Duel Casino Privacy Policy – Personal Data Protection for Malaysian Players

Introduction – Who We Are & Why This Policy Matters

Welcome to Duel Casino, a trusted online casino platform serving Malaysian players since 2019. We understand that your trust in us depends not only on the quality of our games and the reliability of our payouts, but also on how we handle your personal information with integrity.

This Privacy Policy describes Duel Casino's practices regarding the collection, use, disclosure, and protection of your personal data when you visit our website, register as a member, or use any of the services we offer. This document forms part of our commitment to operating with transparency and accountability.

If you have any questions about this Privacy Policy or how we handle your personal data, please contact our Data Protection Officer by email at support@duelcasino.bio at any time.

Types of Personal Data We Collect

Duel Casino collects various types of personal data depending on how you interact with our platform. The following are the categories of data we may collect:

2.1 Data You Provide Directly:

• Full name as stated on your official Malaysian identity document (MyKad)
• Date of birth and gender
• Active Malaysian email address and phone number
• Current residential address in Malaysia
• Identity card number (MyKad) during the KYC verification process
• Malaysian bank account or eWallet details (Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, FPX) for deposit and withdrawal purposes
• KYC supporting documents: MyKad copy, bank statement, utility bill

2.2 Automatically Collected Data:

• IP address and geographic location information
• Web browser type, operating system, and device type used
• Gaming activity history, including games played, bet amounts, and outcomes
• Financial transaction history within the Duel Casino platform
• Login session data, including session time and duration
• Cookie and similar tracking technology information

2.3 Data from Third Parties:

• Identity verification through approved third-party KYC services
• Gambling blacklist screening information from relevant compliance agencies
• Financial risk assessment data from licensed payment providers

How We Use Your Personal Data

Duel Casino uses your personal data only for legitimate and necessary purposes in the context of providing you with online casino services. Specifically, your data is used to:

• Account Management: Creates, manages, and verifies your Duel Casino account, and securely processes login requests
• Transaction Processing: Process deposits and withdrawals via Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, and FPX accurately and securely
• Identity Verification (KYC): Fulfils legal compliance obligations, including age verification and player identity checks
• Fraud Prevention: Detect and prevent fraudulent activity, money laundering, and platform abuse
• Customer Support: Effectively processing your enquiries, complaints, and support requests
• Responsible Gaming: Monitor gameplay patterns to identify signs of problem gambling and offer appropriate support
• Service Communications: Sends important notices regarding your account, changes to our terms, and platform updates
• Marketing (with consent): Sending Duel Casino promotional materials and exclusive offers where you have given your consent
• Platform Improvements: Analysing usage data to improve the performance, usability, and overall user experience of the Duel Casino platform

Duel Casino will not use your personal data for any purpose not stated here without first obtaining your consent.

Legal Basis for Data Processing

In accordance with Malaysia's Personal Data Protection Act 2010 (PDPA), Duel Casino processes your personal data on the following legal bases:

Sharing Data with Third Parties

Duel Casino does not sell, rent, or trade your personal data to any third party for their own marketing purposes. However, we may share your data with the following parties in limited and controlled circumstances:

• Payment Providers: Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, and Malaysian banks via FPX (Maybank2u, CIMB Clicks) to process your financial transactions
• KYC Service Provider: Licensed identity verification companies that assist us in verifying player information in accordance with legal requirements
• Game Providers: Casino software companies (such as Live Casino and slots providers) that require minimal data to deliver the gaming experience
• Statutory Authorities: Malaysian law enforcement agencies or authorities where required by law or court order
• Cloud & IT Services: Technology infrastructure providers who assist us in operating the platform securely and reliably

All third parties with whom we share data are bound by strict confidentiality agreements and are permitted to use your data only for the specified purposes. Duel Casino remains responsible for ensuring these third parties uphold data protection standards equivalent to our own.

