Privacy Policy — 447duit

447duit ("the Company", "we", "us", "our") operates the online gaming platform accessible at https://447duit.cam ("Platform"), offering casino games, sports betting, live dealer services, and related entertainment features primarily to players in Malaysia, including users in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and other regions.

In the course of providing our services, 447duit necessarily collects and processes certain personal data relating to our users. We take the privacy and security of that data seriously. This Privacy Policy explains what data we collect, why we collect it, how we use it, who we may share it with, and what rights you have in relation to your information.

This Policy applies to all personal data collected through the 447duit Platform, including data provided during account registration, KYC verification, financial transactions, customer support interactions, and general use of our website and services.

The following terms carry the meanings set out below throughout this Privacy Policy:

447duit collects personal data in two principal ways: information you provide directly when interacting with the Platform, and information collected automatically as a result of your use of our services.

3.1 — Information You Provide Directly

• Registration Data: Your full legal name, date of birth, username, email address, contact number, and residential address as provided during account creation.
• KYC Documentation: Government-issued photo identification (e.g., Malaysian MyKad, Passport), proof of address, and payment method ownership documentation submitted to satisfy our identity verification obligations.
• Financial Data: Payment method identifiers, partial payment card numbers, e-wallet account references (e.g., Touch 'n Go eWallet, Boost eWallet, GrabPay), bank account details for FPX or DuitNow transactions, and deposit and withdrawal transaction records.
• Support Communications: Records of interactions with our customer support team, including chat transcripts, email correspondence, and feedback submitted through the Platform.
• Responsible Gaming Preferences: Self-exclusion requests, deposit limit settings, session time preferences, and cooling-off period activations.

3.2 — Information Collected Automatically

• Device and Technical Data: IP address, device type, operating system, browser type and version, screen resolution, and device identifiers.
• Usage Data: Pages visited, games played, betting activity, session duration, navigation paths, and feature interactions within the Platform.
• Geolocation Data: Approximate geographic location derived from IP address, used to verify access eligibility and apply jurisdiction-specific restrictions.
• Cookie Data: Information captured through cookies and similar tracking technologies as described in Section 8 of this Policy.

447duit processes your personal data for the following purposes:

We do not process your personal data for purposes other than those listed above without either obtaining your prior consent or establishing a clear and lawful basis for doing so. We do not sell, rent, or trade your personal data to third parties for their own commercial purposes.

447duit relies on the following legal bases to process your personal data:

• Contract Performance: Processing that is necessary to register your account, manage your player relationship, process financial transactions, and deliver the gaming services you have subscribed to through account registration.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including KYC and anti-money laundering obligations, responsible gaming mandates, age verification requirements, and data retention rules imposed by regulatory authorities.
• Legitimate Interests: Processing conducted to pursue the legitimate operational interests of 447duit, including fraud detection and prevention, Platform security, analytics, and improvement of our services — provided that such interests are not overridden by your data protection rights.
• Consent: Where we rely on your consent as the basis for processing — for example, for direct marketing communications or the use of non-essential cookies — you retain the right to withdraw that consent at any time without affecting the lawfulness of prior processing.

447duit does not sell, rent, or otherwise transfer your personal data to third parties for marketing or commercial purposes. We may disclose your personal data to the following categories of recipients, strictly as necessary to operate the Platform and fulfil our legal obligations:

• Payment Processors: Licensed payment service providers who facilitate deposits and withdrawals, including providers supporting DuitNow, FPX, Touch 'n Go eWallet, Boost eWallet, GrabPay, and USDT TRC20 transactions. These providers receive only the data necessary to process the relevant transaction.
• KYC and Identity Verification Partners: Regulated third-party verification service providers engaged to conduct identity checks, age verification, and document authentication as required by our compliance obligations.
• Game and Technology Providers: Licensed software vendors who supply casino games, sportsbook infrastructure, and live dealer platforms accessible through 447duit. These providers may receive anonymised or pseudonymised gaming activity data.
• Cloud and Hosting Infrastructure Providers: Data hosting and processing infrastructure vendors engaged to store and manage Platform data securely. All such vendors are subject to contractual data protection obligations.
• Regulatory Authorities and Law Enforcement: Where required by applicable law, court order, or regulatory directive, 447duit may disclose personal data to governmental bodies, law enforcement agencies, or our licensing authority without prior notice to the affected user.
• Anti-Fraud and AML Networks: Industry-standard fraud prevention and anti-money laundering databases to which 447duit may contribute or query in connection with suspicious account or transaction activity.

