duniabet Privacy Policy

1 Introduction

duniabet ("we", "us", "our", "the Platform") is committed to protecting the privacy and personal data of every individual who accesses or uses the duniabet website at https://duniabet.cam ("the Site") and all associated digital services ("the Services"). This Privacy Policy ("Policy") describes the categories of personal data we collect, the purposes for which that data is processed, the parties with whom it may be shared, the safeguards applied to protect it and the rights available to you as a data subject.

This Policy applies to all users of the duniabet Platform, including players who access the Site from Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam or any other location where duniabet Services are accessible. By registering an account or using any Service, you acknowledge that you have read, understood and agreed to the collection and processing of your personal data as described herein.

This Policy should be read alongside the duniabet Terms and Conditions and Responsible Gambling Policy, each of which are accessible through the Site navigation. Where there is any conflict between this Policy and another duniabet document, this Policy shall prevail with respect to matters relating to personal data processing.

2 Definitions

The following terms are used throughout this Policy with the meanings set out below:

• "Personal Data" means any information that relates to an identified or identifiable natural person, including but not limited to name, identification number, contact details, financial data and device identifiers.
• "Data Subject" means the natural person to whom Personal Data relates — in the context of this Policy, primarily the registered duniabet player.
• "Processing" means any operation or set of operations performed on Personal Data, including collection, recording, storage, use, disclosure, erasure or destruction.
• "Controller" means the entity that determines the purposes and means of processing Personal Data. duniabet acts as Controller in respect of data collected through the Platform.
• "Processor" means a third party that processes Personal Data on behalf of the Controller in accordance with documented instructions.
• "KYC" means Know Your Customer verification, a regulatory process requiring identification and age confirmation of Account holders.
• "Cookie" means a small text file placed on a user's device by a website for the purposes of session management, preference storage or analytical tracking.

3 Data We Collect

duniabet collects the following categories of Personal Data in connection with account registration, use of the Services and compliance with applicable legal obligations:

We do not intentionally collect sensitive special-category data such as racial or ethnic origin, religious beliefs, health data or biometric information, except where expressly required by law or where you voluntarily provide such data in the context of a responsible-gambling self-exclusion or support request.

4 How We Collect Data

duniabet collects Personal Data through the following channels and mechanisms:

• Direct submission: Data you provide when completing account registration forms, KYC uploads, support requests or promotional opt-ins on the duniabet Platform.
• Automated technical collection: Data gathered automatically when you access the Site, including IP address, device fingerprint, browser configuration and cookie-based session data.
• Payment processors: Transaction reference data received from approved Malaysian payment channels including Maybank2u, CIMB Clicks, FPX, DuitNow, Touch 'n Go eWallet, Boost and GrabPay.
• Identity verification providers: Confirmation responses from third-party KYC partners used to verify the authenticity of identity documents submitted during account verification.
• Responsible gambling tools: Data generated when you set deposit limits, session controls or self-exclusion parameters within your Account settings.

5 Data Processing & Use

duniabet processes your Personal Data for the following purposes. Each purpose is tied to an identified lawful basis as described in Section 6 of this Policy.

• Account management: Creating, maintaining and administering your registered duniabet Account, including processing login events and security notifications.
• Service delivery: Facilitating sports betting, live casino games, slot activity, VIP programme participation and associated product features.
• Payment processing: Handling MYR deposit and withdrawal requests via supported Malaysian banking and e-wallet channels, and maintaining transaction records.
• Regulatory compliance: Fulfilling Anti-Money Laundering ("AML"), Know Your Customer ("KYC") and age-verification obligations under applicable licensing and financial regulations.
• Fraud prevention and security: Monitoring Account activity, device behaviour and transaction patterns to detect and prevent unauthorised access, fraud, collusion or other irregular conduct.
• Responsible gambling: Monitoring betting and session behaviour to identify indicators of potential problem gambling, and enabling self-imposed tools such as deposit limits and self-exclusion.
• Platform improvement: Analysing aggregated usage patterns to improve Platform functionality, navigation, loading performance and the overall user experience for Malaysian players.
• Communications: Sending transactional messages such as deposit confirmations, withdrawal notifications, account security alerts and responses to support requests.

