Our Commitment: duel21 fully complies with Malaysia's Personal Data Protection Act 2010 (PDPA). We will not sell, rent, or disclose your personal data to third parties without your consent, except as stated in this policy or as required by law.
Our Privacy Commitment
Duel21's Six Data Protection Principles
Your privacy is protected by six core principles that underpin every data handling decision we make.
Full Data Encryption
All your personal and financial data is encrypted using 256-bit SSL technology. Your data cannot be read by any unauthorized party during transmission or storage.
No Data Sales
Duel21 has never sold and will never sell your personal data to any third party for marketing or commercial purposes. Your data belongs entirely to you.
Minimum Collection
We only collect data that is strictly necessary to provide our services. No excessive or irrelevant information is collected without clear justification.
Full User Control
You have the right to access, correct, or request deletion of your personal data at any time. Your request will be processed within 14 business days.
Retention Period Details
Your data is retained only for as long as necessary for service delivery and legal compliance purposes. After this period, data will be securely deleted or anonymized.
Malaysia PDPA Compliance
All our data handling practices comply with Malaysia's Personal Data Protection Act 2010 (PDPA) and relevant international standards for information security.
1 Introduction
Duel21 ("we", "our platform") is an online casino platform operator dedicated to protecting the personal data of our users in Malaysia. This Privacy Policy describes our data handling practices in relation to the duel21.pro website and all associated services.
By registering or using the duel21 platform, you agree to the collection and use of information as described in this Privacy Policy. If you do not agree, please stop using our platform and contact us to close your account.
This policy applies to all users of the duel21 platform, including website visitors, registered members, and former members whose data remains in our system within the defined retention period.
This Privacy Policy is written in Bahasa Melayu for the convenience of Malaysian players. In the event of any conflict between language versions, the Bahasa Melayu version shall apply for users in Malaysia.
2 Personal Data We Collect
We collect personal data necessary to provide safe, responsible, and legally compliant online casino services. The following are the categories of data we collect:
| Data Categories | Example Information | Purpose of Collection |
|---|---|---|
| Identity Information | Full name, MyKad / passport number, date of birth | Identity verification (KYC), legal compliance |
| Contact Information | Email address, phone number, residential address | Account communications, security notifications |
| Financial Information | Bank account number, bank name, transaction history | Deposit and withdrawal processing |
| Usage Data | Game history, wagering patterns, session duration | Service improvement, responsible gaming |
| Technical Data | IP address, device type, web browser, operating system | Account security, fraud prevention |
We may also collect additional information you voluntarily provide when interacting with our customer support team or when participating in any promotions or contests.
Note: We never collect credit card numbers directly. All payment transactions are processed through PCI-DSS certified third-party payment gateways, and duel21 does not store your card details.
3 How We Use Your Personal Data
The personal data we collect is used solely for legitimate and transparent purposes. We will not use your data for any purpose not stated here without first obtaining your additional consent.
- Account management: To create, maintain, and protect your user account on the duel21 platform.
- Transaction processing: To process deposits, withdrawals, and all financial transactions securely and accurately.
- Identity verification (KYC): To comply with legal requirements related to anti-money laundering (AML) and counter-terrorism financing.
- Platform security: To detect and prevent fraud, unauthorized access, and other suspicious activity.
- Customer Support: To address inquiries, resolve disputes, and provide technical assistance to users.
- Responsible gaming: To monitor gaming patterns and identify users who may need support regarding excessive gaming habits.
- Service communications: To send important notifications regarding your account, policy changes, or security information.
- Platform improvement: To analyze aggregated usage patterns and improve the overall user experience.
If you have consented to receive marketing communications, we may send you information about promotions, bonus offers, and new games. You may withdraw this consent at any time through your account settings.
4 Data Sharing with Third Parties
Duel21 does not sell or rent your personal data to any third party. However, in certain limited situations, we may share your data with the following parties:
- Payment service providers: Payment gateways and financial institutions that process your transactions — they are bound by strict confidentiality agreements.
- Game software providers: Game companies that supply game content on our platform, which may require basic session data to ensure games function correctly.
- Identity verification services: Third-party KYC providers that assist us in verifying user identities in accordance with legal requirements.
- Legal authorities: Government agencies or law enforcement bodies when required by Malaysian law or court order.
- Auditors and professional advisors: Audit firms, lawyers, or consultants bound by professional confidentiality obligations.
All third parties that receive duel21 user data are required to sign a data processing agreement compliant with Malaysia's PDPA. We ensure they maintain security protections equivalent to our own standards.
