Dimers Privacy Policy – Data Protection for Malaysian Members

Dimers ("we", "platform", "Company") values the privacy of every member who registers and uses our services at dimers.best. This Privacy Policy is designed to explain clearly and transparently how we handle your personal information from the moment you register through every subsequent use of our platform.

We understand that sharing personal information with any online platform requires a great deal of trust — especially when financial and identity details are involved. That is why Dimers handles your data with the same level of care that you yourself would expect.

This Privacy Policy applies to all services provided by Dimers, including the website, mobile app, customer support and any related platforms operated by us. It also applies to all members and visitors of the platform, regardless of their location across Malaysia — from Kuala Lumpur, Selangor, Penang and Johor to Sabah and Sarawak.

This policy should be read together with Terms & Conditions and Responsible Gaming Dimers.

Dimers collects your personal information through several methods — directly from you during registration and platform use, and automatically through standard tracking technologies such as cookies. The following are the categories of data we collect:

Dimers does not collect sensitive data such as medical information, religious beliefs or political affiliations. We also do not collect financial data beyond what is necessary to securely process your transactions.

Dimers uses collected personal data solely for legitimate purposes directly related to providing our services to you. The specific purposes are as follows:

• Account management: To create, verify, and manage your account Dimers yours, including the login process, two-factor authentication, and profile updates.
• Transaction processing: To process deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow and FPX, as well as withdrawals of winnings to your chosen payment method.
• Identity verification and security: To verify your identity, prevent fraud, money laundering, and use of the platform by underage individuals.
• Betting services provision: To process bets on football (Malaysia Super League, EPL), lottery, jackpot, cricket, e-sports, and all other services you use on the platform.
• Customer support: To handle your enquiries, complaints and support requests in Bahasa Melayu, 24 hours a day.
• Service communications: To send you important account-related notifications such as deposit confirmations, withdrawal outcomes, and security updates.
• Legal compliance: To fulfil our legal obligations under Malaysia's PDPA and other applicable regulations, including anti-money laundering (AML) requirements.
• Platform improvements: To analyse usage patterns and enhance the overall user experience on the platform Dimers as a whole.

Dimers will not use your data for any purpose beyond those listed above without first obtaining your consent. You have the right to withdraw consent at any time by contacting us at support@dimers.best.

Dimers does not and will never sell, rent, or trade members' personal information to any third party for marketing or commercial purposes. This is an unconditional commitment.

However, in the course of delivering our services, there are limited situations where we share data with trusted third parties, subject to strict confidentiality agreements:

• Payment service providers: Providers such as Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow and banks offering FPX services receive the transaction information necessary to process your payment. They are subject to their own privacy policies and security standards.
• Technology service providers: Companies that provide the technical infrastructure, server hosting, and security services that enable the platform Dimers operates. They are granted access only to the data required for their specific technical function.
• Legal authorities: Where required by a court order, police warrant or directive from a lawful authority under applicable Malaysian law, Dimers will comply and disclose the requested data.
• Identity verification process: Third-party identity verification service providers used to authenticate the identity documents you submit — subject to strict data protection agreements.

In all of the above cases, data sharing is limited strictly to what is necessary (data minimisation principle), and all relevant third parties are bound by written agreements requiring them to protect your data to the same standard as Dimers.

Dimers continuously invests in security infrastructure to ensure members' personal and financial data remains protected to the highest standard. The following are the layers of protection we employ:

• 256-bit SSL encryption: All communications between your device and our servers Dimers encrypted using 256-bit TLS/SSL protocol — the same standard used by Maybank2u and CIMB Clicks.
• Data encryption at rest: Sensitive data stored in our databases, such as financial information and identity card numbers, is encrypted at rest — not only during transmission.
• Layered access controls: Only staff with a legitimate need and who have passed background checks are permitted to access member data — and all such access is regularly monitored and audited.
• 24/7 threat monitoring: Our automated threat detection system monitors the platform around the clock for suspicious activity, intrusion attempts, or unauthorised access.
• Two-factor authentication (2FA): Members are encouraged to enable two-factor authentication for an added layer of protection when logging in to their account Dimers.
• Regular security audits: Dimers conducts regular security audits by independent third parties to identify and address any vulnerabilities in our systems.

Platform Dimers uses cookies and similar tracking technologies to enhance the user experience, maintain security, and understand how members use our platform. Cookies are small text files stored on your device when you visit our website.

The following are the types of cookies used by Dimers:

You can manage your cookie preferences through your web browser settings. However, disabling essential cookies may affect the functionality of the platform Dimers and you may be unable to log in or use certain features properly.

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and the Privacy Policy Dimers, you have the following rights regarding your personal data:

To exercise any of the rights above, contact us at support@dimers.best by stating the right you wish to exercise along with your account information. Dimers committed to responding to requests within 14 business days.

Dimers retains your personal data only for as long as necessary to fulfil the purposes set out in this Privacy Policy, or as required by applicable Malaysian law. The following are our general data retention guidelines:

• Active account data: For as long as your account is active on the Dimers, plus a 7-year retention period following account closure to meet legal requirements.
• Financial transaction records: Minimum 7 years from the date of transaction, in line with Malaysia's financial reporting and AML requirements.
• Identity verification records: For the duration of an active account plus 5 years, for compliance and verification purposes if required by the relevant authorities.
• Customer support communication logs: 3 years from the date of last interaction.
• Analytics and usage data (non-identifiable): Up to 3 years in anonymised form.
• Requested data deleted: Deleted within 30 days of request confirmation, except for any data subject to legal retention obligations.

Once the retention period expires, your data will be securely deleted or anonymised so that it can no longer be linked to your identity.

Platform Dimers may contain links to third-party websites or services from time to time. It is important to understand that this Privacy Policy applies only to the Dimers and does not cover any external websites you visit through those links.

Dimers is not responsible for the privacy practices, content, or security of third-party websites. We encourage you to read the privacy policy of any website you visit independently before providing them with your personal information.

This includes payment provider websites such as Touch 'n Go, GrabPay, Boost, and online banking portals like Maybank2u or CIMB Clicks — even when accessed through our platform, they operate under their own privacy policies that govern how your data is handled.

Dimers reserves the right to review and update this Privacy Policy from time to time in line with changes to laws, technology, or our business practices. Members will be notified of any material changes via an in-platform notice or registered email at least 14 days before they take effect.

We encourage you to review this Privacy Policy periodically, especially after we send out amendment notices. The date of the latest version is always displayed at the top of this document.

Continued use of the Dimers after an amendment takes effect constitutes your acceptance of the updated Privacy Policy. If you do not agree with the changes, you may close your account by contacting our team.

If you have any questions or concerns, or wish to exercise any of your privacy rights as described in this Privacy Policy, please contact the Dimers through the following channels:

• Email: support@dimers.best (for privacy enquiries, please use the subject line "Privacy Request")
• Live Chat: Available in-platform after login, 24/7 in Bahasa Malaysia
• Response time: Under 2 hours for live chat; under 48 hours for privacy-related emails

The Dimers whose privacy affairs are handled by trained staff who understand Malaysia's PDPA and are committed to protecting members' rights. We take every privacy inquiry and complaint we receive seriously.