MancingDuit Privacy Policy — Our Commitment to Protecting the Personal Data of Malaysian Players

1 Privacy Introduction & Commitment

MancingDuit ("we", "Platform", or "MancingDuit") is committed to protecting the privacy and personal data of every individual who uses our platform. This Privacy Policy is drawn up in accordance with the requirements of Malaysia's Personal Data Protection Act 2010 (PDPA) and internationally recognised data protection standards.

We understand that your trust in us goes beyond fair gameplay or fast payouts — it also means being confident that your personal information is in responsible hands. That is why we continuously invest in security infrastructure, internal procedures, and staff training to ensure the highest level of data protection is maintained at all times.

This policy explains clearly and in plain language what data we collect, why we collect it, how we use it, who may access it, and what rights you have over that data.

2 Types of Personal Data We Collect

MancingDuit collects various types of personal data depending on how you interact with our platform. The following is an overview of the data categories collected:

3 How We Collect Your Data

3.1 Information You Provide Directly

The majority of data we collect is information you provide to us directly. This includes details entered during account registration, identity verification (KYC), profile setup, communications with our support team, participation in promotions or contests, and any feedback or reviews you voluntarily submit.

3.2 Automatically Collected Data

When you use the MancingDuit platform, our systems automatically record certain technical information needed to ensure the platform operates correctly and securely. This includes your IP address, browser type and version, device used, operating system, pages visited, time and duration of visits, and actions taken within the platform.

3.3 Data from Third Parties

In certain situations, we may receive your personal data from legitimate third-party sources — for example, from identity verification service providers we use for the KYC process, from payment providers to verify transactions, or from business partners who have your valid consent to share such information.

4 Purpose of Using Your Personal Data

MancingDuit uses your personal data only for legitimate and transparent purposes. The following are the primary purposes for which your data is processed:

• Account Management: Creating, verifying, and managing your player account, including the required KYC process.
• Transaction Processing: Processing deposits, withdrawals, and all financial transactions securely and efficiently.
• Service Delivery: Enabling you to access and use all features of the MancingDuit platform, including all available game types.
• Security and fraud prevention: Detecting, preventing, and investigating any fraudulent activity, money laundering, or unauthorised use of the platform.
• Customer Support: Providing effective technical assistance and customer support whenever you need it.
• Service-related communications: Sending important notifications about your account, changes to terms, or security updates.
• Marketing (with consent): Sending information about promotions and new offers — only where you have given consent to receive marketing communications.
• Analytics and improvement: Understanding how players use the platform to continuously improve the user experience.
• Legal Compliance: Fulfilling legal and regulatory obligations, including anti-money laundering reporting requirements.

5 Data Sharing with Third Parties

MancingDuit does not sell or trade your personal data. However, in the normal course of operating the platform, we may need to share your personal data with the following limited categories of third parties:

5.1 Service Providers

We work with selected service providers who help us operate the platform — including payment technology providers, identity verification services, cloud computing infrastructure, and analytics platforms. All providers are bound by strict confidentiality agreements and may only process your data in accordance with our instructions.

5.2 Legal Requirements

MancingDuit may be required to disclose your personal data to law enforcement authorities, government agencies, or tribunals if compelled by a court order, legal process, or applicable statutory provisions. In such situations, we will notify you unless doing so is prohibited by law.

5.3 Protection of Vital Interests

In the rare circumstance where disclosure of data is required to protect an individual's vital interests — such as in a medical emergency or safety situation — we may share the necessary information with the relevant parties.

6 Data Storage & Retention Period

MancingDuit retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. Retention periods vary by data type:

• Active account data: Throughout the period your account is active, plus any additional period required by law following closure.
• Financial transaction records: Minimum 7 years after the transaction date, in line with Malaysian legal requirements.
• KYC Records: Minimum 5 years after the business relationship ends.
• Support communication data: 3 years after the date of last communication.
• Technical logs: Between 30 days and 12 months, depending on the log type and security requirements.

When data is no longer needed and there is no legal obligation to retain it, we will securely delete or anonymise it using industry-recognised methods.

7 Data Security Measures

MancingDuit implements comprehensive technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction. These include:

• Encryption in transit: All communications between your device and our servers are secured with 256-bit SSL/TLS encryption.
• Encryption at rest: Sensitive data is stored in encrypted format within our databases.
• Access controls: Access to player data is restricted on a need-to-know basis, and every access is logged for audit purposes.
• Two-Factor Authentication: Available for all accounts and mandatory for staff access to systems containing player data.
• Continuous Monitoring: An active intrusion detection system monitors for suspicious activity around the clock.
• Regular security testing: Security audits and penetration testing are conducted periodically by independent parties.
• Staff training: All staff who access player data receive comprehensive data protection training.

8 Cookies & Tracking Technologies

Mancingduit uses cookies and similar tracking technologies to enhance your experience. Below are the types of cookies we use:

8.1 Essential Cookies

These cookies are essential for the platform to function properly. They allow you to log in, maintain your session, and use core platform features. These cookies cannot be disabled.

8.2 Analytics Cookies

These cookies help us understand how users interact with the platform — the most frequently visited pages, errors encountered, and how users navigate the platform. This information is used to continuously improve the overall user experience.

8.3 Preference Cookies

These cookies store your preferences such as selected language, display settings, and other personal choices so you do not need to reconfigure them each time you visit the platform.

You can manage your cookie settings through your web browser settings. However, disabling certain cookies may affect the functionality of parts of the platform.

9 How to Submit a Rights-Related Request

To exercise any of your privacy rights described in this Policy, please contact our Data Privacy Officer via email at [email protected] or via live chat on the platform. Please include the following information in your request:

• Your full name and account username.
• Registered email address.
• Type of request (access, rectification, erasure, etc.).
• A brief description of what you need.

We will process your request within 30 days of receipt. For complex requests, this period may be extended to 60 days with prior notice to you.

10 Children's Data Protection

The mancingduit platform is exclusively for individuals aged 18 and above. We do not knowingly collect or process personal data of children under 18. Should we discover that a child's personal data has been collected without our knowledge, we will take immediate steps to delete that data and close the associated account.

Parents or guardians who discover that their child has registered on our platform without permission are requested to contact our support team immediately so that appropriate action can be taken promptly.

11 Amendments to Privacy Policy

MancingDuit reserves the right to amend this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other legitimate reasons. When we make significant amendments, we will notify you via your registered email or a prominent notice displayed on the platform at least 7 days before the amendments take effect.

The "Updated" date at the top of this page will always reflect the date of the latest version of this Privacy Policy. It is your responsibility to review this Policy periodically. Continued use of the platform after any amendments take effect will be considered your acceptance of the revised policy.

12 Contact Our Data Protection Officer

MancingDuit has appointed a Data Protection Officer responsible for ensuring the platform's compliance with applicable data protection laws and for handling privacy-related enquiries from players.

For any inquiries, concerns, or requests regarding this Privacy Policy or the handling of your personal data, please contact us via:

• Privacy Email: [email protected]
• General Support Email: [email protected]
• Live Chat: Available 24/7 on the mancingduit platform
• Typical Response Times: Under 5 minutes for live chat; 1–3 business days for email