1. Home
  2. Privacy Policy
Updated: 1 January 2026

Dfkaya Privacy Policy – Personal Data Protection for Malaysian Members

This Privacy Policy explains in detail how dfkaya collects, uses, stores, and protects your personal information as a member of our platform. Your privacy is our priority, and we are committed to ensuring that every piece of data you entrust to dfkaya is handled with full responsibility and transparency.

Register an Account Now Terms & Conditions
256-bit SSL
Full data encryption
No Data Selling
Your data is never sold
User Controls
You control your own data
PDPA Compliance
Compliant with Malaysian data standards

Dfkaya's Privacy Commitment to Malaysian Members

Six core principles that shape how dfkaya manages your personal data.

🔒
Best-in-Class Data Security

Dfkaya uses 256-bit SSL encryption for all data communications between your device and our servers. All personal and financial information is stored in a server environment protected by multiple layers of security, including firewalls, intrusion detection systems, and continuous 24-hour monitoring.

🚫
No Sale of Data to Third Parties

Dfkaya has never sold, rented, or traded members' personal information to any third party for marketing or commercial purposes. Your data is used exclusively for the purposes explicitly stated in this Privacy Policy and for no other purpose without your express consent.

👤
Full Data Control Rights

As a dfkaya member, you have the full right to access, correct, download, or request the deletion of your personal data at any time. Such requests can be submitted by email to support@dfkaya.click and will be processed within 14 business days at no charge.

🍪
Cookie Usage Transparency

Dfkaya uses cookies only to enhance your browsing experience — including saving language preferences, maintaining secure login sessions, and helping us understand how the platform is used so we can improve it. You can manage your cookie settings through your browser at any time.

📋
Minimum Data Collection

Dfkaya only collects data that is strictly necessary to provide services to you — nothing more. We do not request irrelevant information and do not retain data beyond what is required for operational and legal compliance purposes.

🔔
Data Breach Notification

In the unlikely event of a data breach that may affect your personal information, dfkaya is committed to notifying impacted members within a reasonable timeframe and taking all necessary steps to contain the situation and protect our members.

How Your Data Is Managed at dfkaya

A simple overview of your personal data lifecycle within dfkaya's systems.

📝
Collection
Data you provide upon registration
🔐
Encryption
256-bit SSL instant protection
🗄️
Secure Storage
Protected & audited servers
⚙️
Limited Use
For stated purposes only
🗑️
Deletion Upon Request
Upon request or expiry
Contents

Quick Summary: dfkaya collects only the data necessary to operate the platform, uses it solely to serve you, never sells it to anyone, and protects it with 256-bit SSL encryption. You have the full right to access, correct, or delete your data at any time. Effective date: 1 January 2026.

1Introduction & Scope of Privacy Policy

This Privacy Policy is published by dfkaya, an online entertainment platform operating under the domain dfkaya.click and intended specifically for Malaysian players. This document explains in detail how we collect, process, store, share, and protect your personal information in the context of your use of the dfkaya platform.

Dfkaya understands that your trust is the foundation of our relationship. When you register an account, make a deposit via Touch 'n Go eWallet or DuitNow, or enjoy any game on our platform — from EPL virtual sports to IPL cricket betting — you are entrusting us with some of your personal information. We do not take that responsibility lightly.

This Privacy Policy applies to all users of the dfkaya platform, including visitors who browse our website without registering an account. By browsing or using the dfkaya platform, you agree to the terms set out in this Privacy Policy. If you do not agree, please discontinue your use of the dfkaya platform.

Note: This Privacy Policy should be read alongside dfkaya Terms & Conditions and Responsible Gaming Policy us. Together, these three documents form a comprehensive protection framework governing the relationship between dfkaya and our members.

2Types of Personal Data Collected by dfkaya

Dfkaya collects personal data from you through several different channels. Below are the categories of data we collect and the circumstances in which that collection takes place:

Data You Provide Directly

  • Registration Information: Full name, email address, phone number, date of birth, and password provided when registering your dfkaya account.
  • Identity Verification (KYC): A copy of your Malaysian identity card, a selfie for verification purposes, and any other supporting documents requested during the Know Your Customer process.
  • Financial Information: Details of the payment method used — whether Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, or FPX via Maybank2u or CIMB Clicks — for the purpose of processing deposits and withdrawals in MYR.
  • Support Communications: The content of any messages, emails, or live chat conversations you send to the dfkaya support team.

Automatically Collected Data

  • Technical Data: Your IP address, browser type, operating system, screen resolution, and device information used to access the platform.
  • Usage Data: Pages visited, session duration, games played, markets wagered on, and navigation patterns within the dfkaya platform.
  • Transaction Data: Records of all deposits, withdrawals, bets, and winnings in your account — including timestamps, amounts in RM, and the payment method used.
  • Location Data: General location information derived from your IP address for the purpose of verifying permitted geographical zones.

