🔒 Updated: January 2026

Privacy Policy duni77 — User Personal Data Protection

At duni77, your privacy is not merely a legal obligation — it is our sincere commitment to every member. This document clearly explains how we collect, use, store, and protect your personal data throughout your use of our platform.

Effective: 1 January 2026
256-bit SSL
Malay
Estimated Reading Time: 7 Minutes

Commitment Privacy Protection duni77

Six core pillars that shape duni77's approach to protecting the personal data of every user on our platform.

Advanced Data Encryption

All data transmitted between your device and duni77's servers is protected by 256-bit SSL encryption — the same standard used by leading financial institutions worldwide. Your sensitive information is never transferred in plain text.

Secure Data Storage

Your personal data is stored in data centres with multi-layered physical and digital security systems. Access to these databases is restricted to designated personnel with strict authorisation, and every access is logged for audit purposes.

No Sale of Data to Third Parties

Duni77 strictly does not sell, rent, or disclose your personal data to any third party for marketing purposes. Your data belongs to you, and we fully respect the trust you place in us.

Full User Control

You have the full right to access, correct, or request deletion of your personal data at any time. The duni77 team is ready to process such requests within 30 business days of receipt.

PDPA Legal Compliance

Duni77 operates in full compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and internationally recognised data protection standards. All data collection and processing is carried out on a lawful basis.

Immediate Data Breach Notification

In the event of any security incident involving user data, duni77 is committed to notifying affected members within 72 hours of the incident being identified, along with immediate protective measures to be taken.

1

Introduction & Policy Scope

This Privacy Policy ("Policy") is published by duni77, an online gaming and betting platform operating in Malaysia. This document carefully outlines how we collect, process, store, and protect your personal data when you use duni77's services through our website, mobile app, or any other relevant digital channel.

This Policy applies to all individuals who interact with the duni77 platform, including visitors without an account, prospective members in the registration process, active registered members, and former members whose accounts have been closed. By using the duni77 platform, you acknowledge that you have fully read and understood this Privacy Policy.

This Policy should be read together with Terms & Conditions and Responsible Gaming Policy duni77 for a full overview of your rights and responsibilities as a user of our platform.

Duni77 acts as the data controller for all personal information collected through our platform. This means we determine the purpose and manner in which your data is processed, and we bear full responsibility for that processing in accordance with applicable data protection laws.

2

Data We Collect

Duni77 collects your personal data through several different channels. Below are the categories of data we collect along with their sources:

Data Categories Example Information Resources
Identity Data Full name, identity card number, date of birth, photo Provided by you during registration / KYC
Contact Data Email address, phone number, mailing address Provided by you
Financial Data Bank account number, bank name, transaction records Provided by you during deposit / withdrawal
Technical Data IP address, device type, web browser, operating system Collected automatically
Usage Data Game history, betting logs, active session times Generated during platform use
Communication Data Support chat records, email history, feedback During interactions with our team
Note: duni77 does not collect sensitive data such as medical records, political opinions, or biometric data except where specifically required by law or with your explicit consent.
3

How We Use Your Data

The personal data we collect is used solely for legitimate and necessary purposes to properly operate the duni77 platform and deliver the best user experience. The following are the primary purposes for which your data is processed:

  • Verifying your identity during registration and conducting KYC processes as required by anti-money laundering (AML) laws
  • Processing deposits, withdrawals, and all financial transactions you carry out on the duni77 platform
  • Managing your account, including profile settings, betting limits, and notification preferences
  • Providing responsive and effective customer support across all communication channels
  • Detecting and preventing fraud, money laundering, and suspicious activity on the platform
  • Sending relevant promotional information, bonuses, and exclusive offers (subject to your preferences)
  • Improving platform quality through aggregated, anonymized usage data analysis
  • Complying with applicable legal obligations and regulatory requirements
  • Enforcing the Terms and Conditions and other policies of the duni77 platform
duni77 never uses your data to make automated decisions that materially affect you without human involvement in the assessment process. Every significant decision relating to your account will be reviewed by our team.
4

Legal Basis for Processing

In accordance with Malaysia's Personal Data Protection Act 2010 (PDPA), duni77 only processes your personal data on the basis of one or more of the following valid legal grounds:

  • Consent: You have given explicit consent for specific data processing, such as receiving marketing communications from us
  • Contract Fulfillment: Processing is necessary to fulfill the contract between you and duni77, including processing financial transactions and maintaining your account
  • Legal Obligation: Processing is required to comply with applicable laws, including AML/KYC requirements and regulatory authority directives
  • Legitimate Interest: Processing is necessary for the legitimate interests of duni77 or a third party, such as detecting fraud and ensuring platform security, provided those interests do not override your fundamental rights

Where we rely on consent as the legal basis for processing, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to the withdrawal.

