🔒
🛡️
Duit44 Official Data Protection Document

Privacy Policy Duit44 – Our Commitment to Protecting Malaysian Players' Personal Data

Your privacy is Duit44's absolute priority. This Policy clearly and transparently explains how we collect, process, store, and protect your personal data in accordance with applicable Malaysian law — in particular, the Personal Data Protection Act 2010 (PDPA).

Last Updated: 1 January 2026
Applicable to: Malaysia
PDPA 2010 Compliant

Six Core Principles of Duit44's Privacy Policy

The most important things you need to know about how Duit44 protects your personal data

Full 256-Bit SSL Encryption

All data transmitted between your device and Duit44's servers is protected by 256-bit SSL encryption — the same standard used by Malaysia's leading financial institutions such as Maybank and CIMB. This means your identification details, phone number, and transaction records cannot be read by any third party during transmission.

Your Data Is Never Sold to Anyone

Duit44 holds firm to one non-negotiable principle: members' personal data will never be sold, rented, or shared with third parties for commercial marketing purposes without your explicit consent. Your trust is far too valuable to trade away for any short-term gain.

Full Compliance with Malaysia's PDPA 2010

Duit44 is fully compliant with Malaysia's Personal Data Protection Act 2010 (PDPA 2010). This grants you legally protected rights, including the right to access your data, request corrections, and object to data processing in certain circumstances. We regard PDPA compliance not merely as a legal obligation, but as the minimum standard we uphold.

Strict Internal Data Access Controls

Within Duit44, only staff who require access to specific data in order to carry out their duties are permitted to do so. Our layered access control system ensures that no Duit44 employee or contractor can access member data beyond what is necessary for their legitimate job role.

Clear Data Retention Policy

Duit44 only retains your personal data for as long as it is needed for the stated purposes or for as long as your account remains active. Once data is no longer required, it is deleted or anonymised in accordance with established security procedures. You may also request deletion of your data under the rights granted by PDPA 2010.

Immediate Data Breach Notification

In the event of any security incident that may affect members' personal data, Duit44 is committed to notifying affected members within the timeframe required by Malaysian law. We will also take immediate steps to contain the damage and prevent similar incidents from recurring.

1 Introduction – Duit44's Commitment to Your Privacy

Duit44 is an online casino platform operating in Malaysia, and we understand that our members' trust in us depends not only on the quality of the games we offer, but also on how we manage and protect their personal data. This Privacy Policy ("Policy") sets out in detail how Duit44 collects, uses, stores, protects, and in certain circumstances discloses the personal information you provide to us when registering for and using our platform.

This Policy applies to all registered Duit44 members, website visitors, and any individual who interacts with our platform via the website, mobile app, or other communication channels. By registering an account or using Duit44's services, you acknowledge that you have read and understood this Privacy Policy and agree to the data collection and processing practices described herein.

Duit44 is fully compliant with Malaysia's Personal Data Protection Act 2010 (PDPA 2010) and all regulations made thereunder. We regard compliance with privacy law not merely as an obligation, but as a reflection of our core company values — that every Malaysian player who trusts Duit44 deserves genuine and comprehensive data protection, without exception.

Important Note

If you have any questions or concerns about how Duit44 processes your personal data, please contact our Data Protection Officer by email at [email protected]. We are committed to responding to all privacy-related enquiries within 48 business hours.


2 Types of Personal Data Collected by Duit44

Duit44 only collects personal data that is strictly necessary to provide our platform services safely and effectively. We do not collect excessive or irrelevant data beyond the scope of the services we offer. The following are the categories of data we may collect from you:

Account Registration Data:

  • Full name as shown on your Malaysian identity card
  • National identity card number (MyKad) or passport number for non-citizens
  • Date of birth for age verification (18 years and above)
  • An active Malaysian mobile phone number
  • An active and reachable email address
  • Passwords stored in encrypted, unreadable form

Financial & Transaction Data:

  • E-wallet account information (Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow) – account number only, not passwords
  • Malaysian bank account details for withdrawal purposes — account number and bank name only
  • Records of all deposit and withdrawal transactions, including date, time, and amount in MYR (RM)
  • Betting history and game records for audit and security purposes

Technical & Usage Data:

  • IP address, device type, operating system, and browser version
  • Session data including pages visited, time spent, and actions taken
  • Cookie and tracking data as described in Section 6
  • Error logs and diagnostic data for technical troubleshooting purposes
Data Category Collected? Primary Purpose Shared?
Identity Data (Name, IC) Yes Account verification & anti-fraud No
Phone Number & Email Yes Communications & account security No
Payment Information Yes Deposit & withdrawal processing No
Game Records Yes Audit, security & support No
Technical Data (IP, Device) Yes Security & troubleshooting No

3 How Duit44 Collects & Processes Your Data

Duit44 collects and processes your personal data solely for legitimate, specific purposes directly related to the provision of our platform services. We do not use your data for any purpose not stated in this Privacy Policy without first obtaining your additional consent.

