Privacy Policy duit44 — Our Commitment to Protecting Your Data

Duit44 collects various types of information to enable us to provide a complete, secure, and responsible service to all members. This collection is conducted transparently and only for the stated purposes.

Information You Provide Directly:

• Full name, date of birth, gender, and identity card or passport number upon account registration.
• Email address, mobile phone number, and current residential address.
• Payment method details such as bank account numbers, card numbers, or registered digital wallet information.
• Identity verification documents (KYC) such as copies of MyKad, passport, or bank statements when required.
• Any information you provide when contacting our customer support team.

Information Collected Automatically:

• IP address, device type, operating system, and web browser type you use.
• Usage data such as pages visited, session duration, games played, and actions taken within the platform.
• General geolocation data based on IP address for regional verification and regulatory compliance.
• Login timestamps for each session for security and internal audit purposes.
• Cookie data and tracking technologies as further described in Section 4.

Every piece of information we collect has a clear purpose and is used solely to improve our services and ensure your safety on the duit44 platform.

Duit44 will not use your data for any purpose not stated above without first obtaining your consent. Should we need to use your data for a new purpose, we will notify you and, where required, obtain fresh consent.

Duit44 understands how sensitive your personal information is. We do not sell or trade your data. However, there are limited situations where data sharing is necessary:

• Payment Service Providers: Transaction information is shared with payment processors such as banks, FPX providers, and digital wallets to enable deposits and withdrawals to be processed securely.
• Technical Service Providers: We work with trusted third-party companies for hosting, analytics, and support services. All parties are bound by strict confidentiality agreements and may only access data necessary for their specific tasks.
• Legal Requirements: duit44 will disclose information when required by law, court order, or directive from a legitimate authority, including in the context of financial crime or money laundering investigations.
• Business Transfers: In the event of a merger, acquisition, or asset sale, user data may be transferred to a new entity, subject to prior notice and the options made available to you.

Duit44 uses cookies and similar technologies to enhance the user experience, maintain login sessions, and analyse platform usage patterns. The following are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as session authentication and security. These cookies cannot be disabled as they are critical to platform operations.
• Performance Cookies: Collecting information about how you use the platform to help us identify and resolve performance issues. This data is collected in aggregate and cannot identify you personally.
• Functional Cookies: Saving your preferences such as language settings, display themes, and game configurations to deliver a more personalized experience.
• Analytics Cookies: Helps us understand platform traffic and usage patterns for service improvement. You may opt out of this analytics data collection via cookie settings.

You can manage or delete cookies through your browser settings. However, disabling essential cookies may affect the functionality of the duit44 platform.

Duit44 invests seriously in security infrastructure to ensure your personal data is always protected. The security measures we employ include:

• 256-bit SSL/TLS Encryption: All communications between the platform and your device are secured with the same industry-grade encryption used by leading financial institutions worldwide.
• Multi-Layer Firewall: duit44 servers are protected by multiple layers of firewalls that prevent unauthorized external access.
• 24/7 Monitoring: Our security team monitors the platform around the clock to detect and respond to any threats or suspicious activity in real time.
• Regular Penetration Testing: duit44 conducts regular security testing through independent third-party auditors to identify and remediate any system vulnerabilities.
• Internal Access Controls: Access to user data within the duit44 organisation is restricted on a need-to-know basis, and every access is thoroughly audited.

As a duit44 member, you have the following rights regarding your personal data. We fully respect these rights and provide straightforward mechanisms for you to exercise them:

To exercise any of the rights above, please contact the duit44 support team via live chat or email. We will process your request within 30 calendar days of receipt.

Duit44 retains your personal data for as long as your account is active or as long as necessary to fulfil the purpose for which it was collected. Specific retention periods are as follows:

• Financial Transaction Records: Retained for a minimum of 7 years in accordance with applicable financial legislation and AML compliance requirements.
• KYC Documents: Retained for the duration of the active account period plus 5 years after account closure, in line with anti-money laundering regulations.
• Activity & Security Logs: Retained for 2 years for audit, fraud detection, and dispute resolution purposes.
• Marketing Data: Retained until you withdraw your consent to receive marketing communications, or until your account is terminated.
• Cookie Data: Expiry follows cookie type — session cookies expire when you close your browser, while persistent cookies are stored for the duration specified at the time they were created.

Once the retention period expires, your data will be securely deleted or anonymised so it can no longer be linked to you.

The duit44 platform may contain references to third-party services such as game providers, payment processors, and technology partners. Here is what you should know:

• Each third-party game provider integrated with duit44 has its own privacy policy governing how they handle data related to your gameplay.
• Duit44 is not responsible for the privacy practices of third parties outside our direct control. We encourage you to read the privacy policies of the relevant providers.
• All third-party integrations used by duit44 undergo an internal security review process to ensure they meet our data protection standards.

The duit44 platform is strictly for individuals aged 18 and above. We do not knowingly collect personal information from minors. The measures we take include:

• Verifying age during the registration process through identity card information or relevant verification documents.
• Requesting additional document verification (KYC) when there is doubt about a user's age.
• Immediately terminating the account of any user found to be under 18 years of age and refunding any deposits made.

Duit44 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or new platform features. When changes are made:

• The "Updated" date at the top of this document will be revised to reflect the date of the latest amendment.
• For significant changes, we will notify you via an in-platform notification or an email to your registered address at least 14 days before the changes take effect.
• Your continued use of the duit44 platform after the effective date of any changes will be considered your acceptance of the revised policy.
• You may request a copy of previous versions of this Privacy Policy by contacting our support team.

If you have any questions, concerns, or complaints regarding how duit44 handles your personal data, we welcome your feedback.

You may reach our privacy team via:

• Live Chat: Available 24/7 within the duit44 platform for immediate responses.
• Email: Send your enquiry to [email protected] — we aim to respond within 24 business hours.

For more formal complaints relating to data protection, you also have the right to refer the matter to the relevant data protection authority in your jurisdiction if you believe your privacy rights have been violated and duit44 has not taken adequate action.