Dadu44 Privacy Policy – Malaysia Member Personal Data Protection

dadu44 ("we", "our platform") is committed to protecting the privacy of every individual who uses our services. This Privacy Policy was established to provide full transparency on how we collect, use, store and protect your personal data in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA).

We understand that entrusting your personal information to any online platform is a decision that should not be taken lightly. That is why, dadu44 takes this responsibility seriously and has implemented multiple layers of protection to ensure your data remains safe and is never misused.

This policy forms part of the overall agreement between you and dadu44, and should be read together with Terms and Conditions us. If you do not agree with any provision of this Privacy Policy, you should not use our platform.

dadu44 collects information from you through various means as you interact with our platform. The types of information we collect are as follows:

Every piece of information we collect is used for a specific and legitimate purpose. dadu44 uses your personal data for the following purposes:

• Account Management: Creating, verifying and managing your account on the dadu44 platform, including the required KYC identity verification process.
• Transaction Processing: Processing all deposits, withdrawals and other financial transactions securely and accurately in accordance with your requests.
• Security & Fraud Prevention: Detecting and preventing any suspicious activity, financial fraud or unauthorised account access.
• Legal Compliance: Fulfilling applicable legal and regulatory obligations, including anti-money laundering (AML) requirements.
• Customer Support: Providing effective assistance when you contact our support team and resolving any issues that arise.
• Service Improvement: Analysing usage patterns in aggregate (not individually) to improve user experience and platform quality.
• Service Communications: Sending important notifications related to your account, security and policy changes that affect you.
• Marketing (with consent): Sending promotional offers and exclusive bonuses if you have opted in to receive marketing communications.

We will not use your data for any purpose other than those stated above without first obtaining your specific consent.

dadu44 does not sell, rent or transfer your personal data to third parties for their own commercial purposes. However, there are limited circumstances where data sharing is necessary and lawful:

• Payment Providers: Required transaction information is shared with licensed payment service providers such as DuitNow, FPX and e-wallets licensed in Malaysia to process your transactions.
• Technical Service Providers: Cloud infrastructure and technical service providers that assist us in operating the platform, subject to strict confidentiality agreements.
• Game Providers: Minimal game session information is shared with licensed game providers to ensure game integrity and fairness.
• Authorities: Where required by Malaysian law, a court order or directive from a competent authority, we will disclose the necessary information.

All third parties we work with are required to comply with data protection standards equal to or higher than those we uphold. They are not permitted to use your data for any purpose outside the scope of their service agreement with dadu44.

The security of your personal data is our highest priority dadu44. We have implemented multiple layers of technical and organisational security measures to protect your information from unauthorised access, disclosure, alteration or destruction.

• Data Encryption: All data transmitted between your device and our servers is protected with 256-bit SSL/TLS encryption. Sensitive data in storage is also encrypted using advanced encryption algorithms.
• Internal Access Controls: Access to members' personal data by internal staff is restricted on a need-to-know basis, and all access is recorded in an audit log.
• Firewall & Detection Systems: Server infrastructure is protected by multi-layered firewalls and a 24-hour intrusion detection and prevention system (IDS/IPS).
• Two-Factor Authentication: Two-factor authentication (2FA) is available for all member accounts to add an extra layer of protection against unauthorised access.
• Security Auditing: Our security systems are regularly reviewed and tested by independent cybersecurity experts to identify and address any vulnerabilities.

While we take all reasonable precautions, no security system is completely impenetrable. You also play an important role in protecting your account by using a strong password, not sharing your login credentials, and reporting any suspicious activity to us promptly.

Platform dadu44 uses cookies and similar tracking technologies to enhance user experience and ensure the platform functions correctly. The types of cookies we use are as follows:

• Essential Cookies: Required for core platform functions such as maintaining your login session and ensuring transaction security. These cookies cannot be disabled.
• Performance Cookies: Collecting aggregate information on how visitors use the platform to help us improve performance and user experience.
• Functional Cookies: Remembering your preferences such as language settings and display options to provide a more personalised experience.
• Analytics Cookies: Used to understand overall platform usage patterns for development and continuous improvement purposes.

You can manage your cookie settings through your web browser at any time. Please note that disabling certain cookies may affect the functionality and user experience of the platform. dadu44.

As a data subject under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by dadu44:

To exercise any of the above rights, please contact our privacy team via the support email. We will process your request within 21 business days. In complex cases, this period may be extended up to 60 days with prior notice to you.

dadu44 only retains your personal data for as long as necessary to fulfil the original purpose of collection or to comply with applicable legal requirements.

• Active Account Data: Retained for the duration your account is active and for 7 years after account closure to meet financial and tax legal requirements.
• Transaction Records: Retained for a minimum of 7 years in compliance with Malaysia's anti-money laundering (AML) and tax reporting requirements.
• Communication Logs: Customer support interaction records are retained for 3 years for dispute resolution and service improvement purposes.
• Technical Data: Server logs and analytics data are retained for 12 months before being automatically deleted or anonymised.
• KYC Documents: Identity verification documents are retained for 5 years from the date of verification or account closure, whichever is later.

Once the retention period expires, your data will be permanently deleted or anonymised so it can no longer be linked to you personally. This deletion process is carried out in accordance with approved procedures to ensure data cannot be recovered.

dadu44 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service improvements. When significant changes are made, we will:

• Publishing the latest version on the website dadu44 with an updated "Last Updated" date.
• Sending notifications to all registered members via email or in-platform notifications for material changes.
• Providing reasonable notice before changes take effect where applicable.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your data. Continued use of the platform dadu44 after any changes are published will be considered your acceptance of the updated policy.

If you have any questions, concerns or requests regarding this Privacy Policy or how we manage your personal data, please contact us through the following channels:

We are committed to responding to all privacy-related enquiries within 5 business days. For formal data rights requests, please include your account number and a copy of your identification document to expedite the verification process.