Official Document

Privacy Policy duit8

Your privacy is duit8's top priority. We are committed to protecting every piece of personal information you share with us through industry-grade encryption, strict access controls, and a fully transparent data handling policy.

Updated: 1 January 2026 Effective: Malaysia 256-bit SSL Protected

How duit8 Protects Your Data

We use the latest technology and procedures to keep your information secure at all times.

256-bit SSL Encryption

All data transmitted between your device and duit8 servers is protected by 256-bit SSL encryption. This means every transaction, login, and data exchange is fully secured against unauthorised access.

Strict Access Control

Only duly authorised duit8 staff may access user personal data, and only for permitted operational purposes. All access is logged and periodically audited to ensure there is no misuse.

Secure Data Storage

User data is stored on servers protected by multi-layered firewalls and encrypted at rest. Data backups are performed regularly with full encryption to prevent data loss.

No Data Selling

Duit8 does not sell, rent, or transfer your personal data to third parties for marketing purposes. Your data is only used for the purposes to which you have explicitly consented.

Malaysia PDPA Compliance

The duit8 privacy policy is designed to comply with Malaysia's Personal Data Protection Act 2010 (PDPA). We respect your right to access, correct, and delete your personal data.

Full Communication Control

You have full control over marketing communications from duit8. You may unsubscribe from promotional notifications at any time through your account settings, without any hassle.

By registering or using the duit8 platform, you confirm that you have read and understood this Privacy Policy. Please read the entire document carefully before using our services.

1

Privacy Policy Introduction & Scope

Duit8 ("we", "our platform" or "duit8.bio") values the privacy of every user on our online gaming platform. This Privacy Policy explains in detail how we collect, use, store, protect and share your personal information when you register an account, access duit8.bio, or use any of the services we provide.

This document forms part of the overall agreement between you and duit8, together with Terms and Conditions and Responsible Gaming Policy us. This Privacy Policy applies to all Malaysian users and is designed to comply with the Personal Data Protection Act 2010 (PDPA) of Malaysia.

We respect your rights as a user and are committed to providing full transparency on how your information is handled. If you have any questions about this policy, you may contact our privacy team via the email address provided at the end of this document.

2

Personal Data We Collect

Duit8 collects personal data from you in various ways as you interact with our platform. The following are the categories of data we collect and the purposes for which they are used:

Data Category Example Information Collection Method
Identity Full name, identity card number, date of birth Registration form, KYC
Contact Phone number, email address Account Registration
Financial Bank account number, digital wallet information Deposit & withdrawal process
Technical IP address, device type, web browser Automatically during use
Usage Game history, transaction records, wagering habits Automatically during session
Communications Support chat records, feedback Support interactions

We only collect data that is strictly necessary to deliver high-quality services to you. Irrelevant or excessive data will not be collected without clear justification and your consent.

3

How We Use Your Data

The personal data we collect is used for specific and legitimate purposes. duit8 uses your information for the following:

  • Identity verification (KYC): To verify that you meet the minimum age requirement of 18 and to prevent identity fraud.
  • Transaction processing: To accurately and securely process deposits, withdrawals, and all financial transactions in your account.
  • Service delivery: To allow you to access all games, promotions, and duit8 platform features you are entitled to enjoy.
  • Security & fraud prevention: To detect and prevent fraudulent activity, money laundering, and platform abuse.
  • Customer support: To enable our team to assist you more effectively whenever you contact duit8 support.
  • Personalise your experience: To personalise game recommendations, promotions, and content based on your preferences and usage habits.
  • Marketing communications: To send you information about promotions, bonuses, and special offers — only if you have given your consent.
  • Legal compliance: To fulfil the legal and regulatory obligations applicable to duit8's operations.

Duit8 will not use your data for any purpose not stated here without first obtaining fresh consent from you.

4

Data Sharing & Disclosure

Duit8 does not sell, rent, or transfer your personal data to third parties for their own marketing purposes. However, there are situations where we need to share your data with certain parties for legitimate operational purposes:

  • Payment providers: Transaction information is shared with DuitNow, TNG eWallet, Boost, GrabPay and FPX solely for the purpose of processing your payments.
  • Technology providers: Technical partners who help us operate the platform, servers, and infrastructure — subject to strict confidentiality agreements.
  • Anti-fraud bodies: For fraud prevention and anti-money laundering purposes, we may share information with relevant industry bodies.
  • Legal authorities: If required by a court order, Malaysian law or a regulatory authority, we are obligated to disclose the necessary information.

All of duit8's third-party partners are bound by data protection agreements that require them to safeguard your information to the same or higher standard that we uphold.

5

Data Security & Protection Measures

Duit8 continually invests in the latest security technologies and procedures to protect your personal data. The security measures we implement include:

  • 256-bit SSL encryption for all data transmitted between your device and duit8 servers.
  • At-rest encryption for all data stored in our databases.
  • Role-based access control ensuring only authorised personnel can access sensitive data.
  • 24/7 security monitoring with an automated intrusion detection system.
  • Regular security audits by independent third parties to identify and address vulnerabilities.
  • Mandatory data protection training for all duit8 staff who handle user data.
  • Clear incident response procedures in the event of any data breach.

While no security system is entirely foolproof, duit8 is committed to using industry-leading technology and best practices to protect your data. Should a data breach occur that affects you, we will notify you within 72 hours of detecting it.

