Duit laju Privacy Policy — Our Commitment to Data Protection Your Privacy

This Privacy Policy applies to all registered members and visitors of the duit laju platform, covering the duitlaju.app website, the duit laju mobile app for iOS and Android, and all our official customer service channels including live chat and support email.

By registering as a member or continuing to use our platform, you acknowledge that you have fully read and understood this Privacy Policy. This Policy should be read together with Terms and Conditions duit laju, which together form the complete agreement between you and our platform.

Duit laju acts as the data controller for all personal information collected through this platform, and we are fully responsible for ensuring that such information is handled in accordance with the data protection principles set out in Malaysia's Personal Data Protection Act 2010 (PDPA).

Duit laju collects various categories of personal information depending on how you interact with our platform. All data collection is carried out transparently and only for legitimate purposes.

Information you provide directly:

• Full name as stated on your Malaysian identity card (MyKad) or passport.
• Date of birth to verify that you are at least 18 years of age.
• National Registration Identity Card (NRIC) number or passport number for KYC requirements.
• Active email address and Malaysian mobile number for account communications.
• Current residential address for identity verification and AML compliance.
• Bank account details or digital wallet information for processing financial transactions.
• A selfie or copy of your identification document during the KYC verification process.

Information collected automatically:

• IP address and general geolocation data (city level, not precise address).
• Device information including type, operating system, screen resolution, and browser version.
• Login session data, access times, and pages visited within the platform.
• Gaming activity records including date, time, game type, and wagering value.
• Communication data including live chat transcripts and customer support email records.

Duit laju uses your personal information on a valid legal basis, whether by contract, legitimate interest, legal obligation, or consent you have provided. We will not use your data for unrelated purposes without first obtaining your consent.

• Account management: Creating, managing, and maintaining your member account, including registration processing, identity verification, and profile updates.
• Transaction processing: Securely and accurately managing all your deposits, withdrawals, and financial transaction history.
• Platform security: Detecting and preventing fraud, money laundering, unauthorized access, and other suspicious activities that could compromise the security of your account or our platform.
• Legal compliance: Fulfilling our obligations under Malaysia's PDPA, Anti-Money Laundering (AML) requirements, and any directives from relevant authorities.
• Customer support: Responding to your inquiries, complaints, and support requests across all available support channels.
• Personalized marketing: Sending promotions, bonus offers, and updates on new games — but only to members who have consented to receive marketing communications.
• Platform improvements: Analyzing usage patterns in aggregate to improve the design, functionality, and overall experience of the duit laju platform.
• Responsible gaming: Monitoring wagering patterns to identify members who may need assistance or support related to responsible gaming.

Duit laju does not share, sell, or disclose your personal information to third parties except in the following limited and controlled circumstances:

• Payment service providers: Required financial information is shared with FPX, Touch 'n Go eWallet, DuitNow, and other payment gateway providers solely to process your transactions.
• Gaming service providers: Third-party gaming platforms integrated with duit laju may receive the minimum session data required to run games correctly.
• Technology service providers: Companies that help us operate the platform — such as cloud hosting, cybersecurity, and analytics providers — are all bound by strict confidentiality agreements.
• Legal authorities: We will disclose information when required by court order, regulatory investigation, or a valid legal compliance obligation.
• Fraud prevention: Minimum necessary information may be shared with recognized fraud prevention agencies to protect the security of our platform and members.

Duit laju continuously invests in robust security infrastructure to ensure your personal data is always protected from unauthorised access, loss, or misuse. The following are the key security layers we employ:

• Transit encryption: All communication between your browser or app and our servers is secured by TLS 1.3 protocol with AES-256 encryption.
• Storage encryption: Sensitive data such as financial information and personal identification details are encrypted at the database level using industry-recognised encryption methods.
• Access control: Only authorized duit laju staff with a legitimate business need are permitted to access member data, and all access is logged and actively monitored.
• Two-factor authentication (2FA): Our internal systems require 2FA for all employee access to sensitive data, and we encourage members to enable 2FA on their accounts as well.
• Security auditing: duit laju conducts regular penetration testing and security audits by independent cybersecurity experts.
• Incident response procedures: We have a comprehensive security incident response plan in place. In the event of a data breach affecting members, we will notify the relevant authorities and affected members within the timeframe stipulated by law.

