dorex8 Privacy Policy

1. Introduction

dorex8 ("dorex8", "we", "us", "our") operates the online casino and sportsbook platform accessible at dorex8.co (the "Platform"). In the course of providing our Services to registered players in Malaysia and other permitted jurisdictions, we collect and process certain personal data. This Privacy Policy sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by us.

This Policy applies to all individuals who access or use the dorex8 Platform, including registered players, prospective players, and visitors to the dorex8 website. It does not apply to third-party websites that may be linked to or from the dorex8 Platform, nor to the privacy practices of our game providers, payment processors, or other third-party service partners, each of whom operate under their own privacy frameworks.

dorex8 is committed to handling your personal data responsibly, transparently, and in compliance with applicable data protection legislation, including the Personal Data Protection Act 2010 (Malaysia) ("PDPA") where applicable.

2. Data Controller

For the purposes of applicable data protection law, the data controller in respect of personal data collected through the dorex8 Platform is dorex8. Queries regarding data controller identity, data processing practices, or your rights under this Policy may be directed to our support team at the contact details provided in Section 14 of this Policy.

3. Information We Collect

We collect information from you in the following ways and categories:

3.1 Information You Provide Directly

• Registration data: Full name, date of birth, email address, phone number, and preferred username collected when you create a dorex8 account;
• Identity verification documents: Government-issued identification (e.g., MyKad, passport), proof of address, and proof of payment method submitted as part of the KYC process;
• Financial data: Payment method details necessary to process deposits and withdrawals (e.g., eWallet account identifiers for Touch n Go, Boost, GrabPay; bank account details for Maybank, CIMB, Public Bank FPX transactions; crypto wallet address for USDT TRC20);
• Communications: Records of your correspondence with dorex8 support, including Live Chat transcripts and emails sent to [email protected].

3.2 Information Collected Automatically

• Technical data: IP address, browser type and version, device type and operating system, screen resolution, and referral URL;
• Usage data: Pages visited, features used, time spent on the Platform, login timestamps, and session duration;
• Gaming data: Game selections, wager amounts, bet history, bonus redemptions, and account transaction records;
• Cookie data: Data collected via cookies and similar tracking technologies as described in Section 6 of this Policy.

3.3 Information From Third Parties

We may receive information about you from third-party identity verification providers, fraud detection services, payment processors, and game providers in connection with the delivery of our Services, compliance obligations, and security monitoring. Such data is handled in accordance with this Privacy Policy.

4. How We Use Your Data

dorex8 uses your personal data for the following purposes:

• To create, maintain, and administer your dorex8 account and provide you with access to the Services;
• To process deposits, withdrawals, and other financial transactions in MYR;
• To verify your identity and age (21+) in compliance with our KYC and responsible gaming obligations;
• To detect, investigate, and prevent fraud, money laundering, and other prohibited activities;
• To comply with applicable legal and regulatory obligations, including requests from competent authorities;
• To provide customer support and respond to your enquiries;
• To communicate with you about your account, including security alerts and transaction confirmations;
• To personalise your experience on the dorex8 Platform, including recommending games based on your play history;
• To send you promotional communications about dorex8 offers and events where you have consented to receive such communications or where we have a legitimate interest in doing so;
• To monitor and improve Platform performance, user experience, and security;
• To enforce our Terms and Conditions and other applicable policies.

5. Legal Basis for Processing

We process your personal data on one or more of the following legal grounds:

• Contract performance: Processing is necessary to perform the contract between you and dorex8 (i.e., to provide the Services you have registered for);
• Legal obligation: Processing is required to comply with applicable laws and regulations, including anti-money laundering legislation, age verification requirements, and reporting obligations;
• Legitimate interests: Processing is necessary for our legitimate interests or those of third parties, provided those interests are not overridden by your rights — such as fraud prevention, platform security, and improving our Services;
• Consent: Where we rely on your consent (e.g., for direct marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of prior processing.

6. Cookies & Tracking Technologies

The dorex8 Platform uses cookies and similar technologies (collectively "cookies") to operate the Platform, remember your preferences, analyse usage patterns, and support security and fraud prevention measures.

6.1 Types of Cookies We Use

• Strictly necessary cookies: Required for the Platform to function — these include session authentication tokens and security cookies. These cannot be disabled.
• Functional cookies: Used to remember your preferences such as language settings and login status between sessions.
• Analytics cookies: Used to understand how players use the Platform, which pages are most visited, and where errors occur. Data is aggregated and anonymised.
• Marketing cookies: Used to deliver relevant promotional content based on your browsing behaviour. These are only placed where you have given consent.

