Privacy Policy 44duit – Personal Data Protection for Malaysian Users

Welcome to the Privacy Policy page 44duit. This document is prepared to explain as clearly as possible how our platform handles the personal information you share with us when registering, using the platform or interacting with any of our services.

We understand that data privacy is a serious and sensitive matter for many users in Malaysia. With that in mind, 44duit built this privacy policy not merely to meet legal requirements, but because we genuinely care about the trust you place in us. Every decision regarding the handling of your data is made with your best interests in mind.

Privacy Policy applies to all services provided by 44duit, including our official website at 44duit.pro, the 44duit mobile app, and any communications we send you via email, push notifications or other relevant channels.

44duit only collects information that is strictly necessary to provide you with a safe and seamless service. The following are the categories of data we may collect:

We never request information that is irrelevant to our service requirements. Should we need to collect new categories of data in the future, we will notify you and obtain your consent beforehand.

The data we collect is used transparently and responsibly for the following purposes only:

• Account Management: Create and maintain your account, verify your identity through the KYC process, and keep your account secure and active.
• Transaction Processing: Process all deposits and withdrawals accurately and promptly using your preferred payment method.
• Customer Service: Answer inquiries, resolve complaints, and provide technical support to you.
• Platform Security: Detect and prevent fraud, money laundering, unauthorised access, and any suspicious activity.
• Product Improvement: Analyse usage patterns in aggregate (not individually) to improve the user experience and introduce useful new features.
• Legal Compliance: Fulfil reporting and compliance obligations set by regulatory bodies and relevant authorities in Malaysia.
• Marketing Communications: Send information about promotions, bonuses, and special offers – but only if you have agreed to receive them.

44duit does not sell or disclose your personal information to third parties for their own commercial purposes. However, in operating our platform, we work with a number of selected and trusted third-party categories:

• Payment Processors: Payment service providers such as FPX, DuitNow, and e-wallets that need to receive minimum transaction information to process your payments.
• KYC Verification Providers: Recognised identity verification partners who help us validate the documents you submit during the KYC process.
• Cloud Service Providers: Cloud infrastructure companies that store and process our data, bound by strict data protection agreements.
• Statutory Authorities: Law enforcement agencies or regulatory bodies when we are required to do so under Malaysian law.

All third parties we share data with are bound by data protection agreements and are only permitted to use your data for the specified purposes. We do not allow them to use your data for any other reason.

Website and app 44duit uses cookies and similar tracking technologies to enhance your user experience and ensure the platform functions correctly. The following are the types of cookies we use:

• Essential Cookies: Required for core platform functionality such as staying logged in, session security and navigation. These cookies cannot be disabled as they are critical to your account security.
• Performance Cookies: Collect anonymised information about how users interact with our platform to help us identify and fix technical issues.
• Functional Cookies: Save your preferences such as language, theme, and display settings so you do not need to reconfigure them each time.
• Analytics Cookies: Helps us understand overall usage patterns to improve the platform's design and content.

You can manage cookie settings through your web browser. Please note that disabling certain cookies may affect platform functionality. For mobile app usage, privacy settings can be managed through your device system settings.

44duit invests seriously in security infrastructure to ensure your personal data remains protected at all times. Among the security measures we have in place:

• End-to-End Encryption: All data transmitted between your device and our servers is secured with 256-bit SSL/TLS encryption.
• Two-Factor Authentication (2FA): 2FA is available and encouraged for all accounts as an added layer of security.
• 24/7 Monitoring: Our systems are continuously monitored to detect any unauthorised access attempts or suspicious activity.
• Strict Access Controls: Only specifically authorised staff may access users' personal data, and every access is logged for audit purposes.
• Regular Penetration Testing: We undergo regular security testing by independent cybersecurity experts to identify and patch any vulnerabilities before they can be exploited.
• Secure Data Backup: Your data is automatically backed up to a secure, separate storage location to prevent data loss.

44duit retains your personal data only for as long as necessary for the purposes stated in this privacy policy, or as required by Malaysian law.

• Active Account Data: Retained for the duration your account is active and for a reasonable period after account closure.
• Transaction Records: Retained for a minimum of 7 years in accordance with Malaysian financial and tax legal requirements.
• Security Logs: Retained for 12 months for the purpose of investigating any security incidents.
• Communication Data: Emails and support chat records are retained for 3 years for reference and dispute resolution purposes.

Once the retention period ends, your data will be securely deleted or anonymised so it can no longer be personally linked to you.

Under the Malaysia PDPA 2010 and our own policies, you have the following rights regarding your personal data held by 44duit:

Platform 44duit is exclusively for individuals aged 18 and above. We do not knowingly collect any personal data from individuals under the age of 18.

If we find that a child's personal data has been collected unintentionally, we will take immediate action to delete that data and close the account in question. If you believe someone under the age of 18 has registered on our platform, please contact us right away so we can take the appropriate action.

44duit reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service improvements.

When we make significant changes to this policy, we will:

• Updating the "Last Updated" date at the top of this page.
• Send in-account notifications upon your next login.
• Send email notifications to the address registered on your account for material changes.

We encourage you to review this page from time to time to stay updated on how we protect your data. Your continued use of the 44duit after the amendments take effect signifies your acceptance of the updated policy.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please contact our Data Protection Officer (DPO):

• Privacy Email: [email protected]
• General Support Email: [email protected]
• Live Chat: Available 24/7 via the 44duit platform or mobile app
• Response Time: We are committed to responding to all privacy-related inquiries within 5 business days.

If you believe we have not addressed your concerns satisfactorily, you have the right to lodge a complaint with the Department of Personal Data Protection under the Malaysian Ministry of Communications and Digital.