Privacy Policy duit66 – Your Personal Data Protection

Duit66 is an online betting and gaming platform operating under a valid international licence, with a primary focus on the Malaysian market. We understand that user trust is our most valuable asset — and that trust begins with full transparency about how we handle your personal data.

This Privacy Policy applies to all individuals who:

• Visiting the duit66 website even without registering an account.
• Register a user account on the duit66 platform.
• Making a deposit, withdrawal, or any financial transaction through duit66.
• Using any of the betting or gaming services offered by duit66, including Sports Betting, e-sports, slots, blackjack, lottery, and cricket.
• Contacting the duit66 customer support team through any communication channel.

This Privacy Policy should be read together with Terms & Conditions duit66, which forms part of the overall agreement between you and our platform. In the event of any conflict between these documents, this Privacy Policy shall prevail specifically with respect to matters relating to personal data protection.

Duit66 only collects personal data that is strictly necessary to provide our services safely and effectively. Below are the categories of data we collect and the purposes for which they are collected:

Duit66 does not collect full credit card numbers. For transactions made via FPX (Maybank2u, CIMB Clicks), DuitNow, Touch 'n Go eWallet, GrabPay, Boost, or ShopeePay, all payment information is processed directly by the respective payment provider using their own encryption — duit66 does not store your full card or bank account details.

Duit66 uses collected personal data solely for legitimate and necessary purposes. We do not use your data for anything unrelated to providing our platform services without your explicit prior consent.

Duit66 uses your personal data for the following purposes:

• Service Provision: Enabling you to access the duit66 platform, place bets on sports such as the Malaysia Super League and EPL, play slots, blackjack, lottery, cricket, e-sports, and Virtual Sports.
• Identity Verification (KYC): Verifies that you meet the minimum age requirement of 21 years and are acting on your own behalf, in line with anti-money laundering (AML) compliance requirements.
• Payment Processing: Processing deposits and withdrawals in Malaysian Ringgit (MYR) via selected local payment methods.
• Account Security: Detecting and preventing unauthorised access, fraud, and misuse of the platform.
• Service Communications: Sending important account-related notifications, OTP verification, security alerts, and policy updates.
• Responsible Gaming: Monitoring betting patterns to identify users who may need responsible gaming assistance or support.
• Platform Enhancement: Analysing aggregated, anonymised usage data to improve the user experience, platform speed, and new features.
• Legal Compliance: Comply with the reporting and record-keeping requirements prescribed by applicable Malaysian laws.

Duit66 does not sell, rent, or transfer your personal data to any third party for marketing or commercial purposes without your explicit consent. However, there are limited situations where data sharing is necessary to deliver our services:

• Payment Providers: Minimum transaction information is shared with authorised payment providers including DuitNow processors, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, and FPX-member banks to facilitate RM deposit and withdrawal processing. All such providers are bound by strict confidentiality agreements.
• Game Providers: Minimum data required to enable access to games (such as session IDs) is shared with internationally licensed game providers that supply slots, live casino, and other games on the duit66 platform.
• Identity Verification: For KYC (Know Your Customer) and AML compliance purposes, identity verification documents may be processed through licensed identity verification providers bound by strict data protection agreements.
• Legal Requirements: duit66 will disclose personal data to law enforcement, government agencies, or courts where required by Malaysian law or a valid court order.
• Professional Advisor: Lawyers, accountants, or auditors bound by professional confidentiality obligations may access certain data within the scope of their work for duit66.

In all instances of data sharing, duit66 ensures that recipients have data protection measures that are equivalent to or stronger than the standards we ourselves adhere to. We never disclose your password, PIN, or account login credentials to any third party under any circumstances.

Duit66 invests heavily in security infrastructure to protect the personal and financial data of all Malaysian users. The technical and organisational security measures we implement include:

• 256-bit SSL/TLS Encryption: All communications between your browser and the duit66 servers are encrypted using 256-bit SSL/TLS protocol — the same standard used by Malaysia's leading banks such as Maybank and CIMB.
• Data-at-Rest Encryption: Personal data stored in duit66's databases is encrypted using AES-256 encryption, ensuring the data remains unreadable even in the event of unauthorised server access.
• Two-Factor Authentication (2FA): 2FA is available for all duit66 accounts. Once enabled, an additional OTP code is required at every login, adding an extra layer of security to your account.
• Real-Time Threat Monitoring: duit66's security monitoring system operates around the clock to detect suspicious activity, including repeated login attempts, access from unusual locations, and abnormal transaction patterns.
• Internal Access Controls: Only authorised duit66 staff with a legitimate business need are permitted to access users' personal data, and all such access is logged and audited on a regular basis.
• Security Audits: duit66's security systems undergo periodic independent security audits conducted by qualified cybersecurity firms.

Duit66 uses cookies and similar tracking technologies to enhance the user experience and platform security. Cookies are small text files stored on your device when you visit the duit66 website.

The types of cookies used by duit66 are as follows:

• Essential Cookies: Required for the core functions of the duit66 platform, including maintaining login sessions, keeping your account secure, and processing transactions. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies: Collecting information on how users interact with duit66 — including frequently visited pages, error messages, and time spent in each section. This information is used for platform improvements in aggregated, anonymised form.
• Functional Cookies: Saving your preferences such as your preferred odds format (Malay/Euro/HK), language settings, and other display options to streamline your experience on future visits.
• Security Cookies: Assisting duit66's fraud detection systems in identifying and blocking unauthorised access attempts, bot attacks, and other suspicious activity.

