Privacy Policy 44duit – Member Personal Data Protection We Prioritise

Introduction

44duit ("we", "Platform") respects the privacy of every individual who uses our services. This Privacy Policy explains how we collect, use, store and protect your personal data as a member or visitor of the 44duit website.

We operate in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and relevant international data protection standards. For us, mere legal compliance is not the primary motivation — we believe that respecting privacy is a fundamental responsibility that must be carried out sincerely toward every 44duit member.

If you have any questions about how we handle your data after reading this document, our team is ready to assist via live chat or the support email listed at the end of this policy.

Data We Collect

44duit collects personal data from various sources to ensure the platform operates securely, smoothly and in a controlled manner:

Data you provide directly:

• Full name, date of birth, and identity card number (MyKad) or passport.
• Email address, mobile number and residential address.
• Bank account or e-wallet details for deposit and withdrawal purposes.
• Identity verification documents (KYC) submitted during the registration or verification process.
• Information you provide when contacting our customer support.

Data collected automatically:

• IP address, web browser type and device information used.
• Gaming session data including date, time, game type and betting results.
• Financial transaction logs including deposits, withdrawals, and bonus activity.
• Website navigation data collected via cookies and similar tracking technologies.
• Communication records with our customer support team.

How We Use Your Data

Every piece of data we collect has a clear and legitimate purpose. We do not collect data that is not required. The following are the primary purposes for which your data is used at 44duit:

• Account management: Creating, verifying, and maintaining your account securely.
• Transaction processing: Processing deposits, withdrawals, and all financial activity within your account.
• Identity Verification (KYC): Verifying that you are who you claim to be, in line with legal compliance requirements.
• Fraud prevention: Identifying and preventing suspicious activity that could compromise account security or platform integrity.
• Customer support: Addressing your inquiries, complaints, and requests for assistance effectively.
• Platform improvements: Analyzing usage patterns to improve the overall user experience.
• Service communications: Sending important account notifications, promotions you have opted in to receive, and policy updates.
• Legal compliance: Meeting reporting obligations to authorities under applicable laws, including AML (Anti-Money Laundering) requirements.
• Responsible gaming: Monitoring gaming patterns to identify signs of problem gambling and provide appropriate assistance.

We do not use your data for any purpose beyond those stated above without obtaining your consent first, unless required by law.

Data Processing Grounds

44duit processes your personal data on the following grounds recognised under data protection law:

• Contract fulfillment: Processing required to provide the services you requested when registering as a 44duit member.
• Legal obligation: Processing required to comply with laws such as KYC, AML, and tax reporting requirements.
• Legitimate interests: Processing required to prevent fraud, ensure platform security, and improve our services.
• Consent: For optional marketing communications such as promotional emails, which you may withdraw at any time in your account settings.

Data Sharing

44duit does not sell, rent, or trade your personal data to any third party for marketing purposes. Your data is shared only in the following situations and with strict protections in place:

• Service providers: Third parties that help us operate the platform — such as payment processors, cloud service providers, and identity verification companies — are all bound by strict data protection agreements.
• Game providers: Game providers on the 44duit platform may receive session data necessary to run games securely.
• Legal authorities: 44duit fully complies with lawful requests from authorities such as the police, courts or financial regulatory bodies when required by law.
• Fraud prevention: Data may be shared with trusted industry partners to detect and prevent fraud involving multiple platforms.

Data Retention Period

44duit retains your personal data for as long as your account is active and for any additional period required by law following account closure. The following is a general overview of retention periods:

• Active account data: For the entire duration your account remains active at 44duit.
• Financial records and transactions: Minimum 7 years after the transaction, in line with Malaysia's financial and tax legal requirements.
• KYC documents: Minimum 5 years after account closure, in accordance with AML legal requirements.
• Support communication logs: 3 years after the last session, for quality control and dispute resolution purposes.
• Non-essential cookie data: As specified in your cookie settings, typically not exceeding 12 months.

When data is no longer needed, 44duit will securely delete it using established data deletion procedures to ensure it cannot be recovered.

Data Security

44duit implements multiple layers of security to protect your personal data from unauthorised access, loss, alteration or disclosure:

• Data encryption in transit: All communications between your device and 44duit servers are protected using 256-bit SSL/TLS encryption.
• Data encryption at rest: Sensitive data such as financial information is encrypted when stored in our databases.
• Two-Factor Authentication (2FA): Additional protection for account access and high-value financial transactions.
• 24/7 monitoring: Our AI system continuously monitors account activity to detect suspicious behaviour.
• Internal access controls: 44duit staff can only access data they need to perform specific duties — the principle of least privilege is strictly enforced.
• Regular security audits: Penetration testing and independent security audits are conducted periodically by certified third parties.

While 44duit takes all reasonable measures to protect your data, no system is 100% secure. If you suspect your account has been compromised, please contact our support team immediately so that protective action can be taken.

Your Rights as a User

Under Malaysia's PDPA and the data protection principles we follow, you have the following rights regarding your personal data:

To exercise any of the above rights, contact our privacy team via live chat or email. We will process your request within 30 business days. In complex cases, this period may be extended to up to 60 days with prior notice to you.

Cookies and Tracking Technologies

The 44duit website and app use cookies and similar tracking technologies to enhance your experience and keep your login session secure. Here are the types of cookies we use:

• Essential cookies: Required for core platform functionality such as maintaining login sessions and security. These cookies cannot be disabled.
• Functionality cookies: Saving your preferences such as language and display settings for a smoother return experience.
• Analytics cookies: Collecting aggregated data on how users interact with the platform for improvement purposes. Does not contain personally identifiable information.
• Security cookies: Helping identify suspicious login attempts and protecting your account from unauthorized access.

You can manage cookie settings through your web browser. Disabling essential cookies may affect core platform functionality. For more information on managing cookies in your browser, refer to your browser's help documentation.

Cross-Border Data Transfers

As a digital platform, 44duit operates server infrastructure that may be located outside Malaysia. Any transfer of your personal data outside Malaysia is carried out with adequate safeguards in place, including:

• Data transfer agreements compliant with international data protection standards.
• Use of certified cloud service providers compliant with ISO 27001 standards.
• Periodic assessment of recipient countries or regions to ensure equivalent levels of data protection.

44duit does not transfer data to countries that lack adequate privacy protections without appropriate contractual safeguards in place.

Privacy Policy Amendments

44duit reserves the right to modify this Privacy Policy from time to time in line with changes in law, technology or business operations. Any amendments will be communicated via:

• In-app or on-site notification when you log in after amendments have been made.
• Email to the address registered on your account for significant changes.
• Updates the "Last Updated" date shown at the top of this page.

Continued use of the 44duit platform after the effective date of any amendment constitutes your acceptance of the updated Privacy Policy. We encourage you to review this page periodically.

Contact Us

If you have any questions, concerns, or requests regarding your privacy and personal data protection at 44duit, we encourage you to reach out to us through the following channels:

• Live Chat: Available 24/7 directly within the 44duit app or website.
• Privacy Email: [email protected] — for specific enquiries related to personal data.
• General Support Email: [email protected] — for all general enquiries.

We are committed to responding to every privacy-related inquiry within 5 business days. For more complex requests such as data exports or account deletion, processing may take up to 30 business days, and you will be kept informed of your request's progress.

For information about your rights and other related policies, please visit Terms and Conditions and Responsible Gaming Policy us.