Privacy Policy

1Introduction

duit447 respects the privacy of visitors and eligible adult users. This Privacy Policy describes the rules and practices applied to personal data processed through https://duit447.cam, its related interfaces and support channels. It applies whether you browse general information, review casino or sports content, use account features, contact support or interact with MYR payment services.

By using duit447, you acknowledge that personal data may be processed as described in this Privacy Policy. Where consent is required, duit447 will seek it through an appropriate notice or choice. If you do not agree with this policy, you should discontinue use of the platform.

This document is intended to be read alongside the Terms & Conditions. It does not create rights beyond those provided under applicable law, but duit447 will aim to handle personal information fairly, proportionately and transparently.

2Definitions

• "Personal Data" means information relating to an identified or reasonably identifiable individual.
• "Processing" means any operation performed on Personal Data, including collection, recording, organisation, storage, use, disclosure, correction or deletion.
• "Account Data" means details associated with a registered user, including identifying, contact and verification information.
• "Transaction Data" means records connected with deposits, withdrawals, refunds, bonuses and payment reconciliation.
• "Device Data" means technical information associated with a browser, mobile device, connection or platform session.
• "User" means an individual who visits or uses duit447.
• "Service Provider" means an organisation engaged to support hosting, verification, security, communications, analytics or payment processing.

3Data We Collect

The categories of Personal Data collected by duit447 depend on how you interact with the platform. Not every category is collected from every visitor.

4How Data Is Collected

duit447 may collect data directly when a User provides information during account setup, age verification, payment activity, support communication, limit-setting or a privacy request. Data may also be generated automatically when the platform records security events, browser details, page activity and session information.

Certain information may be received from approved Service Providers. For example, an identity-verification provider may return a verification result, while a payment provider may confirm whether an FPX, DuitNow or e-wallet transaction succeeded. duit447 aims to receive only the information reasonably required for the relevant purpose.

Users must provide accurate data and must not submit another person's identity, banking or wallet details. Information that appears inconsistent, incomplete or fraudulent may lead to enhanced checks, restricted functions or account suspension under the duit447 Terms & Conditions.

5Purposes and Basis of Data Processing

duit447 may process Personal Data for the following purposes:

• To provide requested platform functions and maintain user accounts;
• To verify identity, age and account eligibility for a service intended only for adults aged 21 and above;
• To protect accounts, detect unusual behaviour and prevent fraud, money laundering, collusion or bonus misuse;
• To process and reconcile eligible MYR or cryptocurrency transactions;
• To respond to questions, complaints, technical issues and responsible gambling requests;
• To apply deposit limits, cooling-off periods and self-exclusion instructions;
• To maintain records, resolve disputes and comply with applicable legal obligations;
• To improve platform reliability, navigation and accessibility;
• To send marketing only where permitted and subject to the User's communication choices.

Depending on the context and applicable law, processing may be necessary to perform an agreement with the User, comply with legal duties, pursue legitimate security or operational interests, protect vital interests, or act on valid consent. Where duit447 relies on legitimate interests, it considers whether the processing is necessary and proportionate to the User's privacy rights.

6Payment and Financial Information

Transactions involving Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, DuitNow, FPX or USDT may be handled partly by payment providers. duit447 may retain transaction references, deposit or withdrawal amounts, timestamps, payment channel, account-holder verification results and transaction status.

duit447 does not need your online banking password, e-wallet PIN, full card security code, one-time banking code or cryptocurrency seed phrase. These details must never be supplied through live chat, email or any duit447 page. If anyone claims to represent duit447 and requests such information, stop the interaction and report it through the support contact shown in this policy.

Payment records may be compared with Account Data to verify that a payment source belongs to the registered User. This helps prevent third-party deposits, unauthorised withdrawals and financial misuse. Additional proof may be requested where a name, amount, reference or transaction pattern requires clarification.

7Cookies, Device Data and Analytics

duit447 may use cookies and similar storage technologies to keep sessions secure, remember appropriate preferences, measure technical performance and identify suspicious activity. Essential cookies support functions such as authentication, navigation and security. Disabling them may prevent parts of the platform from operating correctly.

Where non-essential analytics or preference technologies require consent, an appropriate choice will be provided. Browser settings may also allow Users to delete or block cookies. Device Data can include IP address, operating system, browser version, language settings, screen characteristics and approximate region.

Analytics information is used to understand broad service patterns, such as whether Malaysian visitors are reading MYR payment guidance, EPL or Liga Super Malaysia coverage, responsible gambling information or casino education pages. duit447 does not use analytics to guarantee or manipulate gambling outcomes.

8Disclosure and Data Sharing

duit447 does not sell Personal Data. Information may be disclosed only where reasonably necessary to selected Service Providers, professional advisers, payment processors, verification specialists, fraud-prevention services, hosting providers or authorities with a valid legal basis.

Service Providers are expected to use Personal Data only for authorised purposes and to apply suitable confidentiality and security measures. The type and amount of information shared will depend on the service. A technical hosting provider may process Device Data, while a payment processor may require a transaction reference and account-holder details.

