Official d2fun Documents

Privacy Policy d2fun – Protecting Your Personal Data

D2fun takes our responsibility to protect every member's personal data seriously. This Privacy Policy clearly explains what information we collect, how it is used, and your rights as the owner of that data.

Updated: January 2026
Language: Malay (ms-MY)
Malaysia PDPA Compliance

D2fun's Privacy Commitment to Malaysian Members

Six core principles that shape how d2fun manages and protects your personal data

Collection
We Only Collect What We Need
d2fun only collects the personal data that is strictly necessary to provide platform services to you. We do not gather excessive or irrelevant information beyond what is required for platform operations. Every category of data we collect has a clearly defined purpose, as set out in this Privacy Policy.
Security
256-bit SSL Encryption Protects Your Data
All personal data and transaction information stored and transmitted through the d2fun platform is protected by 256-bit SSL encryption — the same highest-grade security standard used by Malaysia's major banking institutions. d2fun's servers are safeguarded by multiple layers of cybersecurity.
Sharing
Your Data Is Never Sold to Third Parties
d2fun never sells, rents, or trades members' personal data to any third party for marketing or commercial purposes. Data sharing only occurs in the limited circumstances clearly set out in this policy, and only with parties that have a legitimate need for it.
Member Rights
You Have Full Control Over Your Data
As a d2fun member, you have the right to access, correct, transfer, and request the deletion of your personal data. We provide a straightforward process for exercising these rights through d2fun's responsive, Bahasa Malaysia-speaking support team.
Compliance
Compliant with the Malaysia Personal Data Protection Act
The d2fun Privacy Policy has been developed with the requirements of Malaysia's Personal Data Protection Act 2010 (PDPA) in mind. We operate within Malaysia's data protection legal framework and are committed to ongoing compliance with all applicable legal requirements.
Transparency
Full Transparency in Every Data Practice
d2fun believes you have the right to know exactly how your data is used. This Privacy Policy is written in plain, straightforward language — not confusing legalese. If anything is unclear, d2fun's support team is ready to explain it in more detail.

Important Note: This Privacy Policy describes d2fun's privacy practices regarding the collection, use, disclosure and protection of your personal data when you register for or use the d2fun platform. By creating a d2fun account, you confirm that you have read and understood this Privacy Policy. Please read it in full before proceeding with registration.

1
Introduction & Scope of the Privacy Policy

D2fun ("we", "platform", "d2fun.biz") is an online Sports Betting and casino platform operating in Malaysia and serving members from across the country. We understand that member trust is our most valuable asset, and protecting personal data is an essential part of building that trust.

This Privacy Policy applies to all personal information we collect from you across all channels of interaction with the d2fun platform, including:

  • The d2fun.biz website and all pages under that domain
  • The member registration process and account management
  • Deposit and withdrawal transactions via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow and FPX
  • Use of all Sports Betting, Live Casino and table game services on the platform
  • Communications between you and the d2fun support team via email or any other communication channel
  • All interactions with d2fun promotional campaigns and bonus programmes

This Privacy Policy has been developed in accordance with the requirements of Personal Data Protection Act 2010 (PDPA) Malaysia and internationally recognised data protection principles. We are committed to processing your data lawfully, fairly, and transparently.

2
Categories of Personal Data We Collect

D2fun collects various categories of personal data depending on your relationship with our platform. Below is a comprehensive overview of the data we collect:

Data Category Sample Information Requirements
Identity Full name, date of birth, MyKad number Essential
Relationship Email address, Malaysian phone number Essential
Transactions Deposit records, withdrawals, betting history Essential
Technical IP address, device type, web browser, cookie data Automatic
Usage Pages visited, sports viewed, session duration Automatic
Communications Support conversation records and feedback Where applicable
Verification MyKad copy, identity document When requested

D2fun no collect sensitive data such as health information, religious beliefs, political views or biometric data except where required by law. We also do not store your e-wallet or banking login credentials — all payment transactions are processed directly through secure payment service providers.

3
How We Collect Personal Data

D2fun collects your personal data through the following methods:

  • Directly from you: When you register a new account, complete your profile, make a deposit or withdrawal, contact our support team, or take part in d2fun promotions. This information is provided voluntarily and with your full awareness.
  • Automatically via technology: When you use the d2fun platform, our systems automatically record technical data such as your IP address, device and browser type, pages you visit within the platform, the duration of each session and general account activity logs. This data is necessary for security and platform improvement purposes.
  • From third-party payment providers: When you make a deposit using Touch 'n Go eWallet, GrabPay, DuitNow, FPX or other supported Malaysian payment methods, transaction confirmation details are received from the respective payment service provider. d2fun does not store your full e-wallet or bank account information.
  • From public sources and legitimate third parties: In limited situations where legal compliance requirements call for additional verification, d2fun may verify information against trusted sources such as recognized identity verification databases.
4
Purposes for Using Personal Data

