Privacy Policy

Privacy Policy duit8 — Protection Personal Data Member

Your privacy is more than a legal obligation to us — it is the foundation of trust that defines the relationship between duit8 and every member. This document transparently explains how we collect, use, store, and protect your personal data.

Updated: 1 January 2026 Version: ms-MY
Advanced-Level Encryption

All data transmitted between your device and duit8 servers is protected with 256-bit SSL encryption — the same standard used by global banking institutions.

Your Data, Your Rights

You have the right to access, correct, or request deletion of your personal data at any time. duit8 respects and facilitates the exercise of these rights.

No Data Sales

Duit8 has never sold, rented, or shared member personal data with third parties for marketing purposes. Your data is used solely for the purposes stated in this policy.

Legal Compliance

The duit8 Privacy Policy complies with Malaysia's Personal Data Protection Act 2010 (PDPA) and applicable international licensing requirements for online entertainment platforms.

Secure & Isolated Servers

Duit8 member personal data is stored on segregated servers, protected by layered firewalls and round-the-clock threat monitoring by a dedicated security team.

Full Cookie Control

You have full control over the cookies used on the duit8 platform. Cookie settings can be managed directly through your account settings or your web browser preferences.

This Privacy Policy provides a comprehensive overview of duit8's privacy practices. By using the duit8 platform, you agree to the collection and use of information as described in this document. Please read it carefully in its entirety.

1 Introduction

Duit8 ("we", "Platform") values the privacy of every member who uses our services. This Privacy Policy explains in detail how we manage your personal data — from the point of collection through to storage and final deletion.

As an online entertainment platform operating for users in Malaysia, duit8 is subject to Malaysia's Personal Data Protection Act 2010 (PDPA). We also adhere to international data protection standards relevant to our operations. Our commitment to privacy goes beyond legal compliance — it reflects the core values we uphold in building member trust.

This policy applies to all personal information we collect through the duit8 website, mobile app, live chat, email, or any other communication channel you use to interact with duit8. Any third-party services that may be accessible through our platform have their own separate privacy policies.

Duit8 operates on the principle of data minimisation — we only collect information that is genuinely necessary to deliver the best service to you and to fulfil our legal obligations.

2 Information We Collect

Duit8 collects various types of information depending on how you interact with our platform. This information falls into two main categories: information you provide directly, and information collected automatically while you use the platform.

Information you provide directly:

  • Full name as shown on official identification documents
  • Identity card number (MyKad) or passport for identity verification (KYC) purposes
  • Date of birth to confirm you meet the minimum age requirement
  • Active email address and mobile phone number
  • Bank account details (bank name, account number) for deposit and withdrawal purposes
  • Physical address information if required for further verification purposes
  • Any communications you send to the duit8 support team

Information collected automatically:

  • IP address and approximate location information based on your IP
  • Browser type, operating system and device information
  • Access log records including dates, times, and pages visited
  • Game session data including bets, wins, and transaction records
  • Cookie and similar tracking technology information
  • Duit8 mobile app usage data including performance statistics
Data Category Example Primary Purpose
Identity Name, IC, date of birth KYC verification, legal compliance
Contact Email, phone Communication, 2FA verification
Financial Bank account, transaction records Deposits, withdrawals, financial audits
Technical IP, device, browser Security, fraud detection
Games Wagering records, active sessions Game records, responsible gaming controls

3 How We Use Your Data

Every piece of data we collect has a clear and lawful purpose. duit8 does not use your personal data for any purpose unrelated to the services you request or that is not permitted by law.

The following are the primary purposes for which duit8 uses your personal data:

  • Account Management: Creating, verifying and maintaining your member account including required KYC processes.
  • Transaction Processing: Processing deposits, withdrawals and all financial transactions securely and accurately.
  • Platform Security: Detecting and preventing fraud, money laundering and other suspicious activities.
  • Customer Support: Responding to enquiries, resolving complaints and providing technical support to members.
  • Service Communication: Sending you important notifications about your account, transactions and policy changes.
  • Legal Compliance: Fulfilling reporting obligations to relevant authorities in accordance with applicable laws.
  • Responsible Gaming: Monitoring gaming habits to identify and assist members who may be experiencing gambling problems.
  • Service Improvement: Analysing usage patterns in aggregate (not individually) to improve the duit8 platform.

