Privacy Policy

Introduction

duit44 ("we", "us", "our", "the Operator") operates the online gaming information and entertainment platform accessible at duit44.cam ("the Platform"). We respect the privacy of every individual who accesses the Platform and are committed to protecting the personal data you share with us in the course of using our services.

This Privacy Policy ("Policy") explains what personal data duit44 collects, the purposes for which it is processed, the parties with whom it may be shared, how long it is retained, the technical and organisational measures in place to protect it and the rights available to you as a data subject. This Policy applies to all Users of the Platform, including registered Account holders, visitors who browse without registering and individuals who contact duit44 through any available support channel.

By accessing or using the Platform, you acknowledge that you have read this Policy and understand how your personal data will be handled. This Policy should be read together with the duit44 Terms & Conditions and Responsible Gambling Policy, each of which forms part of your overall agreement with duit44.

Definitions

The following terms carry the meanings set out below throughout this Policy:

• "Personal Data" means any information relating to an identified or identifiable natural person, including name, identification number, contact details, financial data, device identifiers and behavioural records.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, retrieval, use, disclosure, restriction, erasure or destruction.
• "Data Subject" means the individual to whom the Personal Data relates — in this context, a duit44 User.
• "Data Controller" means duit44, the entity that determines the purposes and means of Processing Personal Data.
• "Data Processor" means a third party that Processes Personal Data on behalf of duit44 under a contractual arrangement and in accordance with duit44's instructions.
• "KYC" means Know Your Customer verification procedures, including identity, age and address checks conducted to satisfy legal, regulatory and operational requirements.
• "Cookie" means a small text file placed on a User's device by the Platform to enable certain functionality, analytics or preference storage.
• "Sensitive Data" means a subset of Personal Data that by its nature warrants heightened protection, such as identification document details or financial account information.

Data We Collect

The categories of Personal Data that duit44 may collect in connection with the Platform include, but are not limited to, the following:

How We Collect Your Data

duit44 collects Personal Data through the following channels:

• Direct interactions: information you provide when registering an Account, completing KYC, initiating a deposit or withdrawal, contacting support or submitting a query.
• Automated technologies: Cookies, server logs, device fingerprinting and similar tracking technologies that record technical and usage data as you navigate the Platform.
• Payment providers: confirmation and reference data returned by Maybank2u, CIMB Clicks, Public Bank Online, Hong Leong Connect, Touch 'n Go eWallet, Boost, GrabPay, DuitNow and FPX when transactions are processed.
• Identity verification services: where duit44 engages a third-party KYC or fraud-detection provider to verify identity documents or cross-check records.
• Publicly available sources: in limited circumstances, information from public registers or credit reference agencies may be used to confirm eligibility or investigate concerns.

You are under no general obligation to provide Personal Data, but certain data is necessary for duit44 to provide core services including Account access, payment processing and responsible gambling support. Refusing to provide required data may mean that duit44 cannot deliver those services.

Data Processing — Purposes and Uses

duit44 processes your Personal Data only for defined, legitimate purposes. The primary purposes and the data categories used for each are summarised below:

Account management and service delivery

Identity, contact, financial and transaction data are processed to create and maintain your Account, verify eligibility, process deposits and withdrawals in MYR, settle wagers, apply bonus terms, generate account history and provide customer support.

Identity verification and KYC compliance

Identity documents and supporting evidence are processed to confirm that every Account holder is aged 21 or above, is the legitimate owner of the payment methods used and has provided accurate information as required by applicable rules.

Fraud prevention and security

Technical, identity and transaction data are analysed to detect irregular patterns, prevent account takeover, identify bonus abuse, investigate suspicious payment activity and protect the integrity of the Platform.

Responsible gambling support

Transaction history and responsible gambling data are used to monitor for signs of potentially problematic play behaviour, apply limits or restrictions set by the User and facilitate cooling-off or self-exclusion arrangements.

