Privacy Policy

1. Introduction

This Privacy Policy applies to all personal data processed by duit668 in connection with the operation of the duit668 online casino and sports betting platform (the "Platform"), including the website at duit668.co, the duit668 Android and iOS mobile applications, live chat support interactions, marketing communications, and all other services offered under the duit668 brand.

By registering an Account on the duit668 Platform or otherwise using our Services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you should not access or use the duit668 Platform.

This Policy should be read alongside the duit668 Terms & Conditions, which govern your use of the Platform. Capitalised terms not defined in this Policy carry the meanings assigned to them in the Terms & Conditions.

2. Data Controller

duit668 is the data controller responsible for the personal data collected through the Platform. As data controller, duit668 determines the purposes and means by which your personal data is processed.

For all privacy-related queries, including requests to exercise your data subject rights, please contact us using the details provided in Section 15 of this Policy.

3. Personal Data We Collect

duit668 collects and processes the following categories of personal data:

3.1 Registration and Identity Data

• Full legal name;
• Date of birth (for age-21+ verification purposes);
• Gender;
• Nationality and country of residence;
• Government-issued identification document number, type, and expiry date;
• Username and hashed password.

3.2 Contact Data

• Email address;
• Malaysian mobile phone number;
• Residential or mailing address.

3.3 Financial and Transaction Data

• Deposit and withdrawal transaction records, including amounts, timestamps, and payment methods (Touch n Go eWallet, Boost, GrabPay, FPX, USDT TRC20);
• Wallet balance history;
• Bonus and promotion claim records;
• Cryptocurrency wallet addresses (where applicable).

3.4 Gaming and Behavioural Data

• Game play history, including game titles, wager amounts, outcomes, and session durations;
• Sports betting history, including events wagered on, bet types, odds, and outcomes;
• Responsible gaming tool settings (deposit limits, self-exclusion status);
• Platform navigation patterns and feature usage data.

3.5 Technical Data

• IP address and geolocation data at time of login and transaction;
• Device identifiers, operating system, browser type and version;
• Session logs and authentication event records;
• Cookie identifiers and tracking pixel data (see Section 9).

3.6 Communications Data

• Live chat transcripts and support ticket records;
• Email correspondence with duit668;
• Records of consent to marketing communications.

4. How We Collect Personal Data

duit668 collects personal data through the following means:

• Directly from you — when you register an Account, complete KYC verification, make a deposit or withdrawal, contact support, or participate in promotions;
• Automatically — when you access the Platform, through cookies, device fingerprinting, server logs, and analytics tools (see Section 9);
• From third parties — including KYC and identity verification service providers, payment processors, fraud prevention services, and where required, from public registers or government databases for AML compliance purposes.

5. Purpose and Legal Basis for Processing

The table below sets out the purposes for which duit668 processes your personal data and the corresponding legal basis under applicable data protection law:

6. Sharing of Personal Data

duit668 does not sell your personal data to third parties. We may share your personal data with the following categories of recipients, solely for the purposes described in this Policy:

• Game and platform technology providers — certified gaming software providers whose games are available on the duit668 Platform require access to certain gameplay and session data to deliver their services;
• Payment processors — Touch n Go eWallet, Boost, GrabPay, FPX bank partners, and cryptocurrency processing services require transaction data to facilitate deposits and withdrawals;
• KYC and identity verification providers — third-party services used to verify age, identity, and address documentation;
• Fraud prevention and security services — services used to detect and prevent unauthorised access, money laundering, and fraudulent activity;
• Regulatory and law enforcement authorities — where duit668 is required by law, court order, or regulatory obligation to disclose personal data;
• Professional advisers — lawyers, auditors, and consultants bound by confidentiality obligations;
• Business successors — in the event of a merger, acquisition, or asset sale, personal data may be transferred to the acquiring entity subject to equivalent privacy protections.

All third-party data processors engaged by duit668 are bound by data processing agreements that require them to process personal data only on duit668's instructions and to implement appropriate security measures.

