Your privacy matters to us. This Privacy Policy explains in clear, formal terms how DoraHoki collects, uses, stores, shares, and protects your personal data when you use our platform. We are committed to handling your information with transparency, security, and respect.
DoraHoki ("we", "us", "our", or "the Platform") operates the online casino and sports betting platform accessible at dorahoki.casa. We are committed to protecting and respecting the privacy of every individual who interacts with our Platform, including registered players, prospective members, and visitors browsing our website.
This Privacy Policy ("Policy") sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by DoraHoki. It applies to all users of the DoraHoki Platform, including players based across Malaysia — from Kuala Lumpur and Petaling Jaya to Penang, Johor Bahru, Shah Alam, and beyond.
This Policy must be read alongside our Terms and Conditions and Responsible Gambling Policy, which together form the complete legal framework governing your relationship with DoraHoki.
For the purposes of this Privacy Policy, the following terms have the meanings ascribed below:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information relating to an identified or identifiable natural person, including but not limited to name, email address, phone number, identity document details, financial data, and device identifiers. |
| "Processing" | Any operation performed on Personal Data, including collection, recording, storage, adaptation, retrieval, use, disclosure, erasure, or destruction. |
| "Data Controller" | The entity that determines the purposes and means of processing Personal Data. DoraHoki acts as the Data Controller for all personal data collected on this Platform. |
| "Data Processor" | A third party that processes Personal Data on behalf of DoraHoki, such as payment gateway operators, identity verification providers, and cloud hosting services. |
| "KYC Data" | Identity and age verification documentation submitted by players, including copies of national identity cards (MyKad), passports, and supporting proof of address documents. |
| "Cookies" | Small text files placed on a user's device by a website for the purpose of storing session information, preferences, and analytics data. |
DoraHoki is the Data Controller responsible for the personal data collected through the dorahoki.casa Platform. All queries, requests, and concerns relating to the processing of your personal data should be directed to our Data Protection contact as described in Section 15 (Contact Us) of this Policy.
We take our obligations as Data Controller seriously. We maintain internal data governance policies, conduct periodic reviews of our data handling practices, and ensure that all third-party processors we engage are bound by appropriate data processing agreements consistent with the obligations set out in this Policy.
DoraHoki collects personal data through several channels, including your direct submission during registration and platform use, automated technical collection, and — where applicable — third-party verification services. The categories of data we collect include:
| Category | Examples of Data Collected | How Collected |
|---|---|---|
| Identity Data | Full legal name, date of birth, gender, nationality, MyKad or passport number | Registration form; KYC submission |
| Contact Data | Email address, mobile phone number, city and state of residence (e.g., Kuala Lumpur, Penang) | Registration; profile updates; support contacts |
| Financial Data | Payment method details (e.g., GrabPay account, Touch 'n Go eWallet ID, bank account number for FPX/DuitNow withdrawals, Maybank or CIMB account reference) | Deposit and withdrawal requests |
| Transaction Data | Deposit and withdrawal history, amounts (in MYR), timestamps, payment method used, bonus claims, wagering history | Platform activity logs |
| KYC Documents | Scanned copies or photographs of identity documents; selfie images for facial verification | KYC verification submission |
| Technical Data | IP address, browser type and version, operating system, device identifiers, time zone, screen resolution, session duration | Automated collection via cookies and server logs |
| Gameplay Data | Game history, bet amounts, win/loss records, sports betting selections, session timestamps | Platform activity logs |
| Communications Data | Records of live chat, email correspondence, and support ticket exchanges | Customer support interactions |
| Responsible Gambling Data | Self-exclusion status, deposit limits set, cooling-off periods requested | Responsible gambling tool interactions |
We do not collect special category data (such as health data, racial or ethnic origin, or political opinions) in the ordinary course of operating the Platform, except where a player voluntarily discloses health-related information in connection with a responsible gambling request or support interaction.
DoraHoki processes personal data for the following purposes:
DoraHoki processes personal data on the following legal bases:
DoraHoki does not sell your personal data to any third party. We may share personal data with the following categories of third parties, strictly on a need-to-know basis and subject to appropriate data processing agreements:
All third-party processors engaged by DoraHoki are bound by data processing agreements that prohibit them from using your personal data for any purpose other than those specified by DoraHoki, and require them to implement appropriate security measures.
DoraHoki retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account & Identity Data | 5 years after account closure | Legal and regulatory compliance; fraud prevention |
| KYC Documents | 5 years after account closure | Anti-money laundering obligation |
| Financial & Transaction Data | 7 years from transaction date | Financial record-keeping requirements |
| Gameplay Data | 3 years from last activity | Dispute resolution; responsible gambling monitoring |
| Support Communications | 2 years from last interaction | Quality assurance; dispute resolution |
| Marketing Consent Records | 3 years from consent date or withdrawal | Consent compliance evidence |
| Technical / Log Data | 12 months from collection | Security monitoring; fraud detection |
| Self-Exclusion Records | Indefinitely (until exclusion is lifted) | Responsible gambling compliance |
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our data lifecycle management procedures.
