At Duit88, your privacy is taken seriously. This policy explains in plain terms what personal information we collect from Malaysian players, why we collect it, how we use it, and the rights you have over your own data.
Duit88 ("we", "us", "our", "the Operator", "the Platform") operates the online sports betting and live casino services accessible at duit88.cam and any associated subdomains or mobile-optimised interfaces. We are committed to protecting the personal data of all users ("you", "your", "the Player") who access or register on our platform.
This Privacy Policy describes the categories of personal data we collect, the purposes for which that data is processed, the circumstances under which it may be shared with third parties, the security measures we apply to protect it, and the rights available to you as a data subject. This policy applies to all players accessing Duit88 from Malaysia and all other jurisdictions where our services are lawfully accessible.
By accessing the Duit88 platform, completing the registration process, or continuing to use our services after this policy has been updated, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein. If you do not agree with any part of this policy, please discontinue use of the platform immediately.
For the purposes of this Privacy Policy, the following terms have the meanings stated below:
| Term | Definition |
|---|---|
| Personal Data | Any information that relates to an identified or identifiable natural person, including name, identification number, contact details, financial account information, IP address, and behavioural data associated with a registered account. |
| Data Subject | The natural person to whom personal data relates — in this context, any individual who registers or uses a Duit88 account. |
| Data Controller | The entity that determines the purposes and means of processing personal data. Duit88 acts as the data controller for all player data collected on the platform. |
| Data Processor | A third party that processes personal data on behalf of Duit88 under a contractual data processing agreement — such as payment processors, KYC verification providers, and cloud infrastructure providers. |
| Processing | Any operation performed on personal data, including collection, storage, structuring, retrieval, use, disclosure, and deletion. |
| KYC Data | Identity verification documents submitted by the player, including Malaysian National Identity Card (MyKad), Passport, Driver's Licence, proof of address documents, and selfie images. |
| Cookies | Small text files placed on a user's device by the platform to enable session management, analytics, and personalisation functionality. |
Duit88 collects personal data through multiple channels: directly from you during registration and account use, automatically through your interaction with the platform, and from trusted third-party identity verification and payment services. The categories of data we collect are as follows:
Duit88 processes personal data for the following specific purposes, each of which is tied to a defined legal basis as detailed in Section 05:
| Purpose | Data Categories Used | Legal Basis |
|---|---|---|
| Account creation and management | Registration data, contact details | Contract performance |
| Identity verification (KYC) | KYC documents, date of birth | Legal obligation |
| Payment processing and fraud prevention | Financial data, IP address, device data | Contract performance & legal obligation |
| Anti-money laundering (AML) compliance | Transaction history, source of funds | Legal obligation |
| Responsible gambling monitoring | Wagering behaviour, self-exclusion data | Legal obligation & legitimate interest |
| Customer support and dispute resolution | Account data, support interaction logs | Contract performance |
| Platform security and abuse prevention | Technical data, behavioural patterns | Legitimate interest |
| Service personalisation and improvement | Behavioural data, preferences | Legitimate interest |
| Marketing communications (opt-in only) | Email, mobile number, preferences | Consent |
Duit88 relies on the following legal bases when processing your personal data:
Duit88 does not sell, rent, or trade your personal data to third parties for commercial marketing purposes. We share personal data only in the limited circumstances described below, and only to the extent strictly necessary for the stated purpose:
We share data with trusted third-party processors who assist us in operating the platform, including: payment processing companies (including processors handling Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and cryptocurrency transactions in Malaysia); KYC and AML identity verification service providers; fraud detection and cybersecurity firms; cloud hosting and data infrastructure providers; and customer support platform providers. All such processors are bound by contractual data protection obligations consistent with this policy.
Anonymised and aggregated gameplay data may be shared with our licensed international game studio partners for the purpose of technical integration, RTP auditing, and game performance monitoring. This data does not identify you as an individual and cannot be used to contact you.
Duit88 may disclose personal data where required by applicable law, court order, regulatory direction, or formal request from a law enforcement authority — including but not limited to anti-money laundering reporting obligations or investigations into suspected fraud or criminal activity. We will seek to notify you of such disclosure requests where we are legally permitted to do so.
In the event of a merger, acquisition, restructuring, or sale of assets involving Duit88, player personal data may be transferred to the successor entity, subject to the same or equivalent privacy protections as described in this policy. Registered players will be notified of any such transfer via the email address associated with their account.