6 Legal Basis for Processing

duniabet relies on the following legal bases for processing Personal Data, in accordance with applicable data protection law:

• Contractual necessity: Processing required to fulfil our obligations under the duniabet Terms and Conditions, including account administration, payment processing and service delivery.
• Legal obligation: Processing required to comply with applicable law, including AML regulations, KYC requirements and age-verification obligations.
• Legitimate interests: Processing carried out in pursuit of duniabet's legitimate business interests, including fraud prevention, Platform security, responsible gambling monitoring and service improvement, where those interests are not overridden by your data-protection rights.
• Consent: Where duniabet relies on consent for specific processing activities, such as optional marketing communications, you may withdraw that consent at any time by contacting us or adjusting your account preferences. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

7 Data Sharing

duniabet does not sell, rent or trade your Personal Data to third parties for their own marketing purposes. We may share your data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate contractual safeguards:

• Payment service providers: Malaysian banking institutions and e-wallet operators (including those operating Maybank2u, CIMB Clicks, FPX, DuitNow, Touch 'n Go eWallet, Boost and GrabPay) that process deposit and withdrawal transactions on your behalf.
• KYC and identity verification partners: Third-party providers engaged to verify the authenticity of identity documents submitted during account registration.
• Technology and infrastructure providers: Cloud hosting, database and security service providers that process data as Processors under binding contractual instructions from duniabet.
• Fraud detection and AML compliance providers: Specialist service providers engaged to assist with transaction monitoring, suspicious activity detection and regulatory compliance reporting.
• Regulatory and law enforcement authorities: Competent governmental bodies, licensing authorities or courts where duniabet is legally required to disclose Personal Data.
• Group entities: Affiliated companies within the duniabet corporate group, where necessary for the provision of Services or compliance purposes, subject to equivalent data-protection standards.

All third-party Processors engaged by duniabet are required to implement appropriate technical and organisational security measures and are permitted to use your Personal Data only for the specific purposes documented in their processing agreements with duniabet.

8 Payment Data

Given the importance of financial transactions to the duniabet experience, payment data receives additional procedural protections. When you make a deposit via Maybank2u, CIMB Clicks, Public Bank Online, Hong Leong Connect, Touch 'n Go eWallet, Boost, GrabPay, DuitNow or FPX, the transaction is processed directly through the relevant payment provider's secure channel.

duniabet stores only the transaction reference, method type, date, amount in MYR and processing outcome. Full bank account numbers, card numbers and e-wallet credentials are not stored on duniabet servers and are not accessible to duniabet staff. Payment data is retained in accordance with the retention schedule set out in Section 10 of this Policy.

9 Cookies & Tracking Technologies

duniabet uses cookies and similar tracking technologies to operate certain Platform functions, maintain login sessions and gather analytical data about how players interact with the Site. The following categories of cookies may be deployed:

• Strictly necessary cookies: Required for the Platform to function. These enable login sessions, session state management and security features. They cannot be disabled without impairing core Platform functionality.
• Functional cookies: Store your preferences such as display settings, language selection and previously visited sections of the Platform to improve convenience on return visits.
• Analytical cookies: Collect aggregated, anonymised data about page visits, session durations and navigation paths to help duniabet improve the Platform experience. These do not identify individual users.
• Security cookies: Assist in detecting and preventing fraudulent login attempts, credential-stuffing attacks and other security threats directed at Account holders.

You may manage cookie preferences through your browser settings. Restricting strictly necessary cookies may impair your ability to use the duniabet Platform normally. duniabet does not deploy third-party advertising or cross-site tracking cookies.

10 Data Retention

duniabet retains Personal Data only for as long as necessary to fulfil the purposes for which it was collected, subject to applicable minimum legal retention requirements. The following general retention periods apply:

• Account and identity data: Retained for the duration of the active Account relationship and for a minimum of five (5) years following Account closure, in accordance with AML and KYC record-keeping obligations.
• Transaction and payment records: Retained for a minimum of five (5) years from the date of each transaction for regulatory and audit purposes.
• Support communications: Retained for up to three (3) years from the date of the final communication, unless a live dispute or legal matter requires longer retention.
• Technical and usage logs: Typically retained for up to twelve (12) months for security and platform-improvement purposes, subject to anonymisation where longer retention is required for analytical use.
• Self-exclusion records: Retained for the duration of the self-exclusion period plus a minimum of five (5) years thereafter, to prevent re-registration in breach of the exclusion.

Upon expiry of the applicable retention period, Personal Data will be securely deleted or irreversibly anonymised in accordance with duniabet's internal data-lifecycle procedures.

