type, browser version, operating system, cookies, session tokens | Automated — server logs |
| KYC Documentation | Scanned copies of government-issued ID, utility bills or bank statements as proof of address, selfie photographs where required | Identity verification process |
| Communication Data | Records of live chat conversations, email correspondence, and any written communications submitted to support | Customer support channels |
Purpose & Legal Basis for Processing
Dafasports processes personal data only where a lawful basis exists under applicable data protection law. The following table outlines the principal purposes for which we process your personal data and the corresponding legal basis for each:
5.1 Contract Performance
Processing your identity, contact, and financial data to fulfil our contractual obligations to you as a registered Player — including account creation, bet settlement, deposit crediting, withdrawal processing, and customer support delivery. Without this processing, we cannot operate your account or provide our services.
5.2 Legal Compliance
Processing identity and financial data to comply with anti-money laundering (AML) obligations, Know Your Customer (KYC) requirements, regulatory reporting, and obligations imposed under our operating licence. This includes retaining transaction records for prescribed statutory periods.
5.3 Legitimate Interests
Processing technical data, account activity records, and communication logs to: detect and prevent fraud, protect the security and integrity of the Platform, conduct responsible gambling monitoring, investigate complaints, and improve our services through aggregate analysis. These interests have been balanced against your rights and found not to override them.
5.4 Consent
Where we send you direct marketing communications (such as promotional email notifications about upcoming offers on Liga Super Malaysia betting or live casino bonuses), we will do so only on the basis of your explicit opt-in consent, which you may withdraw at any time by contacting our support team or adjusting your notification preferences from your Account settings.
Data Processing Activities
The following outlines the key data processing activities that occur in connection with your use of the dafasports Platform:
- Account Registration: Your submitted registration data is validated, stored securely, and used to create and maintain your Player Account. We verify that provided details are accurate and consistent with KYC documentation where required.
- Payment Processing: When you make a deposit via Touch 'n Go eWallet, GrabPay, Boost, DuitNow, Maybank FPX, CIMB, Public Bank, or cryptocurrency, your transaction instruction is passed to the relevant payment gateway. We store the transaction outcome and reference for accounting and audit purposes but not your full payment credentials.
- Bet Settlement: Your wagering activity is recorded in full to enable correct settlement of winning bets, application of bonuses, calculation of wagering requirements, and resolution of any betting disputes.
- Responsible Gambling Monitoring: We analyse account activity patterns to identify early indicators of problem gambling behaviour, such as significantly increased deposit frequency, chasing-loss patterns, or extended unbroken session durations. Where a concern is identified, our responsible gambling team may make proactive contact with you.
- Fraud and AML Screening: Transaction patterns and account activity are monitored against defined risk indicators. Accounts exhibiting suspicious patterns may be subject to enhanced review, and reportable activity will be disclosed to relevant regulatory authorities as required by law.
- Customer Support: Interactions with our support team (via live chat, WhatsApp, or email) are logged and retained for quality assurance, dispute resolution, and ongoing training purposes.
Data Sharing & Disclosure
Dafasports does not sell or rent your personal data to any third party. We share personal data only in the following circumstances, and only to the minimum extent necessary:
7.1 Service Providers (Data Processors)
We engage carefully selected third-party service providers who process data on our behalf under documented data processing agreements. These include payment gateway operators (for processing deposits and withdrawals via FPX, e-wallets, and cryptocurrency networks), KYC verification technology providers, customer support platform providers, and cloud infrastructure and hosting providers. All such processors are contractually bound to process data only as instructed and to maintain appropriate security standards.
7.2 Regulatory & Legal Obligations
We may be required to disclose personal data to government authorities, regulators, law enforcement agencies, or courts of competent jurisdiction where required by applicable law, including in connection with AML investigations, tax reporting obligations, or court orders. We will always seek to limit such disclosures to what is strictly required.
7.3 Business Transfers
In the event of a merger, acquisition, restructuring, or sale of all or part of the Company's business, your personal data may be transferred to the acquiring entity as part of the transaction. We will notify registered Players prior to any such transfer where practically possible, and any successor entity will be required to honour this Policy or provide equivalent protections.