D2fun uses the personal data collected for the following purposes, all of which are lawful, fair, and necessary for platform operations:

  • Member account management: Creating and managing your d2fun account, verifying your identity, and processing requests to change your password and account information.
  • Financial transaction processing: Processing deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX, as well as withdrawals of winnings to your registered payment method in MYR.
  • Provision of betting and gaming services: Enables you to access Sports Betting for Malaysia Super League, EPL, BWF World Tour badminton, IPL and ICC cricket, esports, as well as all Live Casino and table games on the d2fun platform.
  • Security and fraud prevention: Detecting and preventing fraudulent activity, money laundering, multiple account usage, and any activity that violates d2fun's Terms & Conditions.
  • Legal compliance: Meeting the compliance obligations set out under relevant Malaysian laws, including anti-money laundering and data protection requirements.
  • Platform improvement: Analysing usage patterns in aggregate and anonymised form to improve the design, features, and overall user experience of the d2fun platform.
  • Service communications: Sending important notices regarding your account, changes to terms, security updates, and relevant promotional information (with your consent).
  • Customer support: Resolving inquiries, complaints, and disputes submitted by members to the d2fun support team.

D2fun does not use your personal data for any purpose not stated above without first obtaining your additional consent.

5
Data Sharing with Third Parties

D2fun do not sell, do not rent, and do not trade members' personal data to third parties for marketing or commercial purposes. Personal data is only shared in the following limited circumstances:

  • Payment service providers: Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX Maybank2u, and CIMB Clicks receive only the transaction information necessary to process your deposits and withdrawals. They are bound by their own privacy policies and payment industry security standards.
  • Casino game providers: Evolution, Playtech, and Microgaming receive only the session identifiers needed to operate Live Casino and table games. They do not receive your full personal information and are bound by strict confidentiality agreements with d2fun.
  • Competent authorities: d2fun will disclose the necessary data to Malaysian authorities when lawfully required to do so by law, court order, or a valid law enforcement request.
  • Auditors and professional consultants: Independent audit firms and legal consultants bound by professional confidentiality obligations may access data within a limited scope during audits or compliance reviews.

Data Sharing Guarantee: All third parties that receive any data relating to d2fun members are required to comply with equivalent or stricter data protection standards, and are prohibited from using that data for any purpose other than those specifically authorised by d2fun.

6
d2fun Data Security Measures

D2fun invests seriously in security infrastructure to protect members' personal data from unauthorized access, alteration, disclosure or destruction. The key security measures we have in place are:

  • 256-bit SSL Encryption: All data transmitted between your browser and d2fun's servers is encrypted using the latest TLS/SSL protocol with 256-bit key length. This ensures that no third party can intercept or read your data in transit.
  • Encrypted data retention: Sensitive data stored in d2fun's databases — including members' personal information and transaction records — is encrypted using industry-recognized encryption algorithms.
  • Strict access controls: Access to member data within d2fun's internal systems is restricted to staff who have a legitimate need to access it. All access is logged and audited on a regular basis.
  • Continuous security monitoring: d2fun's systems are continuously monitored to detect any unauthorized access attempts, traffic anomalies or potential cybersecurity threats.
  • Regular penetration testing: d2fun conducts regular security testing by third-party experts to identify and address any security vulnerabilities before they can be exploited.
  • Disaster recovery protocols: d2fun has comprehensive business continuity and disaster recovery plans in place to keep member data safe even in the event of any unexpected system disruptions.

That said, d2fun acknowledges that no security system can guarantee absolute 100% protection against all cyber threats. You also play an important role in keeping your account secure by using a strong password, not sharing your login credentials, and promptly reporting any suspicious activity to the d2fun support team.

7
Cookie Usage Policy

The d2fun platform uses cookies and similar tracking technologies to enhance the user experience, maintain session security, and analyse platform usage patterns. Cookies are small text files stored on your device when you visit the d2fun website.

Cookie Type Purpose Duration
Required Ensuring the platform operates correctly, managing login sessions and account security Session / 30 days
Functionality Remembers your language preference, display settings, and personal preferences within the platform 1 year
Analytics Understanding how members use the platform for improvement purposes – data is collected anonymously 2 years
Security Detecting and preventing fraudulent activity, multi-account usage, and unauthorised access Persistent

You can manage your cookie settings through your web browser's settings. Please note that blocking essential cookies may affect the functionality of the d2fun platform and prevent you from fully accessing the services offered. The analytics cookies we use do not contain any information that directly identifies you.

