This Privacy Policy explains how digi28 collects, uses, stores, shares, and protects your personal data when you use our online casino and sports betting platform. We are committed to handling your information responsibly and transparently, in accordance with applicable data protection principles.
Identity, contact, payment, and usage data
256-bit SSL, access controls, encrypted storage
Payment processors & compliance only — never sold
Access, correction, deletion, and opt-out
digi28 ("Company", "we", "us", "our") is the operator of the online casino and sports betting platform accessible at digi28.cam ("Platform"). We are committed to protecting the privacy and personal data of all individuals who access or use our Platform, including registered players across Malaysia — from Kuala Lumpur and Penang to Johor Bahru, Petaling Jaya, and Shah Alam.
This Privacy Policy ("Policy") sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by digi28. This Policy should be read alongside our Terms and Conditions, which govern your use of the Platform.
By registering an account on digi28, making a deposit, placing a wager, or otherwise using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you do not agree with any aspect of this Policy, you should discontinue use of the Platform immediately.
Scope: This Policy applies to all personal data processed by digi28 in connection with the Platform, including data collected through the website at digi28.cam, through support communications, and through payment processing activities.
For the purposes of this Privacy Policy, the following terms shall have the meanings set out below:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information relating to an identified or identifiable natural person, including name, identification number, contact details, financial information, and online identifiers. |
| "Processing" | Any operation performed on personal data, including collection, recording, storage, use, disclosure, erasure, or destruction. |
| "Data Controller" | digi28, being the entity that determines the purposes and means of processing personal data collected through the Platform. |
| "Data Subject" | A natural person whose personal data is being processed — in this context, a registered or prospective user of the digi28 Platform. |
| "Third Party" | Any natural or legal person other than the Data Subject and digi28, including payment processors, KYC service providers, and technology partners. |
| "Cookies" | Small text files stored on a user's device by a web browser, used to remember preferences, session states, and for analytical purposes. |
| "KYC" | Know Your Customer — the identity verification process, including collection of government-issued identification such as a Malaysian MyKad. |
digi28 collects personal data that is necessary for the lawful provision of our gaming and betting services, for identity verification, for fraud prevention, and for the improvement of the Platform. The categories of personal data we collect are as follows:
| Category | Examples | Purpose |
|---|---|---|
| Identity Data | Name, MyKad number, date of birth | Account registration, KYC, age verification |
| Financial Data | Bank account, e-wallet ID, transactions | Deposit processing, withdrawal, AML compliance |
| Technical Data | IP address, device ID, browser | Fraud prevention, security, platform improvement |
| Usage Data | Betting history, session logs | Responsible gambling monitoring, personalisation |
| Communications Data | Support chat, emails | Customer service, complaint resolution |
digi28 collects personal data through the following means:
digi28 uses the personal data it collects for the following purposes:
To register and maintain your Account, process deposits and withdrawals via Malaysian payment methods, provide access to casino games and sports betting markets (including Liga Super Malaysia, EPL, UFC, and others), and fulfil all contractual obligations set out in our Terms and Conditions.
To verify your identity and age (21+ requirement) through the KYC process, to fulfil our obligations under anti-money laundering (AML) and counter-financing of terrorism (CFT) frameworks applicable under our international licensing requirements, and to detect and prevent fraud.
To monitor your gambling activity for signs of problem gambling behaviour, to apply and enforce any voluntary limits or self-exclusion orders you have set, and to fulfil our responsible gaming obligations. Usage data and betting patterns may be analysed for this purpose.
To respond to your enquiries and support requests, to send transactional notifications relating to your Account (such as deposit confirmations, withdrawal updates, and security alerts), and to provide promotional communications where you have provided consent.
To analyse usage patterns, optimise the Platform's performance and user experience, conduct A/B testing, and generate aggregated, anonymised analytics. Individual-level usage data used for this purpose is not shared externally in identifiable form.
To comply with legal obligations, respond to lawful requests from regulatory or law enforcement authorities, and to enforce our Terms and Conditions, including investigation and remediation of suspected fraud or abuse.
digi28 processes personal data on the following legal grounds, consistent with internationally recognised data protection principles:
digi28 does not sell, rent, or trade your personal data to third parties. We may share your data only in the following circumstances and only to the extent necessary:
Transaction data is shared with payment processors including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX operators, and Malaysian banking institutions (Maybank, CIMB, Public Bank, Hong Leong Bank, RHB Bank) solely for the purpose of processing deposits and withdrawals. These providers are bound by their own privacy obligations and applicable financial regulations.
Where required for KYC verification or AML compliance, personal data may be shared with licensed third-party identity verification service providers. These providers are engaged under data processing agreements and are prohibited from using your data for any purpose other than the verification service.
Technical service providers involved in hosting, maintaining, and securing the Platform may process personal data on digi28's behalf. All such providers are engaged under binding contractual terms requiring compliance with data protection standards equivalent to those described in this Policy.
digi28 may disclose personal data where required to do so by applicable law, court order, or lawful request by a competent regulatory or law enforcement authority. We will, where permitted, notify affected users prior to such disclosure.
In the event of a merger, acquisition, restructuring, or sale of substantially all of digi28's assets, personal data held by the Company may be transferred to the successor entity. Affected users will be notified of any such transfer and any material changes to this Policy that result from it.