Personal Data may also be disclosed in connection with a merger, restructuring, financing or transfer of the duit447 business, provided that appropriate confidentiality and data-protection safeguards are applied. duit447 may disclose information where reasonably necessary to investigate fraud, protect Users or defend legal claims.

9International Data Transfers

duit447 operates in an international digital environment. Personal Data may be processed in countries outside Malaysia where platform infrastructure or approved Service Providers are located. Privacy laws in those countries may differ from Malaysian requirements.

Where required, duit447 applies contractual, organisational or technical safeguards intended to protect transferred information. These may include data-processing agreements, access controls, encryption, confidentiality obligations and assessments of the recipient's security practices.

International transfer does not remove the responsibilities described in this Privacy Policy. Users may contact duit447 for general information about the safeguards relevant to their Personal Data, subject to security, confidentiality and legal restrictions.

10Data Retention

duit447 retains Personal Data for no longer than reasonably necessary for the purpose for which it was collected. Retention periods may vary according to the type of record, account status, dispute history, financial reconciliation needs, fraud risk and applicable legal requirements.

Account and transaction records may need to be kept after account closure to meet financial, security or dispute-management obligations. Responsible gambling records, including self-exclusion status, may also be retained to ensure that a closed or excluded account is not improperly reopened.

When Personal Data is no longer required, duit447 will take reasonable steps to delete, anonymise or securely isolate it. Backup copies may remain for a limited technical cycle before being overwritten, provided that they remain protected and are not restored for ordinary use.

11Data Security

duit447 uses a combination of technical and organisational measures designed to protect Personal Data. These may include encrypted transmission, credential hashing, role-based access, monitoring, logging, controlled administrative access, staff confidentiality obligations and regular review of security procedures.

No online service can guarantee absolute security. Users also have an important role: choose a unique password, protect the device used to access duit447, avoid shared public sessions and report suspected unauthorised access promptly. Do not reuse an online banking or email password for a duit447 account.

If a Personal Data incident creates a material risk, duit447 will investigate, contain the issue and make any notifications required under applicable law. Security notices will not ask Users to disclose passwords, one-time codes or wallet recovery phrases.

12User Rights

Subject to applicable law, Users may have the right to request access to Personal Data, correction of inaccurate information, deletion in eligible circumstances, restriction of processing, objection to certain processing or a portable copy of selected data.

A privacy request should identify the relevant account and explain the action requested. duit447 may require reasonable identity verification before releasing, changing or deleting information. This protects Users from fraudulent or unauthorised requests.

Some requests may be limited where retaining or processing information is necessary for legal compliance, fraud prevention, financial reconciliation, dispute resolution, self-exclusion enforcement or the protection of another person's rights. If a request cannot be completed in full, duit447 will aim to explain the reason where legally permitted.

Closing an account does not always result in immediate deletion of every record. Transaction, security and responsible gambling information may remain subject to the retention rules explained above.

13Marketing and Communication Choices

duit447 may send service communications concerning security, account status, policy updates, payment issues or responsible gambling tools. These messages are operational and may still be sent when a User has opted out of promotional marketing.

Promotional messages will be sent only where permitted. Users may withdraw marketing consent or object to direct marketing by contacting support. A suppression record may be retained after opt-out to ensure that the preference is respected.

duit447 does not direct casino or sports-betting marketing to persons under 21, self-excluded Users or individuals known to be in a cooling-off period. Self-exclusion requests take priority over promotional preferences.

14Age Restriction and Underage Data

duit447 is strictly intended for adults aged 21 and above. The platform does not knowingly permit underage registration or intentionally collect Personal Data from anyone under 21 for gambling-related purposes.

If duit447 reasonably suspects that an Account belongs to an underage person, access may be suspended while age is verified. If underage use is confirmed, the account will be closed and associated data will be handled according to applicable legal, security and retention obligations.

A parent or guardian who believes that an underage person has provided information to duit447 should contact support using the plain-text email address below. Sufficient information should be supplied to locate the relevant record without sending unnecessary identity documents in the first message.

15Changes to This Privacy Policy

duit447 may update this Privacy Policy to reflect changes in services, technology, security practices, legal requirements or data-processing arrangements. The latest version will be published on this page with a revised update date.

Where a change is material, duit447 may provide an additional notice through an account interface or other suitable channel. Users should review this page periodically. Continued use after an update means that data will be processed under the current policy, subject to any consent that applicable law requires.

16Contact Us

Questions, privacy requests or concerns about the handling of Personal Data may be directed to duit447 using the following details:

• Support email: [email protected]
• Live chat availability: 24 hours a day, 7 days a week through the duit447 platform
• Request details: Include your account identifier, the nature of the privacy request and enough information for reasonable verification

The support email is displayed as plain text and is not clickable. Do not include passwords, banking codes, full payment credentials or cryptocurrency recovery phrases in any privacy message.

For questions concerning platform rules, review the Terms & Conditions. For deposit limits, cooling-off periods, self-exclusion and safer-play information, visit Responsible Gambling.