While we take all reasonable precautions, no security system is entirely perfect. We encourage you to play your part in keeping your account secure by using a strong password, enabling 2FA, and never sharing your login details with anyone.

As a duit laju member and data subject under Malaysia PDPA, you have the following rights regarding your personal information. You may exercise these rights by contacting our support team at any time:

• Right of access: You may request a copy of all personal information we hold about you. We will fulfil this request within 21 business days.
• Right to rectification: If any information we hold is inaccurate or outdated, you have the right to request an immediate correction.
• Right to erasure: You may request deletion of your personal data, subject to legal retention obligations that may prevent immediate deletion in certain cases.
• Right to restrict processing: In certain circumstances, you may request that we restrict how we process your data while a dispute or review is being resolved.
• Right to object: You may object to your data being used for direct marketing purposes at any time, and we will honour that choice immediately.
• Right to withdraw consent: Where data processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

Duit laju uses cookies and similar technologies to keep our platform running smoothly and to deliver a better experience for you. Cookies are small text files stored on your device when you visit our website.

Types of cookies we use:

• Essential cookies: Required for core platform functions such as login authentication, session security, and language preferences. These cookies cannot be disabled without affecting platform functionality.
• Performance cookies: Collecting information on how you use our platform in aggregate and anonymously to help us improve functionality and design.
• Functional cookies: Saving your preferences such as display settings, game preferences, and personal settings for a smoother return experience.
• Analytics cookies: Used alongside internal analytics tools to understand overall traffic patterns and website usage.

You can manage or disable cookies through your browser settings. Please note that disabling all cookies may affect the functionality of certain parts of the duit laju platform.

In the course of platform operations, some of your personal data may be processed or stored on servers located outside Malaysia. This typically occurs in the context of cloud hosting services or international technical support infrastructure.

When international data transfers occur, duit laju ensures:

• Your data is only transferred to countries or parties that provide an equivalent or higher level of data protection than Malaysia.
• A comprehensive Data Processing Agreement is signed with all international service providers.
• End-to-end encryption is applied to all data transfers across borders.
• All data recipients are subject to strict confidentiality and security obligations.

The duit laju platform is strictly for users aged 18 and above. We do not knowingly collect any personal information from individuals under the age of 18.

If we discover that we have inadvertently collected data from someone under the age of 18, we will take immediate steps to delete all relevant information and close the account in question without prior notice.

The duit laju platform may contain links or integrations with third-party gaming platforms. Once you leave the duit laju platform and visit a third-party website or app, our Privacy Policy no longer applies.

We recommend reading the privacy policy of any third-party platform before providing them with your personal information. duit laju is not responsible for the privacy practices or content of any third-party websites you may access through our platform.

Duit laju reserves the right to update this Privacy Policy from time to time to reflect changes in our data practices, updated legal requirements, or improvements to our platform services.

When we make material changes to this Privacy Policy, we will:

• Updating the "Last Updated" date at the top of this page.
• Sending notifications to all active members via their registered email at least 7 days before changes take effect.
• Displaying a clear notice on our platform's homepage during the transition period.

Your continued use of the duit laju platform after any changes take effect constitutes your acceptance of the updated Privacy Policy. If you do not agree with any changes, you may close your account before they come into effect.

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, the duit laju privacy team is available to assist you at any time.

You may reach us through the following channels:

• Privacy email: [email protected] (please state the subject as "Privacy Inquiry")
• Live chat: Available 24 hours a day, 7 days a week via the chat icon on the platform
• Response time: We are committed to responding to all privacy inquiries within 3 business days

For official requests relating to your data rights — such as access, correction, or deletion — please include your member account number and a copy of a valid identity document to help us process your request more quickly and securely.