Privacy Policy duit88 – Your Personal Data Protection

1 Introduction and Scope of This Policy

This Privacy Policy outlines duit88's commitment to protecting your personal data as a member or visitor of our platform. This document is prepared in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and applicable international data protection standards.

When you register an account, make a deposit, play games, or simply browse the duit88 website, you are entrusting us with your personal information. We take that responsibility seriously. Every decision involving your data is made with your security and privacy as our top priority.

This policy applies to all information collected through the duit88 website, duit88 mobile app, email communications, and all other interaction channels between you and duit88. If you do not agree with any part of this policy, please discontinue use of our platform.

2 Information We Collect

Duit88 collects various categories of information depending on how you interact with our platform. Below is a complete overview of the types of data we collect and why:

We only collect information that is strictly necessary for the stated purposes. duit88 does not collect sensitive data such as your medical information, religious beliefs, or political views.

3 How We Use Your Data

Duit88 uses your personal data for the following purposes, all based on a valid legal basis:

• Account Management: Create, manage, and maintain your member account, including the login process, security, and preference settings.
• Transaction Processing: Process all deposits and withdrawals securely and accurately to the correct accounts, including verification of suspicious transactions.
• Identity Verification (KYC): Comply with anti-money laundering (AML) legal requirements and member age verification.
• Customer Support: Resolve complaints, respond to inquiries, and provide effective technical assistance to members.
• Platform Security: Detect and prevent fraud, account abuse, unauthorised access attempts, and illegal activity.
• Service Improvement: Analyse usage patterns to improve the interface, platform speed, and overall user experience.
• Marketing Communications: Send promotions, bonus offers, and platform updates – only to members who have given consent to receive such communications.
• Legal Compliance: Fulfil applicable legal and regulatory obligations, including responding to official requests from legitimate authorities.

4 Information Sharing and Disclosure

Duit88 does not sell, rent, or trade your personal data to any third party for their own commercial purposes. This is our absolute commitment. However, there are limited situations where we need to share your data:

• Trusted Service Providers: Companies that help us operate the platform, such as payment gateway providers, licensed game providers, and identity verification services. They are only permitted to use your data for specified purposes and are bound by strict confidentiality agreements.
• Legal Requirements: When required by law, court order, or direction from a legitimate authority – for example, in investigations involving fraud or money laundering.
• Protection of Rights: When necessary to protect the rights, property, or safety of duit88, our members, or the public from serious threats.
• Business Transfer: In the event of a merger, acquisition, or asset sale, your data may be transferred to the new entity, which will be subject to the same or stricter Privacy Policy.

Every instance of data sharing is carried out under strict controls and only within the required scope. duit88 always ensures that our third-party providers comply with data protection standards equal to or exceeding our own.

5 Data Security and Protection Measures

Protecting your data is not merely a legal obligation for duit88 – it is a moral responsibility we take very seriously. We continuously invest in the latest security infrastructure to ensure your data remains protected at all times.

The technical and organisational security measures we implement include:

• 256-bit SSL Encryption: All data transmitted between your device and duit88 servers is encrypted using 256-bit SSL/TLS encryption protocol — the highest industry standard used by global financial institutions.
• Stored Data Encryption: Sensitive data stored in our database, such as financial information and passwords, is encrypted using strong hashing algorithms and cannot be reversed.
• Internal Access Control: Only duit88 staff with a legitimate operational need are permitted to access member personal data, with every access recorded and periodically audited.
• 24/7 Monitoring: A round-the-clock security monitoring system is in place to detect any suspicious activity, intrusion attempts, or anomalies in data access patterns.
• Regular Security Testing: Penetration testing and security audits are conducted regularly by independent security experts to identify and address any vulnerabilities.
• Staff Training: All duit88 staff undergo comprehensive data protection training and are bound by legally enforceable confidentiality agreements.

6 Cookies and Tracking Technologies

Duit88 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

Types of cookies we use:

• Essential Cookies: Required for core platform functions such as login, session management, and security. These cookies cannot be disabled as the platform will not function properly without them.
• Performance Cookies: Collect anonymous information about how you use the platform to help us identify areas for improvement, such as slow-loading pages or rarely clicked buttons.
• Functional Cookies: Save your preferences such as preferred language, display settings, and login details for a smoother repeat experience.
• Analytical Cookies: Help us understand overall platform usage patterns on an aggregated basis to make better-informed improvement decisions.

You can manage your cookie settings through your web browser settings at any time. However, disabling essential cookies may affect the functionality of the duit88 platform. For more information on managing cookies, refer to your web browser's help documentation.

7 Your Rights Over Your Personal Data

As a duit88 member and data subject under Malaysia's PDPA, you hold the following important rights regarding your personal data. duit88 fully respects and facilitates the exercise of these rights:

To exercise any of the above rights, contact the duit88 support team via live chat or email. We will process your request within 30 business days. In some complex cases, this period may be extended with prior notification to you.

8 Data Retention Period

Duit88 only retains your personal data for as long as necessary to fulfil the original purpose of collection or as required by applicable law. Our principle is simple: we do not keep data longer than necessary.

• Active Account Data: Retained for the duration your account is active, plus the closure period required for legal compliance.
• Financial Transaction Records: Retained for a minimum of 7 years in accordance with Malaysia's financial and tax legal requirements.
• KYC Records: Retained for a minimum of 5 years after the business relationship ends, in accordance with anti-money laundering legal requirements.
• Support Communication Logs: Retained for 3 years to assist in resolving future disputes if necessary.
• Analytics Data: Anonymised usage data is retained for 2 years for platform improvement purposes.

When the retention period expires or the data is no longer needed, duit88 will securely destroy or anonymise the data using industry-approved methods to ensure it cannot be recovered.

9 Changes to This Privacy Policy

Duit88 reserves the right to update or amend this Privacy Policy from time to time in line with changes in law, industry practices, or how we handle data. Any amendments made will be reflected with a new updated date at the top of this document.

For significant changes — such as changes to how we use your data or the addition of new data categories — we will provide clearer notice through:

• In-platform notifications on duit88 when you log in
• Notification email to the address registered in your account
• Prominent notice on the duit88 website homepage

Continued use of the duit88 platform after the effective date of any amendment means you accept the updated Privacy Policy. If you do not agree with the changes made, please stop using the platform and contact us to close your account.

10 Contact Us About Privacy

If you have any questions, concerns, or requests regarding this Privacy Policy or how duit88 handles your personal data, our privacy team is ready to assist you.

You can reach us through the following channels:

• Live Chat: The fastest channel – available 24/7 directly within the duit88 platform.
• Email: Send your enquiry to [email protected] (please type this address manually – no clickable link is provided).
• Response Time: We are committed to responding to all privacy-related inquiries within 5 business days.

For official requests relating to data subject rights — such as access, correction, or deletion — please clearly state the type of request along with your relevant account details so we can process it more quickly and accurately.