PRIVACY POLICY

Duit laju Privacy Policy – Personal Data Protection for Malaysian Members

At duit laju, your privacy is more than a legal obligation — it is a core value we uphold. This document explains in detail how we collect, use, store, and protect your personal information every time you use our platform.

Updated: January 2026
256-bit SSL Protected
Bahasa Malaysia

Duit laju's Commitment to Protecting Your Privacy

Six core pillars that shape our approach to protecting members' personal data

High-Level Encryption

All data transmitted between your device and our servers duit laju protected with 256-bit SSL encryption. This means your login credentials, transaction details, and personal data cannot be intercepted by any third party during transmission.

Secure Data Storage

Your personal data is stored on servers protected by multi-layered firewalls, strict access controls, and continuous 24-hour monitoring. Internal access to user data is restricted and requires specific authorisation.

Not Sold to Third Parties

Your personal data will never be sold, rented, or shared with third-party advertisers or marketing companies. Any data sharing that occurs is strictly limited to operational needs of the platform and requires equivalent protection standards.

Full Control in Your Hands

You have the right to access, correct, or request deletion of your personal data at any time via your account settings or by contacting our support team. Your request will be processed within 14 business days.

International Standards Compliance

duit laju complies with internationally recognised data protection standards. Our policy is reviewed regularly to keep it aligned with the latest developments in digital data protection law.

Data Breach Notification

Should any security incident involving your data occur, duit laju is committed to notifying you within 72 hours of an incident being detected, along with the steps taken to address it.

This Privacy Policy applies to all users who access the website, mobile app, and all services provided by duit laju. By using our platform, you agree to the data collection and usage practices described here.
1 Information We Collect

To deliver the best possible service and ensure platform security, duit laju collects several categories of information from users. This collection is carried out directly through registration and platform use, as well as automatically through industry-standard tracking technologies.

Information you provide directly:

  • Full name as shown on a valid identification document.
  • Date of birth for age verification purposes.
  • Active email address used for account communications.
  • Mobile number for two-factor authentication (2FA) and notifications.
  • Payment information including registered bank account or e-wallet details.
  • Copy of identification document (MyKad) or passport for the KYC process.
  • Proof of current address such as a utility bill or recent bank statement.

Information collected automatically:

  • IP address and approximate geographic location based on IP.
  • Device type, operating system, and web browser version in use.
  • Session data including pages visited, time spent, and click patterns.
  • Transaction logs including deposit history, withdrawals, and gaming activity.
  • Cookie data and device identifiers for security and user experience purposes.
We never store credit card numbers or passwords in plain text. All sensitive information is encrypted before being stored in our systems.
2 How We Use Your Data

Every piece of information we collect has a clear and legitimate purpose. duit laju does not use your data for any purpose not stated in this policy. Below is a summary table of our data usage:

Purpose of Use Data Type Legal Basis
Account management & identity verification Name, email, ID, date of birth Contractual compliance
Deposit & withdrawal processing Payment details, transaction history Contractual compliance
Fraud prevention & security IP, activity logs, device data Legitimate interest
KYC & anti-money laundering compliance Identity documents, proof of address Legal obligation
Customer support & complaint resolution Communication history, account logs Contractual compliance
Platform experience improvement Session data, usage patterns Legitimate interest
Marketing communications (with consent) Email, phone number User consent

For marketing communications, you may withdraw your consent at any time via the unsubscribe link in any email you receive or through the communication preferences in your account settings.

3 Information Protection Measures

duit laju invests seriously in security infrastructure to ensure your personal data is always protected from unauthorised access, loss, or misuse.

