Privacy Policy

Duren777 ("we", "us", "our", "the Platform") is the data controller responsible for the personal information you provide to us and the data we collect through your use of the Platform. We take our obligations as data controller seriously and are committed to processing your personal information fairly, transparently, and in accordance with applicable data protection law.

This Privacy Policy describes in detail: what categories of personal data we collect; the purposes for which we use that data; our legal bases for processing; how long we retain data; when and with whom we share data; and what rights you have in relation to your personal information.

By registering an account with Duren777 or by continuing to use the Platform after this policy has been published, you confirm that you have read and understood this Privacy Policy. If you do not agree with any aspect of this Policy, please discontinue use of the Platform and contact us to close your account.

This Policy should be read in conjunction with Duren777's Terms & Conditions, which are incorporated herein by reference.

For the purposes of this Privacy Policy, the following terms carry the meanings defined below:

• "Personal Data" / "Personal Information" means any information that identifies or could reasonably identify a natural person, directly or indirectly, including name, identification number, contact details, location data, online identifiers, and financial information.
• "Processing" means any operation performed on Personal Data, including collection, recording, organisation, storage, retrieval, use, disclosure, transmission, erasure, or destruction.
• "Data Controller" means the entity that determines the purposes and means of processing Personal Data. Duren777 is the Data Controller in respect of all Member personal information.
• "Data Processor" means an entity that processes Personal Data on behalf of the Data Controller. Third-party service providers engaged by Duren777 act as Data Processors.
• "Data Subject" means the identified or identifiable natural person whose Personal Data is being processed — i.e., you, the Member or visitor.
• "Consent" means any freely given, specific, informed, and unambiguous indication by the Data Subject that they agree to the processing of their Personal Data for a specified purpose.
• "Sensitive Personal Data" means a special category of Personal Data including racial or ethnic origin, political opinions, religious beliefs, health data, biometric data, and financial information, which requires heightened protection.

Duren777 collects the following categories of personal information from Members and Platform visitors:

Where Duren777 requests data that is mandatory for account registration or KYC completion, this will be clearly indicated at the point of collection. Failure to provide mandatory data may prevent account creation or withdrawal processing.

Duren777 collects personal data through the following means:

• Direct Collection: Information you actively provide during account registration, KYC submission, deposit and withdrawal requests, customer support interactions, survey participation, and promotion entries;
• Automated Collection: Technical and usage data collected automatically through cookies, server logs, session tracking technologies, and analytics tools as you navigate the Platform;
• Third-Party Providers: Identity verification and KYC data confirmed through authorised third-party verification service providers; fraud screening data from fraud prevention partners; payment confirmation data from payment processors including FPX, DuitNow, Touch 'n Go, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong Bank, and cryptocurrency processing providers;
• Publicly Available Sources: In limited circumstances, Duren777 may supplement Member records with information from publicly available databases for fraud prevention or sanctions screening purposes.

Duren777 processes personal data only where a recognised lawful basis exists. The following table outlines our primary processing purposes and their corresponding legal bases:

Where processing is based on consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal. Withdrawal of consent may be effected by updating your marketing preferences in account settings or by contacting our support team.

Duren777 may share your personal data with the following categories of third parties, solely to the extent necessary for the purposes described:

• Payment Processors: Touch 'n Go, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong, and cryptocurrency processing providers — to facilitate deposit and withdrawal transactions;
• KYC and Identity Verification Providers: Authorised third-party identity verification services to conduct age and identity checks in compliance with our21+ age restriction and AML obligations;
• Game Software Providers: Licensed game providers may receive anonymised player session data for game performance analysis. No directly identifiable personal information is shared;
• Fraud Prevention and Security Partners: Fraud detection and cybersecurity service providers who process data to identify and prevent fraudulent account activity;
• IT Infrastructure and Cloud Services: Hosting, data storage, and content delivery providers who maintain the technical infrastructure of the Platform under strict data processing agreements;
• Legal and Regulatory Authorities: Competent authorities, courts, or regulators where disclosure is required by law, court order, or regulatory obligation. In all such cases, Duren777 will only disclose the minimum personal data necessary;
• Professional Advisors: Lawyers, auditors, and insurers under binding confidentiality obligations, where necessary for the conduct of Duren777's business.

All third parties with whom Duren777 shares personal data are required to implement appropriate technical and organisational security measures, and are contractually prohibited from using shared data for any purpose other than the specified service they provide to Duren777.

Duren777 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, including compliance with legal, accounting, and regulatory obligations. The following retention periods apply:

• Account and Identity Data: Retained for the duration of the Member's account and for a minimum of five (5) years following account closure, in accordance with anti-money laundering record-keeping requirements;
• Financial Transaction Records: Retained for a minimum of seven (7) years to comply with applicable financial record-keeping obligations;
• KYC Documents: Retained for five (5) years following the termination of the business relationship;
• Customer Support Communications: Retained for three (3) years from the date of the last interaction;
• Technical and Usage Data (logs): Retained for up to twelve (12) months, after which data is anonymised or deleted;
• Marketing Preference Data: Retained until consent is withdrawn, plus six (6) months for audit purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or permanently anonymised in accordance with Duren777's data disposal procedures. Where data subject rights requests are received that require earlier deletion, these are assessed against any overiding legal obligations to retain.