Duit88 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or compliance obligations. The following general retention periods apply:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account & registration data | Duration of account + 5 years post-closure | AML regulatory requirement |
| KYC identity documents | Duration of account + 5 years post-closure | Legal obligation |
| Transaction & financial records | 7 years from transaction date | Financial regulatory obligation |
| Customer support communications | 3 years from last interaction | Dispute resolution |
| Behavioural & session data | 2 years from collection | Legitimate interest |
| Marketing consent records | Until consent is withdrawn + 2 years | Compliance with consent obligations |
| Self-exclusion records | Duration of exclusion + 5 years | Responsible gambling obligations |
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification.
Duit88 uses cookies and similar tracking technologies to operate and improve the platform. Cookies are small text files stored on your device when you visit duit88.cam. We use the following categories of cookies:
You may manage your cookie preferences through your browser settings. Disabling all cookies may impair your ability to log in to your Duit88 account or use certain platform features. Duit88 does not use third-party advertising cookies or behavioural retargeting pixels from external advertising networks on its platform.
Duit88 implements a multi-layered security framework to protect personal data from unauthorised access, alteration, disclosure, or destruction. Our security measures include, but are not limited to:
As a registered player and data subject, you have the following rights with respect to your personal data held by Duit88. To exercise any of these rights, please submit a written request to [email protected] with the subject line "Data Subject Request — [Your Username]".
We will acknowledge all data subject requests within 3 business days and endeavour to fulfil or formally respond to them within 30 calendar days. Complex or multiple requests may take up to 90 days, in which case we will notify you of the extended timeline.
Duit88 maintains an absolute minimum age requirement of 21 years for all account registrations and gambling activities on the platform. We do not knowingly collect personal data from any individual under the age of 21.
As part of our KYC process, we verify the date of birth of all registered players. Where we have reasonable grounds to believe that personal data belonging to an individual under 21 has been submitted — whether through a false registration or otherwise — we will immediately suspend the account, void all associated activity, and delete the personal data as soon as our legal retention obligations permit.
If you believe that a minor has registered on the Duit88 platform using false age information, please contact our support team immediately at [email protected].
As an internationally operated platform, Duit88 may transfer personal data to countries outside Malaysia for processing by our regulated service partners — including cloud infrastructure providers, KYC verification platforms, and payment processors. These transfers are made to countries that provide an adequate level of data protection, or are governed by appropriate contractual safeguards such as standard data protection clauses.
By registering on the Duit88 platform, you acknowledge and consent to the transfer of your personal data to jurisdictions outside Malaysia as necessary for the operation of our services, subject always to the protections described in this Privacy Policy.
Duit88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable legal requirements, or operational procedures. When material changes are made, we will notify registered players by displaying a prominent notice on the platform login page, or by sending a notification to the email address associated with your account, at least 14 days before the changes take effect.
Your continued use of the Duit88 platform following the effective date of any amended Privacy Policy constitutes your acceptance of the revised terms. We recommend reviewing this page periodically. The "Last Updated" date at the top of this page reflects the date of the most recent revision.
For all privacy-related enquiries, data subject access requests, or concerns about how your personal data is handled, please contact the Duit88 data team through the following channels:
We acknowledge all privacy-related requests within 3 business days. Formal data subject access requests will be processed and responded to within 30 calendar days, extendable to 90 days for complex requests. There is no fee for standard data access requests.
Beyond legal language, here is what Duit88's privacy commitment means for you as a Malaysian player in concrete, practical terms.
Your personal information — name, IC number, contact details, payment account — is never sold to third-party advertisers or data brokers. Duit88 does not monetise player data outside of operating your account and complying with regulatory obligations.
All KYC documents, payment details, and account credentials stored on Duit88 infrastructure are encrypted at rest using AES-256 encryption — the same standard used by major international banks and government data systems.
You can request a copy of all data we hold on you, ask for corrections, request deletion (subject to legal retention obligations), or withdraw marketing consent at any time. All requests acknowledged within 3 business days.
We collect only the data we genuinely need — to operate your account, verify your identity, process your payments, and comply with AML regulations. No unnecessary profiling, no speculative data harvesting for future monetisation.
Duit88 will only send promotional emails, bonus notifications, or marketing communications if you have explicitly consented. You can withdraw that consent at any time and will never receive unsolicited commercial messages from us.
Identity documents submitted during KYC are handled exclusively through the official Duit88 platform portal — never via WhatsApp, Telegram, or unsecured channels. All KYC data is stored encrypted and accessed only by authorised compliance staff.
Confident that your data is in safe hands? Return to the platform and enjoy a secure, trusted betting experience built for Malaysian players.
For players aged 21 and above only. Duit88 is committed to responsible gambling and the protection of player data.