Privacy Policy

This Privacy Policy ("Policy") issued by dark168 ("the Company", "we", "us", or "our") and sets out the manner in which we collect, use, store, disclose, and otherwise process personal data relating to users ("you", "the Player", or "User") of the dark168 online gaming platform accessible at https://dark168.cam ("the Platform").

dark168 is committed to handling all personal data in a lawful, fair, and transparent manner, in full accordance with applicable data protection legislation and principles. This Policy should be read in conjunction with our Terms & Conditions, which govern your overall use of the Platform.

By registering an account on the dark168 Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with the terms of this Policy, please do not register an account or use the Platform.

For the purposes of this Policy, the following terms shall have the meanings set out below:

• "Personal Data" — any information relating to an identified or identifiable natural person, including but not limited to name, email address, date of birth, identification number, payment details, and device information.
• "Processing" — any operation performed on Personal Data, including collection, recording, storage, retrieval, use, disclosure, erasure, or destruction.
• "Data Controller" — dark168, the entity that determines the purposes and means of processing your Personal Data.
• "Data Processor" — any third party that processes Personal Data on behalf of dark168, acting under our documented instructions.
• "Consent" — a freely given, specific, informed, and unambiguous indication of the User's agreement to the processing of their Personal Data.
• "Cookies" — small text files placed on your device by the Platform to facilitate functionality, analytics, and personalisation.
• "KYC" — Know Your Customer verification procedures conducted to confirm the identity, age, and eligibility of players.

dark168 collects the following categories of personal data from users of the Platform:

3.1 Identity & Registration Data

3.2 Financial & Transaction Data

3.3 Technical & Usage Data

3.4 Communications Data

Records of your correspondence with our customer support team, including live chat transcripts, email communications, and any feedback or complaints submitted to dark168.

dark168 collects personal data through the following means:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, or respond to a survey or promotion.
• Automatically — through cookies, web beacons, pixel tags, and server logs when you access and interact with the Platform. This includes technical data such as your IP address, browser type, device identifiers, and navigation patterns.
• From third-party providers — including payment processors (e.g., Touch 'n Go eWallet, Boost, GrabPay, DuitNow, Maybank, CIMB, Public Bank), identity verification services, fraud prevention agencies, and analytics providers, where such data sharing is permitted by applicable law and is necessary for the operation of the Platform.
• From publicly available sources — including public databases and registries, where this is necessary to fulfil our legal obligations, including anti-money laundering compliance and sanctions screening.

dark168 processes your personal data for the following purposes:

• Account Registration & Management — to create, maintain, and administer your dark168 account, including processing deposits, withdrawals, and gameplay activity.
• Identity Verification (KYC) — to verify your identity, age, and eligibility to use the Platform, in compliance with applicable regulatory requirements.
• Payment Processing — to facilitate transactions through your chosen payment method, including Touch 'n Go eWallet, DuitNow, FPX, and Malaysian bank transfers.
• Legal & Regulatory Compliance — to meet our obligations under applicable laws, including anti-money laundering (AML), countering the financing of terrorism (CFT), and responsible gambling regulations.
• Fraud Prevention & Security — to detect, investigate, and prevent fraudulent activity, cheating, money laundering, and other unlawful conduct on the Platform.
• Customer Support — to respond to your enquiries, complaints, and requests for assistance via live chat, email, and other support channels.
• Platform Improvement — to analyse usage patterns, conduct testing, and improve the functionality performance, and content of the dark168 Platform.
• Marketing Communications — where you have provided consent, to send you information about promotions, bonuses, and new games offered on dark168. You may withdraw this consent at any time.
• Responsible Gambling — to monitor your gameplay patterns and, where appropriate, provide responsible gambling interventions such as deposit limit reminders and self-exclusion processing.

dark168 processes your personal data one or more of the following lawful bases:

• Contractual Necessity — processing is necessary to perform the contract between you and dark168 (i.e., to provide the gaming services you have registered to use).
• Legal Obligation — processing is necessary to comply with a legal or regulatory obligation applicable to dark168, including KYC verification, AML screening, and responsible gambling reporting requirements.
• Legitimate Interests — processing is necessary for the legitimate interests of dark168 or a third party, including fraud prevention, platform security, and analytics provided such interests are not overridden by your fundamental rights and freedoms.
• Consent — where we rely on your consent as the lawful basis for processing (e.g., for direct marketing communications), you have the right to withdraw that consent at any time without detriment.

dark168 does not sell, rent, or trade your personal data to any third party for commercial purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and in accordance with applicable data protection law:

