Privacy Policy Dragon969 — Your Data, Our Responsibility

Dragon969 is an online gaming platform that operates with full transparency and integrity. We believe that privacy is not merely a legal requirement, but a fundamental right of every user that we must respect and protect. This policy was crafted not simply to meet compliance obligations, but because we genuinely care about the security of your information.

As a responsible platform operator, we appoint an internal Data Protection Officer (DPO) who ensures all our data processing practices meet the highest standards. Every decision involving users' personal data undergoes thorough review by our compliance team before implementation.

We never sell, rent, or transfer your personal data to third parties for marketing purposes without your explicit consent. This is a core commitment dragon969 makes to every member.

Dragon969 collects your personal data through several channels, including during account registration, platform use, and interactions with our support team. We only collect information that is genuinely necessary for the stated purposes and do not collect data beyond those needs.

Every piece of data we collect is used for clear, legitimate purposes limited to our operational needs. Dragon969 does not use your data for any other purpose without obtaining your consent first. The following are the primary purposes for which your personal data is used:

• Account management: Creating, verifying, and securely maintaining your user account.
• Transaction processing: Processing deposits, withdrawals, and all financial activity in your account.
• Identity verification (KYC): Ensuring compliance with anti-money laundering (AML) legal requirements and age verification.
• Service provision: Allowing you to access all games and features on the dragon969 platform seamlessly.
• Platform security: Detecting and preventing fraud, unauthorised access, and illegal activity.
• Customer support: Responding to enquiries, resolving complaints, and providing technical support.
• Responsible gaming: Monitoring gameplay patterns to support players who need deposit limit assistance or self-exclusion.
• Service communications: Sending important notifications related to your account, security, or policy changes.
• Platform improvements: Analysing usage patterns to improve the overall user experience.

We process your data on a valid legal basis — either to fulfil our service contract with you, comply with legal obligations, or based on our legitimate interests as a responsible platform operator.

Dragon969 does not sell or transfer your personal data to third parties for marketing purposes. However, in the course of operating the platform, there are certain situations where we need to share limited information with trusted parties. All data sharing is subject to strict confidentiality agreements.

Categories of third parties that may receive your limited data include:

• Payment providers: FPX, credit card gateways, and e-wallet operators to process your financial transactions.
• KYC service providers: Third-party identity verification companies that assist us in verifying your documents.
• Technology providers: Cloud and infrastructure service providers that host the dragon969 platform to high security standards.
• Game providers: Game developers supplying content to our platform may receive non-identifiable technical data.
• Competent authority: Law enforcement agencies or regulatory bodies when required by law.

Dragon969 continuously invests in advanced security infrastructure to protect your personal data from unauthorised access, breaches, or misuse. Our security approach is multi-layered, meaning no single point of failure can compromise the entire system.

The technical and organisational security measures we practise include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and our servers is protected with military-grade encryption.
• Data-at-rest encryption: Sensitive data stored in our databases is encrypted using the AES-256 algorithm.
• Two-factor authentication (2FA): An additional security layer for account login that we encourage all users to enable.
• Real-time monitoring: An automated threat detection system operating 24 hours a day to identify suspicious activity.
• Regular security audits: Penetration testing and independent third-party audits are conducted on a regular basis.
• Internal access controls: dragon969 staff may only access data necessary for their role — based on the principle of least privilege.
• Secure data backups: Data backups are performed automatically and stored across multiple data centres to ensure service continuity.

Dragon969 uses cookies and similar tracking technologies to enhance your experience on our platform, maintain the security of your login session, and understand how users interact with our website. Cookies are small files stored on your device that help us recognise you on subsequent visits.

The types of cookies we use are as follows:

• Essential Cookies: Required for basic website operations such as login, account sessions, and security. These cookies cannot be disabled as they are critical to platform functionality.
• Performance Cookies: Collecting information about how users interact with our website — for example, the most frequently visited pages. This data is used to improve the platform and contains no personally identifiable information.
• Functional Cookies: Remembering your preferences such as language, display settings, and other choices to provide a more personalised experience.
• Analytics Cookies: Helping us understand traffic and usage patterns using internal analytics tools. Data is collected in aggregate and is not linked to individual users.

You can manage your cookie settings through your web browser at any time. Please note, however, that disabling essential cookies may affect certain functions of the dragon969 platform.

Dragon969 recognises and respects your rights regarding your personal data. You have the right to control the information we hold about you, and we will process any related requests within a reasonable timeframe.

To exercise any of the above rights, please contact our privacy team via live chat or email. We will process your request within 30 business days. Please note that exceptions to these rights may apply in certain circumstances, particularly where data processing is required to fulfil legal obligations.

Dragon969 retains your personal data for as long as necessary to fulfil the purpose for which it was collected or to comply with applicable legal requirements. We do not retain data beyond the required period.

• Active account data: Retained for the duration that your account remains active and in use.
• Data after account closure: Retained for a minimum of 5 years after account closure to meet legal and AML compliance requirements.
• Financial transaction records: Retained for 7 years in line with established financial record-keeping requirements.
• Technical and security logs: Retained for 12 months for security investigation purposes if required.
• Support communication records: Retained for 3 years to assist with complaint resolution and service development.
• Cookie data: Expiry varies by cookie type — ranging from the current session up to a maximum of 24 months.

Once the retention period expires, your personal data will be securely deleted or anonymised using approved methods so that it can no longer be associated with you.

Dragon969 reserves the right to update or amend this Privacy Policy from time to time in response to changes in law, business requirements, or new technologies. We are committed to informing you of any material changes via notifications in your account or your registered email.

When we make changes to this policy:

• The "Last Updated" date at the top of this document will be revised.
• For major changes that significantly affect your privacy rights, we will send you a proactive notification at least 14 days before the changes take effect.
• For minor changes that are technical or editorial in nature, we may update the document without a separate notification.

Continued use of the dragon969 platform after any changes to this Privacy Policy take effect will be considered acceptance of the updated terms. We encourage you to review this page periodically.

If you have any questions, concerns, or complaints regarding how dragon969 handles your personal data, we encourage you to reach out to us directly. Our privacy team is ready to assist and will respond within a reasonable timeframe.

Channels you can use to contact us:

• Live Chat: Available 24 hours a day, 7 days a week via the chat icon at the bottom-right corner of the dragon969 platform.
• Privacy Email: Send your written enquiries to [email protected] with the subject line "Privacy Enquiry".
• Help Centre: Browse the FAQ us for answers to frequently asked questions about privacy.

For formal requests relating to data subject rights (access, deletion, or data portability), please submit your request in writing via email along with a copy of your identification document so we can process it securely and accurately.