Legal and regulatory compliance

Personal Data may be processed to satisfy applicable legal obligations, respond to lawful regulatory enquiries, maintain records for audit purposes or enforce rights under the duit44 Terms & Conditions.

Platform improvement and analytics

Aggregated and anonymised usage and technical data are processed to understand how the Platform is used, improve navigation, resolve technical issues and optimise the overall experience for Malaysian users.

Legal Basis for Processing

Each Processing activity carried out by duit44 rests on one or more of the following legal bases:

• Contractual necessity: Processing required to perform the agreement between duit44 and the User, including Account operation, payment processing and bonus administration.
• Legal obligation: Processing necessary to comply with applicable laws and regulatory requirements, including KYC, anti-money-laundering and record-keeping obligations.
• Legitimate interests: Processing carried out in pursuit of duit44's legitimate interests, such as fraud prevention, security improvement and Platform analytics, where those interests are not overridden by the User's rights and freedoms.
• Consent: Where duit44 relies on consent for a specific Processing activity, that consent will be sought clearly and separately and may be withdrawn at any time without affecting the lawfulness of prior Processing.

Data Sharing and Disclosure

duit44 does not sell or rent Personal Data to unaffiliated third parties. Your data may be shared with the following categories of recipient solely to the extent necessary for the stated purpose:

• Payment service providers: Maybank, CIMB, Public Bank, Hong Leong, Touch 'n Go, Boost, GrabPay, DuitNow and FPX, to initiate and complete financial transactions in MYR.
• KYC and identity verification providers: specialists engaged to verify identity documents, confirm age eligibility and cross-check records in connection with Account opening or withdrawal processing.
• Fraud and security technology providers: platforms used to detect abuse, manage risk scoring and protect Account integrity.
• IT infrastructure and hosting providers: companies that host Platform data, manage databases or provide technical services under data processing agreements.
• Professional advisers: lawyers, auditors and consultants bound by professional confidentiality obligations who assist duit44 with legal, compliance or financial matters.
• Regulatory and law enforcement authorities: where duit44 is required to disclose data by applicable law, court order or lawful regulatory request.

Third-party Data Processors are bound by contractual obligations consistent with this Policy and are not permitted to use Personal Data for their own independent purposes.

International Data Transfers

Some of duit44's service providers and technology infrastructure partners may be located outside Malaysia. Where Personal Data is transferred to a jurisdiction that does not provide an equivalent level of data protection, duit44 will implement appropriate safeguards such as standard contractual clauses, contractual data protection obligations or other recognised mechanisms to protect that data in transit and at rest.

By using the Platform, you acknowledge that your Personal Data may be processed in jurisdictions outside Malaysia for the purposes described in this Policy. duit44 takes reasonable steps to ensure that any cross-border transfer is conducted securely and that receiving parties maintain appropriate protection standards.

Data Retention

duit44 retains Personal Data only for as long as is necessary for the purpose for which it was collected, to satisfy applicable legal and regulatory retention requirements or to defend against any actual or anticipated legal claim.

In general terms:

• Account data and transaction records are retained for a minimum period after Account closure to satisfy audit and legal compliance obligations.
• KYC documentation is retained for the period required by applicable anti-money-laundering and know-your-customer rules.
• Self-exclusion records are retained for an extended period to prevent inadvertent Account re-registration during an active exclusion.
• Technical and usage logs are typically retained for a shorter operational period and then deleted or anonymised.
• Communication records relating to complaints or disputes are retained until the matter is fully resolved and any applicable appeal period has expired.

When retention periods expire, data is securely deleted or anonymised so that it can no longer be associated with any identifiable individual.

Cookies and Tracking Technologies

The duit44 Platform uses Cookies and similar technologies to enable core functionality, maintain session state, remember User preferences, analyse usage patterns and improve the overall experience. The main types of Cookie in use are described below:

• Strictly necessary Cookies: required for core Platform functions including session management, authentication and navigation. These cannot be disabled without materially impairing service delivery.
• Functional Cookies: used to remember preferences such as language settings, display options and previously entered information to reduce the need to re-enter data.
• Analytics Cookies: used to collect anonymised or aggregated information about how Users interact with the Platform, helping duit44 identify popular features, diagnose issues and improve performance.
• Security Cookies: support fraud detection, bot mitigation and session integrity measures.

