Privacy Policy Depobos – Member Personal Data Protection

Welcome to the depobos Privacy Policy page. This document explains in detail how depobos collects, processes, stores and protects your personal data as a member of our platform. This policy applies to all users of the depobos website, our mobile app, and any services we offer.

Depobos understands that your trust is our most valuable asset. When you register and use the depobos platform, you are entrusting us with your personal information. We take this responsibility seriously and are committed to ensuring your data is always handled in a transparent, secure, and responsible manner.

This privacy policy is written in clear, easy-to-understand language so every member knows their rights and how we use the information entrusted to us. We encourage you to read this document carefully before using depobos services.

In the event of any conflict between the Bahasa Melayu version and any other version of this policy, the Bahasa Melayu version shall prevail for users in Malaysia. The effective date of this policy is 1 January 2026.

Depobos collects various types of information depending on how you interact with our platform. Below are the categories of data we collect and the purposes for which they are collected:

Depobos does not collect sensitive data such as health information, religious beliefs, or political views. We also do not collect personal data from individuals under the age of 18 — our platform is strictly for adult users only.

Every piece of information we collect has a clear and legitimate purpose. depobos only uses your data for the following purposes and will not use it beyond the stated scope without your consent:

• Account management: Creating, verifying and maintaining your member account, including the KYC process required for compliance with Malaysian law.
• Transaction processing: Processing deposits, withdrawals and all financial activities related to your account securely and accurately.
• Platform security: Detecting and preventing fraud, money laundering, multi-account usage and any suspicious activity that could compromise the security of other members.
• Service communications: Sending you important notifications about your account, transactions, security updates and changes to terms via email or SMS.
• Customer support: Resolving queries, complaints and disputes you raise with the depobos support team more efficiently.
• Legal compliance: Meeting obligations under Malaysian law, including PDPA, financial reporting requirements and directions from relevant authorities.
• Platform improvements: Analysing usage patterns in aggregate and anonymised form to improve the user experience, introduce new features and optimise platform performance.

The legal basis for our data processing is: (a) contract fulfillment — processing necessary to provide the services you requested; (b) legal obligations — processing required under Malaysian law; and (c) legitimate interests — processing necessary for platform security and fraud prevention.

Depobos upholds the principle that your personal data belongs to you. We do not share, sell, or disclose your information to third parties except in the following strictly limited and legitimate circumstances:

• Payment service providers: Transaction information is shared with approved payment providers (DuitNow, FPX, TnG, Boost, GrabPay) solely for the purpose of processing your payments. These providers are bound by strict data protection agreements.
• Licensed game providers: Game statistics required for win verification and RNG validation are shared with our game providers. No personally identifiable information is shared in this context.
• Legal authorities: Depobos will disclose required data to Malaysian authorities such as the Royal Malaysia Police, Bank Negara Malaysia, or a competent court when mandated by law or a valid court order.
• Technical consultants: In limited cases, vetted external technical specialists may require access to our systems. They are bound by strict confidentiality agreements.

In the event of a merger, acquisition, or sale of business assets, members' personal data may be transferred as part of that process. Members will be notified in advance and have the right to opt out if they do not agree with the new terms involved.

The security of your personal data is depobos's number one priority. We continuously invest in the latest security infrastructure to ensure your information is always protected against increasingly sophisticated cyber threats.

Technical security measures we employ:

• 256-bit SSL/TLS encryption: All data transmitted between your device and the depobos servers is encrypted using the industry's strongest encryption protocols.
• Static data encryption: Data stored in our databases is also encrypted, meaning that even in the highly unlikely event of a breach, the data cannot be read without the encryption key.
• Two-factor authentication (2FA): We provide and encourage the use of 2FA for all member accounts as an additional layer of security.
• Real-time monitoring: Our automated monitoring system operates 24 hours a day to detect unauthorised access attempts, suspicious activity patterns, and potential security threats.
• Regular security audits: Depobos conducts regular security assessments and penetration testing to identify and address any system vulnerabilities.
• Internal access controls: Access to members' personal data within depobos is restricted to staff on a need-to-know basis only.

The depobos website and app use cookies and similar tracking technologies to enhance the user experience and ensure the platform functions correctly. Below is an explanation of the types of cookies we use:

• Essential Cookies: Required for core platform functions such as login authentication, session security, and language preferences. These cookies cannot be disabled as they are essential for platform operations.
• Performance Cookies: Collecting information about how you use the platform — pages visited, time spent and any errors encountered. This data is used in aggregate to improve website performance.
• Functional Cookies: Storing your preferences such as display settings, favourite game lists and language to provide a more personalised experience.
• Analytics Cookies: Helps us understand overall platform usage patterns. Analytics data is processed in anonymised form and cannot be used to identify any specific individual.

You can manage your cookie settings through your web browser. However, disabling essential cookies may affect platform functionality and your user experience. For more information on managing cookies in popular browsers, refer to your respective browser's help documentation.

As a depobos member and a user protected under Malaysia's Personal Data Protection Act 2010 (PDPA), you have several important rights regarding your personal data. depobos respects and facilitates the exercise of all these rights:

To exercise any of the above rights, contact the depobos support team via live chat or email at [email protected]. We will process your request within 30 business days.

Depobos retains your personal data only for as long as it is needed for the stated purposes or as required by Malaysian law. Retention periods depend on the type of data and the context in which it was collected.

• Active account data: Retained for the duration your account remains active and for the required period after account closure to meet legal obligations.
• Financial transaction records: Retained for a minimum of 7 years in accordance with Malaysian financial and tax regulatory requirements.
• KYC Documents: Retained for the period specified by Malaysian legal compliance requirements, typically between 5 to 7 years after account closure.
• Support communication logs: Retained for 2 years for dispute resolution and service improvement purposes.
• Technical data and logs: System logs are retained for 90 days before being automatically deleted.

Depobos reserves the right to update this privacy policy from time to time to reflect changes in our data practices, legal requirements, or how we operate the platform. We are committed to notifying you of any significant changes.

When updates are made to this privacy policy:

• The "Updated" date at the top of this page will be changed to reflect the latest effective date.
• For significant changes, we will send a notification to your registered email and/or display a prominent notice within the platform.
• Minor changes that do not affect your fundamental rights may be updated without specific notice, but the updated date will always be refreshed.

Continued use of the depobos platform after any privacy policy changes take effect will be considered your acceptance of the updated terms. If you disagree with the changes, you have the right to close your account and stop using the platform.

If you have any questions, concerns or requests regarding this privacy policy or the handling of your personal data by depobos, our team is ready to assist you promptly.

• Live Chat: The fastest way — available 24/7 directly within the depobos platform or mobile app. You will receive a response within minutes.
• Email: [email protected] — for written enquiries requiring detailed clarification or supporting documentation.