Duit8 does not use your personal data for third-party marketing purposes. Any promotional communications from duit8 relate to our own services, and you may unsubscribe at any time.

4 Information Sharing

Duit8 does not sell, rent, or trade member personal data to any third party. However, there are specific situations where we need to share your information with other parties in order to deliver the services you request.

Trusted Service Providers: duit8 works with selected third-party service providers for purposes such as payment processing, identity verification, cloud data storage, and security analytics. All such providers are bound by strict data protection agreements and are only permitted to use your data for the specified purposes.

Relevant Authorities: duit8 may be required to disclose certain information to government authorities, regulatory bodies, or law enforcement agencies when required to do so by law or a valid court order.

Corporate Transactions: In the event of any merger, acquisition, or sale of duit8 assets, member personal data may be transferred to the new entity. You will be notified in advance and your privacy rights will continue to be protected throughout the process.

All third parties that receive data from duit8 are bound by legally enforceable confidentiality agreements. They are prohibited from using your data for any purpose other than those specified in those agreements.

5 Data Security

Duit8 implements comprehensive technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction. Our security systems are designed on a defence-in-depth approach that ensures thorough protection at every level.

  • Data Encryption: All sensitive data is encrypted using AES-256 standards at rest and SSL/TLS in transit.
  • Strict Access Control: Access to members' personal data is granted only to staff who require it to perform their duties, and all access is logged and audited.
  • Two-Factor Authentication: duit8's internal systems require two-factor authentication (2FA) for all staff access to sensitive member data.
  • Regular Security Audits: We conduct regular penetration testing and security audits by certified independent third parties.
  • 24/7 Threat Monitoring: Continuous threat monitoring enables us to detect and respond to any suspicious activity in real time.
  • Incident Response Plan: duit8 has clear incident response procedures in place to ensure that any data breach is addressed swiftly and effectively.

In the event of any data breach that may affect your personal information, duit8 will notify you within the timeframe required by law via your registered email. We will also take immediate steps to minimise the impact of any such incident.

6 Cookies and Tracking Technologies

Duit8 uses cookies and similar tracking technologies to enhance your experience on our platform, ensure proper functionality, and understand how members use our services. Cookies are small text files stored on your device when you visit the duit8 platform.

We use several types of cookies:

  • Essential Cookies: Required for core platform functions such as login authentication and session security. These cookies cannot be disabled.
  • Performance Cookies: Collecting information about how you use the platform to help us improve the user experience.
  • Functional Cookies: Allows the platform to remember your preferences such as language, display settings and game choices.
  • Security Cookies: Used to detect suspicious login attempts and protect your account from unauthorised access.

You can manage cookie settings through your web browser preferences. However, disabling certain cookies may affect the functionality of the duit8 platform. For more information on managing cookies, please refer to your web browser's help documentation.

7 Data Storage & Retention

Duit8 retains your personal data only for as long as it is needed for the purposes stated in this Privacy Policy or as required by applicable law. Our data retention periods are designed to balance operational needs, legal requirements, and your privacy rights.

Data Type Retention Period Justification
Active Account Information For the duration of the active account Ongoing service management
Financial Transaction Records 7 years after transaction Financial audit and legal requirements
KYC / Identity Documents 5 years after account closure AML compliance and licensing requirements
Communication Logs 3 years Dispute resolution and support
Session Data & Technical Logs 90 days Fraud detection and security
Marketing Data (with consent) Until consent is withdrawn Permitted promotional communication

Once the retention period has ended, your personal data will be securely deleted or fully anonymised using approved procedures. Anonymised data cannot be re-linked to any individual and may be retained for aggregate analytics purposes.

8 Your Privacy Rights

As a duit8 member, you have certain rights regarding your personal data under Malaysia's Personal Data Protection Act 2010 (PDPA). duit8 is committed to facilitating the exercise of these rights promptly and without unnecessary complications.