The technical security measures we employ include:

  • 256-bit SSL/TLS Encryption for all data transmitted between your browser and our servers.
  • Data encryption at rest for all sensitive information stored in our databases.
  • Two-factor authentication (2FA) available and encouraged for all member accounts.
  • Continuous threat monitoring via an intrusion detection system running 24/7.
  • Regular penetration testing by an independent security team to identify and close any vulnerabilities.
  • Role-based access control which ensures that only authorised personnel can access specific user data.
While no system is 100% breach-proof, duit laju continuously updates our security protocols in line with industry best practices to minimise risk as much as possible.
4 Data Sharing and Disclosure

duit laju does not sell or rent your personal data to any party. However, in certain limited situations, we may share your information with the following parties:

  • Payment service providers: to process your deposits and withdrawals securely. They receive only the minimum information required and are bound by strict data protection agreements.
  • Technical service providers: including server hosting, platform analytics, and anti-fraud support that help us operate the platform safely and efficiently.
  • Regulatory bodies and legal authorities: when we are required to do so by law, court order, or direction from a legitimate enforcement agency.
  • Business acquirers: in the event that duit laju involved in a merger, acquisition, or asset transfer, user data may be transferred as part of that transaction. You will be notified in advance should this occur.
All third parties who receive your data are bound by data protection agreements that require them to safeguard your information to a standard equal to or higher than our own.
5 Cookies and Tracking Technologies

Website duit laju uses cookies and similar tracking technologies to enhance user experience, analyse platform performance, and maintain the security of your session. The following are the types of cookies we use:

  • Essential Cookies: Required for basic website operations such as login session management and security. These cookies cannot be disabled without affecting platform functionality.
  • Performance Cookies: Collects information on how visitors use our website, such as the most frequently visited pages. This data is used in aggregate form without personal identification.
  • Functional Cookies: Saves your preferences such as language, currency, and display settings to deliver a more personalised experience.
  • Analytics Cookies: Helps us understand usage patterns and continuously improve the platform. We use analytics tools that comply with privacy standards.

You can manage your cookie preferences through your web browser settings. Please note that disabling certain cookies may affect the functionality of some parts of the platform duit laju.

6 Your Rights as a User

As a user duit laju, you have the following rights regarding your personal data. We fully respect these rights and are committed to facilitating their exercise:

Right of Access

You have the right to request a copy of all personal data we hold about you, including how it is being used.

Right to Rectification

If your data is inaccurate or outdated, you may request that we correct it promptly.

Right to Erasure

You may request the deletion of your personal data, subject to applicable legal retention obligations.

Right to Restriction of Processing

You may request that we restrict the processing of your data in certain situations permitted by law.

Right to Data Portability

You may request your data in a structured, machine-readable format for transfer to another platform.

Right to Object

You have the right to object to the processing of your data for direct marketing purposes at any time, without question.

To exercise any of the above rights, contact our privacy team by email at [email protected]. We will process your request within 14 business days.
7 Data Storage and Deletion

duit laju only retains your personal data for as long as it is needed for the purposes stated in this policy, or as required by applicable law.

  • Active account data: retained for as long as your account remains active on our platform.
  • Financial transaction records: retained for a minimum of 7 years as required by financial and anti-money laundering regulations.
  • Customer support communication logs: retained for 3 years after the last interaction.
  • KYC and identity verification data: retained for 5 years after account closure.
  • Cookie and analytics data: retained for no longer than 13 months from the date of collection.

Once the retention period expires or after an account is closed and all obligations are settled, your data will be securely deleted or anonymised so that it can no longer be linked to you as an individual.

8 Changes to This Privacy Policy

duit laju reserves the right to update or modify this Privacy Policy at any time to reflect changes in our practices, legal requirements, or technological developments. Any changes will be communicated to you through the following means:

  • In-app or on-site notifications clearly stating the date of changes.
  • Notification email sent to the address registered in your account.
  • Update the "Last Updated" date at the top of this document.

Continued use of the platform duit laju after the effective date of any change is considered acceptance of the updated policy. We encourage you to review this page periodically to stay informed about how we protect your information.

9 Contact Us About Privacy

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please do not hesitate to reach out. Our privacy team is ready to provide a thorough and timely response.

For more formal complaints or if you believe your privacy rights have been violated and we have been unable to resolve the matter satisfactorily, you have the right to refer the issue to the relevant data protection authority in your country.

Our commitment is to respond to all privacy-related inquiries within 3 business days, and resolve formal complaints within 14 business days.

Your Privacy Is Secured. Join duit laju with Confidence.

Join over 500,000 Malaysian members playing at duit laju with full confidence that their personal data is always protected and managed transparently.

Bahasa Melayu