At duit laju, protecting player personal data is not merely a legal obligation — it is our core commitment. We understand that your trust is our most valuable asset, and we ensure every piece of information you share with us is handled with care, transparency, and responsibility.
Malaysia PDPA Compliant: This Privacy Policy is drawn up in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA). By using the duit laju platform, you consent to the collection and use of data as described in this policy.
Duit laju collects the information needed to provide every player with a safe, efficient, and personalised service. We only collect data that is genuinely necessary — nothing more.
When you register an account or use our services, you provide us with the following information:
When you use the duit laju platform, our systems automatically record technical information that helps us maintain security and improve the user experience:
As part of the mandatory identity verification process, we may request copies of documents such as your identification card, recent bank statement, or utility bill as proof of address. These documents are processed through encrypted systems and stored strictly in accordance with our highest security procedures.
| Data Category | Example | Primary Purpose |
|---|---|---|
| Personal Identity | Name, IC, Date of Birth | Account Verification & KYC |
| Contact Information | Email, Phone Number | Communication & security |
| Financial Data | Bank accounts, e-wallets | Transaction processing |
| Technical Data | IP, device, browser | Security & fraud prevention |
| Gaming Data | Betting history, sessions | Responsible gaming |
Every piece of data we collect is used for a clear and legitimate purpose. We do not use your data for any purpose beyond the scope stated here without first obtaining your explicit consent.
Your personal data is used to create and manage your account, securely process all deposits and withdrawals, verify your identity to meet KYC requirements, and confirm your eligibility to access our services based on the minimum age requirement of 18.
We analyse account activity patterns to detect and prevent any unauthorised access attempts, identity fraud, money laundering, player collusion or bonus system abuse. This protects not only the platform's interests, but also the security of all legitimate players.
We use your email address and phone number to send important account notifications, transaction alerts, policy updates, and for customer support communications when you contact us. You may opt out of promotional communications at any time through your account settings.
Your gaming history data is used by our systems to monitor betting patterns and identify signs of problem gambling. This enables us to proactively offer appropriate assistance and ensure all self-imposed limits you set are properly enforced.
Data Minimisation Principle: duit laju adheres to the principle of minimal data collection — we only request and retain data that is genuinely necessary to deliver a safe and quality service to you.
Duit laju does not sell, rent, or trade your personal data to any third party for marketing purposes. Data disclosure occurs only in the limited circumstances set out below.
We share only the necessary data with selected service partners who help us operate the platform, including licensed payment gateway providers, ISO 27001-compliant cloud service providers, licensed gaming software providers and third-party identity verification companies. All these providers are bound by strict confidentiality agreements and are prohibited from using your data for any other purpose.
In certain circumstances, we may be required to disclose your personal data to the relevant authorities as mandated by Malaysian law, including financial crime investigations, valid court orders, or anti-money laundering (AML) compliance requirements. We will notify you of any such disclosure where we are legally permitted to do so.
Some of our service providers may operate outside Malaysia. In such cases, we ensure that all cross-border data transfers are protected by safeguards that are equivalent to or exceed Malaysia's PDPA standards, including recognised standard contractual clauses and periodic security assessments.
No Data Sales: duit laju has never and will never sell player personal data to any third party for advertising or marketing purposes. This is our absolute commitment to your trust.
Protecting your data from unauthorised access, loss or misuse is duit laju's highest priority. We continuously invest in the latest security technologies and procedures to keep your data safe at all times.
All data transmitted between your device and duit laju servers is protected by Transport Layer Security (TLS) 1.3 encryption with 256-bit encryption keys — the same standard used by leading financial institutions and banks worldwide. The padlock icon in your browser's address bar confirms this secure connection is active at all times.
Access to player personal data within our systems is strictly limited to staff with legitimate operational needs only. Our systems employ role-based access control (RBAC), two-factor authentication for all admin access, and comprehensive audit logs for every action involving sensitive data.
We offer two-factor authentication for player accounts as an additional security layer. By enabling 2FA, every login attempt requires further verification via an OTP code sent to your mobile phone — ensuring only you can access your account even if your password is compromised.
