Privacy Policy

A DK88 account cannot exist without a handful of facts about the person behind it: something that identifies you the moment you log in, something that lets funds pass between you and the platform, and a running record of what you did while playing. Below you will find what each of those categories holds, the purpose it serves, anyone outside DK88 who gets a look at it, and the choices you keep over your own information. This page is read together with the Terms and Conditions; the two combine into a single agreement.

Scope of this policy

One rulebook covers the casino floor, slot titles, instant games, the sportsbook, the Bonuses area, VIP status and King's Market, together with the companion Android and iOS apps reachable through the footer. Switching between the English, Vietnamese and Malay versions changes nothing about which policy applies — all three sit on top of one identical service. The instant a footer icon carries you off this domain onto a social network's own site, that network's rules take over, not this page, and what becomes of your data there is entirely outside DK88's hands.

What you hand over yourself

• Registration fields: a chosen username, a password of six characters or more, a phone number with its dialling code attached, a working email address, a promo code if you happen to have one, and proof that your age clears 18.
• Signing up through the Google button instead sends us only the name and email address that Google itself chooses to release.
• Details of whichever payout channel you settle on — GrabPay, Boost, USDT, USDC, FPX, online banking, DuitNow QR or Touch 'n Go — plus the wallet, account or reference number tied to that particular transfer.
• Anything typed into a message to our support desk, screenshots attached to a case included.
• Proof of identity, on occasions when it is requested ahead of releasing a withdrawal or partway through reviewing a case.

What builds up while you are playing

One category grows on its own the moment an account sees use: MYR figures attached to deposits and withdrawals, individual stakes and their outcomes, rounds run across the casino floor, instant titles and slots, a Dash Coins balance and the King's Market items it was spent on, the turnover total a VIP tier is measured against, bonus offers claimed together with wagering progress on each, and streaks of daily check-ins alongside quests finished.

A second, purely technical category sits beside it: the IP address a session originates from and the rough location tied to it, the device model and browser in use, the screen width a page happened to render at, a chosen interface language among English, Vietnamese and Malay, timestamps against pages opened, whatever gets typed into the search field at the top of a page, and any fault the system logged mid-session.

Why any of it gets kept

• An account simply cannot operate otherwise — sign-in, deposit crediting, stake settlement and withdrawal release all depend on it.
• It lets a promotion's eligibility be checked, wagering progress followed, and a VIP tier assigned once turnover is known.
• It keeps the platform functioning and shows which parts of it genuinely get used.
• It flags duplicate accounts, scripted play and payment fraud, which is largely why device and IP details are gathered at all.
• It puts a deposit cap, cooling-off window or self-exclusion into force the instant a request for one arrives.
• It supports replying to a support ticket and working a dispute through to a decision.
• It satisfies the record-keeping duty any business handling player money is bound by.

Data group.	Purpose it serves.	Origin.
Registration details.	Setting the account up and recognising you on later visits.	The sign-up form itself, or the Google button used in place of it.
Contact details.	Confirming withdrawals, pushing out security alerts and following up on a case still open.	A verified email address and phone number.
Payment records.	Crediting deposits and clearing withdrawals in MYR.	Whichever of the eight payout channels described above was used for the transfer.
Play history.	Settling stakes, following wagering, and arriving at a VIP tier.	Stakes placed, casino and instant-game rounds, and slot spins.
Coins and bonuses.	Checking offer eligibility and logging King's Market spending.	Daily check-ins, quests, achievements and the Bonuses area.
Technical data.	Keeping the platform running and catching duplicate accounts or payment fraud.	Browser, device and IP address in use during a session.
Support correspondence.	Answering messages and resolving a dispute.	Case threads opened from the site's support area.

Cookies and what stays on your device

A single cookie is doing the work of keeping a session signed in as pages change; take it away and every click would demand a fresh login. Sitting next to it are a handful of smaller items — the interface language picked, whatever sits in the betslip right now, a few minor display settings — kept locally so a return visit looks the same as the last one. Page-view counts are tallied too, but only in aggregate, purely to see which sections of the site earn their keep.

Every one of those can be wiped from your own browser settings whenever you choose to. Doing so ends the current session, clears the betslip and resets the interface language to its default. Even with cookies switched off entirely a page still renders and reads fine — sign-in and the betslip are what stop working.

Who outside DK88 gets access

A payment partner is given the minimum needed to move a transfer along, nothing further. A game studio only ever receives a session token, the stake in play and how a round resolved — never a name, an email address or a phone number. Hosting, content delivery, support software and fraud-detection systems are run by outside suppliers acting strictly on instructions we set. Beyond those arrangements, information moves only where a legal requirement forces it to; none of it is put up for sale, and none of your contact details ever reach an advertiser by way of us.

What lands in your inbox

An account produces two distinct streams of messaging. One is operational — a withdrawal confirming itself, a security alert, or news on a case still under review — and it keeps flowing for as long as the account stays open. The other is promotional: offers reaching you by email or phone, plus announcements posted across WhatsApp, X, Facebook, Instagram and Telegram wherever those are linked from the footer. A word to support turns the promotional stream off on request, and a self-exclusion does the same automatically.

How long any of it stays on file

Account and transaction history remains available for the life of the account and for a stretch beyond that — enough time to wrap up pending payments, bring any dispute to a close and cover the record-keeping obligations DK88 answers to. Self-exclusion entries are deliberately kept on file well past everything else, since without that a fresh sign-up could otherwise slip around an exclusion already in place. Technical logs have the shortest shelf life of all, cleared out once whatever they were tracking is finished.

Requests you are entitled to make

Among the things you can ask for: a copy of whatever sits on your account, a fix to anything inaccurate in it, removal of data DK88 has no obligation to retain, an opt-out from marketing, withdrawal of a consent given earlier, or shutting the account down outright. Send any such request from the email address the account is registered under, through the site's own support channel. Confirming your identity first may be asked of you, since handing account data to an impostor would be a far worse outcome than a short delay. A reply follows without avoidable delay, and if part of what was asked for cannot be delivered, the reason is stated plainly.

Security, age limits and future updates

A password reused nowhere else is worth choosing, and keeping an email and phone number verified means there is always a route to reach you. Staying logged in on a device other people also use is worth avoiding, since anything done under that login counts as done by the account holder. No one under 18 may hold an account, and once such a case is identified the account is closed and its data erased beyond whatever retention duty requires keeping. Any future edit to this policy appears on this same page and applies from the moment it is posted. 18+.