Data from Third Parties

  • In specific cases involving identity verification or anti-money laundering (AML) compliance, dfkaya may receive additional information from authorised verification service providers. All such data sharing is subject to strict confidentiality agreements.

3How We Use Your Personal Data

Dfkaya uses the personal data it collects solely for the following legitimate and relevant purposes:

  • Account Management: Creating and maintaining your dfkaya account, verifying your identity, and ensuring that only you can access your account.
  • Transaction Processing: Processing deposits via Touch 'n Go, DuitNow, GrabPay, Boost, ShopeePay, or FPX, and managing your winnings withdrawals in MYR.
  • Platform Maintenance: Ensuring all games — from live casino baccarat and blackjack, Texas Hold'em poker, progressive jackpot slots, Mobile Legends e-sports, to ball-by-ball cricket betting — operate correctly and fairly for all members.
  • Customer Support: Responding to enquiries, resolving technical issues, and handling your complaints in Bahasa Melayu across all dfkaya support channels.
  • Legal Compliance: To fulfil applicable legal obligations, including mandatory anti-money laundering (AML) and know-your-customer (KYC) requirements.
  • Fraud Prevention: Detecting and investigating suspicious activity, multiple-account usage, or any fraudulent attempts that could compromise the platform or other members.
  • Experience Personalisation: Delivering relevant game recommendations and promotions based on your preferences and activity history on dfkaya — for example, if you regularly bet on EPL matches, we may notify you of related virtual sports promotions.
  • Platform Improvement: Analysing usage patterns on an aggregated (not individual) basis to understand which areas of the dfkaya platform need improvement and what new features our Malaysian members need most.
  • Important Communications: Sending important notifications about your account, policy changes, or critical security information via email or SMS.

Limited Purpose Principle: dfkaya will not use your personal data for any purpose not stated above without first obtaining your explicit consent. If you receive any communication from dfkaya that appears unusual or unrelated to your use of the platform, please contact us immediately at support@dfkaya.click.

4Sharing Data with Third Parties

Dfkaya does not sell, rent, or trade members' personal data to any third party for marketing purposes. However, in the course of operating the platform, there are certain situations in which data may be shared with carefully selected third parties:

  • Payment Providers: Transaction information required to process your deposits and withdrawals is shared with the relevant payment processors — such as Touch 'n Go, DuitNow, GrabPay, Boost, ShopeePay, or FPX — and only to the extent necessary to complete the transaction.
  • Game Provider: Account information required for gameplay is shared with third-party game software providers that operate games within the dfkaya platform, such as Live Casino and jackpot slot providers. All such providers are bound by strict confidentiality agreements.
  • Authority: dfkaya will disclose personal data to the relevant authorities when required by law, court order, or a legitimate official investigation — including in cases involving fraud, money laundering, or other serious criminal offences.
  • Technical Services: The technical service providers we use to host, maintain, and monitor the dfkaya platform may have limited access to data in a technical capacity. All such providers are bound by strict data processing agreements.

Our Commitment: Every third party that receives data from dfkaya is bound by a data protection agreement that prohibits them from using that information for any purpose other than providing the specific contracted service. dfkaya has zero tolerance for any unauthorised use of data by our third-party partners.

5dfkaya's Data Security Measures

Protecting your personal data is a responsibility that dfkaya takes very seriously. We continuously invest in security infrastructure and keep it updated against the latest cyber threats. The following are the layers of protection we have in place:

  • Data Encryption in Transit: All communications between your browser or device and dfkaya's servers are secured using TLS (Transport Layer Security) protocol with AES 256-bit encryption — the same standard used by leading financial institutions in Malaysia.
  • Data Encryption at Rest: Sensitive data such as financial details and identification information is stored in encrypted form in our databases — even internal staff cannot view the original data without appropriate authorisation.
  • Strict Access Controls: Access to members' personal data within the dfkaya system is restricted to staff with a legitimate need to access it. All access is logged and monitored automatically.
  • Two-Factor Authentication: dfkaya's internal systems use multi-factor authentication to secure access to databases containing member personal data.
  • Regular Security Audits: dfkaya conducts regular security assessments and penetration testing carried out by independent third parties to identify and remediate any vulnerabilities before they can be exploited.
  • 24/7 Monitoring: Our security monitoring system operates around the clock to detect any unusual activity or unauthorised access attempts to member data.

While dfkaya takes all reasonable steps to protect your data, no system can be guaranteed 100% secure against every threat. We therefore encourage you to take your own security precautions — such as using a strong, unique password for your dfkaya account and never sharing your login credentials with anyone.

