Privacy Policy duel7 —
Our Commitment to Protecting Your Data

1 Introduction

Duel7 is fully committed to protecting the privacy and personal data of every member and visitor to our platform. We understand that your trust is the most valuable asset we must safeguard, and protecting your information is part of that commitment.

This Privacy Policy is provided to give you full transparency on how duel7 handles your personal information — from the moment you register an account and make your first deposit, to every gaming session you enjoy with us. We want you to know exactly what happens with your data, and you have every right to know.

Duel7's privacy practices are designed in line with industry-leading data protection principles, including compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and relevant international standards. We take every aspect of data security and privacy seriously, as your trust is the foundation of the services we offer.

2 Information We Collect

Duel7 only collects information necessary to provide you with a safe, seamless, and high-quality service. The following are the categories of information we collect:

We do not collect sensitive information such as biometric data, medical records, or religion- and politics-related information. All data collected is strictly limited to what is genuinely necessary for the operation of the duel7 platform.

3 How We Use Your Data

Information you provide to duel7 is used responsibly for the following purposes:

• Account management: Creating and maintaining your account, processing registration, and verifying your identity through the KYC process.
• Transaction processing: Processing deposits, withdrawals, and all financial activities on the platform securely and efficiently.
• Security & fraud prevention: Detecting and investigating suspicious activity, protecting your account from unauthorized access.
• Customer support: Providing relevant and accurate assistance whenever you contact the duel7 support team.
• Marketing communications: Sending information about promotions, bonuses, and the latest offers — only if you have consented to receive them.
• Legal compliance: Fulfilling reporting and audit obligations required by the relevant authorities.
• Platform improvement: Analyzing usage patterns to develop new features and enhance the overall user experience.
• Responsible gaming: Monitoring gameplay patterns to identify users who may need support or self-management tools.

4 Information Sharing with Third Parties

Duel7 does not sell, rent, or trade your personal data to any external party for marketing or commercial purposes. However, there are limited situations where we need to share certain information with trusted third parties:

• Payment providers: Required transaction information is shared with payment processors such as DuitNow, FPX, and digital wallet providers solely for payment settlement purposes.
• Technology service providers: Technology partners who help us manage our platform infrastructure, including cloud services and security systems — all bound by strict confidentiality agreements.
• Statutory authorities: When required by Malaysian law or court order, duel7 will disclose the necessary information to the relevant authorities.
• Game service providers: Third-party game providers may receive the minimum technical data necessary to ensure games run smoothly on the duel7 platform.

5 Data Encryption & Security

The security of your data is duel7's absolute top priority. We continuously invest in best-in-class security infrastructure to ensure all your personal and financial information remains protected at all times.

• 256-bit SSL encryption: All communications between your device and duel7's servers are protected by 256-bit SSL/TLS encryption — the same standard used by major banking institutions.
• Data-at-rest encryption: Personal data stored in our databases is encrypted using robust AES-256 encryption.
• Two-factor authentication (2FA): We support and encourage the use of 2FA to provide an extra layer of security for your account.
• 24/7 security monitoring: Our systems are continuously monitored to detect any threats or unusual activity in real time.
• Regular security audits: duel7 conducts regular penetration testing and security audits to ensure there are no vulnerabilities in our systems.
• Strict access control: Only authorised staff with a legitimate business need may access users' personal data, and all access is recorded.

While we implement comprehensive security measures, no system can be guaranteed 100% secure. We encourage you to play your part in keeping your account safe by using a strong password and not sharing your login credentials.

6 Cookies & Tracking Technologies

Duel7 uses cookies and similar tracking technologies to enhance the user experience, ensure session security, and understand how our platform is used.

• Essential Cookies: Required for core platform functions such as login session management and security. These cookies cannot be disabled.
• Functional Cookies: Saving your preferences such as language, display settings, and personal preferences to streamline your experience.
• Analytics Cookies: Helping us understand platform usage patterns to improve design and existing features. This data is collected in aggregate and does not directly identify individuals.
• Security Cookies: Used to detect suspicious activity, prevent fraud, and protect the integrity of the platform.

You can manage your cookie settings through your web browser at any time. Please note that disabling certain cookies may affect the functionality or user experience of the duel7 platform.

7 Data Retention Period

Duel7 retains your personal data for as long as necessary to fulfil the original purpose of collection and related legal obligations. The following are general guidelines for our data retention periods:

• Active account data: Retained for the duration your account is active and for a reasonable period after account closure for audit purposes.
• Financial transaction records: Retained for a minimum of 7 years in accordance with Malaysian accounting and tax legal requirements.
• KYC verification data: Retained for a minimum of 5 years after the business relationship ends, in line with anti-money laundering (AML) requirements.
• Security logs: Retained for 12 to 24 months for security investigation and compliance purposes.
• Marketing data: Retained until you withdraw your consent to receive marketing communications.

Once the retention period expires, your data will be securely deleted or anonymised using methods that ensure it cannot be recovered.

8 Your Rights Regarding Personal Data

As a duel7 user and data subject under Malaysia's data protection laws, you have the following rights regarding your personal information:

To submit any request related to the above rights, contact the duel7 data protection team via Live Chat in the app or our support email. We will process your request within 30 business days.

9 Child Data Protection

The duel7 platform is strictly for individuals aged 18 and above. We do not knowingly collect or process personal data from individuals under the age of 18.

If we discover that personal data belonging to someone under the age of 18 has been collected without our knowledge, we will take immediate steps to delete that information and close the relevant account. Parents or guardians who suspect their child has registered a duel7 account without permission are encouraged to contact us immediately.

10 Amendments to This Privacy Policy

Duel7 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements, or platform service improvements.

Any material changes to this Privacy Policy will be communicated to you via an in-platform notice on duel7 or your registered email at least 14 days before the changes take effect. The "Updated" date at the top of this page reflects the date of the latest revision.

Your continued use of the duel7 platform after any amendments take effect constitutes your acceptance of the updated Privacy Policy. If you do not agree with the changes, you have the right to close your account and discontinue use of the platform.

11 Contact Our Privacy Team

If you have any questions, concerns, or wish to submit a request regarding your personal data, the duel7 data protection team is here to help:

• Live Chat: Available 24/7 within the duel7 app — the fastest way to get an immediate response.
• Privacy Email: [email protected]
• General Support Email: [email protected]

We are committed to responding to all privacy-related enquiries within 3 business days, and to resolving data rights requests within 30 business days of receipt.