447duit retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or for as long as is required by applicable law, regulation, or legitimate operational need. The following retention principles apply:

• Active Account Data: Personal data associated with an active player account will be retained for the lifetime of that account and for a minimum period of five (5) years following account closure, to satisfy anti-money laundering record-keeping obligations.
• Financial Transaction Records: Deposit, withdrawal, and wagering records are retained for a minimum of seven (7) years following each transaction date, in compliance with applicable financial reporting requirements.
• KYC Documentation: Identity and verification documents are retained for a minimum of five (5) years following the conclusion of the business relationship, or for such longer period as required by regulatory authority.
• Support Correspondence: Customer support interaction records are retained for three (3) years following the date of the relevant interaction.
• Marketing Data: Where you have consented to receive marketing communications, your contact preferences and related data will be retained until you withdraw consent or request removal, after which time they will be promptly deleted.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised such that it can no longer be linked to an identifiable individual.

The 447duit Platform uses cookies and similar tracking technologies to provide a functional, personalised, and secure user experience. By continuing to use the Platform following your initial visit, you consent to our use of cookies as described in this section.

We use the following categories of cookies:

• Strictly Necessary Cookies: Required for the Platform to function. These include session management cookies, authentication tokens, and security cookies. These cannot be disabled without severely impairing Platform functionality.
• Performance and Analytics Cookies: Used to collect aggregated, anonymised data about how users interact with the Platform — including pages visited, session duration, and feature usage — to allow us to improve Platform performance and user experience.
• Functional Cookies: Used to remember your preferences and personalise your experience, such as language settings, preferred games, and remembered login status.
• Security and Fraud Prevention Cookies: Used to detect and prevent fraudulent account activity, identify unusual login patterns, and support our responsible gaming obligations.

Most web browsers provide controls to manage or disable cookies. You may configure your browser settings to refuse non-essential cookies at any time. However, disabling strictly necessary cookies will impair your ability to use core Platform features including account login and game access.

447duit implements technical and organisational security measures proportionate to the risk posed by the processing of personal data. These measures are designed to protect against unauthorised access, accidental loss, destruction, or disclosure of personal data.

Our security infrastructure includes, without limitation:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the Platform.
• Encryption of personal data and payment information at rest within our database systems.
• Two-factor authentication (2FA) available to all users for account login security.
• Regular penetration testing and vulnerability assessments conducted by independent security specialists.
• Role-based access controls limiting internal staff access to personal data on a strict need-to-know basis.
• Incident response procedures designed to detect, contain, and notify affected users of any confirmed personal data breach within applicable regulatory timeframes.

While 447duit takes all reasonable precautions to safeguard your personal data, no method of electronic transmission or storage is completely secure. Users are encouraged to maintain strong, unique passwords for their accounts and to enable two-factor authentication to reduce the risk of unauthorised access.

Subject to applicable data protection law and the legitimate interests of 447duit and third parties, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact the 447duit data team using the contact details in Section 15.

447duit will respond to verified data rights requests within thirty (30) calendar days of receipt. Where a request is complex or involves a high volume of data, we may extend this period by an additional sixty (60) days with prior notice. We reserve the right to request proof of identity before processing any data rights request.

The 447duit Platform is strictly intended for use by individuals aged 21 years and above. We do not knowingly collect, process, or retain personal data from individuals under the age of 21. Age verification is a mandatory component of our KYC process, and account creation requires confirmation that the registering user meets this age requirement.

If we discover or are notified that personal data has been collected from an individual under the age of 21 — whether through misrepresentation or system failure — we will immediately suspend the associated account, initiate an investigation, delete the data of the underage individual to the extent permissible under applicable law, and take any further remedial action required.

The 447duit Platform may contain references to or integrations with third-party services, including payment gateways, game content providers, and identity verification platforms. While we take reasonable steps to engage reputable and compliant third parties, 447duit is not responsible for the privacy practices of external services.

When you interact with a third-party service in connection with the 447duit Platform — for example, authorising a DuitNow or GrabPay transaction through a third-party payment interface — the privacy policy of that third party governs how your data is handled within their systems. We encourage you to review the privacy policies of any third-party service you access.

In certain circumstances, the processing of your personal data may involve the transfer of that data to, or storage in, jurisdictions outside of Malaysia. This may occur where 447duit engages cloud hosting providers, game software vendors, or other technology partners whose infrastructure is located internationally.

Where personal data is transferred internationally, 447duit takes steps to ensure that an adequate level of protection is maintained, including through the use of contractual data protection clauses, vendor compliance assessments, and selection of partners located in jurisdictions with data protection standards comparable to or exceeding those applicable in Malaysia.

447duit reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, applicable law, or Platform functionality. The "Last Updated" date at the top of this page reflects the date of the most recent revision.

Where changes to this Policy are material — meaning they significantly alter your rights or our obligations — we will notify registered users via a platform notification or email to the address associated with your account prior to the changes taking effect. Your continued use of the Platform following such notification constitutes your acceptance of the revised Policy.

We encourage you to review this Privacy Policy periodically to remain informed of how 447duit handles your personal data.

If you have any questions, concerns, or requests in relation to this Privacy Policy or the processing of your personal data by 447duit, please contact our data team through any of the following channels:

When submitting a data rights request, please include your registered account username and a clear description of your request to allow our team to respond efficiently within the applicable timeframe.