Data Retention
We retain personal data for no longer than is necessary for the purposes for which it was collected, taking into account our legal and regulatory obligations. The following general retention principles apply:
- Active account data: Retained for the duration of your registered account and for a period of at least five (5) years following account closure, to satisfy AML record-keeping and audit requirements.
- Transaction records: Financial transaction records including deposits, withdrawals, and bet settlements are retained for a minimum of seven (7) years from the date of each transaction, consistent with standard financial regulatory requirements.
- KYC documentation: Identity verification documents are retained for the duration of the account plus five (5) years following closure, unless a longer period is required by applicable law.
- Customer support communications: Support interaction logs are retained for two (2) years from the date of each interaction unless the matter relates to an unresolved dispute or legal proceeding, in which case retention continues until resolution.
- Marketing consent records: Records of your opt-in or opt-out preferences for marketing communications are retained for the lifetime of your account plus three (3) years, to demonstrate compliance with consent obligations.
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to any identifiable individual.
Data Security
Dafasports implements a comprehensive set of technical and organisational security measures designed to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. Key security measures in place include:
- TLS 1.3 encryption applied to all data transmitted between your browser and our servers — the same encryption standard used by major Malaysian banks including Maybank and CIMB.
- Encrypted storage for all sensitive personal data and financial records at rest, using AES-256 or equivalent encryption standards.
- Access controls limiting internal access to personal data on a strict need-to-know basis, with role-based permissions and audit logging of all data access events.
- Multi-factor authentication enforced for all internal administrative access to data systems.
- Regular security assessments including penetration testing and vulnerability scanning conducted on a scheduled basis.
- Incident response procedures including defined timelines for notifying affected Players and relevant authorities in the event of a confirmed data breach.
While we take all reasonable steps to protect your personal data, no online platform can guarantee absolute security against all possible threats. You are encouraged to maintain the security of your own account by using a strong, unique password and not sharing your login credentials with any third party.
Cookies & Tracking Technologies
The Platform uses cookies and similar tracking technologies to operate essential site functions, maintain your session, and where consent has been obtained, to support performance analytics and personalisation.
10.1 Essential Cookies
These cookies are strictly necessary for the Platform to function. They enable features such as maintaining your login session, remembering your language or currency preference, and securing your account from cross-site request forgery attacks. Essential cookies cannot be disabled without impairing Platform functionality.
10.2 Analytics Cookies
Where you have consented, we use anonymised analytics data to understand how Players navigate the Platform — which pages are most visited, where users typically exit the registration flow, and which features are most used. This data helps us improve the Platform experience. Analytics processing uses aggregated, non-personally identifiable data wherever possible.
10.3 Managing Cookies
You can manage or delete cookies through your browser settings at any time. Instructions for major browsers (Chrome, Safari, Firefox, Edge) are available from the respective browser help centres. Note that disabling certain cookies may affect the functionality of some Platform features, including session persistence and account security mechanisms.
Your Data Rights
As a data subject, you hold a number of rights in relation to your personal data processed by Dafasports. The following rights are available to all registered Players and website visitors. To exercise any of these rights, please contact our support team using the details in Section 15. We will respond within ten (10) business days and will not charge a fee for reasonable requests.
Note that certain rights may be limited where processing is necessary for legal compliance, fraud prevention, or the defence of legal claims. We will always explain any applicable limitation clearly when responding to your request.
Protection of Minors
The Platform is strictly intended for use by individuals aged 21 years and above. Dafasports does not knowingly collect or process personal data from individuals below this age threshold. If we become aware that personal data has been submitted by a person under the age of 21, we will immediately suspend the associated account, delete the personal data concerned, and report the matter to appropriate authorities where required.
If you are a parent or guardian who believes that a minor has registered an account on the Platform using their own or another person's details, please contact our support team immediately. We take underage access extremely seriously and maintain active age verification controls at registration and throughout the account lifecycle.
International Data Transfers
In order to operate the Platform and deliver services to Players across Malaysia — including those located in Kuala Lumpur, Petaling Jaya, Penang, Johor Bahru, Shah Alam, and other regions — it may be necessary to transfer personal data to processors and infrastructure providers located in other countries, including countries outside Malaysia.
