Privacy Policy mrplaydash

Mrplaydash ("we", "platform") takes user privacy very seriously. This Privacy Policy describes our data protection practices, which apply to all users who access or use the mrplaydash platform through the website mrplaydash.com.

As a platform operating in Malaysia and serving local users, mrplaydash fully complies with the provisions of the Personal Data Protection Act 2010 (PDPA) Malaysia. We also adhere to international data security standards to ensure your information is protected at the highest level at all times.

We understand that you are entrusting us with your personal information — and we take that trust seriously. This Privacy Policy is written in plain language so you know exactly what happens to your data at mrplaydash.

Mrplaydash only collects data that is strictly necessary to deliver our services safely and effectively. Below are the categories of data we collect:

Mrplaydash collects personal data through several different channels. It is important that you understand these channels so you can make informed decisions about the information you share with us.

Information Collected Directly from You

Most of the data we hold comes directly from you when you:

• Account registration: your name, email address, phone number, date of birth, and password when you register with mrplaydash.
• KYC process (Identity Verification): copies of your MyKad, passport, or proof-of-address documents uploaded to complete account verification.
• Financial transactions: payment method details you use — whether Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX via Maybank2u or CIMB Clicks.
• Support communications: information you provide when contacting our customer support team via live chat or email.
• Preference form: personal settings and preferences you have configured in your account.

Automatic Collection

Some data is collected automatically when you use the mrplaydash platform:

• Cookies and tracking technologies: used to maintain login sessions, personalise your gaming experience, and analyse platform usage.
• Server logs: IP address, access time, pages visited, and actions taken within the platform are automatically recorded for security and troubleshooting purposes.
• Device data: technical information about the device you use to access mrplaydash is collected for performance optimisation purposes.

Mrplaydash uses your personal data only for legitimate purposes that are relevant to the services we offer. We do not use your data for any purpose unrelated to platform operations without first obtaining your consent.

You can withdraw your consent to receive promotional communications at any time by updating your notification settings in your account or by contacting us at support@mrplaydash.com. Withdrawing this consent does not affect your access to our core services.

Mrplaydash does not sell, rent, or trade your personal data to any third party for their own marketing purposes. However, there are limited situations where we may need to share your data with certain parties to keep the platform running properly.

Third-Party Service Providers

We work with trusted service providers who support our platform operations. They are only permitted to use your data for specified purposes and are bound by strict confidentiality agreements:

• Payment processors: gateway providers such as FPX, DuitNow, and Malaysian e-wallets to process your financial transactions securely.
• Identity verification providers: a verified third-party KYC service to help confirm the identity of new members.
• Game provider: game development companies whose gaming platforms are integrated into mrplaydash — only data required for gameplay is shared.
• Analytics services: analytics tools that help us understand platform usage patterns for improvement purposes — data is shared in aggregate form and without personal identifiers.
• Cybersecurity services: a threat detection and fraud prevention system provider that helps protect the platform and your account.

Legally Required Disclosures

Mrplaydash may be required to disclose your data to the relevant authorities where mandated by Malaysian law, including:

• Bank Negara Malaysia (BNM) — for AML/CFT compliance (anti-money laundering)
• Malaysian Communications and Multimedia Commission (MCMC)
• Royal Malaysia Police (PDRM) — upon official investigation request
• Malaysian courts — when ordered through valid judicial proceedings

The security of your data is mrplaydash's highest priority. We continuously invest in security infrastructure and follow industry best practices to keep your information safe at all times.

Technical Security Measures

• 256-bit SSL Encryption: all data transmitted between your browser and mrplaydash's servers is encrypted using TLS 1.3 — the same security standard adopted by Malaysia's leading banking institutions.
• Secure password storage: your password is never stored in plain text. We use the bcrypt hashing algorithm with a random salt to ensure your password remains unreadable — even to our own internal staff.
• Two-factor authentication (2FA): we strongly encourage all account holders to enable 2FA as an added layer of security.
• 24/7 threat monitoring: our intrusion detection system (IDS) operates around the clock to detect and respond to any suspicious activity.
• Data segregation: sensitive data such as KYC information is stored in a segregated environment with strict access controls.

Organisational Security Measures

• Access to users' personal data is restricted to staff who require it for their specific duties only (the "need-to-know" principle).
• All mrplaydash staff who handle personal data undergo regular security and privacy training.
• Internal and external security audits are conducted annually to identify and address any vulnerabilities.
• A comprehensive data incident response procedure is in place and tested on a regular basis.

Mrplaydash uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

Managing Your Cookies

You can manage and delete cookies through your web browser settings. Please note that blocking essential cookies may affect how mrplaydash functions — for example, you may not be able to stay logged in. Analytics and preference cookies can be disabled without impacting core functionality.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have several rights regarding your personal data held by mrplaydash. We are committed to respecting and facilitating the exercise of these rights.

Mrplaydash does not retain your personal data for longer than necessary. Retention periods depend on the type of data, its purpose of use, and applicable legal requirements in Malaysia.

Once the retention period expires, your data will be securely deleted or anonymised so it can no longer be linked to your identity. Our deletion process complies with NIST security standards for digital data destruction.

Mrplaydash may update this Privacy Policy from time to time to reflect changes in our practices, technological requirements, or legal developments in Malaysia. We are committed to proactively notifying you of any material changes.

How We Notify You

• Material changes: we will send a notice to the email address registered to your account at least 14 days before the changes take effect.
• In-platform notice: a notification banner will be displayed when you log in following any updates to the Privacy Policy.
• "Last Updated" date: the date of the latest update is always displayed at the top of this page for your reference.

Continued use of the mrplaydash platform after an updated Privacy Policy takes effect will be considered your acceptance of the revised terms. If you do not agree with the changes, you have the right to close your account by contacting our support team.

If you have any questions, concerns, or requests regarding this Privacy Policy or how mrplaydash handles your personal data, please contact our Data Protection Officer (DPO) directly.

When submitting a request, please include the following to help us process it faster: your full name, mrplaydash account number, type of request (access / correction / deletion / complaint), and a brief description of your issue. Please also attach a copy of a valid identification document for identity verification purposes.