Privacy Policy dota2 – Our Commitment to Protecting the Personal Information of Malaysian Players

1. Introduction

This Privacy Policy is published by dota2.my ("dota2", "we", "platform") and applies to all users who access or register on our website. We understand that your trust in dota2 depends greatly on how we handle your personal information — and we take that trust seriously.

As an online gaming platform serving Malaysian players, dota2 is fully compliant with Malaysia's Personal Data Protection Act 2010 (PDPA). This policy sets out our privacy practices transparently so you can make informed decisions about your use of the dota2 platform.

By registering an account, accessing dota2.my or using any of our services, you agree to the collection and use of your information as described in this Privacy Policy. If you do not agree, please discontinue use of the dota2 platform and contact us to close your account.

2. Personal Data We Collect

Dota2 only collects data that is genuinely necessary to provide you with a safe, fair, and quality service. The types of data we collect are as follows:

Data marked as "Required" is necessary for the operation of your dota2 account. Failure to provide this data will prevent us from delivering our services in full.

3. How We Collect Your Data

Dota2 collects your personal information through several different channels:

• Direct Registration: When you register an account at dota2.my, you voluntarily provide information such as your name, email address, phone number and date of birth through our registration form.
• Platform Usage: dota2's systems automatically log your activity on the platform, including games played, bet amounts, winnings, login times and device types used.
• Financial Transactions: When you make a deposit or withdrawal using Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX (Maybank2u, CIMB Clicks), dota2 receives the necessary transaction information from the payment provider in order to process your payment.
• Identity Verification (KYC): When you submit verification documents for the KYC process, dota2 collects copies of those documents to fulfil anti-money laundering legal requirements.
• Support Contact: When you contact the dota2.my support team via live chat or email, the contents of that conversation are stored for reference and service improvement purposes.
• Cookies & Tracking Technologies: The dota2.my website uses cookies and similar technologies to collect technical data about your usage – this information helps us improve the user experience and maintain platform security.

4. How We Use Your Personal Data

Dota2 uses collected personal data solely for legitimate purposes necessary to operate the platform and deliver the best possible service to you. These purposes are as follows:

• Account Management: To create, maintain, and protect your dota2 account, including identity verification at login.
• Transaction Processing: Processing deposits and withdrawals in MYR via your chosen payment method, securely and promptly.
• Gaming Services Provision: Allows you to access and enjoy all games on dota2, including slots, live casino, and table games.
• Fraud Prevention: Detecting and preventing fraudulent activity, money laundering, multiple accounts, and violations of dota2's Terms & Conditions.
• Legal Compliance: To fulfil legal obligations under Malaysia's PDPA 2010 and anti-money laundering (AML) requirements.
• Customer Support: Providing technical support and resolving queries related to your dota2 account or transactions.
• Service Communications: Sending important notifications regarding your account, transactions, policy changes or dota2 platform disruptions.
• Platform Improvement: Analyses aggregated usage patterns (without identifying individuals) to improve the design, performance and user experience of dota2.my.
• Responsible Gaming: Monitoring gameplay patterns to identify members who may need support related to their gaming habits and providing appropriate assistance.

5. Sharing Information with Third Parties

Dota2 does not sell, rent, or disclose your personal data to third parties for their own commercial purposes. However, in certain limited situations, we may need to share your information with the following parties:

• Payment Providers: Information required to process transactions is shared with approved payment providers such as Touch 'n Go eWallet, GrabPay, DuitNow, and FPX service providers. Such sharing is limited strictly to data necessary for payment processing and is subject to strict confidentiality agreements.
• Game Software Providers: Game developers who supply slots and live casino games to the dota2 platform may receive anonymised gameplay statistics for the purpose of technical game maintenance.
• Legal Authorities: dota2 will disclose user information to Malaysian authorities (such as the police or courts) where required by law, court order or a valid official investigation.
• Technical Service Providers: Cloud infrastructure providers, cybersecurity services, and analytics partners that assist dota2 in operating the platform may have limited access to user data under strict data protection agreements.
• Regulatory Bodies: In situations required by regulation, dota2 may need to share information with the relevant regulatory bodies for legal compliance purposes.

In all of the above data-sharing scenarios, dota2 ensures that the receiving parties comply with data protection standards equivalent to those we uphold ourselves. No third party is permitted to use your data for their own purposes beyond those specified in their agreement with dota2.

6. Data Security at dota2

Dota2 invests seriously in security infrastructure to protect your personal data from unauthorised access, disclosure, alteration, or destruction. The key security measures we employ include:

• 256-bit SSL Encryption: All communications between your browser and the dota2.my servers are encrypted using 256-bit SSL technology – the same security standard used by leading banking institutions in Malaysia.
• Two-Factor Authentication (2FA): dota2 offers two-factor authentication as an added layer of security when logging in to your account.
• 24/7 Monitoring: The dota2 security team monitors our systems around the clock to detect and respond to any security threats promptly.
• Strict Access Controls: Access to dota2 user data within our systems is restricted to staff with a legitimate business need only, and all access is logged for audit purposes.
• Regular Security Audits: dota2 conducts regular penetration testing and vulnerability assessments to identify and address any system weaknesses before they can be exploited.
• Secure Data Backup: dota2 user data is backed up regularly and stored in an isolated, secure environment to ensure service availability in the event of an emergency.

