OFFICIAL DOCUMENT • UPDATED JAN 2026

Privacy Policy 477 Duit – Our Commitment to Protecting Your Personal Data

At 477 duit, the privacy of Malaysian members is not merely a legal obligation – it is a moral responsibility we take seriously every day. This document clearly explains how we collect, use, protect, and handle your personal data in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA 2010).

Effective Date: 1 January 2026
Language: Bahasa Melayu
Jurisdiction: Malaysia (PDPA 2010)
477 duit Privacy Policy
Covering 11 key sections on how we handle members' personal data
PDPA 2010 Compliance
256-bit SSL Encryption
Right to access & correct data
No sale of data to third parties

Core Principles of Our Privacy Policy 477 Duit

Six core commitments that underpin how we handle the personal data of every Malaysian member.

Industry-Grade Encryption

All personal data and financial transaction information of 477 duit members is protected with 256-bit SSL encryption – the same standard used by Malaysia's leading banking institutions such as Maybank and CIMB. Your data is secured both in transit and at rest.

No Sale of Data to Third Parties

477 duit has never sold, rented, or traded members' personal data to any third party for marketing purposes, and never will. Your data is used solely for platform operational purposes and is not shared unless there is a clear legal obligation or technical necessity.

Full PDPA 2010 Compliance

As a platform operating in Malaysia, 477 duit fully complies with the Personal Data Protection Act 2010 (PDPA 2010) in all aspects of member personal data collection, processing, storage, and disposal. Your rights as a data subject are fully recognised and respected.

Your Data, Your Control

You have the right to access, correct, restrict the use of, and request deletion of your personal data held by 477 duit. Requests may be submitted at any time and will be processed within the timeframe prescribed by law.

Secure & Limited Data Storage

477 Duit retains your personal data only for as long as necessary for the stated purposes or as required by law. Once the data is no longer needed, it is deleted or anonymised in accordance with strict security procedures.

Data Breach Notification

In the event of any data security breach that may affect your personal information, 477 Duit is committed to notifying affected members within the timeframe required by Malaysian law and taking immediate remedial action.

1
Introduction & Scope of This Privacy Policy

This Privacy Policy ("Policy") is published by 477 duit ("we", "Platform"), which operates the online gaming website and services under the domain 477duit.best. This Policy explains in detail how we collect, use, process, store, protect, and disclose your personal data ("Member", "you") in connection with your use of the 477 duit platform.

This Privacy Policy applies to all individuals who interact with 477 duit – including registered members, prospective members browsing our website, and anyone who contacts us through our customer service channels. By using the 477 duit platform or registering an account, you acknowledge that you have read, understood, and agreed to the terms of this Privacy Policy.

PDPA 2010 Compliance: 477 duit operates in full compliance with Malaysia's Personal Data Protection Act 2010 (PDPA 2010). All personal data processing we carry out has a valid legal basis and is conducted in a fair, transparent, and responsible manner.

Should there be any material changes to this Privacy Policy, we will notify you via an in-platform notification or email to your registered address at least 14 days before the changes take effect. It is your responsibility to review this page from time to time. The effective date of the current version is stated at the top of this document.

2
Types of Personal Data Collected

477 duit collects personal data from various sources in the course of providing our services. The following outlines the categories of data we collect and how they are obtained:

Data You Provide Directly to Us
Data Category Example Information Collected During
Identification Data Full name, MyKad number, date of birth Registration & KYC
Contact Data Malaysian phone number, email address, residential address Registration
Financial Data Bank account number, bank name, e-wallet details (TnG, GrabPay) Withdrawal requests
Verification Data MyKad copy, bank statements, verification selfie KYC Verification
Communication Data Live chat records, support emails, WhatsApp enquiries Customer support interactions
Automatically Collected Data
  • IP address and approximate geolocation data
  • The type and version of the web browser you are using
  • Device operating system (Windows, iOS, Android)
  • Access log records including pages visited and session duration
  • Game usage data – games played, bet amounts, session duration
  • Deposit and withdrawal transaction records
  • Cookie data and similar tracking technologies (see Section 8)
477 duit does not collect sensitive information such as biometric data, medical records, or religious or political affiliations. Financial data such as credit card numbers is not stored in our systems – it is processed directly through separate, certified payment gateways.
3
How We Use Your Personal Data

