Privacy Policy

Privacy Policy d2fun — Your Personal Data Protection

We respect your privacy. This document clearly explains how d2fun collects, uses, stores, and protects the personal information of every Malaysian member.

Last Updated: 1 January 2026
d2fun Privacy Commitment

Six core principles that shape how we manage your personal data

Enterprise-Grade Data Encryption

All your personal data and financial information is protected with 256-bit SSL encryption — the same security technology used by international financial institutions. Data at rest is also encrypted using AES-256 standards.

Data Control in Your Hands

You have the right to access, correct, or request deletion of your personal data at any time. d2fun provides a straightforward process for managing your privacy preferences directly through the platform or via customer support.

No Sale of Data to Third Parties

D2fun has never and will never sell, rent or trade member personal data to any third party for marketing purposes. Your data belongs to you — it is not our business commodity.

Clear Data Retention Policy

Personal data is retained only for as long as necessary for the original purpose of collection or as required by law. After that period, data is securely deleted in accordance with industry-standard procedures.

Immediate Breach Notification

In the event of any security incident involving member personal data, d2fun is committed to notifying affected members within 72 hours of the incident being identified, in line with industry best practices.

PDPA Legal Compliance

D2fun operates in compliance with the Personal Data Protection Act 2010 (PDPA) of Malaysia. All data management processes are designed to ensure full compliance with applicable local legal requirements.

Important Note: This Privacy Policy applies to all users of the d2fun platform, including the website and mobile app. By using d2fun's services, you agree to the collection and use of information as described in this document.

1 Introduction

D2fun ("we", "Platform") values the trust placed by every member when sharing their personal information with us. This Privacy Policy is crafted to transparently and honestly explain how we manage your personal data from start to finish — from collection, use and storage through to deletion.

We understand that privacy is more than a legal requirement — it is a fundamental right of every individual. As such, our approach to data protection is built on the principles of diligence, user control, and transparency. We do not collect data that is unnecessary, and we do not use your data for purposes beyond the scope stated herein.

This policy is drafted in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and global best practices in data protection. In the event of any conflict between this policy and applicable law, the law shall take precedence.

2 Personal Data We Collect

D2fun collects your personal data through several means — directly from you, automatically as you use the platform, and in some cases, from trusted third parties. Below is a detailed explanation of the types of data we collect:

Data Categories Example Information How It Is Collected
Identity Information Full name, date of birth, gender, identification card number Account Registration & KYC
Contact Information Email address, phone number, residential address Account registration
Financial Information Bank account number, payment method, transaction history Deposit & Withdrawal
Usage Data Game history, wagering, login, game preferences Collected automatically during play
Technical Data IP address, device type, web browser, operating system Collected automatically upon access
Communication Data Support chat records, emails, feedback Interactions with support
Data Minimisation Principle: d2fun only collects data that is genuinely necessary for specific purposes. We do not request personal information beyond what is required for platform operations and legal compliance.

3 How We Use Your Personal Data

Every piece of data we collect is used for legitimate, clearly stated purposes. We do not use your data for any other purpose without your prior consent:

  • Account management: Creating, verifying, and securely maintaining your member account
  • Transaction processing: Processing deposits, withdrawals, and all financial transactions accurately and securely
  • Identity verification (KYC): Ensuring compliance with anti-money laundering and counter-terrorism financing legal requirements
  • Customer support: Providing effective assistance when you contact the d2fun support team
  • Platform security: Identifying and preventing fraud, unauthorised access, and suspicious activity
  • Service improvements: Analysing usage patterns to enhance user experience and platform performance
  • Marketing communications: Sending promotional information and exclusive offers — only if you have given your consent
  • Legal compliance: Fulfilling reporting obligations to the relevant authorities in accordance with legal requirements

We use anonymised analytics to understand aggregate usage patterns. Individual data is not used to make automated decisions that significantly affect your rights without human review.

4 Data Sharing with Third Parties

D2fun does not sell your personal data. However, there are limited situations where we need to share information with certain parties to enable the platform to operate properly:

  • Payment providers: Information required to process your financial transactions is shared with licensed and trusted payment service providers
  • Technology service providers: Technical partners who assist in operating the platform infrastructure, subject to strict confidentiality agreements
  • Regulatory authority: Information legally required to be shared with government agencies, regulators, or law enforcement bodies
  • Identity verification services: Third-party KYC providers that assist in verifying member identities for compliance purposes
Our Commitment: All third parties that receive your data from d2fun are bound by strict data protection agreements. They are only permitted to use your data for specified purposes and are not allowed to use it for their own interests.

5 Your Personal Data Security

D2fun invests seriously in security infrastructure to ensure your personal data is always protected. The security measures we implement include:

  • Transmission encryption: All data transmitted between your device and d2fun servers is encrypted using TLS 1.3 protocol with 256-bit SSL certificates
  • Storage encryption: Personal data stored in our databases is protected with AES-256 encryption
  • Internal access controls: Only staff who require access to specific data are permitted to do so — based on the principle of least privilege
  • Security audits: The d2fun platform undergoes regular independent security audits to identify and address potential vulnerabilities
  • 24/7 Monitoring: Automated monitoring systems operate around the clock to detect suspicious activity and security threats
  • Two-factor authentication (2FA): Members are encouraged to enable 2FA for an added layer of protection on their accounts
Security Reminder: While we take all reasonable precautions, no system is 100% secure. You also play an important role — use a strong password, enable 2FA, and never share your login credentials with anyone.

