Privacy Policy Duel Casino — Malaysian Player Data Protection

Welcome to the Privacy Policy page Duel Casino. We — as the operator of the duelcasino.fun platform — understand how important your trust is to us in handling the personal information you share while using our services.

This document is designed to give you a clear and transparent overview of our privacy practices — from the types of data collected to how we ensure that data remains secure and is used only for legitimate purposes. We believe transparency is the foundation of trust, and trust is the foundation of the long-term relationship between us and every Duel Casino player.

This privacy policy applies to all users of the Duel Casino platform, including website visitors, registered members, and all individuals who interact with any of our service channels. By using this platform, you agree to the processing of your data as described in this document.

Duel Casino collect various types of information depending on how you interact with our platform. Below is a summary of the types of data we process:

We may also receive data about you from legitimate third-party sources such as identity verification agencies, payment service providers, and compliance databases used for fraud prevention and anti-money laundering purposes.

Duel Casino processes your personal data for specific, legitimate purposes. We do not use your data for any other purpose without prior notice and, where required, your consent. The primary purposes for data use include:

• Account Management — Creates, verifies, and maintains your account so you can access all platform features.
• Transaction Processing — Processes your deposits, withdrawals, and all financial activity securely and efficiently.
• Legal Compliance — Fulfils KYC requirements, anti-money laundering (AML) obligations, and reporting duties to the relevant authorities.
• Platform Security — Detects and prevents fraudulent activity, account misuse, and cybersecurity threats.
• Customer Support — Handles enquiries, complaints, and support requests promptly.
• Personalisation — Personalises your gaming experience and promotional recommendations based on your preferences, with your consent.
• Responsible Gaming — Monitors gameplay patterns to identify early signs of problem gambling and offer appropriate assistance.
• Platform Improvement — Analyses aggregated usage data to improve overall performance, interface, and user experience.

Duel Casino do not sell, rent, or disclose your personal data to third parties for marketing purposes. However, there are certain situations where we may need to share your information with trusted parties:

• Payment Service Providers — To process your deposits and withdrawals securely. These providers are bound by strict confidentiality agreements.
• Identity Verification Agency — To conduct KYC and AML checks as required by law.
• Game Software Providers — Minimum data required to operate specific games provided by third-party suppliers.
• Legal Authorities — When required by court order, regulatory directive, or valid legal obligation.
• Integrated Business Partners — In the event of a merger, acquisition, or asset sale, where data is transferred to the new entity with equivalent protections in place.

We continuously invest in the most up-to-date security infrastructure to ensure your personal data is always protected. The security measures we have implemented encompass multiple layers of protection:

• Data encryption in transit using TLS 1.3 protocol and SSL 256-bit encryption.
• Data encryption at rest for all sensitive information stored in our databases.
• Role-based access control (RBAC) ensuring that only authorised personnel can access your data.
• 24/7 security monitoring with an active intrusion detection system (IDS).
• Regular security audits by independent third parties to identify and address vulnerabilities.
• Two-factor authentication (2FA) is available and encouraged for all player accounts.
• A comprehensive incident response plan to address any data breaches swiftly.

While we take all reasonable steps to protect your data, no system is 100% secure. We therefore encourage you to play an active role in securing your account by using a strong password, enabling two-factor authentication, and reporting any suspicious activity to us promptly.

Platform Duel Casino use cookies and similar tracking technologies to enhance your experience and ensure the platform operates at its best. The categories of cookies we use include:

• Essential Cookies — Required for core platform functions such as login authentication and session security. These cookies cannot be disabled.
• Preference Cookies — Saves your settings and preferences such as language, theme, and display options for your convenience.
• Analytics Cookies — Helps us understand how players use the platform so we can improve our services. This data is processed in aggregate and anonymised form.
• Marketing Cookies — Used to display relevant promotions and measure campaign effectiveness. You may opt out of these cookies.

You can manage your cookie settings through your web browser at any time. Please note that disabling certain cookies may affect the functionality of some parts of the platform. A full list of cookies used and their retention periods is available in your account's privacy settings centre.

As a data subject, you hold important rights under Malaysia's data protection laws. Duel Casino committed to respecting and facilitating the exercise of these rights:

To exercise any of the above rights, contact our privacy team via email or live chat. We will process your request within 30 business days. In complex cases, this period may be extended to up to 60 days, with prior notice to you.

Platform Duel Casino is restricted to individuals aged 18 and above. We do not knowingly collect, process, or store personal data from minors.

If we discover that data belonging to an underage individual has been collected, we will take immediate steps to delete that data and close the account in question. If you are a parent or guardian who believes your child has registered on our platform, please contact us immediately and we will respond within 48 hours.

As an online platform operating globally, your data may be processed or stored on servers located outside Malaysia. When this occurs, Duel Casino ensure that:

• Data transfers are only carried out to countries or entities with a level of data protection equivalent to or higher than Malaysia.
• Data transfer agreements compliant with Malaysia's legal requirements have been established with all overseas data recipients.
• Appropriate technical and organisational protection measures are applied at all levels of data transfer.
• You will be notified of any material changes to data processing locations that may affect your privacy rights.

Duel Casino retain your personal data only for as long as necessary for the purposes stated in this policy or as required by Malaysian law. Our general data retention guidelines are as follows:

• Active Account Data — Retained for the duration your account is active and for a defined period after account closure for compliance purposes.
• Financial Transaction Records — Retained for a minimum of seven years in accordance with Malaysia's anti-money laundering legal requirements.
• Support Communication Records — Retained for two years from the date of last interaction.
• Technical and Log Data — Retained for 12 months for security purposes and technical troubleshooting.
• KYC Documents — Retained for the period mandated by regulatory authorities, typically five to seven years.

Once the retention period expires, your data will be securely deleted or anonymised using methods that ensure your identity cannot be recovered from the remaining data.

Duel Casino reserves the right to update or amend this privacy policy from time to time to reflect changes in our practices, technology, legal requirements, or other relevant factors.

When we make material changes, we will notify you through one or more of the following methods: an in-platform notification, an email to your registered address, or a prominent notice banner on the homepage. The "Updated" date at the top of this document will always reflect the latest version.

If you have any questions, concerns, or complaints regarding how Duel Casino handling your personal data, our privacy team is ready to assist. You may reach us through the following channels:

• Function Live Chat available directly on the platform — for the fastest response.
• Our official privacy email: [email protected]
• Via the page FAQ us for frequently asked questions related to privacy and account security.

We are committed to responding to all privacy-related enquiries within five business days. For formal complaints requiring thorough investigation, the resolution period is 30 business days. If you are not satisfied with our response, you have the right to file a complaint with the Personal Data Protection Department of Malaysia (JPDP).