6Use of Cookies and Tracking Technologies

Dfkaya uses cookies and similar technologies to enhance the user experience and gather information about how the platform is used. Below are the types of cookies used and their purposes:

  • Essential Cookies: These cookies are required for the core functionality of the dfkaya platform — including maintaining a secure login session, storing selections in your bet slip, and ensuring security features operate correctly. The platform cannot function properly without them and they cannot be disabled.
  • Preference Cookies: These cookies remember your preferences — such as your chosen language, odds format, and display settings — so you do not need to reconfigure them each time you visit the dfkaya platform.
  • Analytics Cookies: We use analytics cookies to understand, in aggregate, how members interact with the dfkaya platform — which pages are visited most often, where users encounter difficulties, and how navigation can be improved. This data is analysed in anonymised form.
  • Session Cookies: These cookies are temporary and are automatically deleted when you close your browser. They are used to maintain session continuity while you are using the dfkaya platform.

Managing Cookies: You can manage or delete cookies through your browser settings at any time. However, disabling certain cookies may affect the functionality of the dfkaya platform — for example, you may be required to log in again each time you visit. Refer to your browser's help documentation for guidance on managing cookie settings.

7Data Retention & Deletion

Dfkaya does not retain your personal data for longer than necessary. The following are the data retention guidelines we adhere to:

  • Active Account Data: For as long as your dfkaya account remains active, your registration information and transaction records will be retained for account management and customer support purposes.
  • Data After Account Closure: When a dfkaya account is closed at your request or for other operational reasons, we will retain the necessary data for a minimum of 7 years to comply with applicable legal and financial requirements, including transaction records for audit purposes. After this period, the data will be securely deleted.
  • Communication Records: Customer support conversation records are retained for 3 years for quality control purposes and to assist in resolving any disputes that may arise at a later stage.
  • System Log Data: Technical logs used for security and troubleshooting are retained for 90 days before being automatically deleted.
  • Marketing Data: If you have consented to receiving marketing communications from dfkaya and subsequently withdraw that consent, your marketing preference data will be deleted within 30 days of the withdrawal date.

When dfkaya deletes data, we ensure it is done securely using methods that prevent recovery of that data. Data held in backup formats will also be deleted in accordance with our backup update schedule.

8Your Rights Regarding Personal Data

As a dfkaya member, you have the following rights regarding your personal data held in our systems. All data rights requests may be submitted by email to support@dfkaya.click:

Right of Access

You have the right to request a copy of all personal data dfkaya holds about you. We will provide a full report within 14 business days.

Right to Rectification

If any personal data dfkaya holds about you is inaccurate or incomplete, you have the right to request an immediate correction.

Right to Erasure

You have the right to request the deletion of your personal data, subject to any legal retention obligations applicable to dfkaya.

Right to Object

You have the right to object to your data being used for certain purposes, such as marketing communications, and we are obliged to honour that objection.

Data Portability

You have the right to receive your data in a machine-readable format (such as CSV or JSON) for transfer to another service provider if needed.

Right to Restrict Processing

In certain circumstances, you have the right to request that dfkaya restrict how we process your personal data while a dispute is being resolved.

How to Submit a Data Rights Request: Send an email to support@dfkaya.click with the subject line "Personal Data Rights Request", specifying the type of request and your dfkaya account number. We will respond within 14 business days. Identity verification may be required before your request is processed, to safeguard the security of your data.

9Protection of Children's Data

Dfkaya is an online entertainment platform that only for individuals aged 18 and above. We do not knowingly collect or process personal data from anyone under the age of 18.

The dfkaya registration process requires date-of-birth verification, and we employ multiple measures to detect and prevent account registrations by underage individuals. If you believe a minor has registered an account on dfkaya, please contact us immediately at support@dfkaya.click with the relevant details.

If dfkaya becomes aware that personal data has been collected from someone under the age of 18, we will take immediate steps to delete that data and close the relevant account.

Parents & Guardians: If you discover that your child has registered or attempted to register a dfkaya account, please contact us immediately. dfkaya is committed to ensuring our platform remains inaccessible to underage individuals, and we will work with you to resolve the situation promptly.

10Privacy Policy Amendments

Dfkaya reserves the right to amend this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or technological developments that affect how we manage member personal data.

  • Any amendments to this Privacy Policy will be published on this page with an updated "Last Updated" date.
  • For material amendments — meaning changes that significantly affect your privacy rights or how we use your data — dfkaya will endeavour to notify active members via in-platform notifications or email to their registered address.
  • Continued use of the dfkaya platform after any amendments are published will be considered acceptance of the revised terms.
  • It is your responsibility to review this Privacy Policy page from time to time to stay informed of the latest applicable terms.