While dota2 takes all reasonable steps to protect your data, no system can be guaranteed 100% safe from cyber threats. We therefore encourage you to take precautions on your end as well — including using a strong password, enabling two-factor authentication, and never sharing your login credentials with anyone.

7. dota2 Cookie Policy

The dota2.my website uses cookies and similar tracking technologies to enhance your experience. Cookies are small text files stored on your device when you visit our website. The following are the types of cookies dota2 uses:

You can manage your cookie settings through your internet browser settings. However, disabling essential cookies may affect the functionality of the dota2.my platform and your gaming experience. For more information on how to manage cookies in popular browsers, please refer to the help documentation of your browser.

8. Your Rights Over Your Personal Data

As a dota2.my user protected under Malaysia's Personal Data Protection Act 2010, you have the following rights regarding your personal data:

• Right of Access: You have the right to request a copy of the personal data we hold about you at dota2. Send your request to [email protected] and we will respond within 30 days.
• Right to Rectification: If any personal data held by dota2 is inaccurate or out of date, you have the right to request a correction. Log in to your dota2 account and update your profile details, or contact our support team.
• Right to Erasure: Under certain circumstances, you may request that dota2 delete your personal data. Please note that some data may need to be retained for a specified period to fulfil Malaysian legal obligations.
• Right to Object to Processing: You have the right to object to the processing of your personal data for direct marketing purposes. Contact dota2 to opt out of marketing communications without affecting your account.
• Right to Restrict Processing: You may request that dota2 restrict how we process your data in certain circumstances – for example, while you are disputing the accuracy of data we hold about you.
• Data Portability Right: You have the right to request a copy of your personal data in a machine-readable format so that it can be transferred to another platform if needed.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the validity of any processing that took place prior to the withdrawal.

To exercise any of the above rights, please contact the dota2 Data Protection Officer by email at [email protected] by clearly stating your request. We will process your request within a reasonable timeframe in accordance with the applicable legal requirements.

9. International Data Transfers

In some cases, your personal data may be processed or stored on servers located outside Malaysia — for example, when we utilise global cloud infrastructure services to ensure high platform availability and performance for dota2.

When such data transfers occur, dota2 ensures that:

• The recipient country or region has an adequate level of data protection equivalent to that of Malaysia.
• Appropriate data processing agreements have been put in place with all recipient parties, including standard contractual clauses that safeguard your rights.
• Data transfers are limited to the minimum information necessary for the operation of the dota2 platform.
• All parties involved in the data transfer comply with the security standards set by dota2.

By using the dota2.my platform, you consent to the data transfers described above. If you have any concerns regarding international data transfers, please reach out to us at [email protected] for further discussion.

10. Data Retention Period

Dota2 retains your personal data only for as long as necessary to fulfil the purpose of processing or to comply with legal requirements. The following are general guidelines for our data retention periods:

• Active Account Data: Retained for as long as your dota2 account is active and for the required period following account closure to meet legal obligations.
• Financial Transaction Records: Retained for a minimum of 7 years from the transaction date in accordance with Malaysia's tax and AML legal requirements.
• KYC Documents: Retained for a minimum of 5 years after account closure in accordance with anti-money laundering legal requirements.
• Support Communication Logs: Retained for 2 years after the last interaction for reference and dota2 service improvement purposes.
• Technical Data & Logs: Retained for 12 months for security and dota2 system debugging purposes.
• Responsible Gaming Data: Self-exclusion records and gaming limits are retained for an extended period to ensure ongoing protection for the users concerned.

Once the specified retention period has ended, your data will be securely deleted or anonymised in accordance with dota2's strict data disposal procedures. Anonymised data may be retained indefinitely for statistical or research purposes.

11. Children & Minors

The dota2.my platform is intended exclusively for individuals aged 18 and above. We do not knowingly collect or process personal data from minors or individuals under the age of 18.

Dota2 applies the following measures to prevent registration by underage individuals:

• All registrants are required to confirm that they are 18 years of age or older during the registration process.
• The KYC verification process includes identity document checks requiring valid proof of age.
• Dota2 uses automated detection systems to identify patterns that may indicate usage by underage individuals.

Should dota2 discover that we have inadvertently collected personal data from an individual under the age of 18, we will take immediate steps to delete that data and close the account in question. If you are a parent or guardian and believe your underage child has registered on dota2.my, please contact us at [email protected] immediately.

12. Contact Us – Privacy Enquiries

If you have any questions, concerns or requests regarding this Privacy Policy or the handling of your personal data by dota2, we are ready to assist you through the following channels:

• Privacy Email: [email protected] – please state "Privacy Enquiry" in your email subject line
• Live Chat: Available 24/7 at dota2.my – click the chat icon at the bottom right corner
• Email Response Time: Within 5 business days for privacy-related enquiries
• Language of Communication: Bahasa Melayu or English

This Privacy Policy may be updated from time to time to reflect changes in our privacy practices or new legal requirements. Any material changes will be communicated to you via your registered email or through an in-platform notification on dota2.my. The "Updated" date at the top of this document indicates the current version of the Privacy Policy in effect.