Data Security Measures

Duel Casino takes serious investment in its cybersecurity infrastructure to ensure your personal data is always protected against unauthorised access, loss, or breach. The security measures we have implemented include:

• 256-bit SSL Encryption: All communications between your browser and Duel Casino's servers are protected by 256-bit SSL encryption – the same security standard used by Malaysia's leading banking institutions
• Two-Factor Authentication (2FA): An additional security layer available to all Duel Casino accounts to prevent unauthorised access
• Encrypted Password Storage: Your password is never stored in plain text — we use an irreversible hashing method
• 24/7 Monitoring: Automated security monitoring systems operate around the clock to detect suspicious activity
• Financial Data Segregation: Player funds are held in accounts that are separate from the company's operational accounts
• Regular Security Audits: Duel Casino's systems undergo regular independent security audits conducted by accredited cybersecurity firms
• Internal Access Controls: Only authorised staff may access players' personal data, and every access is automatically logged

While we take every reasonable measure to protect your data, no digital system can be guaranteed entirely risk-free. We therefore encourage you to take precautions of your own, such as using a strong password and enabling 2FA on your Duel Casino account.

Cookie Policy

Duel Casino uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website. We use three main types of cookies:

You may manage or block non-essential cookies through your web browser settings at any time. Please note, however, that disabling certain cookies may affect the functionality of the Duel Casino platform.

Data Retention Period

Duel Casino retains your personal data only for as long as necessary to fulfil the original purpose of collection, or as required under Malaysian law. Our data retention guidelines are as follows:

• Active Account Data: For the duration of your active membership with Duel Casino
• Post-Account Closure Data: Minimum 5 years after account closure, in line with Malaysian AML/KYC compliance requirements
• Financial Transaction Records: 7 years in accordance with Malaysian financial legal requirements
• Support Communication Logs: 3 years from the date of last interaction
• Marketing Data (consent-based): Until you withdraw your consent
• Session Data & Access Logs: 12 months from the date of the relevant session

Once the retention period expires, your data will be securely deleted or anonymised so that it can no longer be linked to your identity.

Your Privacy Rights as a Malaysian Player

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and Duel Casino's policies, you have the following rights with respect to your personal data:

• Right of Access: You have the right to request a copy of the personal data we hold about you
• Right to Rectification: You may request that we correct any inaccurate or incomplete data we hold about you
• Right to Erasure: In certain circumstances, you may request the deletion of your personal data
• Right to Restrict Processing: You may ask us to restrict how we process your data under certain conditions
• Right to Withdraw Consent: You may withdraw your marketing consent at any time without affecting core services
• Right to Complain: You have the right to lodge a complaint with the Department of Personal Data Protection Malaysia if you are dissatisfied

To exercise any of the rights above, please contact us by email at support@duelcasino.bio. We will process your request within 14 business days. Note: certain rights may be limited where legal compliance requires us to retain specific data.

Children's Privacy Protection

The Duel Casino platform is strictly for individuals aged 18 and above. We do not accept registrations from minors under the age of 18, and we do not knowingly collect personal data from them.

If you are a parent or guardian and believe your child has registered or attempted to register on Duel Casino, please contact us immediately at support@duelcasino.bio. We will take immediate action to close the account in question and delete all associated data.

Duel Casino enforces strict age verification during registration and through the KYC process to ensure our platform is accessible only to eligible adult players.

Privacy Policy Amendments

Duel Casino reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, technological developments, or new Malaysian legal requirements. When material changes occur, we will:

• Updating the "Last Updated" date at the top of this document
• Sending email notifications to all registered Duel Casino members
• Displaying a prominent notice on the platform's main page
• Re-requesting your consent where required for significant changes

We encourage you to review this Privacy Policy periodically. Your continued use of the Duel Casino platform following any amendments will be considered acceptance of the updated policy.

Contact Us – Data Protection Officer

If you have any questions, concerns, or requests regarding Duel Casino's Privacy Policy or the handling of your personal data, please contact us through the following channels:

• Privacy Email: support@duelcasino.bio – dedicated to privacy and personal data enquiries
• 24/7 Live Chat: Available directly within the Duel Casino platform for immediate assistance
• FAQ: Review FAQ page for answers to the most frequently asked privacy questions

Our Bahasa Malaysia-proficient team will respond to your privacy enquiries within 2 business days. For unresolved complaints, you have the right to refer the matter to Malaysia's Personal Data Protection Department (JPDP).