6

Cookies, Tracking & Similar Technologies

Duit8 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website. The following are the types of cookies we use:

  • Essential cookies: Required for core platform functions such as login session verification and account security. Cannot be disabled.
  • Performance cookies: Helps us understand how users interact with the platform for continuous improvement.
  • Functional cookies: Stores your preferences such as language, display settings and game preferences for a better experience.
  • Marketing cookies: Used to display relevant promotions to you — activated only with your consent.

You may manage your cookie settings through your web browser at any time. Please note, however, that disabling essential cookies may affect the functionality of the duit8 platform.

7

Your Rights as a User

Under Malaysia's PDPA and duit8's commitment to user privacy, you have the following rights regarding your personal data:

Right to Access

You have the right to request a copy of the personal data we hold about you at any time.

Right to Rectification

You may request the correction of any inaccurate or incomplete data in your account.

Right to Erasure

You may request the deletion of your personal data, subject to applicable legal retention requirements.

Right to Object

You may object to the processing of your data for specific purposes, including direct marketing.

Right to Data Portability

You may request your data in a machine-readable format for transfer to another service provider.

Right to Restrict Processing

You may request that we restrict the processing of your data in certain situations as defined by law.

To exercise any of the above rights, please contact the duit8 privacy team via email at [email protected]. We will process your request within 14 business days.

8

Data Retention Period

Duit8 retains your personal data only for as long as necessary for the original purpose of collection, or as required by Malaysian law. The following are our data retention guidelines:

  • Active account data: Retained for the duration of your active account plus 7 years after closure for financial and legal compliance.
  • Transaction records: Retained for a minimum of 7 years to comply with anti-money laundering legal requirements.
  • KYC records: Retained for the duration of the active account period and 5 years after account closure.
  • Security logs: Retained for 2 years for security investigation and fraud prevention purposes.
  • Analytics cookies: Session data is retained for a maximum of 13 months.

Upon expiry of the retention period, your data will be securely deleted or anonymised in accordance with duit8's established procedures.

9

Cross-Border Data Transfer

In the course of platform operations, your data may be processed or stored on servers located outside Malaysia. Nonetheless, duit8 ensures that any cross-border data transfer is carried out with adequate safeguards, including:

  • Use of recognised standard contractual clauses for data protection.
  • Ensuring the recipient country has an adequate level of data protection.
  • Data protection impact assessment for high-risk transfers.

Your data will not be transferred to jurisdictions that do not provide a level of privacy protection equivalent to Malaysia's PDPA.

10

Children's Privacy

The duit8 platform is strictly for users aged 18 years and above. We do not knowingly collect personal data from minors. Should we discover that we have collected data from a minor without valid parental or guardian consent, we will take immediate steps to delete that data and close the account in question.

If you discover that your child has registered an account on duit8, please contact us immediately at [email protected] so that we may take the appropriate action.

11

Privacy Policy Amendment

Duit8 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in data practices, applicable laws, or our platform operations. Any material changes will be communicated to you via:

  • Email notification to your registered address at least 14 days before the changes take effect.
  • A clear notice on the duit8.bio homepage.
  • A pop-up or information banner upon login to your account.

Continued use of the duit8 platform after a change notice is considered your acceptance of the updated privacy policy. The "Last Updated" date at the top of this document will be revised each time an amendment is made.

12

Contact Us About Privacy

If you have any questions, concerns or complaints regarding this Privacy Policy or how duit8 handles your personal data, please contact our Data Protection Officer:

  • Email: [email protected]
  • Email subject: "Privacy Inquiry — [Your Username]"
  • Response time: Within 3 business days

You also have the right to lodge a complaint with the Department of Personal Data Protection Malaysia if you believe your privacy rights have been violated and we have failed to address them satisfactorily.

Duit8 Privacy FAQ

No. duit8 has never and will never sell, rent, or transfer your personal data to third parties for their marketing purposes. Your data is only shared with a limited set of operational partners — such as payment providers and technical service providers — and solely to keep the platform functioning properly. All such partners are bound by strict confidentiality agreements.

You may submit a data deletion request by emailing [email protected] with the subject line "Data Deletion Request". Our privacy team will process your request within 14 business days. Please note that certain data may need to be retained for a specific period to fulfil legal obligations, such as anti-money laundering requirements.

duit8 employs 256-bit SSL encryption for all data in transit, at-rest encryption within our databases, multi-layered firewalls, intrusion detection systems, and role-based access controls. Our platform also undergoes regular security audits by independent third parties to ensure the latest protections are always in place.

Yes, you can unsubscribe from duit8 marketing emails at any time. Click the "Unsubscribe" link at the bottom of any promotional email, or update your communication preferences in your account settings. Unsubscribe requests will be processed within 5 business days. Note: Important transactional emails related to your account cannot be disabled as they are part of your account security.

When you close your duit8 account, your personal data will not be deleted immediately. We are legally required to retain transaction and KYC records for a minimum of 5–7 years after account closure to comply with anti-money laundering laws in Malaysia. After the mandatory retention period, your data will be securely deleted or anonymised.

Yes, the duit8 mobile app applies the same security standards as our web platform. All data transmitted through the app is protected with 256-bit SSL encryption. In addition, our app supports two-factor authentication (2FA) and biometric authentication for an extra layer of security to protect your account from unauthorised access.

This Privacy Policy was last updated on 1 January 2026. Please revisit this page from time to time to stay informed about how we protect your data.

Your Data Is Protected — Play With Peace of Mind at duit8

With a transparent privacy policy and industry-standard security technology, you can enjoy a safe, fair, and enjoyable online gaming experience alongside more than 500,000 Malaysian members who trust duit8.

Data protected by 256-bit SSL encryption Compliant with Malaysia's PDPA No sale of data to third parties
Bahasa Melayu