You may control cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair the functionality of the dorex8 Platform and may prevent you from logging in or completing transactions.

7. Data Sharing & Third-Party Disclosure

dorex8 does not sell your personal data to third parties. We may share your data with the following categories of recipients, strictly for the purposes described in this Policy:

• Payment processors: To facilitate deposit and withdrawal transactions via Touch n Go, Boost, GrabPay, Maybank, CIMB, Public Bank, and USDT TRC20 infrastructure;
• Identity verification providers: To conduct KYC checks as required by our compliance obligations;
• Game providers: To deliver game content and record gaming transactions within the dorex8 platform environment;
• Fraud prevention and security services: To detect and prevent unauthorised access, money laundering, and other prohibited activities;
• IT and hosting providers: To maintain and operate the technical infrastructure supporting the dorex8 Platform;
• Regulatory and law enforcement authorities: Where required by applicable law or a valid legal process, including court orders or requests from Malaysian regulatory bodies.

All third parties with whom we share personal data are contractually obligated to maintain the confidentiality and security of that data and to process it only for the purposes for which it was shared.

8. Data Retention

dorex8 retains your personal data for as long as your account is active and for such additional period as is necessary to comply with our legal, regulatory, and contractual obligations. In practice, this means:

• Account and transaction records are retained for a minimum of seven (7) years following account closure, in compliance with anti-money laundering record-keeping requirements;
• KYC verification documents are retained for the period required by applicable law following the end of the business relationship;
• Support communications are retained for a maximum of three (3) years from the date of the communication unless a longer retention period is required for a specific matter;
• Analytics and usage data in anonymised or aggregated form may be retained indefinitely for the purpose of Platform improvement.

When data is no longer required, it is securely deleted or anonymised in accordance with our internal data retention and destruction procedures.

9. Data Security

dorex8 implements appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• TLS encryption for all data transmitted between your browser and the dorex8 Platform;
• Encrypted storage of passwords and sensitive credentials — dorex8 staff cannot view your account password in plain text;
• Access controls limiting employee access to personal data on a need-to-know basis;
• Regular security monitoring and penetration testing of Platform infrastructure;
• Procedures for responding to data security incidents, including notification obligations where applicable.

While dorex8 applies rigorous security standards, no system of data transmission or storage can be guaranteed to be 100% secure. You play a role in security too: please keep your dorex8 login credentials private and notify us immediately via Live Chat if you suspect any unauthorised access to your account.

10. Your Rights

Subject to applicable data protection law, you may have the following rights in relation to your personal data held by dorex8:

• Right of access: You may request a copy of the personal data we hold about you;
• Right to rectification: You may request correction of inaccurate or incomplete personal data;
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to overriding legal obligations;
• Right to restriction: You may request that we restrict processing of your data in certain circumstances;
• Right to data portability: Where technically feasible, you may request your data in a structured, machine-readable format;
• Right to object: You may object to processing based on legitimate interests, including direct marketing;
• Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time without affecting prior processing.

To exercise any of these rights, please contact us via email at [email protected] or through Live Chat. We will respond to your request within 30 days. Note that certain rights may be limited where dorex8 has overriding legal obligations to retain the data.

11. Children's Privacy

If you believe a person under 21 has registered on the dorex8 Platform, please contact us immediately at [email protected] so that we may take appropriate action.

12. International Data Transfers

The dorex8 Platform is operated with infrastructure and service partners that may be located in jurisdictions outside Malaysia. Where personal data is transferred internationally, dorex8 ensures that appropriate safeguards are in place — including contractual protections and, where applicable, adequacy decisions — to maintain the standard of protection required under applicable data protection law.

By using the dorex8 Platform, you acknowledge that your personal data may be transferred to and processed in jurisdictions other than Malaysia for the purposes described in this Policy.

13. Amendments to This Policy

dorex8 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or Platform functionality. The current version of this Policy, together with its effective date, is always accessible at dorex8.co/privacy-policy.

Where amendments are material, dorex8 will notify registered players via the email address on file or by a prominent notice on the Platform. Continued use of the dorex8 Services following the effective date of any revised Policy constitutes your acceptance of those changes.

14. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way dorex8 handles your personal data, please contact our Data Protection team through the following channels:

• Email: [email protected]
• Live Chat: Available 24/7 on dorex8.co

dorex8 aims to acknowledge all privacy-related correspondence within 48 hours and to provide a substantive response within 30 calendar days of receipt. For urgent account security matters, Live Chat is the fastest available channel.