The primary purposes for processing Duit44 members' personal data are as follows:

  • Processing account registration and verifying the identity and eligibility of new members
  • Processing deposits and withdrawals through legitimate Malaysian local payment methods
  • Provides access to all games and services available on the Duit44 platform
  • Sending important communications regarding your account, transactions, security, and policy updates
  • Providing responsive and effective customer support to every member
  • Detecting and preventing fraud, money laundering, and other illegal activities
  • Complying with legal obligations under applicable Malaysian legislation
  • Enhancing the functionality, performance, and user experience of the Duit44 platform
  • Conducting statistical analyses that do not identify individuals, for product development purposes
  • Sending you notifications about promotions and special offers, provided you have given your consent to receive them
Regarding Marketing Communications

Duit44 will only send you marketing emails or SMS messages if you have given explicit consent at the time of registration or thereafter. You may withdraw this consent at any time by clicking the "unsubscribe" link in any of our marketing emails or by contacting Duit44 customer support directly.


4 Sharing of Data with Third Parties

Duit44 does not sell, rent, or disclose your personal data to third parties for their own marketing or commercial purposes. However, in the course of operating our platform, there are limited circumstances where Duit44 needs to share certain data with carefully selected parties.

Situations in which data sharing may occur are as follows:

  • Payment Service Providers: Transaction information is shared with payment providers — including Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and Malaysian banks offering FPX services — solely for the purpose of processing your financial transactions
  • Game Software Providers: Non-identifiable game statistical data may be shared with game software providers for technical maintenance and game update purposes
  • Legal Authorities: Duit44 will disclose personal data to Malaysian authorities such as the police, courts, or financial regulatory bodies if required to do so by law or a valid court order
  • Fraud Prevention Body: Required information may be shared with recognised anti-fraud and anti-money laundering agencies in Malaysia in fulfilment of our compliance obligations

In all data-sharing arrangements described above, Duit44 ensures that recipients are bound by strict confidentiality obligations and may only use the data for the specific stated purpose. We do not permit any third party to use shared data for marketing or any other unrelated purpose.

Notice Regarding Third-Party Links

The Duit44 platform may contain links to third-party websites or services in certain contexts. Duit44 is not responsible for the privacy practices or content of those third-party websites. We encourage you to read the privacy policy of each third-party website you visit separately.


5 Duit44 Data Security Measures

Duit44 continually invests in the latest security technologies and procedures to protect all members' personal data from unauthorised access, disclosure, alteration, or unlawful destruction. Data security is not an afterthought at Duit44 — it is the foundation of the trust you place in us as your online casino platform of choice in Malaysia.

The key technical and organisational security measures we implement include:

  • 256-bit SSL/TLS encryption for all data in transit between your browser and Duit44's servers
  • Encryption of sensitive data stored in databases using industry-recognised encryption algorithms
  • Member passwords are stored in hashed form and cannot be decrypted — not even by Duit44's own staff
  • An intrusion detection and prevention system (IDS/IPS) that monitors network traffic in real time
  • 24/7 security monitoring by Duit44's cybersecurity team
  • Regular penetration testing by independent security specialists to identify and address any vulnerabilities
  • Role-based access control (RBAC) ensuring staff can only access data relevant to their specific role
  • Regular data backups and tested disaster recovery procedures to ensure continuity of service
Duit44 Data Security Protection Levels
Data Encryption in TransitSSL 256-bit
Password Protection (Hashing)bcrypt + Salt
Real-Time Threat Monitoring24/7 Active
Internal Access Control (RBAC)Strictly Enforced
Regular Security TestingQuarterly

While Duit44 takes all reasonable steps to protect your data, no security system can guarantee 100% protection against every possible cyber threat. We therefore encourage you to take your own precautions as well — such as using a strong and unique password, enabling two-factor authentication (2FA) on your Duit44 account, and never sharing your login details with anyone.


6 Use of Cookies & Tracking Technologies at Duit44

Duit44 uses cookies and similar tracking technologies to enhance the user experience, analyse platform usage patterns, and deliver more relevant content to you. Cookies are small text files stored in your web browser when you visit the Duit44 platform.