7. International Data Transfers

duit668 operates internationally and your personal data may be transferred to and processed in jurisdictions outside Malaysia. Where such transfers occur, duit668 ensures that appropriate safeguards are in place, including standard contractual clauses approved by relevant regulatory authorities or equivalent transfer mechanisms, to protect your personal data to a standard at least equivalent to that required under applicable Malaysian law.

8. Data Retention

duit668 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, and as required by applicable law. Specific retention periods include:

• Account and identity data — retained for the duration of your Account and for a minimum of five (5) years following Account closure, in accordance with AML record-keeping obligations;
• Transaction data — retained for a minimum of five (5) years from the date of each transaction;
• Gaming and betting history — retained for the duration of your Account and for a minimum of three (3) years following Account closure;
• Marketing preferences and consent records — retained until consent is withdrawn or for three (3) years following the last interaction, whichever is later;
• Technical and log data — retained for a maximum of twelve (12) months unless required for ongoing fraud investigation.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised.

9. Cookies and Tracking Technologies

The duit668 Platform uses cookies and similar tracking technologies to deliver, secure, and improve our services. The categories of cookies we use include:

• Strictly necessary cookies — essential for Platform operation, including authentication session management and security functions. These cannot be disabled;
• Performance and analytics cookies — used to understand how Players use the Platform so that we can improve the experience;
• Functionality cookies — used to remember your preferences, such as language or display settings;
• Marketing cookies — used to deliver relevant promotional content where you have consented to receive marketing communications.

You may manage non-essential cookies through your browser settings. Disabling certain cookies may affect the functionality of the duit668 Platform.

10. Your Data Rights

Subject to applicable law, you have the following rights in relation to your personal data held by duit668. To exercise any of these rights, please contact us using the details in Section 15:

duit668 will respond to all valid data rights requests within 30 days. We may need to verify your identity before processing a request. In complex cases, the response period may be extended by a further 60 days, of which you will be notified.

11. Security Measures

duit668 implements technical and organisational security measures appropriate to the risk associated with processing your personal data. These include:

• 256-bit SSL/TLS 1.3 encryption for all data transmitted between your device and duit668 servers;
• Encryption of sensitive data fields at rest in our databases;
• Multi-factor authentication options for Player Accounts;
• Role-based access controls limiting staff access to personal data on a need-to-know basis;
• Regular security audits and penetration testing;
• Automated anomaly detection and intrusion prevention systems.

No data transmission over the internet is completely secure. While duit668 takes all reasonable steps to protect your personal data, we cannot guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, duit668 will notify affected individuals in accordance with applicable legal requirements.

12. Children's Privacy and Minors

The duit668 Platform is strictly restricted to individuals aged 21 years and above. duit668 does not knowingly collect personal data from any person under the age of 21. If duit668 discovers that personal data has been collected from a person under the age of 21, the relevant Account will be immediately closed, all data will be deleted, and any funds will be returned to the payment method used for deposit after verification.

If you believe that a minor has registered on the duit668 Platform, please contact us immediately using the details in Section 15.

13. Third-Party Links

The duit668 Platform does not contain links to external third-party websites for general browsing purposes. Where links to internal duit668 pages appear in communications, they direct users to content within the duit668 Platform or its associated policy documents. duit668 is not responsible for the privacy practices of any third-party payment, KYC, or technology service providers, and Players should review the relevant privacy notices of those services independently.

14. Changes to This Privacy Policy

duit668 reserves the right to update or amend this Privacy Policy at any time. Material changes to this Policy will be communicated to registered Players via email or a prominent Platform notification at least seven (7) days before the changes take effect. The "Last updated" date at the top of this Policy will reflect the date of the most recent revision.

Continued use of the duit668 Platform following the effective date of any revised Privacy Policy constitutes your acceptance of the changes. If you do not agree with the revised Policy, you must cease using the Platform and contact us to close your Account.

15. Contact Us

For all privacy-related queries, data subject right requests, or concerns about how duit668 handles your personal data, please contact us through the following channels:

duit668 aims to acknowledge all privacy queries within 2 business days and to provide a substantive response within 30 calendar days. For complex requests, the response period may be extended by a further 60 days with prior notice.