5 Your Personal Data Security
We continually invest in security infrastructure to protect the personal data of duel21 users. The technical and organizational security measures we employ include:
- 256-bit SSL Encryption for all data transmitted between your device and our servers.
- Encryption of data at rest for all personal data stored in our databases.
- Role-based access control (RBAC) ensuring only authorized personnel can access user data.
- 24/7 security monitoring by our cybersecurity team to detect any threats or intrusion attempts.
- Regular security audits by independent security firms to test the resilience of our systems.
- Two-factor authentication (2FA) for all internal staff access to systems containing user data.
While we take all reasonable measures, no security system can be guaranteed 100% secure. In the event of a data breach affecting your personal information, we will notify you and the relevant authorities within the timeframe required by law.
6 Cookies and Tracking Technologies
Duel21 uses cookies and similar tracking technologies to enhance the user experience and ensure the platform operates optimally. The types of cookies we use include:
- Essential Cookies: Required for core platform functions such as login, session security, and language preferences. These cookies cannot be disabled.
- Performance Cookies: Collects information on how users interact with our platform to help us improve its design and functionality.
- Functional Cookies: Saves your preferences such as display settings and game selections to deliver a more personalised experience.
- Analytics Cookies: Helps us understand usage patterns in aggregate — this data does not identify you individually.
You can manage cookie settings through your web browser preferences. However, disabling certain cookies may affect the functionality of some parts of the duel21 platform.
Attention: We do not use third-party cookies for cross-site advertising purposes. Our cookies are used exclusively within the duel21 platform.
7 Your Rights Regarding Personal Data
Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data that we hold:
Right of Access
You may request a copy of all personal data we hold about you at any time.
Right to Rectification
You may request correction of any inaccurate or incomplete personal data in our records.
Right to Erasure
You may request deletion of your personal data, subject to legal retention requirements.
Right to Object
You may object to the use of your data for direct marketing purposes at any time.
Right to Data Portability
You may request your data in a machine-readable format for transfer to another platform.
Right to Restrict Processing
You may request that we restrict the processing of your data under certain circumstances during an investigation.
To submit any request related to the rights above, please contact our privacy team. Requests will be processed within 14 business days. In complex cases, this period may be extended to 30 business days, with prior notice to you.
8 Data Retention Period
Duel21 retains your personal data only for as long as necessary to fulfill the purpose for which it was collected, or as required by Malaysian law. Our general data retention guidelines are as follows:
- Active account data: Retained for the duration your account is active and for 7 years after account closure, to meet financial and tax legal requirements.
- Transaction records: Retained for a minimum of 7 years in accordance with anti-money laundering (AMLA) legal requirements.
- KYC documents: Retained for 5 years after account closure or the end of the business relationship.
- Communication logs: Customer service conversation records are retained for 3 years for dispute resolution purposes.
- Cookie data: Session cookies are deleted when you close your browser; persistent cookies have a validity period of 30 days to 1 year.
Once the retention period expires, your personal data will be securely deleted or anonymized so it can no longer be linked to any specific individual.
9 Child Protection
The duel21 platform is not intended for individuals under the age of 18. We do not knowingly collect personal data from children. If we discover that a child's personal data has been collected without our knowledge, we will take immediate steps to delete that data and close the associated account.
Parents or guardians who suspect their child has registered an account on duel21 are urged to contact our customer support team immediately so that appropriate action can be taken.
10 Changes to This Privacy Policy
Duel21 reserves the right to update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or service improvements. You will be notified of any significant updates through:
- In-platform notification on duel21 the next time you log in.
- Email the address registered to your account.
- Display of significant updates on our website's home page.
The latest update date is always displayed at the top of this page. Continued use of our platform after any changes take effect constitutes your acceptance of the updated Privacy Policy. We encourage you to review this page periodically.
11 Contact Us About Privacy
If you have any questions, concerns, or wish to submit a request relating to your personal data, our Data Protection Officer (DPO) team is ready to assist:
- Privacy Email: [email protected] — response within 3 business days.
- Live Chat: Available 24/7 via the chat icon at the bottom-right corner of the platform.
- Frequently Asked Questions: Browse page FAQ us for quick answers to commonly asked privacy questions.
For official complaints related to personal data protection in Malaysia, you may also contact Department of Personal Data Protection (JPDP) under the Malaysian Ministry of Communications and Digital.
Our Commitment: Every privacy inquiry we receive is taken seriously and answered transparently. Your trust is the foundation of your relationship with duel21.