Privacy Policy 477 Duit – User Data Protection

1Our Introduction and Commitment

At 477 Duit, we believe that trust is the foundation of every good relationship. When you entrust us with your personal information, we understand the weight of the responsibility you place in us. That is why we invest seriously in security infrastructure, staff training, and internal policies to ensure your data remains safe and is used responsibly at all times.

From day one of our operations, user data protection has been a priority, not an option. We do not sell your personal information. We do not share your data with third-party advertisers. And we do not retain your information longer than necessary.

This Privacy Policy applies to all users of the 477 Duit platform regardless of the method of access — whether via web browser, Android app, iOS app, or any other digital channel. By using our platform, you agree to the collection and use of information as described in this policy.

2Types of Information We Collect

To provide a safe, personalised, and effective service, 477 duit collects several categories of information from users. The following is an overview of the data we process:

We only collect information that is strictly necessary for the stated purposes. Any information that is no longer needed will be deleted in accordance with our data retention schedule.

3Methods of Information Collection

477 Duit collects your personal information through several different channels, all of which occur transparently and with your knowledge:

• Account Registration: Information you enter during the new account registration process, including your name, phone number and email address.
• KYC Verification: Identity documents and financial information submitted during the account verification process to enable withdrawals.
• Platform Activity: Data generated automatically when you use the platform — game logs, transaction history, clicks, and page navigation.
• Devices and Networks: Technical information such as IP address, browser type, operating system and device identifier, collected automatically for security purposes.
• Support Communications: Information you share when contacting our customer support team via live chat or email.
• Cookies and Tracking Technologies: Session data and preferences stored via browser cookies to enhance the user experience.

4Purpose of Personal Data Use

477 Duit uses the personal information collected solely for legitimate purposes directly related to the provision of our services. The following are the primary purposes for which your data is used:

• Account Management: Creating, verifying and maintaining your account so you can use all platform features seamlessly.
• Transaction Processing: Processing deposits, withdrawals and all financial transactions you make securely and accurately.
• Identity Verification (KYC): Ensuring compliance with anti-money laundering laws and age verification requirements.
• Platform Security: Detecting and preventing fraud, unauthorised access, multi-account use and other suspicious activity.
• Customer Support: Providing relevant and effective assistance whenever you contact us with any issue or enquiry.
• Service Improvement: Analysing aggregated usage patterns to improve the user experience and develop new features.
• Marketing Communications: Sending promotional information and exclusive offers — only if you have given your consent to receive them.
• Legal Compliance: Fulfilling our obligations under applicable Malaysian law, including PDPA 2010.

5Information Sharing and Disclosure

477 Duit does not sell, rent, or trade your personal information to any third party for their own commercial purposes. However, in the course of operating our platform, there are limited situations where we may need to share your information:

• Trusted Service Providers: Companies we engage to support platform operations — such as payment processors, cloud infrastructure providers, and identity verification systems — are all bound by strict confidentiality agreements.
• Legal Requirement: When required by court order, instructions from Malaysian law enforcement authorities, or legitimate regulatory requirements.
• Fraud Prevention: In cases involving investigations into financial fraud or money laundering, information may be shared with the relevant regulatory bodies.
• Business Transfers: In the event of a company merger or acquisition, user information may be transferred as part of the business assets, with advance notice provided to users.

In all of the above cases, we share only the minimum information necessary and ensure that the receiving party has data protection obligations equivalent to our own standards.

6Security and Data Protection

We continuously invest in the latest security technologies and procedures to protect your personal data from unauthorised access, loss, misuse or alteration. Key security measures we employ include:

• 256-bit SSL Encryption: All communications between your device and our servers are encrypted using the latest TLS protocols, ensuring that data in transit cannot be intercepted by any third party.
• Data at Rest Encryption: Sensitive information such as bank account details and identity documents is encrypted when stored in our database.
• Strict Access Controls: Only authorised staff with a legitimate work requirement are permitted to access user data, and every access is logged for audit purposes.
• 24/7 Monitoring: Our threat detection system monitors platform traffic around the clock to proactively identify suspicious activity.
• Regular Penetration Testing: We conduct regular security audits and penetration testing by independent third parties to identify and address any vulnerabilities.
• Two-Factor Authentication (2FA): We offer and encourage the use of 2FA for all user accounts as an additional layer of protection.

7Cookies and Tracking Technologies

477 Duit uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

We use four main types of cookies:

• Essential Cookies: Required for core platform functions such as login sessions and security. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies: Helping us understand how users interact with the platform so we can continuously improve the user experience.
• Functional Cookies: Remembering your preferences such as language choice and display settings to provide a more personalised experience.
• Preference Cookies: Used to display relevant promotional content within our platform. You may decline these cookies without affecting core functionality.

You can manage your cookie settings through your browser at any time. Please note, however, that disabling certain cookies may affect the functionality of some parts of our platform.

8Your Rights Under the PDPA

As a 477 duit platform user and a Malaysian citizen or resident, you have certain rights under the Personal Data Protection Act 2010 (PDPA) regarding your personal data. We respect and facilitate the exercise of these rights:

• Right to Access: You have the right to request a copy of the personal information we hold about you.
• Right to Rectification: You have the right to request the correction of any inaccurate or incomplete information.
• Right to Object: You have the right to object to the processing of your data for direct marketing purposes at any time.
• Right to Withdraw Consent: You may withdraw consent previously given, although this may affect our ability to provide certain services.
• Right to Complain: You have the right to lodge a complaint with the Malaysian Personal Data Protection Commissioner if you believe your rights have been violated.

To exercise any of the above rights, please contact our support team via email at support@477duit.onl. We will process your request within 21 business days.

9Children's Data Protection

The 477 duit platform is a service intended exclusively for adults aged 21 and above. We do not knowingly collect or process any personal information from individuals under the age of 21.

10Cross-Border Data Transfers

In the course of platform operations, some data may be stored or processed on servers located outside Malaysia — for example, for data backup purposes or the use of global cloud services. In all such cases, we ensure that protection equivalent to Malaysia's PDPA standards is upheld by the receiving party.

We only use infrastructure providers with strong security track records who have signed data processing agreements compliant with international data protection requirements. All data transfers are conducted using recognised protection mechanisms such as standard contractual clauses.

11Amendments to This Privacy Policy

477 Duit reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements, or service improvements. Every update will include a clear effective date at the top of this document.

When significant changes are made, we will notify you via your registered email or in-platform notification at least 14 days before the changes take effect. For minor changes that do not affect your fundamental rights, updates may be made without separate notice.

We encourage you to review this page periodically to ensure you are always aware of how we protect your information. Continued use of the platform after the effective date of any amendment constitutes your acceptance of the updated terms.

12Contact Us About Privacy

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, do not hesitate to contact us:

• Email: support@477duit.onl
• Email Subject: [Privacy] followed by a description of your issue
• Response Time: Within 2 hours for critical issues, 21 working days for PDPA requests
• Language: Malay, English, or Chinese

For formal complaints under the PDPA, you may also contact the Department of Personal Data Protection Malaysia (JPDP) directly. We encourage users to reach out to us first so that we may resolve any issues internally before a formal complaint is filed.