8
Data Retention Period

D2fun retains your personal data only for as long as it is necessary for the purposes set out in this Privacy Policy, or as required by applicable Malaysian law. The following is a general guide to data retention periods:

  • Active account data: For as long as your d2fun account remains active and you are using the platform's services, your account data will be retained to ensure uninterrupted service.
  • Financial transaction records: Records of deposits, withdrawals, and betting history are retained for a minimum of 7 years from the transaction date, in line with Malaysia's financial and anti-money laundering legal requirements.
  • Identity verification records: Identity verification documents such as MyKad copies are retained for as long as required for legal compliance purposes, typically 5–7 years after account closure.
  • Support communication data: Records of conversations with the d2fun support team are retained for 2 years for quality control and dispute resolution purposes.
  • Following account closure: Upon account closure, d2fun will delete or anonymise personal data that is no longer required for legal compliance purposes within 90 days.
9
Your Rights as a Data Subject

Under the Personal Data Protection Act 2010 (PDPA) Malaysia and d2fun's privacy policy, you have the following rights regarding your personal data:

Right of Access
You have the right to request a copy of the personal data d2fun holds about you. Data access requests can be submitted to the d2fun support team at support@d2fun.biz and will be processed within 30 calendar days.
Right to Rectification
If any personal data we hold about you is inaccurate or incomplete, you have the right to request a correction. Contact the d2fun support team with the details that need to be corrected, along with any relevant supporting documents.
Right to Erasure ("Right to be Forgotten")
You may request that d2fun delete your personal data under certain circumstances — for example, when the data is no longer needed for its original purpose of collection. Please note that this right is limited where data retention is required under Malaysian law, such as financial compliance obligations.
Right to Object to Processing
You have the right to object to the processing of your personal data for specific purposes, particularly for direct marketing. To withdraw your consent to receiving d2fun marketing communications, contact our support team or use the unsubscribe link in any promotional email.
Right to Data Portability
In certain circumstances, you have the right to receive your personal data in a structured, machine-readable format for the purpose of transferring it to another service provider. Contact support@d2fun.biz to find out about the availability of this right for specific data categories.

To exercise any of the rights above, please contact the d2fun support team at support@d2fun.biz specifying the right you wish to exercise and your account details. We will respond within 30 calendar days. In complex cases, this period may be extended by up to 60 days with appropriate notice to you.

10
Protection of Children's Data

D2fun's services are exclusively for individuals aged 18 and above. d2fun does not knowingly collect personal data from children or individuals under the age of 18.

If you believe that a minor has registered a d2fun account, or that a child's personal data has been collected by our platform without your knowledge, please contact us immediately at support@d2fun.biz. We will investigate, and if confirmed, the account will be closed immediately and all related personal data will be deleted within 14 business days.

D2fun encourages parents and guardians to monitor their children's internet usage and ensure they do not access online betting websites. If you discover a minor using a d2fun account without authorisation, please contact us — our responsible gaming tools can also help.

11
Amendments to the Privacy Policy

D2fun reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our service practices, new legal requirements, or enhancements to the data protection measures we implement.

When material changes are made to this Privacy Policy, d2fun will notify you through:

  • A prominent in-platform notification on d2fun when you next log in
  • Email to the address registered on your account, at least 14 days before the changes take effect
  • Update the "Last Updated" date displayed in the hero section of this page

Continued use of the d2fun platform after an updated Privacy Policy takes effect will be considered your acceptance of the latest version of the policy. We encourage you to review this page periodically to stay informed about how we protect your personal data.

12
Contact d2fun's Privacy Officer

For any questions, concerns or requests relating to d2fun's Privacy Policy or our data protection practices, you can reach us through the following channels:

  • Email: support@d2fun.biz (please state "Privacy Inquiry" in the email subject line)
  • Support language: Bahasa Malaysia and English
  • Target response time: Under 2 hours for general enquiries; data rights requests within 30 calendar days
  • Operating hours: 24 hours a day, 7 days a week, 365 days a year

If you are dissatisfied with how d2fun has handled your privacy enquiry, you have the right to lodge a complaint with the Personal Data Protection Department of Malaysia (JPDP), the body responsible for enforcing PDPA in Malaysia. However, we encourage you to contact d2fun first so we have the opportunity to resolve any issues directly with you.

Understanding d2fun's Privacy Policy – Why It Matters for Malaysian Members

In today's digital age, data privacy is not merely a technical issue relevant only to large tech companies. As a member of an online betting platform like d2fun, personal data privacy is a deeply personal matter that directly affects your everyday life. The data you provide to d2fun — your name, phone number, email address, transaction records, and activity history — is valuable information, and you have every right to know exactly how it is handled.

