duit66 is committed to protecting the privacy of every player on our platform. This Privacy Policy explains in plain terms what personal data we collect, why we collect it, how it is used and protected, and the rights available to you as a data subject.
This Privacy Policy ("Policy") is published by duit66 ("Platform", "we", "us", "our"), the operator of the online casino and sports betting platform accessible at duit66.lat. duit66 operates under an internationally recognised gaming licence and processes personal data in connection with the provision of its services.
This Policy applies to all personal data collected from individuals ("User", "Member", "Player", "you") who access, register with, or otherwise interact with the duit66 platform, including via any mobile-optimised interface. It should be read in conjunction with duit66's Terms & Conditions, which are incorporated by reference.
By creating an account or continuing to use the duit66 platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree to this Policy, you should not register an account or use the platform.
Our Core Commitment: duit66 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. Data shared with third parties is limited to what is necessary to deliver our services, meet regulatory obligations, and protect platform security.
For the purposes of this Policy, the following definitions apply:
duit66 collects personal data across several categories depending on how you interact with the platform. The table below summarises the main categories of data collected:
| Category | Examples | When Collected |
|---|---|---|
| Identity Data | Full legal name, date of birth, MyKad / passport number, nationality | Registration and KYC verification |
| Contact Data | Email address, mobile phone number, residential address | Registration and account updates |
| KYC Documents | Identity card images, passport scans, proof of address, selfie photographs | Identity verification process |
| Financial Data | Bank account details, e-wallet identifiers (Touch 'n Go, Boost, GrabPay), transaction history, deposit and withdrawal records | Payment processing and withdrawal requests |
| Account Data | Username, account tier, login history, password (hashed), security settings | Account creation and ongoing use |
| Transaction Data | Bet history, wagering records, game session logs, win/loss records, bonus usage | Ongoing platform use |
| Technical Data | IP address, device type, browser type and version, operating system, screen resolution, session duration | Automatic collection during platform use |
| Usage Data | Pages visited, features accessed, click paths, search queries within the platform | Automatic collection during platform use |
| Communications Data | Live chat transcripts, support ticket content, email correspondence | When you contact support or respond to communications |
| Responsible Gambling Data | Deposit limit settings, self-exclusion status, session time preferences, problem gambling flag indicators | When player protection tools are activated |
duit66 collects personal data through the following channels:
The majority of personal data we hold is provided directly by you during the course of your relationship with duit66. This includes information submitted during account registration, identity verification (KYC), deposit and withdrawal transactions, responsible gambling tool configuration, support interactions via live chat or email, and any voluntary correspondence you initiate with us.
When you access and use the duit66 platform, certain technical and usage data is collected automatically through server logs, cookies, and similar technologies. This includes your IP address, device identifiers, browser characteristics, session timestamps, and interaction data such as pages visited and features used. This data is collected whether or not you are logged into an account.
duit66 may receive personal data about you from third parties in specific circumstances, including:
duit66 processes your personal data for the following purposes:
To create, administer, and maintain your duit66 account, including verifying your identity, managing your login credentials, processing account tier changes, and communicating account-related information such as security alerts and policy updates.
To process deposits and withdrawals via all supported Malaysian payment channels — including Maybank, CIMB, Public Bank, Hong Leong, DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, and USDT TRC20 — and to maintain accurate financial records of all transactions associated with your account.
To comply with the requirements of duit66's international gaming licence, including mandatory Know Your Customer (KYC) identity verification, anti-money laundering (AML) screening, sanctions list checks, and the reporting obligations that apply to licensed gaming operators.
To detect, investigate, and prevent fraudulent activity, account takeover, bonus abuse, collusion, money laundering, and other prohibited conduct as defined in the Terms & Conditions. This includes automated risk scoring, IP geolocation checks, and device fingerprinting.
To deliver the games, sports betting markets, and other features available on the platform; to diagnose and resolve technical issues; to analyse usage patterns for platform optimisation; and to develop new features and products that better serve Malaysian players.
To respond to support enquiries submitted via live chat or email, to maintain records of support interactions for quality assurance purposes, and to follow up on unresolved matters. Support communications are retained for a period consistent with our data retention schedule.
To administer responsible gambling tools including deposit limits, session reminders, self-exclusion, and reality checks; to identify accounts that may exhibit indicators of problem gambling behaviour; and to ensure that self-exclusion requests are honoured across the platform.
Where you have provided consent, to send you promotional communications about duit66 offers, new game launches, sports betting promotions, and platform updates relevant to Malaysian players. You may withdraw consent to marketing communications at any time by contacting support or using the opt-out mechanism included in each communication.