Right of Access

You have the right to obtain a copy of the personal data we hold about you at any time.

Right to Rectification

You have the right to correct any inaccurate or outdated personal data we hold.

Right to Erasure

You may request deletion of your personal data, subject to our legal obligations.

Right to Object

You have the right to object to the processing of your personal data for specific purposes, including marketing.

Right to Data Portability

You have the right to receive your personal data in a machine-readable format for transfer.

Right to Restriction

You may request that we restrict the processing of your data while an investigation or dispute is in progress.

To exercise any of the privacy rights above, please contact the duit8 Privacy team by email [email protected]. We will process your request within 30 days from the date we receive your complete submission.

9 Child Protection

Duit8 is an adult entertainment platform intended for individuals aged 18 and above. We do not knowingly collect or process personal data from individuals under the age of 18.

All prospective members are required to verify their age during the registration process. Our rigorous identity verification (KYC) process ensures that only adults are permitted to use the duit8 platform. Should we find that personal data of a minor has been collected inadvertently, we will take immediate action to delete that information and terminate the account in question.

If you believe that a minor has registered for or is using the duit8 platform, please contact us immediately at [email protected]. We will take immediate action to investigate and resolve the matter.

10 Privacy Policy Changes

Duit8 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or platform operations. Any material changes will be communicated to you via in-platform notifications or through your registered email.

The "Updated" date at the top of this page indicates when this Privacy Policy was last reviewed. We encourage you to check this page periodically to stay informed about how we protect your information.

Your continued use of the duit8 platform after any changes to this Privacy Policy take effect will be deemed as your acceptance of those changes. If you disagree with any changes, you have the right to close your account and stop using our services.

For changes that are material and significantly affect your privacy rights, duit8 will provide at least 30 days' notice before those changes take effect, giving you sufficient time to review and make an informed decision.

11 Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or how duit8 handles your personal data, our team is available to assist you at any time.

Privacy Email

[email protected]
Response within 24–48 hours

Live Chat

Available 24 hours a day
7 days a week, including public holidays

The duit8 Privacy Team will acknowledge receipt of your request within 3 business days and endeavour to resolve any issues within 30 days of receipt. For more complex issues, we will keep you informed of investigation progress on a regular basis.

Privacy FAQ

No. duit8 does not share any member personal data with advertising companies or third-party marketing networks. Your data is used exclusively to provide, maintain, and improve duit8 services for you. Any promotional communications you receive from us relate solely to duit8's own offers and services, not third-party advertisements.

To request a copy of your personal data, send an email to [email protected] with the subject "Data Access Request" and include your full name and duit8 account username. We will process your request within 30 days and send a copy of your data in a readable format. Identity verification may be required before data is released to ensure the security of your information.

When you close your duit8 account, we will delete or anonymise your personal data that is no longer needed. However, certain data such as financial transaction records and KYC documents must be retained for a specified period in accordance with Malaysian law — typically between 5 and 7 years — for compliance, audit, and legal purposes. Retained data is stored securely and is not used for any operational purpose.

All communications between your device and the duit8 platform are encrypted using SSL/TLS protocols regardless of the network you are on. This means your data is protected even when using public Wi-Fi. However, we recommend avoiding unsecured public Wi-Fi and enabling two-factor authentication (2FA) for an additional layer of security on your duit8 account.

Yes, you can opt out of receiving promotional emails from duit8 at any time by clicking the "Unsubscribe" link at the bottom of any promotional email, or by updating your communication preferences in your duit8 account settings. Unsubscribe requests will be processed within 5–7 business days. Please note that you will still receive important emails related to account security and transactions even after unsubscribing.
Ready to Get Started?

Join duit8 — The Platform That Protecting Your Privacy

Now you know how seriously duit8 protects your personal data. Register a free account today and enjoy a safe, fair and responsible online entertainment experience alongside millions of duit8 members in Malaysia.

256-bit SSL Protection Your data is not sold Malaysia PDPA Compliance
Bahasa Melayu