Where such international transfers occur, we ensure that appropriate safeguards are in place to protect the transferred data to a standard equivalent to that required under applicable Malaysian data protection law. Safeguards may include contractual data processing agreements incorporating internationally recognised data transfer clauses, adequacy decisions applicable to the destination country, or other legally recognised transfer mechanisms.
You may request further information about the specific safeguards applicable to any international transfers affecting your personal data by contacting us using the details in Section 15 of this Policy.
Amendments to This Policy
Dafasports reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, regulatory guidance, or Platform functionality. When material changes are made, we will update the "Last updated" date at the top of this Policy and, where appropriate, notify registered Players by email or via an in-Platform notification.
We encourage you to review this Policy periodically to stay informed about how we protect your personal data. Your continued use of the Platform following the posting of any revised Policy constitutes your acknowledgement of the changes. If you do not agree with any revision, you may close your account in accordance with the procedure described in our Terms & Conditions.
Contact Us
For all privacy-related enquiries, data subject right requests, or concerns about how your personal data is being handled by Dafasports, please contact us using the following channels. All privacy correspondence will be handled with strict confidentiality.
Privacy & Data Protection Contact
- Email: [email protected] — please use the subject line "Privacy Enquiry" or "Data Subject Request" for faster routing. This is a plain text display; the address is not a clickable link.
- Live Chat: Available 24/7 from the Platform dashboard. For data subject requests, please confirm your identity before submitting your request via live chat.
- Languages: Privacy correspondence is handled in English, Bahasa Melayu, and Mandarin Chinese.
- Response time: We aim to acknowledge all privacy enquiries within 48 hours and provide a substantive response within ten (10) business days.
If you remain dissatisfied with our response to a privacy concern after exhausting our internal procedure, you may have the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction.
Data Rights Available to Every Player
As a registered Player on dafasports, you hold the following rights over your personal data. Exercise any right at any time by contacting our support team.
Right of Access
You may request a copy of all personal data we hold about you, including your account history, transaction records, and communication logs. We will provide this within 30 days of a verified request.
Right to Rectification
If any personal data we hold about you is inaccurate or incomplete, you have the right to request correction at any time. Most account details can be updated directly from your account settings panel.
Right to Erasure
Also known as the "right to be forgotten", this allows you to request deletion of your personal data where processing is no longer necessary. Note that statutory record-keeping obligations may prevent full erasure of financial transaction data.
Right to Restriction
You may request that we restrict processing of your personal data in specific circumstances — for example, while a correction request is being assessed or where you contest the legal basis for processing.
Right to Portability
Where processing is based on your consent or contract performance, you may request a machine-readable export of your personal data in a structured, commonly used format (such as CSV or JSON) for transfer to another service.
Right to Object
You have the right to object to processing of your personal data where it is based on our legitimate interests, including profiling for responsible gambling monitoring purposes. We will assess and respond to any such objection promptly.
How Dafasports Protects Your Privacy in Practice
Zero Data Sales — Ever
We have never sold, rented, or traded Player data to any third-party marketer. This is not a qualified promise — it is an absolute commitment. Your personal data generates no commercial value for anyone outside dafasports.
TLS 1.3 Encryption
All data in transit between your device and our servers is protected by TLS 1.3, the current industry standard for secure web communication. The same encryption used by Maybank, CIMB, and Public Bank's online banking portals.
Minimal Data Collection
We apply a data minimisation principle — collecting only what is genuinely necessary for account operation, regulatory compliance, and security. We do not ask for data that serves no functional purpose.
Strict Age Verification
Our KYC process is specifically designed to prevent under-21 access. Identity verification is mandatory before withdrawal processing, and accounts flagged as potentially belonging to minors are suspended pending investigation without exception.
Clear Retention Limits
Every category of data has a documented retention period. When the purpose for which data was collected has been fulfilled and no legal obligation requires continued retention, that data is deleted or irreversibly anonymised.
Dedicated Privacy Support
Our 24/7 multilingual support team handles privacy and data subject requests in English, Bahasa Melayu, and Mandarin. Formal requests are escalated to our privacy point of contact and responded to within ten business days.
Bet with Confidence on Dafasports
We handle your personal data with the same care and diligence that we apply to your funds. Start exploring Malaysia's most player-focused betting platform — from EPL live odds to Liga Super Malaysia markets and live baccarat. For players aged 21 and above only.