477 Duit uses the personal data collected for the following legitimate and necessary purposes in order to operate the platform and provide services to Malaysian members:

  1. Account Management: To create and manage your 477 duit account, including identity verification, password setup, and member profile management.
  2. Transaction Processing: Processing deposits via DuitNow, Touch 'n Go eWallet, GrabPay, FPX, Maybank2u, CIMB Clicks, Boost, and ShopeePay, as well as withdrawals to your bank account or e-wallet in Malaysian Ringgit (MYR).
  3. KYC & AML Compliance: Conducting Know Your Customer (KYC) checks and fulfilling Anti-Money Laundering (AML) obligations as required under Malaysian law.
  4. Gaming Services Provision: Enabling you to access and play all games on 477 Duit, including Live Casino, baccarat, slots, Sports Betting for the Malaysia Super League and EPL, and online lottery.
  5. Customer Service: Answering enquiries, resolving complaints, and providing technical support via live chat, email, and WhatsApp.
  6. Security & Fraud Prevention: Detecting and preventing fraudulent activity, hacking, money laundering, and platform abuse.
  7. Marketing Communications: To send you information about 477 duit promotions, bonuses, and the latest offers – only with your consent, which may be withdrawn at any time.
  8. Platform Improvement: Analysing usage patterns to improve the features, performance, and usability of the 477 Duit platform.
  9. Legal Compliance: To fulfil obligations under applicable Malaysian laws, including PDPA 2010 and related regulations.

477 duit will not use your personal data for any purpose other than those stated above without first obtaining your consent or without a valid legal basis.

4
Legal Basis for Data Processing

Under Malaysia's PDPA 2010, 477 Duit processes your personal data on one or more of the following valid legal bases, depending on the purpose of processing:

  • Consent: You provided explicit consent during 477 duit account registration for the collection and use of your personal data for the stated purposes. Consent for marketing communications is separate and optional.
  • Contract Performance: Processing is necessary to fulfil the contract between you and 477 duit – including processing MYR deposits, paying out winnings, and providing access to games.
  • Legal Obligations: Certain processing is required to comply with legal obligations applicable to 477 Duit in Malaysia, including KYC and AML requirements.
  • Legitimate Interests: For security purposes, fraud prevention, and service improvement, where our legitimate interests do not override your fundamental rights and interests.
Withdrawing Consent: You may withdraw consent for consent-based data processing (such as marketing communications) at any time by contacting us or using the unsubscribe link in our emails. Withdrawal of consent does not affect the lawfulness of processing carried out prior to such withdrawal.
5
Third-Party Data Sharing & Disclosure

477 Duit does not sell, rent, or trade members' personal data to any third party for marketing or commercial purposes. However, there are limited circumstances where we need to share your data with specific parties for platform operational purposes:

  • Technical Service Providers: Companies that assist us in operating the platform, including game providers (Evolution Gaming, Pragmatic Play, Microgaming), payment processors (FPX gateway, DuitNow), and cloud infrastructure services. All such providers are bound by strict confidentiality agreements and are only permitted to use your data for the specified purposes.
  • Legal Authorities: Where required by a valid court order, directive from a competent Malaysian authority, or for the purposes of AML compliance and financial crime prevention.
  • Audit & Compliance Body: Independent audit bodies such as eCOGRA or BMM Testlabs conducting game fairness reviews may require limited access to de-identified game statistical data.
  • Business Transfer: In the event that 477 duit is involved in a merger, acquisition, or asset sale, member personal data may be transferred to the new entity, subject to equivalent or higher privacy protections. Members will be notified before any such transfer takes place.
477 duit does not share members' personal data with third-party advertisers, data brokers, or any commercial entities unrelated to the operation of our platform. If you receive unsolicited marketing communications claiming to be from 477 duit, please contact us immediately as this may be a fraudulent attempt.
6
Data Security Measures at 477 duit

