D20 Privacy Policy — Malaysia User Information Protection

Information We Collect

When you register and use the d20 platform, we collect several categories of information to ensure our services function properly and securely. The types of information collected are as follows:

Account Information

During registration, we collect your username, encrypted password, email address, and phone number. This information is required to verify your identity and protect your account from unauthorised access.

Device & Browser Information

D20 automatically records technical data when you access the platform — including IP address, device type, operating system, browser type, screen resolution, and time zone. This data is used to optimise display on your device and detect suspicious activity.

Local Payment Information

All financial transactions are processed in Malaysian Ringgit (RM). We record the date, amount, and payment method (such as FPX or e-wallets) for each deposit and withdrawal. Full bank account numbers are not stored by d20 — they are processed directly through licensed, secure third-party payment processors.

Platform Usage Data

We log in-platform activity such as games played, bets placed, session duration, and settings preferences. This data helps us improve user experience and detect unusual usage patterns.

How We Use Your Information

Information collected by d20 is used for specific, limited purposes only. We do not use your data for anything beyond what is stated without your consent. The primary purposes are as follows:

• Account management: Handles registration, login, identity verification, and the management of your account settings.
• Transaction processing: Verifying and securely processing deposits and withdrawals in RM.
• Platform security: Detecting and preventing fraud, account abuse, unauthorised access, and activities that violate our terms of use.
• Service improvement: Analysing usage patterns in aggregate (without identifying individuals) to improve platform performance, layout, and overall user experience.
• Service communications: Sending notifications related to your account, security, or important policy changes. d20 will not send marketing messages without your consent.
• Legal compliance: Complying with applicable legal and regulatory obligations in Malaysia when required.

Cookies & Tracking Technologies

The d20 platform uses cookies and similar tracking technologies to enhance functionality and user experience. Cookies are small data files stored on your device when you visit our website or use our app.

There are three categories of cookies in use:

• Essential cookies: Required for core platform functions such as login, session management, and security. These cookies cannot be disabled without affecting platform functionality.
• Performance cookies: Collecting anonymised data on how users interact with the platform — such as frequently visited pages and load times. This helps us improve technical performance.
• Preference cookies: Saving your preferences such as language and display settings so you do not have to reconfigure them each time you log in.

You can manage or delete cookies through your browser settings at any time. However, disabling essential cookies may affect your ability to use certain features on the d20 platform.

Data Storage, Security & Third-Party Sharing

D20 uses industry-standard SSL (Secure Socket Layer) encryption to protect all data transmitted between your device and our servers. Data stored on our servers is further protected by additional security measures, including strict access controls and continuous monitoring.

Your personal information is retained only for as long as necessary to fulfil the purposes stated in this policy, or as required by law. Once the retention period ends, data will be securely deleted or anonymised.

Third-Party Sharing

D20 does not sell, rent, or share users' personal information with third parties for marketing purposes. Information may only be shared in the following limited circumstances:

• Licensed payment processors: To securely process your financial transactions. They receive only the minimum data necessary and are bound by strict confidentiality agreements.
• Technical service providers: Companies that help us operate the platform, such as server hosting and cybersecurity services, are bound by strict data protection agreements.
• Legal requirements: If d20 is required by court order or a lawful request from Malaysian authorities to disclose specific information.

User Rights Over Personal Information

As a d20 platform user in Malaysia, you have certain rights regarding your personal information. We respect and facilitate the exercise of the following rights:

To exercise any of the rights above, please contact the d20 support team at [email protected] with your account details for identity verification. We will process your request within a reasonable timeframe.

Policy Changes & Contact Us

D20 reserves the right to update this Privacy Policy from time to time to reflect changes in our data practices or legal requirements. Any material changes will be communicated via an in-platform notice or to your registered email address. The "Last updated" date at the top of this document will always reflect the latest version.

Continued use of the d20 platform after policy changes are published will be considered acceptance of those changes. We encourage you to review this page periodically.

If you have any questions, concerns, or requests regarding your data privacy, please reach out to us through the following channels:

• Email: [email protected]
• Live chat: Available on the d20 platform, operating around the clock
• Help centre: d20 FAQ for instant answers to common questions

We are committed to responding to all privacy enquiries within a reasonable timeframe and ensuring every d20 user feels safe and protected while using our platform.