5

Data Sharing with Third Parties

Duni77 handles user data with the utmost care. We only share your personal data in limited and specific situations as set out below. In all cases, data sharing is carried out with adequate contractual safeguards:

  • Payment Service Providers: Payment gateways and banks that process your financial transactions, subject to strict confidentiality agreements
  • Game Software Providers: Game providers integrated with the duni77 platform may receive the technical data required to run the games
  • Regulatory Authority: Government or regulatory bodies when required by law or court order
  • IT Service Providers: Hosting, cybersecurity, and analytics companies that help us operate the platform securely
  • Audit Partner: Independent auditors who verify the compliance and operational integrity of duni77
All third parties that receive duni77 user data are contractually bound to protect that information and use it only for agreed purposes. We periodically audit our partners to ensure compliance with the data protection standards we set.

Duni77 strictly does not sell or rent your personal data to advertisers, marketers, or any third parties unrelated to the operation of our platform. This is a no-compromise policy we have upheld since day one of our operations.

6

Cookies & Tracking Technologies

Duni77 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

Cookie Type Purpose Duration
Essential Cookies Maintaining login sessions and basic security settings Session only
Functional Cookies Saving language preferences, display settings, and user preferences 1 year
Analytics Cookies Understanding usage patterns to improve the platform 2 years
Performance Cookies Monitoring platform speed and responsiveness 6 months

You can manage your cookie settings through your web browser at any time. However, disabling essential cookies may affect certain functions of the duni77 platform. For more information on how to manage cookies, please refer to your web browser's documentation.

7

Data Retention & Deletion

Duni77 retains your personal data only for as long as necessary to fulfil the original purpose of its collection or as required by law. Once the retention period expires, data will be securely deleted or anonymised.

  • Active account data is retained for as long as your account remains active on the duni77 platform
  • Following account closure, financial data and transaction records are retained for 7 years in compliance with Malaysia's financial legal requirements
  • Login and security activity data is retained for 2 years for audit and investigation purposes
  • Customer support communication records are retained for 3 years from the date of the last interaction
  • Marketing data and communication preferences are retained until you withdraw your consent
If there is an ongoing investigation relating to your account — whether by duni77 or a regulatory authority — relevant data may be retained beyond the standard retention period until the investigation is fully concluded.
8

Information Security

Your data protection is an absolute priority at duni77. We have implemented a comprehensive security framework encompassing technical, organisational, and physical measures to keep your data safe at all times:

  • In-transit data encryption using the latest TLS 1.3 protocol
  • At-rest data encryption using AES-256 for all sensitive information
  • Two-factor authentication (2FA) for all duni77 internal administrative access
  • Regular vulnerability scanning and penetration testing conducted by independent security experts
  • Real-time threat monitoring using advanced SIEM systems
  • Thoroughly tested and documented incident response procedures
  • Mandatory cybersecurity awareness training for all duni77 staff
While duni77 takes all reasonable steps to protect your data, no security system is entirely perfect. We encourage you to play an active role in securing your account by using a strong password and enabling 2FA.
9

Your Rights as a User

As a duni77 user, you have a range of rights regarding your personal data under Malaysia's PDPA. duni77 is committed to facilitating the exercise of these rights without any undue obstacles:

Right of Access

Request a copy of the personal data we hold about you in a readily understandable format.

Right to Rectification

Request correction of inaccurate or incomplete data held in our records about you.

Right to Erasure

Request deletion of your personal data when it is no longer required for its original purpose.

Right to Object

Object to the processing of your data for direct marketing purposes at any time.

Right to Restriction

Request that we restrict the processing of your data under certain specified circumstances.

Right to Data Portability

Receive your data in a structured, machine-readable format for transfer to another platform.

To exercise any of the above rights, please contact our Privacy Officer by email at [email protected] or via live support chat. We will process your request within 30 calendar days from the date of receipt of a complete application.

10

International Data Transfers

In the course of duni77's operations, some of your personal data may be transferred to, or accessed from, countries outside Malaysia. This occurs primarily when we use cloud infrastructure or services from international technology providers.