No Unsolicited Marketing: duit66 does not send unsolicited marketing to non-members. Marketing communications are only sent to registered members who have not opted out. Withdrawing consent to marketing does not affect your ability to use the platform.
duit66 processes personal data on the following legal bases:
duit66 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. Personal data is shared only in the circumstances described below, and only to the extent necessary for the specified purpose.
duit66 engages trusted third-party service providers to perform functions on our behalf, including payment processing (FPX, DuitNow, e-wallet operators), identity verification, cloud infrastructure and hosting, fraud analytics, customer support tooling, and game content delivery. These providers act as Data Processors under written agreements that prohibit the use of your data for any purpose other than the specified service.
duit66 may disclose personal data to gaming regulators, financial intelligence units, law enforcement agencies, or other competent authorities where required by law, court order, or regulatory obligation. Such disclosures are made only to the extent required and are not subject to your prior consent.
When you play games delivered by licensed third-party studios, certain session data (such as bet amounts, game outcomes, and session identifiers) may be shared with the relevant studio for game integrity verification, dispute resolution, and RNG audit purposes. Studios do not receive your full identity data through this mechanism.
In the event of a merger, acquisition, restructuring, or sale of all or part of duit66's business, personal data may be transferred to the acquiring entity as part of the transaction. You will be notified of any such transfer and the privacy terms applicable to your data in the new entity's hands.
No Sale of Data: duit66 has never sold, and has no intention of selling, member personal data to advertising networks, data brokers, or any other commercial third party for targeting or profiling purposes.
As an internationally licensed gaming platform, duit66 may process or store personal data in jurisdictions outside Malaysia. This may occur in connection with cloud infrastructure, KYC verification services, or game content delivery networks operated by third-party providers in other countries.
Where personal data is transferred internationally, duit66 takes steps to ensure that appropriate safeguards are in place to protect your data to a standard equivalent to that described in this Policy. These safeguards may include contractual data protection clauses incorporated into agreements with receiving parties, or reliance on the receiving jurisdiction's adequacy status where applicable.
By using the duit66 platform, you acknowledge that your personal data may be processed in jurisdictions outside Malaysia. If you have questions about specific international transfers, you may contact us using the details in Section 16.
duit66 retains personal data for as long as necessary to fulfil the purposes for which it was collected, to maintain your active account, and to comply with applicable legal, regulatory, and licensing obligations. The following general retention periods apply:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account & Identity Data | Duration of account + 5 years after closure | Regulatory / AML compliance |
| KYC Documents | Duration of account + 5 years after closure | Gaming licence obligation |
| Financial & Transaction Records | 7 years from transaction date | Financial record-keeping requirements |
| Betting & Gaming Logs | 5 years from session date | Dispute resolution / regulatory audit |
| Support Communications | 3 years from last interaction | Service quality / dispute resolution |
| Technical & Usage Logs | 13 months from collection | Security and fraud monitoring |
| Marketing Consent Records | Duration of consent + 3 years | Demonstrating lawful basis |
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with any individual. Where data must be retained beyond standard periods due to an active legal dispute, regulatory investigation, or other legitimate reason, we will retain only what is necessary for that specific purpose.
duit66 implements a range of technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include, but are not limited to:
Your Role in Security: You are responsible for maintaining the confidentiality of your account password and two-factor authentication credentials. duit66 staff will never ask for your full password. If you suspect your account has been compromised, contact support immediately via live chat.
duit66 uses cookies and similar tracking technologies to operate the platform, maintain session state, prevent fraud, and improve user experience. The following categories of cookies are used:
These cookies are essential for the platform to function. They enable core features such as session management, login authentication, and cashier security. They cannot be disabled without impairing the platform's operation and do not require your consent.
These cookies remember your preferences such as language settings, account display choices, and responsible gambling tool configurations. They enhance your experience but are not strictly necessary. They are activated based on your platform interaction.
These cookies collect aggregated, anonymised data about how users interact with the platform — including pages visited, session duration, and feature usage. This data is used to identify usability issues and prioritise platform improvements. Analytics cookies are only placed with your consent.
These cookies support fraud detection, bot mitigation, and account security functions. They capture technical signals such as device fingerprints and behavioural patterns to distinguish legitimate users from automated or malicious actors.
You may manage non-essential cookies through your browser settings. Most modern browsers allow you to view, delete, or block cookies from specific sites. Note that disabling strictly necessary or security cookies may prevent the platform from functioning correctly. Clearing session cookies will require you to log in again.
