Privacy Policy duit66 — Malaysian Player Data Protection

This Privacy Policy ("Policy") is published by duit66 and applies to all users who access or use the duit66 platform via duit66.biz or any associated official channels. It describes our privacy practices in relation to the collection, use, storage, protection and disclosure of your personal data.

By registering an account or using the duit66 platform, you acknowledge that you have read and understood this Privacy Policy, and agree to the data practices described herein. If you do not agree with any part of this Policy, please discontinue use of the duit66 platform and contact us for further enquiries.

Duit66 is committed to complying with applicable data protection laws in Malaysia, including the Personal Data Protection Act 2010 (PDPA) and any other regulations in force. This Privacy Policy may be updated from time to time to reflect changes in our operations or legal requirements. The latest version is always available on this page, with the effective date clearly stated.

Duit66 collects various types of personal data for the purposes described in this Policy. The following are the categories of data we collect:

Duit66 only collects data that is strictly necessary for the purposes described in this Policy, in accordance with the principle of data minimisation. We do not collect data that is excessive or irrelevant to the platform's operations.

The personal data we collect is used exclusively for the following purposes:

• Account Management: Opening, verifying and maintaining your duit66 account, including identity verification required for security and compliance purposes.
• Transaction Processing: Processing deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow and FPX, as well as managing withdrawals of winnings to your Malaysian bank account or e-wallet.
• Gaming Services Provision: Ensuring access to all games on the duit66 platform, including slots, Live Casino, Sports Betting for the Malaysia Super League and EPL, e-sports, and progressive jackpots.
• Security & Fraud Prevention: Detecting and preventing unauthorised activity, fraud, money laundering and platform abuse.
• Customer Support: Providing assistance and resolving any enquiries or complaints you submit to the duit66 support team.
• Legal Compliance: Fulfilling applicable legal obligations, including reporting requirements to relevant enforcement authorities.
• Platform Improvements: Analysing usage patterns on an aggregated and anonymised basis to improve the user experience, platform performance and game selection on duit66.
• Service Communications: Sending important notifications regarding your account, transactions, policy changes and relevant security information.

Duit66 does not sell, rent, or transfer your personal data to any third party for marketing or commercial purposes. Your data may be shared only in the following limited circumstances:

In all data sharing cases listed above, duit66 ensures that recipients are bound by data protection obligations equivalent to our own standards and use the data solely for the stated purposes. Any cross-border data transfers are carried out with adequate protection safeguards in place.

Duit66 implements multiple layers of technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration or destruction. The key security measures we employ include:

• 256-bit SSL Encryption: All data transmitted between your device and duit66's servers is encrypted using 256-bit TLS/SSL protocol — the same standard used by Malaysia's leading financial institutions.
• Stored Data Encryption: Sensitive data stored in duit66's databases — including financial details and personal identification information — is encrypted at rest using strong encryption algorithms.
• Strict Access Controls: Access to duit66 players' personal data is restricted to staff who genuinely need it to perform their duties, based on the principle of least privilege.
• 24/7 Security Monitoring: Our security monitoring system operates around the clock to detect and respond to any threats or suspicious activity on the duit66 platform.
• Regular Security Audits: duit66 undergoes regular security assessments and penetration testing conducted by independent security experts to identify and address any vulnerabilities.
• Security Incident Management: Clear incident response procedures are in place to ensure any data breach is detected, contained and reported in accordance with applicable legal requirements within the stipulated timeframe.

The duit66 platform uses cookies and similar tracking technologies to enhance the user experience and ensure the platform functions properly. Below are the types of cookies we use:

• Essential Cookies: These cookies are required for the core functionality of the duit66 platform — including verifying your login session, managing account security and remembering basic platform preferences. Disabling these cookies will affect the platform's functionality.
• Performance Cookies: Collecting anonymised information on how players use the duit66 platform — including the most frequently visited pages, time spent in each section, and any errors encountered. This data is used to improve platform performance and the overall user experience.
• Functional Cookies: Storing your personal preferences — such as your preferred language, last bet size, and display settings — to deliver a more personalised gaming experience on duit66.
• Analytics Cookies: Helping us understand aggregate platform usage patterns to make better-informed decisions about feature improvements and content on the duit66 platform.

You can manage your cookie settings through your web browser at any time. However, disabling certain cookies may affect the functionality or your gaming experience on the duit66 platform. For more information on managing cookies in popular browsers such as Chrome, Firefox, and Safari, please refer to the relevant browser's help section.

Duit66 retains your personal data only for as long as necessary for the purposes set out in this Policy, or as required by applicable laws and regulations in Malaysia. The following guidelines outline data retention periods by category:

Once the applicable retention period has elapsed, your personal data will be securely deleted or anonymised so it can no longer be linked to you. All data deletion is carried out under strict security procedures to ensure the data cannot be recovered.

As a duit66 player and data subject under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data:

To exercise any of the above rights, please contact the duit66 privacy team by email at support@duit66.biz, stating the type of request, your account number, and any relevant details. duit66 will verify your identity before processing any personal data request to ensure the security of your information.

Duit66 is an entertainment platform designed exclusively for adults aged 18 and above. Under no circumstances is this platform intended for children or individuals under the age of 18.

Duit66 does not knowingly collect personal data from individuals under the age of 18. As a protective measure:

• The registration process requires age verification through a valid Malaysian identity card number (MyKad).
• Duit66 uses age verification tools to detect and prevent registration by individuals who are underage.
• Should duit66 discover that personal data belonging to an individual under the age of 18 has been inadvertently collected, we will promptly take steps to delete that data and close the account in question.

If you have any questions, concerns, or requests regarding this Privacy Policy or duit66's data protection practices, we encourage you to reach out to us directly. Our team is ready to assist and will respond within a reasonable timeframe.

You can reach the duit66 privacy team through the following channels:

• Privacy Email: support@duit66.biz — for specific enquiries regarding your personal data and privacy rights.
• Live Chat: Available 24/7 through the duit66 platform — for general enquiries related to privacy and account security.
• Response Time: Personal data requests will be processed within 14 business days. General enquiries via live chat are typically answered in under 2 minutes.

Please note that to process any request relating to your personal data, duit66 will require adequate identity verification to protect the security of your information. This is an important safeguard to prevent unauthorised access to your data by third parties.