In all such international transfers, duni77 ensures a level of protection equivalent to that provided in Malaysia through the following mechanisms:

  • Data transfer agreements with approved standard protection clauses
  • Transfers only to countries recognized as providing an adequate level of data protection
  • Data protection impact assessments (DPIA) for high-risk transfers prior to execution
  • Regular audits of all overseas data recipients to ensure ongoing compliance
If you would like to learn more about the specific mechanisms we use for particular international data transfers, you may request this information through the contact channels provided in section 13.
11

Children & Privacy

The duni77 platform is a service designed exclusively for adults aged 18 and above. We do not intentionally collect or process personal data of individuals under the age of 18. If you believe a minor has registered on our platform without authorisation, please contact us immediately.

Should we discover that a child's personal data has been collected inadvertently, we will take immediate steps to delete that information from our records and close the relevant account without delay. The safety and privacy of children is duni77's highest priority in this matter.

12

Privacy Policy Amendments

Duni77 reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our practices, applicable legal requirements, or improvements to the duni77 platform. You will be notified of any material amendments through:

  • Email notification to the address registered to your account
  • A prominent notice on the duni77 platform homepage for a minimum of 30 days
  • In-app notification on the duni77 mobile app upon login

The effective date of each version of the Privacy Policy will be clearly stated at the top of this document. Your continued use of the duni77 platform after that effective date constitutes your acceptance of the amended Privacy Policy. If you do not agree with the amendments made, you have the right to close your account before the amendment's effective date.

We recommend reviewing this Privacy Policy periodically — at least once every three months — to stay informed about how we safeguard your personal data.
13

Contact the Privacy Officer

Duni77 has appointed a Data Protection Officer (DPO) responsible for monitoring our compliance with data protection laws and handling user enquiries and complaints relating to privacy.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please contact our Privacy Officer through the following channels:

We are committed to responding to all privacy-related inquiries within 5 business days. For more complex complaints requiring thorough investigation, we will issue an acknowledgment within 48 hours and a full response within 30 calendar days.

If you are not satisfied with our response, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia or the relevant regulatory authority in your jurisdiction.

Summary Privacy Commitment We

Three core principles that guide every duni77 decision in handling user personal data.

Transparency

We are always transparent about the data we collect, why we collect it, and how it is used. No hidden agendas, no confusing language.

Security

We continuously invest in best-in-class technology and processes to ensure your data is protected against increasingly sophisticated digital threats.

Respect

Your data belongs to you. We respect your right to control your personal information and facilitate the exercise of those rights without any obstacles.

Safe & Trusted Platform

Join duni77 — Your Privacy Always On

With state-of-the-art encryption, a transparent privacy policy, and a 24/7 support team, duni77 ensures every gaming experience takes place in a safe, fair, and responsible environment. Over 500,000 members have trusted us — now it's your turn.

Free registration • No hidden fees

Frequently Asked Questions About Privacy Policy

Answers to the most frequently asked questions by duni77 users regarding privacy and data protection.

Absolutely not. duni77 has a strict policy prohibiting the sale or sharing of user personal data with advertisers or third-party marketing companies. Your data is only shared with service providers directly involved in the operation of our platform, such as payment processors and game providers, and all such parties are bound by strict confidentiality agreements.

You can submit a Subject Access Request (SAR) by emailing [email protected] or via our live support chat. Please include your full name and registered email address for identity verification. We will process your request and deliver a complete data report within 30 calendar days of receiving your application.

Following account closure, your profile data and marketing information will be deleted within 90 days. However, financial and transaction records will be retained for 7 years in compliance with Malaysia's accounting and financial legal requirements. This data is stored under strict lock with highly restricted access and may only be used for legal compliance purposes.

Yes, you can unsubscribe from promotional emails at any time with ease. Click the "Unsubscribe" link found at the bottom of any promotional email we send, or update your communication preferences in your duni77 account settings. Unsubscribe requests will be processed within 5 to 7 business days. Please note that important transactional emails relating to your account cannot be disabled, as they contain essential information about your account activity.

duni77 uses automated systems for fraud detection and responsible gaming policy compliance; however, any decision that materially affects your account will always involve a review by our human team. You also have the right to request a manual review of any automated decision you feel is unfair, and we will examine your case with full attention.
Bahasa Melayu