You can control and manage cookies through your browser settings. However, disabling essential cookies may affect the functionality of the duit66 platform and your overall user experience.

Duit66 retains your personal data only for as long as necessary to fulfil the purposes outlined in this Privacy Policy, or as required by applicable Malaysian law.

Duit66's data retention policy is as follows:

• Active Account Data: Retained for as long as your account remains active on the duit66 platform.
• Financial Transaction Data: Transaction records are retained for a minimum of 7 years in accordance with Malaysia's Anti-Money Laundering Act (AMLA) requirements.
• Identity Verification (KYC) Data: KYC documents such as copies of your IC are retained for 5 years from the date of account closure or the date of the last transaction, whichever is later.
• Betting Data: Betting history is retained for 3 years for dispute resolution, responsible gaming, and audit compliance purposes.
• Technical Log Data: System and security logs are retained for 12 months for fraud detection and security incident investigation purposes.

Once the retention period expires, your personal data will be securely deleted or permanently anonymised so it can no longer be linked to you as an individual. The deletion process uses methods that meet industry security standards to ensure data cannot be recovered.

Under Malaysia's Personal Data Protection Act (PDPA) 2010 and the best-practice privacy standards we follow, you as a duit66 user have the following rights regarding your personal data:

• Right to Access: You have the right to request a copy of the personal data we hold about you. Such requests will be processed within 30 working days.
• Right to Rectification: If the personal data duit66 holds about you is inaccurate or outdated, you have the right to request a correction. You may update basic information yourself through your account settings.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes at any time by contacting us or through the communication preferences settings in your duit66 account.
• Right to Restriction of Processing: In certain circumstances, you have the right to request that duit66 restrict the processing of your personal data while a dispute or deletion request is pending.
• Right to Erasure: You may request the deletion of your personal data under certain circumstances. Please note that such requests may be subject to legal record-keeping obligations that preclude immediate deletion.

To exercise any of the rights above, please contact the duit66 Privacy Officer at support@duit66.site by clearly stating your request along with your full name and duit66 registered email address. We are committed to responding to all privacy rights requests within 30 business days of receipt.

The duit66 platform is strictly for individuals aged 21 and above. duit66 does not knowingly collect, store, or process the personal data of anyone under 21 years of age under any circumstances.

All account applicants are required to confirm that they are 21 years of age or older at the time of registration. Age verification via identity document (MyKad) is mandatory before any betting or financial transactions are permitted.

Should duit66 become aware that personal data belonging to an individual under the age of 21 has been inadvertently collected through our platform, we will take immediate steps to delete that data and close the relevant account. If you are a parent or guardian who believes your underage child has registered with duit66, please contact us immediately at support@duit66.site.

As a platform operating at an international level with globally distributed technology infrastructure, there are situations where duit66 users' personal data may be processed or stored outside Malaysia. This includes cloud computing servers and identity verification systems that may be located in other countries.

In all cases of cross-border data transfers, duit66 ensures that:

• The recipient country or territory maintains a level of data protection equivalent to or higher than Malaysia's PDPA standards.
• Appropriate data transfer agreements have been put in place between duit66 and the relevant third-party service providers.
• All data transfers are carried out through encrypted and secure channels.
• Third-party service providers may only use transferred data for the stated purposes and for no other purpose.

Users with concerns about cross-border data transfers are welcome to contact us for more information about the safeguards applied to specific data transfers.

The duit66 website may contain links to third-party websites or services in certain contexts. duit66's Privacy Policy does not apply to those third-party websites or services, and duit66 is not responsible for the privacy practices or content of third-party websites.

Duit66 recommends that you read the privacy policy of every external website you visit independently. Clicking on links to third-party sites is entirely at your own risk and discretion. The presence of links on the duit66 website does not imply that we endorse or guarantee the content or privacy practices of those sites.

Duit66 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our practices, new legal requirements, or technological advancements. Any material amendments will be communicated to all registered users via email or a notice displayed on the duit66 homepage at least 14 days before taking effect, except in cases where immediate changes are required for security or legal reasons.

The "Updated" date displayed at the top of this page reflects the date of the most recent amendment to this Privacy Policy. We encourage you to review this page periodically to stay informed about how duit66 protects your information.

Your continued use of the duit66 platform after any amendments to this Privacy Policy take effect will be considered your acceptance of the revised terms. If you do not agree with any changes, please discontinue use of the duit66 platform and contact us to close your account.

For any questions, concerns, or requests relating to this Privacy Policy or how duit66 handles your personal data, please contact the duit66 Privacy Officer at:

• Email: support@duit66.site — include "Privacy Inquiry" in the subject line of your email.
• Live Chat: Via the live chat function available on the duit66 website 24 hours a day, 7 days a week.

We are committed to responding to all privacy-related enquiries within 3 business days and to resolve all more complex requests within 30 working days of receipt. All privacy-related communications are conducted in Bahasa Melayu.