DoraHoki employs a comprehensive suite of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:
The DoraHoki Platform uses cookies and similar tracking technologies to provide core platform functionality, improve user experience, and gather analytical insights. The categories of cookies we use are as follows:
You may manage your cookie preferences through your browser settings at any time. Please be aware that disabling non-essential cookies may affect certain Platform features or personalisation options. Withdrawing consent for marketing cookies will not affect the functionality of your account.
As a data subject, you have the following rights in relation to the personal data DoraHoki holds about you. To exercise any of these rights, please contact us using the details in Section 15.
You may request a copy of all personal data we hold about you. We will respond within 30 days of receiving a valid request.
If any personal data we hold is inaccurate or incomplete, you have the right to request correction. Certain corrections require re-verification.
You may request deletion of your personal data where it is no longer necessary for the purposes collected, subject to our legal retention obligations.
You may request that we restrict the processing of your data in certain circumstances, such as while a dispute about accuracy is being resolved.
Where processing is based on consent or contract, you may request your data in a structured, commonly used, machine-readable format.
You may object to processing based on legitimate interests or for direct marketing purposes at any time. Marketing opt-outs take effect immediately.
Where processing relies on your consent, you may withdraw it at any time without affecting the lawfulness of processing carried out prior to withdrawal.
You have the right to lodge a complaint with the relevant data protection authority in your jurisdiction if you believe we have breached this Policy.
We will respond to all rights requests within 30 calendar days. In complex cases, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it. We do not charge a fee for handling rights requests, except in cases of manifestly unfounded or excessive repetition.
The DoraHoki Platform is strictly intended for adults aged 21 years and above. We do not knowingly collect, process, or retain personal data from individuals under the age of 21. If we become aware that we have inadvertently collected data from a minor, we will take immediate steps to delete that data and close the associated account.
Our KYC verification process — which requires submission of a valid Malaysian identity card (MyKad), passport, or equivalent government-issued document — is specifically designed to verify age eligibility before processing any withdrawal. Any account suspected to be held by an individual under 21 will be suspended pending age verification.
In operating the DoraHoki Platform, it may be necessary to transfer certain personal data to servers or service providers located outside of Malaysia. Such transfers may occur in connection with cloud hosting, KYC verification services, or customer support platform providers.
Where personal data is transferred internationally, DoraHoki ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that applied within Malaysia. These safeguards may include contractual clauses, data processing agreements, and assessments of the receiving party's data protection framework.
We do not transfer personal data to jurisdictions that have been formally assessed as providing inadequate data protection without first implementing appropriate contractual protections.
DoraHoki reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or Platform features. The effective date of the current version is stated at the top of this document.
Where amendments are material — such as changes to the categories of data we collect, new sharing arrangements, or revised retention periods — we will notify registered players via email or by displaying a prominent notice on the Platform prior to the changes taking effect.
Your continued use of the Platform following notification of material amendments constitutes your acknowledgement of the updated Policy. We encourage you to review this page periodically to remain informed of how we protect your personal data.
If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact DoraHoki through the following channels:
When submitting a formal data rights request (access, erasure, portability, etc.), please include your registered email address and a description of your request. We may request additional verification to confirm your identity before processing the request. This is to protect your data from being disclosed to, or acted upon by, an unauthorised party.
Six core practices underpin how DoraHoki handles every piece of personal data entrusted to us by Malaysian players.
All data transmissions between your device and DoraHoki's servers are protected with bank-grade 256-bit TLS encryption. This includes registration, login, KYC submissions, and every deposit or withdrawal via GrabPay, DuitNow, or FPX.
DoraHoki does not sell, rent, or trade your personal data to any third party for commercial purposes. Data shared with processors is strictly limited to what is required for payment, verification, or platform operations.
Any registered player can request a complete copy of their personal data at any time. Access requests are handled free of charge and fulfilled within 30 days. You also have the right to request correction, deletion, or portability of your data.
Non-essential cookies — including analytics and marketing tracking — are only deployed with your explicit consent. You can manage or withdraw cookie consent at any time through your browser settings without affecting your account access.
Our KYC process verifies every player's identity and age before any withdrawal is processed. We do not knowingly collect or retain data from individuals under 21, and suspected underage accounts are suspended and investigated immediately.
We retain personal data only as long as legally necessary. Transaction records are kept for seven years per financial compliance requirements; gameplay data for three years; and technical logs for twelve months — then securely deleted or anonymised.
You've read how DoraHoki protects your personal data. Now explore everything the Platform has to offer — 500+ games, GrabPay and Touch 'n Go eWallet deposits, live EPL betting, and 24/7 support — knowing your information is handled with integrity. For players aged 21 and above only.