Most browsers allow you to control Cookie settings through their preferences or settings panel. Disabling certain Cookies may reduce Platform functionality. Continued use of the Platform without adjusting browser Cookie settings is taken as acceptance of functional and analytics Cookies where legally permissible.

Your Rights as a Data Subject

Subject to applicable data protection law, you may have the following rights in relation to the Personal Data duit44 holds about you. Requests will be handled in accordance with applicable law and within a reasonable timeframe.

• Right of access: to request confirmation of whether duit44 holds Personal Data about you and, if so, to receive a copy of that data and information about how it is used.
• Right of rectification: to request correction of inaccurate or incomplete Personal Data held by duit44.
• Right of erasure: to request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, subject to overriding legal retention obligations.
• Right to restrict Processing: to request that duit44 limits Processing of your Personal Data in certain circumstances, such as while the accuracy of data is contested.
• Right to data portability: to receive a structured, commonly used and machine-readable copy of Personal Data you have provided, where technically feasible.
• Right to object: to object to Processing based on legitimate interests, including profiling, where your individual circumstances justify it.
• Right to withdraw consent: where Processing rests on consent, to withdraw that consent at any time without affecting the lawfulness of prior Processing.

Data Security

duit44 implements and maintains appropriate technical and organisational measures to protect Personal Data against unauthorised access, accidental loss, alteration, disclosure or destruction. Measures include, but are not limited to, encryption of data in transit, access control based on the principle of least privilege, regular security reviews, staff awareness and contractual security obligations on third-party Data Processors.

No method of transmission over the internet or electronic storage is entirely secure. While duit44 takes security seriously and applies reasonable measures, absolute security cannot be guaranteed. Users share responsibility for Account security by choosing strong passwords, not disclosing credentials, logging out after sessions and notifying duit44 promptly upon discovering any suspected breach or suspicious activity.

In the event of a Personal Data breach that is reasonably likely to result in significant harm to Users, duit44 will take appropriate responsive action and will provide notification in accordance with applicable legal requirements.

Minors and Age Policy

The duit44 Platform is strictly intended for adults aged 21 years and above. duit44 does not knowingly collect, process or retain Personal Data from individuals under the age of 21. Age verification is carried out as part of the Account registration and KYC process.

If duit44 discovers or is informed that Personal Data has been collected from a person under 21 — whether through misrepresentation at registration or by any other means — that Account will be suspended, any funds assessed in accordance with applicable terms, and the associated Personal Data removed from active systems except to the extent that legal or compliance obligations require it to be retained.

Parents and guardians who become aware that a minor may have accessed the Platform should contact duit44 immediately using the contact details provided in this Policy.

Policy Amendments

duit44 may update this Privacy Policy from time to time to reflect changes in Platform features, data Processing practices, legal obligations or regulatory guidance. The revised Policy will be published on this page with an updated effective date. Where changes are material, duit44 may provide additional notice through an appropriate on-site channel.

Continued use of the Platform after an updated Policy becomes effective constitutes acceptance of the revised terms. Users who do not accept a material change should discontinue use of the Platform and request Account closure. Historical versions of this Policy are available from duit44 upon reasonable written request.

Contact Us

If you have questions about this Privacy Policy, wish to exercise a data subject right, have concerns about how your Personal Data has been handled or want to report a suspected security incident, please contact the duit44 data privacy team.

Email: [email protected]

The email address above is displayed as plain text and is not a clickable link. When writing, please include your registered Account username or email address and a brief description of your enquiry or request so we can direct it to the appropriate team. Do not include your full password or complete payment credentials in any message.

For further guidance on how duit44 handles your data in the context of gaming activity, visit the Responsible Gambling page or the FAQ. For the full set of contractual obligations governing your Account, please review the Terms & Conditions.