The types of cookies used by Duit44 are as follows:

  • Essential Cookies: These cookies are required for the core functionality of the Duit44 platform, such as maintaining your login session, saving game preferences, and processing transactions securely. They cannot be disabled without affecting platform functionality
  • Analytics Cookies: Used to understand how members use the Duit44 platform — which pages are visited most frequently, how long is spent on them, and the navigation paths taken. This data is used in aggregated form and does not identify individual users
  • Functional Cookies: Enables the Duit44 platform to remember your preferences — such as your selected language, preferred bet size, and display settings — so your experience feels personalised and consistent on every visit
  • Security Cookies: Used to detect and prevent fraudulent activity, verify user identities, and protect member accounts from unauthorised access

You can manage your cookie settings through your web browser settings at any time. However, disabling essential cookies may affect the functionality of the Duit44 platform and could prevent you from accessing certain features, including logging in to your account.


7 Your Rights as a Data Subject Under PDPA 2010

As a Duit44 member who is a Malaysian citizen or resident, you have certain rights regarding your personal data under the Personal Data Protection Act 2010 (PDPA 2010). Duit44 respects and takes seriously the facilitation of these rights. The following are your legally protected rights:

Your Right to Access Your Data

You have the right to request a copy of the personal data Duit44 holds about you. Access requests can be submitted by email to [email protected] and we will respond within the timeframe stipulated by PDPA 2010.

Right to Data Correction

If you find that the personal data Duit44 holds about you is inaccurate, incomplete, or out of date, you have the right to request a correction. Some corrections can be made directly through your Duit44 account settings, while others may require supporting documentation for verification.

Right to Object to Data Processing

You have the right to object to the processing of your personal data for specific purposes, such as marketing communications. Please note that objecting to data processing for essential purposes — such as account security — may prevent you from accessing some or all of Duit44's services.

Right to Request Data Deletion

Under certain circumstances, you have the right to request that Duit44 delete your personal data. This right is subject to our legal record-keeping obligations — we may be required to retain certain data for a specified period under Malaysian law.

Data Portability Rights

You have the right to receive your personal data in a structured, machine-readable format. This allows you to transfer your data to another platform should you choose to do so, subject to the relevant terms and legal obligations.

To exercise any of the rights above, please submit a written request to Duit44 by email at [email protected], including your account number, the type of request being made, and any relevant supporting information. We will process your request within the timeframe stipulated under PDPA 2010 and notify you of the outcome.


8 Children's Data Protection

Duit44 strictly prohibits individuals under the age of 18 from registering, using, or accessing the platform in any capacity. Our platform is not intended for minors, and we do not knowingly collect personal data from individuals under the age of 18.

Should Duit44 discover that personal data of a minor has been collected without our knowledge, we will take immediate steps to:

  • Closing the relevant account immediately
  • Deleting all data associated with that account from our systems
  • Returning all valid cash balances to the original payment method where applicable
  • Reporting the matter to the relevant authorities where required
To Parents & Guardians

If you discover that a minor under your care has registered for or used the Duit44 platform, please contact us immediately at [email protected]. We will treat this as a matter of the highest priority and ensure all data is deleted and the account is closed promptly.


9 Duit44 Data Retention Periods

Duit44 retains your personal data only for as long as necessary to fulfil the purposes stated in this Privacy Policy, or as required by applicable Malaysian law. Our principle is to minimise data retention — we do not keep data that is no longer needed.

The general data retention periods at Duit44 are as follows:

  • Active Account Data: Retained for as long as your account remains active with Duit44 and is required to provide platform services
  • Financial Transaction Records: Retained for a minimum of 7 years from the transaction date in accordance with Malaysia's financial and anti-money laundering legal requirements
  • Identity Verification Records: Retained for the period required for legal compliance purposes, typically 5 to 7 years after account closure
  • Support Communication Data: Retained for 2 years after support ticket closure for reference and service improvement purposes
  • Anonymous Analytics Data: May be retained for a longer period as it cannot be attributed to any specific individual

When data is no longer needed and there is no legal obligation to retain it, Duit44 will delete or anonymise it in accordance with established security procedures to ensure it cannot be recovered or misused.


10 Amendments to Duit44's Privacy Policy

Duit44 reserves the right to amend this Privacy Policy at any time to reflect changes in our privacy practices, new legal requirements, or developments in the technologies we use. We will notify you of any material amendments via in-platform notifications on Duit44 and by email to the address you have registered with us.