Our IT security team monitors systems 24/7 using advanced threat detection tools. Any suspicious activity triggers an immediate alert and preventive action is taken before any damage occurs. Penetration testing is conducted regularly by independent security experts.
Duit laju uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored in your browser when you visit our website.
You can manage or delete cookies through your web browser settings at any time. Please note that disabling essential cookies may affect platform functionality. Non-essential cookies can be withdrawn without affecting your ability to play or manage your account.
Duit laju does not use cookies to track your activity on other websites or for cross-site advertising purposes. All cookie data we collect is used solely to improve your experience on our own platform.
Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding the personal data we hold. We are committed to facilitating the exercise of these rights without unnecessary obstacles.
You have the right to request a copy of all personal data we hold about you. Requests will be processed within 14 business days.
If your data is inaccurate or outdated, you may request that we correct or update the information promptly.
Under certain circumstances, you may request the deletion of your personal data, subject to our legal record retention obligations.
You may object to the processing of your data for specific purposes such as direct marketing at any time, without needing to provide a reason.
You have the right to receive your data in a structured, machine-readable format for transfer to another service provider.
You may request that we restrict the processing of your data while an inquiry or complaint is being investigated.
To exercise any of the above rights, please contact our privacy team via Live Chat or email at [email protected]. Please have your account number and identification details ready to speed up the verification process.
Duit laju retains your personal data only for as long as necessary to fulfil the purposes stated in this policy, or as required by applicable Malaysian law.
Upon expiry of the retention period, your personal data will be securely deleted or fully anonymised so that it can no longer be associated with you. The deletion process uses methods that meet industry security standards.
The duit laju platform is strictly limited to individuals aged 18 and above. We do not knowingly collect or process personal data from anyone under the age of 18.
Our strict age verification process, including IC verification at registration, is specifically designed to prevent access by minors. If we discover that we have collected data from an individual under the age of 18, we will take immediate action to delete that information and close the account without any refund of wagers placed.
If you become aware of a minor using this platform, please contact us immediately via Live Chat or our support email so that action can be taken right away. Child protection is a shared responsibility.
The duit laju platform may contain links to third-party websites or services in certain contexts, such as payment gateway providers during the transaction process. Our Privacy Policy does not apply to those external websites or services.
We encourage you to read the privacy policy of any third-party service you access through our platform. duit laju is not responsible for the privacy practices or content of third-party websites. However, we only partner with service providers who have a trusted security and privacy track record.
Duit laju reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or improvements to our services.
When we make significant changes, we will notify you via an in-account notification or email to your registered address at least 14 days before the changes take effect. For minor changes that do not materially affect your rights, we will update this page with the latest amendment date.
Continued use of the duit laju platform after any amendments are published constitutes acceptance of the updated terms. If you do not agree with any amendments, you have the right to close your account and discontinue use of the platform.
If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, our team is ready to assist:
We are committed to handling all privacy-related requests seriously and within a reasonable timeframe. If you are not satisfied with our response, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia.
Six pillars of data protection we uphold every day to maintain your trust
All data communications between your device and our servers are protected with bank-grade encryption. Your personal and financial information cannot be intercepted by any party during transmission.
Your data is accessible only to staff who require it for their duties, with mandatory two-factor authentication. All access is logged and automatically monitored by our audit system.
Our privacy policy is designed in full compliance with Malaysia's Personal Data Protection Act 2010. We adhere to all local legal requirements relating to user data protection.
Our security systems undergo regular penetration testing and independent audits by third-party cybersecurity experts. Any vulnerabilities identified are resolved promptly regardless of cost.
Your personal data has never been and will never be sold to advertisers or data brokers. Your information is used solely to enhance your experience on the duit laju platform — no hidden agenda.
When the data retention period expires or you request deletion, your data is erased using methods that meet industry security standards — ensuring no recoverable trace remains for any party.
Duit laju is more than an online gaming platform — we are a Malaysian player community built on a foundation of trust, transparency, and data security. With 256-bit SSL protection, strict access controls, and full Malaysia PDPA compliance, you can focus entirely on your gaming experience without worrying about the safety of your personal information.