At duit888, we understand that your trust depends not only on a great gaming experience, but also on the confidence that your personal information is in safe hands. We have written this Privacy Policy in plain, easy-to-understand language — not burdensome legal jargon — so you truly know what happens to your data.
This Privacy Policy applies to all users who access the duit888 website, use our mobile app, or interact with any of our services. By registering and using the duit888 platform, you agree to the data processing practices described here.
Duit888 is the data controller responsible for all personal information collected from users of our platform. This means we determine the purpose and manner in which your data is processed, and we are fully accountable for ensuring that data is managed safely and responsibly.
If you have any questions, concerns, or requests regarding your personal data, you can reach our Data Protection team through duit888's customer support channels, available 24 hours a day.
We appoint an internal data protection officer whose role is to ensure that all data processing at duit888 complies with applicable legislation and the stated privacy policy.
Duit888 only collects data that is strictly necessary to provide the services you request. We do not collect excessive information. The following are the categories of data we collect and the reasons for doing so:
| Data Category | Data Examples | Purpose of Collection |
|---|---|---|
| Identity Information | Full name, date of birth, IC/passport number | Account registration, KYC verification, fraud prevention |
| Contact Information | Email address, phone number, residential address | Account communications, OTP verification, customer support |
| Financial Information | Bank account number, bank name, transaction history | Deposit and withdrawal processing, legal compliance |
| Technical Data | IP address, device type, browser, operating system | Account security, fraud detection, platform improvement |
| Usage Data | Game history, betting patterns, activity logs | Service improvement, problem gambling detection, compliance |
| Cookie Data | User preferences, login sessions, analytics data | Personalised user experience, website traffic analytics |
In certain situations, particularly during the KYC process, we may require a copy of identity documents such as your MyKad or passport. These documents are stored in encrypted form and are only accessible by authorised staff who require access for verification purposes.
Every piece of data we collect has a defined purpose. duit888 does not use your data for any purpose outside the scope stated in this Privacy Policy. The primary purposes of data use are as follows:
- Account management: Creating and maintaining your account, processing registration, and managing secure login including two-factor authentication.
- Financial processing: Processing deposits, withdrawals, and all financial transactions securely and accurately via your chosen payment method.
- Identity verification (KYC): Verifying your identity to meet legal compliance requirements and prevent use of the platform by ineligible individuals.
- Security & Fraud Prevention: Detecting and preventing unauthorised access, financial fraud, multiple account use, and other prohibited activities.
- Service Communications: Sending important notifications related to your account, transactions, security updates, and changes to the terms of service.
- Platform improvement: Analysing usage patterns to improve the interface, performance, and overall experience of the duit888 platform.
- Marketing (with consent): Sending promotional information and personalised offers only to users who have given explicit consent.
Duit888 understands that the idea of your data being shared with others may raise concerns. We want to be fully transparent about this. Your data may be shared in the following limited situations:
- Payment service providers: To process deposits and withdrawals, we are required to share necessary information with DuitNow, FPX, e-wallet, and banking providers. These providers are bound by strict confidentiality agreements.
- Game service providers: Third-party game providers may receive minimal technical data necessary to run their games within the duit888 platform.
- Legal Requirements: If required by a court, law enforcement agency, or authorised regulatory body, we may be required to disclose certain information.
- Fraud prevention: In cases of suspected fraud involving multiple platforms, we may share necessary information with relevant parties to protect the gaming ecosystem.
All third parties with whom we share data are bound by data processing agreements that require them to protect your information to a standard no lower than our own.
Protecting user data is duit888's greatest investment in technology. We apply multiple layers of security to keep your information safe at all times:
- 256-bit SSL/TLS Encryption: All data transmitted between your device and duit888 servers is encrypted using the same technology employed by leading banking institutions in Malaysia.
- Secure storage: Data stored on our servers is encrypted at the database level. User passwords are stored as irreversible hashes.
- Internal Access Controls: duit888 staff may only access user data necessary for their specific duties. Access is logged and monitored on a regular basis.
- Security audits: We conduct regular penetration testing and security reviews by authorised independent third parties.
- 24/7 Monitoring: Our threat detection system monitors suspicious activity around the clock and automatically responds to any detected threats.
Duit888 uses cookies and similar technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.
We use several types of cookies for different purposes:
- Essential Cookies: Required for core platform functions such as login session management and security preferences. These cookies cannot be disabled.
- Performance Cookies: Helps us understand how users interact with the platform for improvement purposes. All data collected is anonymised.
- Functional Cookies: Saving your preferences such as language, display settings, and game preferences for a more personalised experience.
You can manage cookies through your browser settings. However, disabling certain cookies may affect platform functionality. For more information on managing cookies, refer to your web browser's help guide.
Duit888 retains your personal data only for as long as necessary for the purposes stated in this Privacy Policy or as required by law. The following are general guidelines for our data retention periods:
- Active account data: Retained for as long as your account is active and for 7 years following account closure, as required by Malaysian financial legislation.
- Financial transaction records: Retained for a minimum of 7 years for legal compliance and tax audit purposes.
- Security logs and fraud detection: Retained for 3 years to support investigation of any security incidents.
- Marketing data (with consent): Retained until you withdraw your consent. You may unsubscribe from marketing communications at any time.
Once the retention period expires, your data will be securely deleted or fully anonymised using industry-standard methods.
Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding the personal data we hold:
You have the right to request a copy of the personal data we hold about you. We will process this request within 30 business days.
If any of your data is inaccurate or outdated, you have the right to request a correction. You can update basic information directly from your account settings.
Under certain circumstances, you may request the deletion of your personal data. Note: this right is subject to applicable legal retention obligations.
You may object to the processing of your data for direct marketing purposes at any time. Your objection will be actioned immediately without any conditions.
You have the right to request the data you provided to us in a machine-readable format for transfer to another service provider if needed.
Where data processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.
The duit888 platform is exclusively for individuals aged 18 and above. We do not knowingly collect or process personal data of children under the age of 18.
All duit888 accounts go through an age verification process during registration and KYC. If we determine that collected data belongs to a minor, we will immediately delete that data and close the account.
If you are a parent or guardian and become aware that your child has registered on the duit888 platform without your knowledge, please contact us immediately. We will take prompt action to address the situation.
Duit888 reserves the right to amend this Privacy Policy from time to time in response to changes in business practices, technology, or legal requirements. When material amendments are made, we will notify you via:
- In-app notifications from duit888 or pop-ups on the website.
- Email notification to your registered address for significant changes.
- A clear "Last Updated" date is displayed at the top of this page.
Continued use of the duit888 platform following any amendments to this Privacy Policy constitutes your acceptance of the updated policy. We encourage you to review this page periodically.
Previous versions of our Privacy Policy are kept in our archive and can be requested through the support team if you need them for reference.