We do not sell your data. digi28 does not and will never sell, licence, or otherwise provide your personal data to advertisers, data brokers, or any other commercial third parties for their own marketing or commercial purposes.
digi28 operates under an international gaming licensing framework, and some of our service providers and infrastructure partners are located outside Malaysia. Personal data processed in connection with the Platform may therefore be transferred to, and stored in, jurisdictions outside Malaysia.
Where personal data is transferred internationally, digi28 ensures that such transfers are protected by appropriate safeguards, which may include contractual obligations on the recipient that mirror the data protection standards described in this Policy, or by operating within jurisdictions that provide an adequate level of data protection as determined by recognised international frameworks.
digi28 retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following considerations:
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised.
Cookies are small text files placed on your device by the digi28 Platform when you visit the website. They enable the Platform to remember your preferences, maintain your login session, and collect analytical data to improve the user experience.
You may manage non-essential cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the Platform. Strictly necessary cookies cannot be disabled as they are required for the Platform to operate securely.
digi28 implements technical and organisational security measures appropriate to the risk associated with processing personal data on an online gambling platform. These measures include:
While digi28 takes all reasonable precautions to protect your personal data, no online system is entirely immune from security breaches. In the event of a data breach that poses a risk to your rights and freedoms, digi28 will notify affected users in accordance with applicable notification obligations.
As a data subject, you have the following rights with respect to your personal data held by digi28. To exercise any of these rights, please contact our Support team at [email protected] with your request. digi28 will respond within a reasonable timeframe and in any event no later than thirty (30) calendar days of receipt.
You have the right to request a copy of the personal data that digi28 holds about you, along with information about how it is used and with whom it is shared.
You have the right to request that inaccurate or incomplete personal data held by digi28 be corrected or completed. Note that some data fields (such as verified identity information) may require fresh KYC documentation before they can be amended.
You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent (where consent was the basis for processing), or where the data has been processed unlawfully. This right is subject to exceptions where retention is required by law, including AML/CFT record-keeping obligations.
You may request that digi28 restricts the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or object to its processing.
Where digi28 processes your personal data on the basis of legitimate interests, you have the right to object to that processing. You also have an unconditional right to object to processing of your data for direct marketing purposes at any time.
Where processing is based on your consent (such as for marketing communications), you may withdraw that consent at any time by contacting Support. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.
The digi28 Platform is strictly restricted to individuals aged 21 years and above. digi28 does not knowingly collect personal data from persons under the age of 21. Age verification is a mandatory step in the account registration and KYC process. Where digi28 becomes aware that personal data has been collected from an individual under the age of 21, that Account will be immediately suspended, all funds will be returned to the depositing payment method after compliance review, and all personal data will be deleted in accordance with applicable data protection requirements.
21+ Only: If you are a parent or guardian and have reason to believe your child has registered an account on digi28, please contact our Support team immediately at [email protected]. We will investigate and act promptly.
The digi28 Platform does not contain links to third-party websites for commercial or advertising purposes. In the limited context where external resources are referenced (such as responsible gambling support organisations), digi28 is not responsible for the privacy practices of those third-party sites. We encourage you to review the privacy policy of any external site you visit independently of digi28.
digi28 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable legal requirements, or Platform features. Where changes are material, we will notify registered users by email or through an in-platform notification prior to the amended Policy taking effect.
The "Last Updated" date at the top of this page will always reflect the most recent revision. Your continued use of the Platform following the effective date of any amended Policy constitutes acceptance of the updated terms. We recommend reviewing this page periodically.
If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by digi28, please contact us through the following channels:
Our Support team handles data-related enquiries with the same priority as account and payment queries. We aim to acknowledge all written privacy requests within two (2) business days and to resolve substantive requests within thirty (30) calendar days.
This Privacy Policy was last reviewed and updated on 1 January 2026. This version supersedes all previous versions of the digi28 Privacy Policy.
As a digi28 player, you have meaningful rights over your personal data. These are not just policy declarations — they are actionable requests our Support team is equipped to handle.
Request a full copy of the personal data digi28 holds about you, how it is used, and who has access to it. We will respond within 30 days.
If any of your personal data held by digi28 is inaccurate or outdated, you can request a correction. Some changes require fresh KYC documentation.
Request deletion of your data where it is no longer required, subject to our legal retention obligations under AML compliance requirements.
Ask us to pause processing of your data in specific circumstances — for example, while a dispute about accuracy is being resolved.
Object to processing based on legitimate interests at any time. You also have an absolute right to object to direct marketing use of your data.
Where processing is based on your consent, you can withdraw it at any time by contacting Support — without affecting any prior lawful processing.
digi28 does not sell, rent, or licence your personal data to any third party for commercial purposes. Your information belongs to you — not to advertisers.
All data transmitted to and from the digi28 Platform is protected by 256-bit SSL encryption — the same standard used by major Malaysian banks for online transactions.
Your personal data is accessible only to digi28 personnel who genuinely need it to fulfil their duties. Strict role-based access controls are enforced at all levels.
We retain your data only for as long as required by compliance obligations — and no longer. When retention periods expire, data is securely deleted or anonymised.
In the unlikely event of a data breach affecting your personal information, digi28 will notify affected users promptly in accordance with applicable notification standards.
Data access, correction, and deletion requests are handled by our Support team in English, Bahasa Melayu, and Mandarin — around the clock, any day of the year.
Our Support team handles all data and privacy queries with the same urgency as account and payment issues. Get in touch 24/7 — we're here to help.
For players aged 21 and above only. Please gamble responsibly. digi28.cam