Privacy Policy duitnow99 — Your Data, Our Responsibility

Welcome to the duitnow99 Privacy Policy. We, duitnow99 ("Platform", "we"), are committed to protecting the privacy and security of the personal data of every member and visitor using our online casino platform at duitnow99.fun. This Privacy Policy is prepared in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and international best practices in user data management.

This document transparently and comprehensively explains: what personal data we collect from you, how that data is used, how it is stored and protected, with whom it may be shared, and what rights you have as the data owner. This Policy applies to all your interactions with the duitnow99 platform, including the official website, mobile app, customer support channels, and any related services we offer.

Duitnow99 takes data protection responsibilities very seriously. We do not sell, rent, or trade member personal data to any third party for marketing purposes without your explicit consent. Every data processing action we carry out has a clear legal basis and legitimate purpose within the context of operating a responsible online gambling platform.

Duitnow99 only collects data that is genuinely necessary to provide you with a safe, compliant, and high-quality service. The following are the categories of data we collect and the reasons for collection:

A. Identity & Registration Data

• Full name as shown on your official identity document.
• National Identity Card number (MyKad) or passport number for KYC processing.
• Date of birth to verify that you are 18 years of age or older.
• Gender and nationality.
• Photo of your identity document (front and back) for KYC verification.

B. Contact Data

• Active email address used for account communications.
• Registered Malaysian mobile number.
• Current residential address, including postcode and state.

C. Financial & Transaction Data

• Bank account number and bank name for processing deposits and withdrawals.
• Your e-wallet account ID (DuitNow, Touch 'n Go, GrabPay) registered under your name.
• Records of all deposit, withdrawal, and wagering transactions on the platform.
• Source of funds for AML (Anti-Money Laundering) compliance purposes.

D. Technical & Usage Data

• IP address, device type, operating system, and web browser used.
• Login activity log including date, time, and approximate location.
• Game session data: games played, session duration, wagering outcomes.
• Cookies and device identifiers to enhance your user experience.

Every use of your personal data by duitnow99 has a clear purpose and solid legal basis. We do not use your data for purposes unrelated to platform operations without your explicit consent. The following are the primary purposes of data use:

For marketing communications such as promotions, exclusive offers, and bonus notifications, you may opt out at any time through your account settings or by contacting our support team. This will not affect the receipt of important account-related communications such as transaction confirmations and security notifications.

Duitnow99 firmly upholds the principle that your personal data is not sold or shared arbitrarily. However, there are certain situations where sharing data with trusted third parties is necessary to keep our platform running smoothly and securely:

• Payment Providers: FPX, DuitNow, Touch 'n Go, GrabPay, and local banks receive only the minimum financial data required to process your transactions securely.
• Game Providers: Companies such as Playtech, Microgaming, and Evolution Gaming receive anonymous session IDs to enable gameplay — they do not receive your full name or KYC information.
• KYC Verification Services: Recognised third-party providers receive your identification documents securely for identity verification purposes only.
• Statutory Authority: Bank Negara Malaysia, MACC, and law enforcement agencies may receive your data when required by law or a valid court order.
• Hosting & Security Services: Cloud infrastructure and CDN providers that store and protect your data are bound by strict data processing agreements.

Duitnow99 continuously invests in the latest cybersecurity infrastructure to ensure your personal and financial data is always protected from unauthorized access, data breaches, or misuse. Key security measures we implement include:

• 256-bit SSL Encryption: All communications between your device and duitnow99 servers are encrypted using TLS 1.3 protocol — the same standard used by Malaysia's leading banks.
• Data Encryption at Rest: Personal and financial data stored on our servers is encrypted using AES-256 algorithms, ensuring it remains unreadable even in the event of a physical breach.
• Two-Factor Authentication (2FA): An additional security layer via SMS OTP or an authenticator app for all sensitive account actions.
• 24/7 Monitoring: Our cybersecurity team monitors platform activity around the clock to detect and respond to threats promptly.
• Regular Penetration Testing: Our platform undergoes regular independent security testing to identify and patch any vulnerabilities before they can be exploited.
• Tiered Access Control: Only authorised personnel with a legitimate need may access member personal data, and every access is logged for audit purposes.

While we take all reasonable steps to protect your data, no security system is entirely perfect. In the event of any security incident involving your personal data, we are committed to notifying you within 72 hours in line with industry best practices.

Duitnow99 uses cookies and similar tracking technologies to enhance the user experience, ensure session security, and analyze platform usage patterns. The following are the types of cookies we use:

• Essential Cookies: Required for the platform to function properly, including login session management and CSRF security. These cookies cannot be disabled without affecting core platform functionality.
• Performance Cookies: Collects anonymised data on how you use the platform — pages visited, time spent, errors encountered — to help us improve service quality.
• Functional Cookies: Saves your preferences such as language, display theme, and account settings so you don't have to reconfigure them every time.
• Security Cookies: Detects unusual login activity and helps prevent unauthorised access to your account.

You can manage your cookie settings through your web browser's settings. Please note that disabling certain cookies may affect the functionality or security of the platform. For detailed guidance on managing cookies in popular browsers, please refer to your browser's help documentation.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have certain rights regarding your personal data held by duitnow99. We fully respect and facilitate the exercise of these rights:

To submit any requests relating to the above rights, please contact our Data Protection Officer by email at [email protected] or via the platform's live chat. We may require identity verification before processing your request to protect the security of your data.

Duitnow99 only retains your personal data for as long as necessary for the purpose it was collected, or as required by applicable law. The following are retention period guidelines for key data categories:

• KYC & Identity Verification Records: Retained for a minimum of 6 years after account closure, in line with AML requirements and the Malaysia Companies Act.
• Financial Transaction Records: Retained for 7 years in accordance with applicable accounting and tax law requirements.
• Platform Activity Log: Retained for 2 years for security purposes, fraud investigation, and dispute resolution.
• Marketing & Preference Data: Retained until you withdraw consent or close your account, whichever comes first.
• Customer Support Records: Retained for 3 years after each case is resolved for reference and service improvement.

When data is no longer needed and there is no legal obligation to retain it, duitnow99 will securely delete or anonymize it using industry-recognized methods to ensure it cannot be recovered.

Duitnow99 is an online gambling platform intended solely for individuals aged 18 years and above. We do not intentionally collect, store, or process personal data from children or minors.

If you are a parent or guardian who believes your child has registered an account on our platform without authorisation, please contact our support team immediately. We will take steps to verify age, close the account in question, and delete all related data promptly.

Duitnow99 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data processing practices, new legal requirements, or platform improvements. Any material changes will be communicated to you through the following methods:

• In-platform notification in your duitnow99 account when you log in.
• Notification emails will be sent to the email address registered in your account.
• A clear notice on the duitnow99.fun homepage for at least 14 days before any changes take effect.

The "Updated" date shown at the top of this document will always reflect the latest version of the Privacy Policy. Continued use of the duitnow99 platform after any changes take effect is considered your acceptance of the amended Privacy Policy. If you disagree with the changes, you have the right to close your account and request deletion of your data.

For any enquiries, concerns, or requests regarding the Privacy Policy and your personal data, please contact the duitnow99 Data Protection Officer (DPO) through the following channels:

• DPO Email: [email protected]
• General Support Email: [email protected]
• Live Chat: Available 24/7 via the chat icon at the bottom-right corner of the platform.
• Telegram & WhatsApp: Reach us via the link available on our Contact Us page.

Our DPO team will endeavour to respond to all enquiries within 3 working days and fulfil user rights requests within 21 working days in line with PDPA requirements.