447 duit Privacy Policy – Personal Data Protection for Malaysian Players

This Privacy Policy ("Policy") describes how 447 Duit ("we", "platform", or "company") collect, use, store, disclose, and protect your personal data when you use our platform at 447duit.biz, the mobile app 447 Duit, or any related services we offer.

This Policy applies to all users of the platform 447 Duit including unregistered visitors, registered members, and VIP members. By using our platform, you acknowledge that you have read and understood this Privacy Policy.

447 Duit is both a "data processor" and "data controller" as defined under Malaysia's Personal Data Protection Act 2010 (PDPA). We take this responsibility seriously and ensure that all personal data processing is carried out lawfully, fairly, and transparently.

447 Duit collects your personal data through various methods — directly when you register an account or make a transaction, and automatically via tracking technologies when you use our platform. The following are the categories of data we collect:

Personal data collected by 447 Duit for the following purposes only. We do not use your data for any other purpose without first obtaining your consent:

• Account Management: Creating and managing your account 447 Duit yours, including identity verification, secure login, and account recovery.
• Transaction Processing: Process deposits via Touch 'n Go eWallet, GrabPay, DuitNow, Maybank2u (FPX), CIMB Clicks, Boost, ShopeePay and other Malaysian payment methods, as well as handle your winnings withdrawals.
• Service Provision: Allows you to play all games on 447 Duit — slots, live casino, lottery, live matches, and more.
• Security & Fraud Prevention: Detecting and preventing fraud, money laundering, unauthorised access, and platform misuse.
• Legal Compliance: To comply with Malaysian legal requirements, including PDPA 2010, and to act on instructions from the relevant authorities.
• Responsible Gaming: Monitoring gameplay patterns to identify signs of problem gambling and provide appropriate assistance.
• Service Communications: Sending important notifications about your account, winnings, and policy changes 447 Duit.
• Marketing (with consent): Sending promotional offers, bonuses, and information about new games — only if you have given your consent for this purpose.

447 Duit processes your personal data based on one or more lawful grounds under Malaysia's Personal Data Protection Act 2010 (PDPA):

• Consent: When you register an account with 447 Duit and agree to these Terms & Conditions and Privacy Policy, you consent to the processing of your data for the purposes stated.
• Contract Performance: Processing necessary to fulfil the agreement between you and 447 Duit — such as processing transactions and providing access to games.
• Legitimate Interests: Processing for the purposes of fraud prevention, platform security, and service improvement, in ways that do not infringe on your fundamental rights.
• Legal Obligations: Where processing is required to comply with applicable Malaysian laws, including financial compliance and anti-money laundering obligations.

At all times, 447 Duit only processes the minimum data necessary for the stated purposes — the principle of "data minimisation" that sits at the heart of PDPA 2010.

447 Duit does not sell your personal data to anyone. However, in certain circumstances, we may need to share your data with selected and trusted third parties:

• Payment Service Providers: Payment service providers that process your transactions, such as Touch 'n Go, GrabPay, DuitNow, and FPX — only the information necessary to complete the transaction is shared.
• Game Software Providers: Companies that provide gaming software for the platform 447 Duit — the data shared is game data that cannot be personally identified.
• Legal Authority: Royal Malaysia Police, Bank Negara Malaysia, the Companies Commission of Malaysia, or any other relevant authority when required by law or court order.
• Auditors & Legal Advisors: For the purposes of financial auditing, legal compliance, or litigation — subject to strict confidentiality agreements.

All third parties that receive data from 447 Duit are required to uphold data protection standards at least equivalent to this Privacy Policy and PDPA 2010.

447 Duit continually invests in the latest security infrastructure to safeguard your personal data. The technical and organisational security measures we implement include:

• 256-bit SSL/TLS Encryption: All communications between your browser/app and 447 Duit fully encrypted using the latest SSL/TLS protocols.
• Data-at-rest Encryption: Personal data stored in our databases is encrypted using AES-256 — the data remains unreadable even in the event of unauthorised physical access.
• Multi-Layered Access Controls: Only staff of 447 Duit who are authorised to access personal data — and only within the scope of their job responsibilities.
• Two-Factor Authentication (2FA): All internal access to systems containing user data is protected with 2FA.
• 24/7 Security Monitoring: Cybersecurity team 447 Duit continuously monitors systems to detect and respond to any threats.
• Regular Penetration Testing: We conduct independent security audits by external experts at least twice a year to identify and address vulnerabilities.

447 Duit does not retain your personal data longer than is necessary for the stated purposes, unless Malaysian law requires a longer retention period. Below is our data retention policy:

Once the retention period expires, your data will be securely deleted or anonymised so that it can no longer be linked to you personally. The deletion process follows methods that meet industry standards for information security.

Under Malaysia's PDPA 2010 and this Privacy Policy 447 Duit, you have the following rights regarding your personal data:

To exercise any of the rights above, please contact the Data Protection Officer 447 Duit at privacy@447duit.biz. We will process your request within 30 calendar days. In complex cases, this period may be extended by up to 60 days, with prior notification to you.

447 Duit uses cookies and similar tracking technologies to enhance your experience on our platform. The types of cookies we use are as follows:

You can manage your cookie settings through your browser settings or via the privacy settings panel in your 447 Duit yours. Please note that disabling certain cookies may affect your experience on the platform.

In the course of its operations, 447 Duit may need to transfer your personal data to servers or service providers operating outside Malaysia. This includes gaming software providers, cloud services, and technical infrastructure providers.

When cross-border data transfers take place, 447 Duit ensure that:

• The recipient country or region has data protection laws equivalent to those of Malaysia.
• Recipients have signed data processing agreements that meet PDPA 2010 standards.
• Additional protective measures are implemented where necessary, including extra encryption in transit.

Platform 447 Duit is intended for individuals aged 18 years and above only. We do not knowingly collect, process, or store personal data of individuals under the age of 18.

If we discover that we have collected personal data from someone under the age of 18 without proper age verification, we will promptly delete that data and close the account in question. Parents or guardians who believe their child may have registered on the platform 447 Duit is requested to contact us immediately at privacy@447duit.biz.

447 Duit reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, Malaysian legal requirements, or technological developments. Any amendments will:

• Published on this page with an updated effective date.
• Active members will be notified via email or in-app notification 447 Duit.
• Effective 30 days after the publication date, giving you sufficient time to review the changes.

We encourage you to review this Privacy Policy periodically. Continued use of the platform 447 Duit after the amendments take effect constitutes your acceptance of the revised policy.

447 Duit has appointed a Data Protection Officer (DPO) responsible for ensuring compliance with PDPA 2010 and handling all privacy-related enquiries. You may reach our privacy team via:

Response time for privacy enquiries is within 5 business days. For formal rights requests (access, correction, deletion), please email privacy@447duit.biz with your account number and the type of request.