• Payment Service Providers — including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and Malaysian banks (Maybank, CIMB, Public Bank, RHB, Hong Leong Bank), solely for the purpose of processing deposits and withdrawals.
• Identity Verification & KYC Providers — third-party service providers engaged to perform identity verification, age verification, and document authentication on our behalf.
• Fraud Prevention & AML Agencies — compliance data providers and fraud prevention agencies, where disclosure is necessary to detect or prevent financial crime.
• Game Software Providers — licensed third-party game providers whose platforms are integrated into dark168, limited to session and gameplay data necessary to operate the games.
• Analytics & Technology Providers — service providers assisting with platform analytics, performance monitoring, and IT infrastructure, subject to strict contractual data processing obligations.
• Regulatory & Law Enforcement Authorities — where we are required by law, court order, or regulatory directive to disclose personal data, we will do so in compliance with applicable legal requirements.

All third-party service providers engaged by dark168 are subject to contractual obligations requiring them to process personal data only in accordance with our instructions and applicable data protection law, and to maintain appropriate technical and organisational security measures.

The dark168 Platform uses cookies and similar tracking technologies to enhance your user experience, maintain session security, and support analytics and performance monitoring. The following categories of cookies are used on the Platform:

You may manage your cookie preferences through your browser settings. Please note that disabling essential cookies may affect the functionality and security of the Platform. dark168 does not use third-party advertising cookies or behavioural tracking cookies for marketing purposes directed at external platforms.

dark168 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Account Data — retained for the duration of your active account relationship with dark168, and for a period of up to 5 years following account closure, to meet legal and regulatory obligations.
• Transaction Records — retained for a minimum of 5 years from the date of each transaction, in compliance with anti-money laundering record-keeping requirements.
• KYC Documentation — retained for a minimum of 5 years following the end of the business relationship, or longer where required by regulatory authority.
• Customer Support Communications — retained for a period of up to 3 years from the date of the last interaction, unless a longer retention period is required for dispute resolution or regulatory purposes.
• Marketing Consent Records — retained for as long as necessary to demonstrate lawful consent, and for a reasonable period thereafter to defend any related regulatory enquiry.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with dark168's internal data disposal procedures.

dark168 implements a comprehensive range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS Encryption — all data transmitted between your device and the dark168 Platform is encrypted using industry-standard SSL/TLS protocols.
• Encrypted Data Storage — sensitive personal and financial data is encrypted at rest within our secure server infrastructure.
• Access Controls — personal data is accessible only to authorised dark168 personnel and third-party processors on a strict need-to-know basis, governed by role-based access controls.
• Two-Factor Authentication (2FA) — account login protection via two-factor authentication is available to all players and is strongly recommended.
• Regular Security Audits — our Platform undergoes periodic independent security assessments and penetration testing to identify and remediate vulnerabilities.
• Incident Response — dark168 maintains a documented data breach incident response procedure. In the event of a breach affecting your personal data, we will notify you and relevant regulatory authorities in accordance with applicable legal requirements.

Subject to applicable data protection legislation, you have the following rights in relation to your personal data held by dark168. To exercise any of these rights, please contact our support team using the details in Section 15.

dark168 will respond to all valid data rights requests within 30 days of receipt. In complex cases, this period may be extended by a further 60 days, with notification provided to you within the initial 30-day period.

The dark168 Platform is strictly intended for individuals aged21 years and above. We do not knowingly collect personal data from individuals below the age of 21. Age verification is conducted during the registration process and may be repeated at any stage of a player's use of the Platform.

If dark168 becomes aware that personal data has been collected from a person below the age of 21, we will take immediate steps to close the relevant account, return any deposited funds, and delete the associated personal data in accordance with our data retention procedures.

Parents and guardians are encouraged to implement parental control software to prevent access to gambling platforms by minors. If you believe a minor has registered an account on dark168, please contact our support team immediately.

The dark168 Platform may contain links to or integrations with third-party services, including payment gateways (such as Touch 'n Go eWallet, Boost, and GrabPay) and game software providers. These third-party services operate under their own independent privacy policies, and dark168 is not responsible for the data practices of those third parties.

We recommend that you review the privacy policy of any third-party service you interact with in connection with your use of the dark168 Platform. dark168 does not endorse or assume responsibility for the content or privacy practices of external websites or services.

dark168 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the operational requirements of the Platform. When material changes are made, we will notify registered players via the Platform, email, or both, and update the effective date at the top of this Policy.

Your continued use of the dark168 Platform following the effective date of any amended Policy constitutes your acknowledgment of and agreement to the revised terms. If you do not agree with the amended Policy, you should cease using the Platform and contact us to close your account.

For any enquiries relating to this Privacy Policy, or to exercise any of your data rights as set out in Section 11, please contact the dark168 Data Protection team using the details below. All requests are handled in English and will receive a response within 30 days.