Privacy Policy d2fun is more than just a legally required formal document. It is a contract of trust between us and you. We understand that when you choose to create a d2fun account and make deposits using Touch 'n Go eWallet, GrabPay or DuitNow, you are entrusting us with sensitive financial information. We do not take that trust lightly.

Malaysia has a clear legal framework for data protection under the Personal Data Protection Act 2010. This Act sets out the general principles that every organization processing the personal data of Malaysians must comply with, including the general principle, the notice and choice principle, the disclosure principle, the security principle, the data integrity principle, the access principle and the retention principle. d2fun takes all of these principles seriously and has developed a Privacy Policy and internal systems that reflect a full commitment to PDPA compliance.

A common concern among online betting platform members is the question: "Can other people see my betting records?" The short answer is no. Your betting activity records on d2fun – whether you are betting on a Malaysia Super League football match, a BWF badminton event, IPL cricket, or Live Casino games – is personal data that is strictly protected. No one outside d2fun's internal team with a legitimate need may access these records, and in the limited circumstances where disclosure is required by law, we will notify you if we are permitted to do so.

Regarding payment data specifically, d2fun wants to be clear that we do not store your e-wallet or banking login credentials. When you make a deposit using Touch 'n Go eWallet or FPX Maybank2u, you are redirected to that payment provider's secure interface — not the d2fun site. d2fun only receives confirmation that a transaction was successful or failed, not your account credentials. This is an additional layer of protection we deliberately built in for your security.

We also want to share some information about cookies and tracking, as these are topics that often raise questions. The cookies we use on the platform d2fun serves three main purposes: ensuring the platform functions correctly (essential cookies), remembering your preferences such as display language (functional cookies), and understanding how members use the platform so we can improve it (analytics cookies that do not personally identify you). We do not use third-party cookies for remarketing purposes or to track your activity outside the d2fun website.

For d2fun members who are mindful of their digital footprint, we want you to know that your rights under the PDPA are real and enforceable. At any time, if you would like to know what data d2fun holds about you, wish to correct any inaccurate data, or want to request the deletion of your data upon account closure — all of this can be done by contacting us at support@d2fun.biz. We are committed to processing data rights requests within the timeframes prescribed by law.

Finally, the Privacy Policy d2fun will continue to be updated as our services evolve and as legal requirements change. Whenever significant changes are made, we will notify you via an in-platform notice or email so you are always informed about how your data is being managed. Your trust in d2fun is something we hold in high regard, and we will continue to work hard to show that your trust is genuinely well-placed.

d2fun Data Security

D2fun's Layers of Data Protection

Data security is not a single measure — it is a multi-layered system we have built to protect you.

256-bit SSL Encryption – All data transmitted between your device and d2fun's servers is protected with bank-grade encryption that is virtually impossible for third parties to breach.
Stored Data Encryption – Personal and financial data stored in d2fun's databases is encrypted using the latest industry-standard security algorithms.
Strict Access Controls – Only d2fun staff with a legitimate business need are permitted to access member data, and all access is logged and audited on a regular basis.
24/7 Monitoring – d2fun's security systems are monitored around the clock to detect and respond to any security threats promptly.
Independent Security Audit – d2fun undergoes regular penetration testing and security audits conducted by independent third-party experts to ensure the platform's defences remain up to date.
Related Documents

Other Related Policies

This Privacy Policy should be read together with the following documents for a complete picture of your rights and responsibilities as a d2fun member.

d2fun Terms & Conditions Full terms of use for the d2fun Sports Betting and online casino platform, including policies on accounts, deposits, withdrawals and bonuses. Read the Terms & Conditions
Responsible Gambling Policy Information on self-control tools, deposit limits, self-exclusion and gambling support resources available to d2fun members. Read the Responsible Gambling Policy
d2fun Frequently Asked Questions (FAQ) Answers to frequently asked questions, including questions about privacy, account security, and personal data protection on the d2fun platform. Read the FAQ
Summary of d2fun's Privacy Commitments

D2fun only collects the data that is necessary, protects it with 256-bit SSL encryption, does not sell it to third parties, and gives you full control over your data. All our data practices comply with Malaysia's Personal Data Protection Act 2010 (PDPA). For privacy enquiries, contact us at support@d2fun.biz. Also read Terms & Conditions and Responsible Gambling Policy d2fun for a complete picture of the protections we extend to every member.

Your Data Is Safe with d2fun

Play Safe and at Ease with d2fun

Register a free d2fun account and enjoy Sports Betting & online casino with full privacy and data security guaranteed. Deposit via Touch 'n Go, GrabPay or DuitNow – minimum RM20 only.

Have a question about your data privacy? Get in touch:

support@d2fun.biz  |  24/7 in Bahasa Malaysia

Bahasa Melayu