Privacy Policy 668Duit –
Your Data, Our Responsibility

1Introduction

668Duit ("we", "Platform") values the privacy of every member who uses our services. This Privacy Policy is crafted to provide full transparency on how we handle your personal information — from the moment you register until you stop using our platform.

We operate in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and are committed to ensuring your data is never misused, sold, or disclosed without your consent.

This policy covers all services offered by 668Duit, including the main website, mobile app, online games, deposit and withdrawal processes, and all customer support interactions. We encourage you to review this policy from time to time to stay informed about how your data is managed.

2Personal Data We Collect

We only collect data that is strictly necessary to provide you with a safe, lawful, and high-quality service. The types of data collected are as follows:

We does not collect credit card information directly — all financial transactions are processed through certified third-party payment processors that comply with PCI-DSS standards. Your card data never passes through or is stored on 668duit servers.

3How Your Data Is Used

Every piece of data we collect has a clear and limited purpose. We do not use your data for unrelated purposes without your prior consent.

• Identity Verification (KYC): To verify that you are a legitimate user who meets the platform's age and eligibility requirements.
• Transaction Processing: To process deposits, withdrawals, and bonus payments accurately and securely.
• Account Security: To detect suspicious activity, unauthorised login attempts, and other security threats.
• Customer Support: To enable our support team to assist you more effectively when you contact us.
• Legal Compliance: To fulfil reporting obligations to the relevant authorities in accordance with Malaysian law.
• Service Improvement: To analyse usage patterns in aggregate in order to improve the user experience on our platform.
• Service Communications: To send important notifications related to your account, transactions, and platform updates.

4Data Sharing with Third Parties

668Duit does not share, sell, or disclose your personal data to any third party except in the following limited circumstances:

• Licensed Service Providers: We share the necessary information with payment processors (FPX, DuitNow, Touch 'n Go), licensed game providers, and identity verification platforms — all subject to strict confidentiality agreements.
• Legal Requirements: We may be required to disclose information to government authorities, courts, or enforcement bodies where mandated by Malaysian law.
• Fraud Prevention: In cases of suspected fraud or money laundering, we reserve the right to share relevant information with the appropriate authorities.
• Protection of Other Members: If your account activity compromises the security of other members, the necessary information may be used for internal protective action.

All third-party partners we work with have undergone security assessments and are bound by data protection agreements. They are only permitted to use your data for the specific agreed purposes.

5Data Storage & Security

The security of your data is our top technical priority. The 668duit platform employs multiple layers of protection to keep your data safe at all times:

• Encryption in Transit: All communication between your device and our servers uses TLS 1.3 protocol with 256-bit encryption.
• Encryption at Rest: Sensitive data such as identification card numbers and banking details are encrypted using AES-256 before being stored in our database.
• Layered Access Control: Only authorized personnel with a legitimate business need may access member data, and all access is logged and audited.
• Secure Backup: Data is regularly backed up to separate locations to ensure service continuity and disaster recovery.
• Penetration Testing: Our security systems are regularly tested by independent security experts to identify and address any vulnerabilities.

Retention Period: Your personal data is retained for as long as your account is active. Following account closure, we retain the necessary records for 7 years in accordance with Malaysian legal requirements, after which data will be securely deleted.

6Cookies & Tracking Technologies

The 668duit platform uses cookies and similar technologies to enhance your experience and ensure the platform functions correctly. The following are the types of cookies we use:

• Essential Cookies: Required for basic platform functions such as login authentication, session management, and security. These cookies cannot be disabled.
• Performance Cookies: Collect information on how you use the platform (e.g., most frequently visited pages) to help us improve our services. All data is anonymized.
• Functional Cookies: Save your preferences such as language, display settings, and login details for your convenience.
• Analytics Cookies: Used to understand overall usage patterns. This data is processed in aggregate and cannot be used to identify you individually.

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect platform functionality. For more information on managing cookies, refer to your browser's help guide.

7Your Rights as a Data Subject

Under Malaysia's PDPA and the privacy principles we uphold, you have the following rights regarding your personal data:

• Right of Access: You have the right to request a copy of the personal data we hold about you.
• Right to Rectification: You have the right to request correction of any inaccurate or outdated data.
• Right to Erasure: Under certain circumstances, you may request that your data be deleted — subject to our legal retention obligations.
• Right to Restrict Processing: You may request that we restrict how your data is used in certain situations.
• Right to Object: You may object to the processing of your data for direct marketing purposes at any time.
• Right to Data Portability: You may request your data in a machine-readable format for transfer to another platform.

To exercise any of the above rights, please contact our support team. Requests will be processed within 30 working days. We may require identity verification before processing your request to protect account security.

8Child Protection

The 668duit platform is strictly for individuals aged 18 years and above. We do not intentionally collect or process personal data from individuals under the age of 18.

If we determine that personal data of a minor has been collected without proper age verification, we will immediately take the following steps:

• Close the account in question immediately.
• Delete all collected data associated with the individual.
• Return any deposited funds (following appropriate identity verification).

9Third-Party Links & Services

The 668duit platform integrates services from certified third-party game providers and payment processors. While we select our partners carefully, the 668duit Privacy Policy does not cover the privacy practices of those third-party platforms.

Each game provider integrated with our platform has its own privacy policy, which may differ from ours. We encourage you to read their privacy policy before using their services directly.

The payment processors we use, such as FPX, DuitNow, and licensed e-wallets, maintain high security standards and bear full responsibility for the financial data processed through their systems. 668duit does not store or have access to your full card or bank account details.

10Amendments to Privacy Policy

668Duit reserves the right to amend this Privacy Policy from time to time to reflect changes in our practices, new technologies, legal requirements, or other reasonable grounds.

When there are material amendments, we will:

• Update the "Last Updated" date at the top of this page.
• Send notifications to all registered members via email or in-platform notifications.
• Provide a minimum period of 14 days before the material amendment takes effect.

Continued use of the 668duit platform after the effective date of any amendment constitutes your acceptance of the updated Privacy Policy. If you do not agree with the changes, you have the right to close your account before the effective date.

11Contact Us Regarding Privacy

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please contact us through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week via the chat button on our platform.
• Privacy Email: [email protected] (displayed as plain text only)
• General Support: [email protected] (displayed as plain text only)

We are committed to responding to all privacy-related inquiries within 48 working hours. For official complaints regarding data protection, you may also contact the Department of Personal Data Protection Malaysia (JPDP) through their official channels.