6 Cookies & Tracking Technologies

D2fun uses cookies and similar tracking technologies to enhance your experience on the platform. The following are the types of cookies we use:

  • Essential cookies: Required for core platform functions such as login, game sessions, and security. These cookies cannot be disabled without affecting platform functionality
  • Performance cookies: Helping us understand how users interact with the platform — most visited pages, time spent, and technical issues encountered
  • Functional cookies: Saving your preferences such as language, display settings, and game preferences so you do not need to reset them each time you log in
  • Analytics cookies: Used to analyse aggregate usage patterns for platform improvement purposes. This data is processed anonymously

You can manage your cookie settings through your web browser. Please note that disabling certain cookies may affect your experience on the d2fun platform. For more information on managing cookies, refer to your web browser's help section.

7 Your Rights Over Your Personal Data

As a d2fun member, you have the following rights regarding your personal data, in accordance with the provisions of Malaysia's PDPA:

  • Right of access: You have the right to request a copy of the personal data we hold about you
  • Right to rectification: You have the right to request correction of any inaccurate or incomplete data
  • Right to erasure: In certain circumstances, you may request deletion of your personal data — subject to our legal obligations to retain specific data
  • Right to restriction of processing: You may request that we restrict how we process your data in certain circumstances
  • Right to object: You have the right to object to the use of your data for direct marketing purposes at any time
  • Right to withdraw consent: For processing based on your consent, you may withdraw that consent at any time

To exercise any of the above rights, contact the d2fun support team via Live Chat or email. We will process your request within 30 calendar days. For complex cases, this period may be extended, and we will notify you in advance.

Important: Some data deletion requests may not be fully fulfilled if we are legally required to retain that data — for example, financial transaction records that must be kept for audit and AML compliance purposes.

8 Data Retention & Transfer Period

D2fun retains your personal data only for as long as necessary to fulfil the original purpose of collection or as required by applicable law:

  • Active account data: Retained for as long as your account is active on the d2fun platform
  • Financial transaction records: Retained for a minimum of 7 years in compliance with Malaysia's financial and tax legal requirements
  • KYC records and identity verification: Retained for 5 years after account closure in accordance with AML standards
  • Support communication logs: Retained for 2 years for reference and dispute resolution purposes
  • Anonymised analytics data: May be retained longer as it contains no personally identifiable information

Your personal data is processed and stored on servers located in regions with adequate data protection standards. Any cross-border data transfers are carried out with appropriate safeguards, including standard data transfer agreements and data protection assessments.

9 Children's Privacy

D2fun services are exclusively for individuals aged 18 and above. We do not knowingly collect or process any personal data from children or underage individuals.

If we discover that information has been collected from someone under the age of 18, we will immediately take the following steps:

  • Suspending the relevant account pending investigation
  • Deleting all personal data associated with the account
  • Processing any remaining fund balance in accordance with standard procedures
  • Reporting incidents to the relevant authorities when required
To Parents and Guardians: If you discover that your child or underage dependent has registered on the d2fun platform, please contact us immediately via Live Chat or our support email for prompt action.

10 Changes to This Privacy Policy

D2fun reserves the right to modify this Privacy Policy from time to time to reflect changes in our data practices, legal requirements or business operations. We are committed to communicating transparently about any material changes.

In the event of significant changes, we will:

  • Updating the "Last Updated" date at the top of this document
  • Sending notifications to your registered email address
  • Displaying a clear notice on the platform upon your first login after any changes
  • Providing a minimum notice period of 14 days before material changes take effect

Continued use of the d2fun platform after the effective date of any changes constitutes acceptance of the updated Privacy Policy. If you disagree with the changes made, you have the right to close your account before the effective date.

11 Contact Us About Privacy

If you have any questions, concerns or complaints regarding this Privacy Policy or how we handle your personal data, the dedicated d2fun privacy team is here to help:

  • Live Chat: The fastest option — available 24/7 directly within the d2fun platform
  • Privacy Email: [email protected] — for detailed enquiries requiring in-depth review
  • Support languages: Bahasa Melayu, Mandarin, and English
  • Response time: We aim to respond to all privacy inquiries within 48 business hours

If you are not satisfied with how we handle your privacy enquiry or complaint, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP), the regulatory body responsible for enforcing the PDPA.

Further Reading: To fully understand your rights and responsibilities as a d2fun member, please also read Terms and Conditions and Responsible Gaming Policy us.
Safe & Trusted Platform

Your Privacy Is Protected. Join d2fun with Confidence.

With 256-bit SSL encryption, PDPA compliance, and our commitment to transparency, you can enjoy your entertainment experience at d2fun with full confidence that your data is always secure.

Malaysia PDPA Compliance 256-bit SSL Encryption No data sales Data control in your hands
Bahasa Melayu