The security of members' personal data is 477 Duit's highest priority. We continuously invest in our cybersecurity infrastructure and follow industry best practices to ensure your data remains protected at all times. The following are the key security measures we have in place:

  • 256-bit SSL Encryption: All communications between your web browser and 477 Duit servers are encrypted using TLS 1.3 protocol with AES-256 encryption. This means your data cannot be intercepted or read by any third party during transmission.
  • Layered Access Control: Only 477 duit staff with a legitimate business need are permitted to access member personal data. This access is strictly controlled through a multi-layered authorisation system and is regularly audited.
  • Secure Password Storage: Member account passwords are not stored in plain text. They are hashed using the bcrypt algorithm with a unique salt for each account.
  • 24/7 Security Monitoring: An automated threat monitoring system operates around the clock to detect and block suspicious activity, including unauthorised login attempts and cyberattacks.
  • Regular Penetration Testing: 477 Duit conducts regular penetration testing by independent cybersecurity experts to identify and address any vulnerabilities before they can be exploited.
  • Encrypted Data Backups: All data backups are stored in encrypted format at secure locations separate from the main server.
Security Breach: While we take all reasonable steps to protect your data, no security system is completely infallible. In the event of a data security breach that affects the rights and freedoms of members, 477 duit will notify the affected members and relevant authorities within the timeframe required by Malaysian law.

You also play an important role in keeping your account secure. We strongly advise using a strong, unique password for your 477 duit account, never sharing your login credentials with anyone, and reporting to us immediately if you suspect your account has been compromised.

7
Personal Data Retention Period

477 duit does not retain member personal data for longer than necessary for the stated purposes or to meet legal obligations. Our data retention policy is as follows:

  • Active Account: Active members' personal data is retained for the duration of the active account and for any additional period required following account closure.
  • Financial Transaction Records: Records of all deposit, withdrawal, and betting transactions are retained for a minimum of 7 years in accordance with Malaysian financial and AML legal requirements.
  • KYC Records: Identity verification documents (copies of MyKad, bank statements) are retained for a minimum of 5 years after account closure in accordance with AML compliance requirements.
  • Customer Communication Records: Interaction records with the customer service team are retained for 3 years for reference and dispute resolution purposes.
  • Technical Log Data: Access logs and technical activity records are retained for 90 days for security and debugging purposes.
  • Marketing Data: Data used for marketing communications will be deleted within 30 days of you withdrawing your marketing consent.

Once the retention period has expired and there is no legal requirement to retain the data further, 477 duit will delete or anonymise the data in accordance with secure disposal procedures, ensuring it can no longer be linked to any identifiable individual.

8
Cookies, Analytics & Tracking Technologies

The 477 Duit website uses cookies and similar technologies to enhance the user experience, ensure the platform functions correctly, and understand how members use our platform. The types of cookies we use are as follows:

You can manage your cookie preferences through your web browser settings. Disabling certain cookies may affect the functionality of some parts of the 477 Duit platform. Essential cookies cannot be disabled without impacting your ability to log in and use the platform.

477 duit does not use third-party tracking cookies for advertising or marketing profiling purposes. All analytics data collected is used solely for platform improvement and is not shared with third-party advertising networks.
9
Your Rights Under PDPA 2010 Malaysia

As a data subject under Malaysia's Personal Data Protection Act 2010, you have the following rights regarding the personal data held by 477 duit. All requests can be submitted via email to support@477duit.best:

Right to Access

You have the right to request a copy of the personal data held by 477 Duit. We will fulfil the request within 21 days of receipt, as stipulated under PDPA 2010.

Right to Rectification

If the personal data we hold about you is inaccurate or out of date, you have the right to request a correction. Certain corrections can be made directly through your account profile settings.

Right to Withdraw Consent

You may withdraw consent for consent-based data processing (such as marketing emails) at any time. This does not affect any processing that has already taken place.

Right to Restriction of Processing

Under certain circumstances, you have the right to request that we restrict how we process your personal data while a related issue is being resolved.

Right to Data Portability

You have the right to receive your personal data in a structured, machine-readable format for the purpose of transferring it to another service provider of your choice.