Amendments to the Privacy Policy will take effect on the date stated in the amendment notice. Your continued use of the Duit44 platform after the effective date of any amendment will be considered your acceptance of the revised policy. We encourage you to review this Privacy Policy page periodically to stay informed of the latest version and how we protect your data.

The amendment history of Duit44's Privacy Policy is retained for transparency purposes, and members may request copies of previous versions by contacting our team through the channels stated in Section 11.


11 Contact Duit44 About Data Privacy

If you have any questions or concerns, or wish to exercise your rights regarding the personal data held by Duit44, please contact our Data Protection Officer through the following channels:

  • Official Email: [email protected] – for all privacy and data protection enquiries
  • Live Chat: Available 24/7 directly within the Duit44 platform for immediate enquiries
  • Response Time: All privacy-related enquiries will be responded to within 48 business hours

When submitting a privacy-related request, please include the following information to help us process it accurately and promptly: your Duit44 account number, the type of request being submitted (data access, correction, deletion, etc.), a detailed description of your request, and an active Malaysian phone number where we can reach you if needed.

Duit44 values feedback from members regarding our privacy practices. If you believe Duit44 has not handled your personal data in accordance with this Privacy Policy or the PDPA 2010, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia, the relevant supervisory authority under Malaysian law.

FAQ – Duit44 Privacy Policy

Answers to the most frequently asked questions about personal data protection at Duit44

Duit44 does not retain your full bank card or e-wallet account details after a transaction has been completed. For deposits made via FPX (Maybank2u, CIMB Clicks, and others) or e-wallets such as Touch 'n Go eWallet, GrabPay, or Boost, all payments are processed securely through a certified payment gateway. Duit44 only retains the transaction reference number, date, time, and amount for account record and transaction history purposes. Your password and online banking or e-wallet login credentials are never accessed or stored by Duit44.

To request deletion of your personal data from Duit44's systems, send an email to [email protected] with the subject line "Data Deletion Request", including your Duit44 account number and a brief explanation of your reason. Our team will review your request and inform you of which data can be deleted and which must be retained due to legal obligations. Certain financial records may need to be kept for a period prescribed under Malaysian law, even after account closure. For data not subject to any legal retention obligation, Duit44 will process the deletion request within 30 business days and confirm completion to you.

No. Duit44 does not use members' personal data for third-party advertising or "retargeting" on other websites. We do not share your personal data with any advertising networks, social media platforms, or third-party marketing agencies for the purpose of showing you ads outside the Duit44 platform. Marketing communications from Duit44 will only be sent directly via email or in-platform notifications if you have given your consent to receive them. You may opt out of marketing communications at any time by contacting our customer support.

When you close your Duit44 account, we will initiate the following data management process: Data not subject to any legal retention obligation will be anonymised or deleted within a reasonable period after account closure. Financial and transaction records will be retained for a minimum of 7 years in accordance with Malaysian financial legislation. Identity verification data will be retained for the period prescribed under anti-money laundering legislation. All marketing data and your communication preferences will be deleted immediately. You may contact the Duit44 support team for more information on the specific data that will be retained and the applicable retention periods following your account closure.

Duit44 employs a defence-in-depth approach to protecting member data. This includes 256-bit SSL encryption for all data in transit, encryption of sensitive data at rest, real-time intrusion detection systems, 24/7 security monitoring, quarterly penetration testing by independent security experts, role-based access controls for internal staff, and tested incident response procedures. In the event of a data breach affecting members' personal data, Duit44 is committed to notifying affected members and the relevant authorities within the timeframe stipulated by PDPA 2010. We also strongly encourage members to enable two-factor authentication (2FA) on their Duit44 accounts as a simple yet highly effective additional layer of protection.
Your Data Is Safe at Duit44

Play with Peace of Mind – Duit44 Keeps Your Data & Winnings Safe!

With 256-bit SSL encryption, full compliance with Malaysia's PDPA 2010, and an unwavering commitment to your privacy, Duit44 is an online casino platform you can genuinely trust. Join hundreds of thousands of Malaysian players who already play with complete confidence at Duit44 today!

SSL 256
Bit Encryption
PDPA
2010 Compliant
24/7
Security Monitoring

By registering, you agree to the Terms & Conditions and Duit44's Privacy Policy. For players aged 18 and above only.

Duit44 Related Policies & Guidelines

Other important documents that complement this Privacy Policy

Bahasa Melayu