Previous versions of the Privacy Policy are available upon request via support@dfkaya.click for any reference purposes.

11Contact dfkaya's Privacy Officer

If you have any questions, concerns, or requests relating to this Privacy Policy or the way dfkaya handles your personal data, please contact us through the following channels:

  • Email: support@dfkaya.click — Please use the subject line "Privacy Enquiry" or "Personal Data Request" to help us process your request more efficiently.
  • Live Chat: Available 24/7 within the dfkaya platform — for immediate privacy enquiries that do not involve sensitive data.
  • Response Time: dfkaya is committed to responding to all privacy-related enquiries within 5 business days, and data rights requests within 14 business days.

Dfkaya takes all privacy concerns raised by our members seriously. If you are unsatisfied with the response provided, you have the right to escalate your complaint to the relevant data protection authority.

Security Warning: dfkaya will never ask for your account password, full credit card number, or other sensitive information via email or live chat. If you receive a communication claiming to be from dfkaya that requests such information, it is likely a phishing attempt. Please contact us immediately at support@dfkaya.click to report it.

Dfkaya Privacy FAQs

The most frequently asked questions from dfkaya members regarding the protection of their personal data.

No, absolutely not. dfkaya has never sold, rented, or traded members' personal data to any third party for marketing or commercial purposes. Your data is only shared in limited, clearly defined situations outlined in our Privacy Policy — namely with payment providers processing your RM transactions, game software providers required to run the games, and authorities when required by law. All these parties are bound by strict confidentiality agreements and may not use your data for any other purpose.

Send an email to support@dfkaya.click with the subject line "Personal Data Access Request", including your dfkaya account number and registered phone number. We may need to verify your identity before processing the request to ensure your data is not disclosed to the wrong party. Once verification is complete, we will provide a full report of all data we hold on you within 14 business days, in a clearly readable format. This service is free of charge and there is no limit on how many times you may make such a request.

Yes. dfkaya uses 256-bit SSL encryption for all data transmissions, meaning your payment information — whether it involves Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, FPX Maybank2u, or CIMB Clicks — is encrypted before being sent over the internet. Furthermore, dfkaya does not store your full bank card number or e-wallet account password in our systems. All payment processing is handled through certified payment gateways that manage this sensitive information in strict accordance with PCI DSS security standards.

Yes, you have the right to request the deletion of your personal data from dfkaya's systems. However, please note that certain data is required by law to be retained for a minimum period — in particular, financial transaction records that must be kept for audit and anti-money laundering compliance purposes. Such data cannot be deleted before that minimum retention period expires. For data not subject to legal retention obligations, we will process your deletion request within 30 days. Please send your request to support@dfkaya.click with the subject line "Data Deletion Request".

If you suspect your dfkaya account has been compromised or accessed by an unauthorised party, take the following steps immediately: first, attempt to log in and change your password right away if you can still access your account; second, contact the dfkaya support team via 24/7 live chat or email at support@dfkaya.click and request that your account be temporarily suspended pending investigation; third, review your transaction history for any unrecognised activity and report it to us. The dfkaya security team will investigate and respond within 2 hours for urgent account security cases.

Other Related Policy Documents

Read these documents together for a comprehensive understanding of your rights and responsibilities at dfkaya.

📋
Terms & Conditions

The complete terms of use for the dfkaya platform — covering accounts, RM deposits, withdrawals, bonuses, and game rules.

Read Terms & Conditions
🛡️
Responsible Gambling

Guides and tools to help keep your dfkaya experience safe, in control, and enjoyable.

Learn More
❓
FAQ

Answers to the most frequently asked questions about accounts, payments, games, and privacy on the dfkaya platform.

View FAQ
Our Commitment to Your Privacy

Dfkaya takes a "privacy by design" approach — meaning privacy protection is built directly into how our platform is designed and operated, rather than added on as an afterthought. Every product development decision is evaluated from a privacy perspective before it is implemented.

We encourage you to reach out if you have any privacy concerns — we are always happy to clarify anything that is unclear about how we handle your data.

Contact: support@dfkaya.click  ·  Response time: under 24 hours

A Safe & Trusted Platform for Malaysian Players

Privacy Protected. Play with Confidence.

Dfkaya protects your personal data to the highest security standards so you can focus on what matters — enjoying your favourite games with complete peace of mind. From virtual sports and live casino to poker and cricket, all within a safe and fair environment.

Register a Free Account Learn More About Us
256-bit SSL Zero data selling Full data control 24/7 BM Support

18+ only. Please gamble responsibly. All use of the platform is subject to Terms & Conditions.

Bahasa Melayu