As a data subject, you have rights in relation to the personal data duit66 holds about you. These rights are described below. To exercise any of these rights, please contact us using the details in Section 16. duit66 will respond to valid requests within a reasonable timeframe, generally within 30 days of receipt.
Request a copy of the personal data duit66 holds about you, including details of the purposes for which it is processed and the categories of recipients with whom it has been shared.
Request correction of inaccurate or incomplete personal data. For identity data, corrections may require submission of supporting documentation.
Request deletion of your personal data in certain circumstances. Note that data subject to regulatory retention obligations (KYC, financial records) cannot be deleted during the mandatory retention period.
Request that processing of your personal data be restricted in certain circumstances, such as while accuracy is contested or an objection is being assessed.
Request receipt of personal data you have provided to duit66 in a structured, commonly used, machine-readable format, where processing is based on consent or contract.
Object to processing of your personal data carried out on the basis of legitimate interests, including profiling for responsible gambling monitoring purposes.
Where processing is based on consent (such as marketing communications), withdraw that consent at any time. Withdrawal does not affect the lawfulness of prior processing.
Request human review of any decision made solely by automated means that produces a significant effect on you, such as account risk scoring or self-exclusion enforcement triggers.
Identity Verification for Rights Requests: To protect your privacy, duit66 will verify your identity before processing any data subject rights request. You may be asked to confirm account details or provide supplementary identification. duit66 will not action requests from unverified individuals.
The duit66 platform is strictly restricted to individuals aged 21 years or older. duit66 does not knowingly collect personal data from individuals below the age of 21. Age verification is enforced through KYC document review during the identity verification process.
If duit66 becomes aware that personal data has been collected from a person under the age of 21, the relevant account will be immediately suspended, the data will be deleted, and any associated funds will be returned to the originating payment method following appropriate verification. If you believe that a minor has registered an account on our platform, please contact support immediately.
21+ Only: Access to and use of the duit66 platform is strictly for players aged 21 and above. Registration by or on behalf of any person below 21 years of age is prohibited. duit66 takes age restriction enforcement seriously as part of its responsible gambling commitment.
The duit66 platform may reference third-party services — such as payment providers including Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, DuitNow, and FPX — in the course of facilitating deposits and withdrawals. When you interact with these third-party payment services, you are subject to their respective privacy policies and terms of service.
duit66 is not responsible for the privacy practices of third-party services. We encourage you to review the privacy policies of any third-party service you use in connection with your duit66 account. The inclusion of a payment method or service reference on our platform does not constitute an endorsement of that provider's privacy practices.
duit66 reserves the right to amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, regulatory requirements, or platform features. When material changes are made, we will notify registered members via a prominent notice on the platform or by email to the address associated with your account.
The date shown at the top of this Policy reflects the most recent revision. We encourage you to review this Policy periodically to remain informed of how your data is being processed. Your continued use of the duit66 platform following the effective date of any revision constitutes acceptance of the updated Policy.
If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by duit66, please contact us through the following channels:
When submitting a data subject rights request, please include your registered username, the email address associated with your account, and a clear description of the right you wish to exercise. This will help us process your request promptly and accurately.
Response Timeframes: General privacy enquiries are typically resolved within 1–3 business days. Formal data subject rights requests (access, erasure, rectification, portability) are processed within 30 calendar days of receipt of a verified request. Where a request is complex or involves a large volume of data, we may extend this period by a further 30 days and will notify you accordingly.
Six concrete commitments that define how we handle your personal data every day.
All data transmitted between your device and duit66 is protected by 256-bit TLS encryption. This applies to every page, every transaction, and every support interaction — not just the cashier.
duit66 does not sell, rent, or trade your personal data to any third party for commercial purposes. Data shared externally is limited to what is strictly necessary for service delivery and regulatory compliance.
Access, rectification, erasure, portability, and objection rights are all honoured. Submit a request via live chat or email and we will verify your identity and respond within the timeframes set out in this Policy.
We keep your data only as long as necessary. Retention periods are defined per data category and tied to specific legal or regulatory requirements. Data is securely deleted or anonymised once the retention period expires.
Personal data is accessible only to authorised personnel who need it for their specific role. Role-based access controls, least-privilege principles, and two-factor authentication are enforced across all internal systems.
Marketing emails are only sent to members who have not opted out. Every marketing communication includes a clear opt-out mechanism. Withdrawing consent does not affect your platform access or account standing.
Our support team is available 24/7 to answer privacy questions, process data subject rights requests, and assist with any account-related concerns. You can also read our full Terms & Conditions for details on your broader platform rights.