11 Data Security

duniabet implements appropriate technical and organisational security measures designed to protect Personal Data against accidental or unlawful loss, alteration, unauthorised disclosure or access. Measures in place include, but are not limited to:

• Encryption of Personal Data in transit using industry-standard TLS protocols;
• Encryption of sensitive data fields at rest within duniabet database infrastructure;
• Role-based access controls restricting staff access to Personal Data to those with a documented operational need;
• Regular security assessments and penetration testing of Platform infrastructure;
• Incident response procedures including breach notification protocols aligned with applicable regulatory requirements.

Whilst duniabet takes data security seriously, no transmission over the internet or electronic storage mechanism can be guaranteed to be completely secure. Players are strongly encouraged to use strong, unique passwords for their duniabet Account and to contact the support team immediately upon suspecting any unauthorised access.

12 Your Rights as a Data Subject

Subject to applicable data protection law and any overriding legal retention obligations, you have the following rights in respect of your Personal Data held by duniabet:

• Right of access: You may request confirmation of whether duniabet holds Personal Data about you and, if so, a copy of that data along with information about how it is processed.
• Right of rectification: You may request correction of any inaccurate or incomplete Personal Data held by duniabet without undue delay.
• Right to erasure: You may request deletion of your Personal Data in certain circumstances, such as where the data is no longer necessary for the purpose for which it was collected, subject to duniabet's overriding legal retention obligations.
• Right to restrict processing: You may request that duniabet restricts its processing of your Personal Data in specified circumstances, such as where accuracy is contested, pending verification.
• Right to data portability: Where processing is based on consent or contractual necessity and is carried out by automated means, you may request that your Personal Data be provided to you in a structured, commonly used and machine-readable format.
• Right to object: You may object to processing carried out on the basis of legitimate interests, subject to duniabet demonstrating compelling legitimate grounds that override your interests, rights and freedoms.
• Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, please contact the duniabet Data Protection contact at the address specified in Section 16 of this Policy. duniabet will respond to verified requests within a reasonable timeframe, and in any event within the period required by applicable law. We may request additional identity verification before processing rights requests.

13 Minors

The duniabet Platform is strictly for adults aged 21 and above. duniabet does not knowingly collect, store or process Personal Data belonging to individuals under the age of 21. Age is verified as part of the KYC registration process and may be verified again at withdrawal stage.

If duniabet becomes aware that Personal Data belonging to a person under 21 has been collected, the associated Account will be suspended immediately, all Personal Data will be deleted in accordance with applicable law, and any deposited funds will be returned through the original payment channel following verification.

14 International Data Transfers

duniabet may transfer your Personal Data to Processors or service providers located outside of Malaysia in connection with cloud infrastructure, KYC verification services or fraud detection operations. Where such transfers occur, duniabet ensures that appropriate safeguards are in place, including:

• Binding contractual clauses with receiving Processors requiring equivalent data-protection standards;
• Transfer to jurisdictions that provide an adequate level of personal data protection as recognised under applicable frameworks;
• Operational and technical measures limiting the scope of transferred data to that strictly necessary for the stated processing purpose.

duniabet will not transfer Personal Data to any jurisdiction or recipient that does not offer appropriate protections consistent with the standards set out in this Policy.

15 Amendments to This Policy

duniabet reserves the right to amend, update or replace this Privacy Policy at any time. Material changes will be communicated by posting the updated Policy on the Platform with a revised "Last updated" date. Where changes are significant, duniabet may provide additional notice through in-platform notifications or email communication to registered Account holders.

Continued use of the duniabet Platform following the publication of a revised Privacy Policy constitutes acceptance of the updated terms. Players are encouraged to review this Policy periodically. The current version is always accessible at https://duniabet.cam/privacy-policy.

16 Contact Us

If you have any questions, concerns or requests relating to this Privacy Policy or the processing of your Personal Data by duniabet, please contact us using the details below. duniabet will respond to all privacy-related enquiries within a reasonable period and in accordance with applicable legal requirements.

• Email: [email protected]
• Platform: https://duniabet.cam

For requests relating to data subject rights under Section 12 of this Policy, please clearly identify the right you wish to exercise and provide sufficient information to enable duniabet to verify your identity before processing the request. duniabet will not process rights requests that cannot be verified to the satisfaction of our data-protection procedures.