The security measures Duren777 maintains include, without limitation:

• 256-bit SSL/TLS encryption for all data transmitted between your device and Duren777 servers;
• Encryption at rest for all stored personal and financial data;
• Two-factor authentication (2FA) available for all Member accounts;
• Access controls ensuring that only authorised personnel with a legitimate business need can access personal data, on a strict need-to-know basis;
• Regular internal and external penetration testing and vulnerability assessments;
• 24/7 security monitoring, intrusion detection systems, and automated threat response;
• Formal incident response procedures covering detection, containment, notification, and remediation of any data security incident;
• Regular staff training on data protection obligations and information security best practices.

While Duren777 takes every reasonable precaution to secure your personal data, no data transmission over the internet or data storage system can be guaranteed as completely secure. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, Duren777 will notify affected Members without undue delay.

You play an important role in account security. You must maintain the confidentiality of your login credentials and notify Duren777 support immediately if you suspect any unauthorised access to your account.

Duren777 uses cookies and similar tracking technologies to operate and improve the Platform. A cookie is a small text file placed on your device when you access the Platform. The following categories of cookies are used:

You can manage your cookie preferences through your browser settings. Most browsers allow you to refuse cookies, delete existing cookies, or be notified when new cookies are set. Please note that disabling strictly necessary cookies will impair Platform functionality and may prevent you from logging in or placing bets.

Duren777 does not permit third-party advertising networks to place tracking cookies on the Platform without your explicit consent.

You have the following rights in relation to your personal data held by Duren777. These rights may be subject to certain limitations and exemptions under applicable law, particularly where processing is required to comply with a legal obligation or to prevent fraud.

To exercise any of the rights listed above, please contact the Duren777 support team via live chat or email. All data subject requests are acknowledged within 48 hours and responded to substantively within 14 business days from the date of acknowledgement. We may request verification of your identity before processing your request.

There is no charge for exercising your data subject rights in ordinary circumstances. Where requests are manifestly unfounded, excessive, or repetitive, Duren777 reserves the right to charge a reasonable administrative fee or to decline the request, with written reasons provided.

The Duren777 Platform is strictly intended for individuals who are at least 21 years of age. Duren777 does not knowingly collect personal data from any person under the age of 21. Registration by or on behalf of a minor is a material breach of Duren777's Terms and Conditions and is strictly prohibited.

Where Duren777 discovers or has reasonable grounds to suspect that personal data has been collected from a person under 21 years of age, it will promptly take steps to delete such data and suspend or permanently close the associated account. Any funds held in such an account will be subject to investigation before any refund determination is made.

Parents or guardians who have reason to believe that a minor has registered with Duren777 should contact customer support immediately so that appropriate action can be taken.

The Duren777 Platform may contain references to or integrations with third-party services, including payment gateways operated by Touch 'n Go, Boost, GrabPay, DuitNow, Maybank, and other payment providers. When you interact with a third-party payment interface, you are interacting with that provider's system, which is governed by their own privacy policy and terms.

Duren777 is not responsible for the privacy practices of any third-party service and cannot control how those services handle your personal information. We encourage you to review the privacy policies of any third-party services you engage with in connection with your Duren777 account.

The Duren777 Platform does not display third-party advertising or embed third-party advertising scripts that track your activity for commercial profiling purposes.

Duren777 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or Platform features. Where amendments are material, Duren777 will notify registered Members by email to the address on file and/or by a prominent notice on the Platform prior to the amendment taking effect.

The effective date displayed at the top of this page will be updated whenever the Policy is revised. Continued use of the Platform following the effective date of any amendment constitutes acceptance of the revised Privacy Policy. If you do not agree to an amended Policy, you must discontinue Platform use and request account closure.

We encourage you to review this Privacy Policy periodically, particularly before providing any new personal information or using new Platform features.

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data, please contact the Duren777 Data Support team through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week via the Platform. Average response time: 3–5 minutes. This is the fastest channel for urgent data requests.
• Email: [email protected] — please use the subject line "Privacy Request" for data-related enquiries. Responses within 2–4 business hours.
• Languages Supported: English, Bahasa Melayu, and Mandarin Chinese. All formal data subject requests must be submitted in writing (email or written live chat) to ensure a proper record is maintained.

All formal data subject access requests, erasure requests, and data portability requests must be submitted with sufficient identifying information to allow Duren777 to verify your identity before processing the request. This is necessary to protect the security of your data and to prevent unauthorised access by third parties.

Duren777 is committed to resolving all privacy-related enquiries fairly and promptly. If you are not satisfied with our response, you may escalate the matter to the relevant independent data protection authority or dispute resolution body as notified by Duren777 from time to time.