Right to Complain

If you are unsatisfied with how 477 duit handles your data, you have the right to file a complaint with the Department of Personal Data Protection Malaysia (JPDP).

How to Submit a Request: To exercise any of the rights listed above, contact us by email at support@477duit.best with the subject line "Personal Data Rights Request" and specify which right you wish to exercise. We may need to verify your identity before processing your request in order to protect the security of your data.
10
Children & Minors

The 477 Duit platform is intended solely for individuals aged 21 and above. We strictly do not knowingly collect, process, or store the personal data of children or individuals under the age of 21.

During the account registration process, 477 Duit carries out strict age verification. Members are required to confirm they are 21 years of age or older, and identity verification via document (MyKad) is conducted to ensure compliance.

If we discover that we have collected personal data from an individual under the age of 21, we will take immediate steps to delete that data and close the associated account. If you are aware that a minor has registered an account on our platform, please contact us immediately at support@477duit.best.

Parents and guardians are advised to use the parental control tools available on their devices to prevent underage individuals from accessing online gambling platforms such as 477 duit. 477 duit bears no responsibility for unauthorised access resulting from a failure of device-level parental controls.

11
Contact Us & Privacy Complaint Procedure

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way 477 duit handles your personal data, we encourage you to contact us first so that we can resolve the matter promptly and to your satisfaction.

Dedicated Privacy Email
support@477duit.best
Use the subject line "Privacy Policy Enquiry" – responded to within 3 working days
In-Platform Live Chat
Available 24/7
For urgent enquiries – response within 2 minutes
WhatsApp
Available via in-platform link
Service available in Bahasa Melayu
External Authorities
Department of Personal Data Protection Malaysia (JPDP)
If your complaint is not resolved satisfactorily by 477 Duit

Our privacy complaint procedure is as follows: Upon receiving a complaint, we will send an acknowledgement within 2 business days. An investigation will be conducted and a substantive response provided within 14 business days. For more complex complaints, we may require up to 30 business days and will keep you informed of the expected timeframe.

Policy Updates: This Privacy Policy was last updated on 1 January 2026. 477 Duit reserves the right to update this Policy from time to time to reflect changes in our privacy practices, legal requirements, or platform services. Members will be notified of any material changes at least 14 days before they take effect.

Thank you for taking the time to understand how 477 duit handles your personal data. Our commitment to the privacy and data security of Malaysian members remains unwavering – it is a cornerstone of the trust we build with every player who joins our platform.

Your Data Is Safe at 477 duit
We are committed to protecting your privacy in accordance with PDPA 2010 Malaysia. Your data is never sold to third parties. For information on the platform's terms of use, please refer to Terms & Conditions us. For self-exclusion tools and responsible gambling resources, visit the Responsible Gambling.

Your Privacy Rights as a Member 477 Duit

A summary of the rights you hold under Malaysia's PDPA 2010 – exercisable at any time.

Data Access
Request a copy of all your personal data held by us within 21 days.
Correct Inaccuracies
Request correction of any inaccurate or outdated data in our records.
Withdraw Consent
Stop marketing emails or consent-based data processing at any time.
Restrict Processing
Request a restriction on processing under certain circumstances while an issue is being resolved.
Transfer Data
Receive your data in a portable format that can be transferred to another provider.
File a Complaint
Complaints may be filed with the JPDP Malaysia if you are unsatisfied with our response.

To exercise any of the above rights, please contact us at:

support@477duit.best

Play with Confidence at 477 Duit – Your Data is Always Protected

Your personal data privacy and security is our top priority. With full PDPA 2010 compliance, industry-grade encryption, and a strict no-data-sale policy, you can play at 477 duit with complete peace of mind.

Register a free account today. Deposit via DuitNow, Touch 'n Go, or FPX. A welcome bonus of up to RM 888 awaits you.

PDPA 2010 compliant
SSL 256-bit encryption
No data sales
Your data rights are respected

For members aged 21 and above only. Subject to Terms & Conditions. Play responsibly – visit Responsible Gambling.

Bahasa Melayu