Data Protection

Privacy Policy Duel21 — Protecting Your Personal Data

At duel21, your privacy is more than an obligation — it is our commitment. This policy transparently explains how we collect, use, store, and protect the personal information of every member in Malaysia.

Updated: 1 January 2026

Duel21's Six Core Data Protection Principles

We invest in the best technologies and processes to ensure your personal data is kept secure and managed responsibly.

256-bit SSL Encryption

All data transmitted between your device and duel21's servers is protected using 256-bit SSL encryption — the same standard used by leading banking institutions worldwide.

Secure Data Storage

Your personal data is stored on servers protected by multi-layered firewalls and intrusion detection systems. Physical and digital access to our databases is strictly limited to authorised personnel only.

Strict Access Control

Only duel21 staff who require data access for operational or customer support purposes are permitted. All access is logged and periodically audited to ensure full compliance.

No Data Sales

Duel21 has never and will never sell, rent, or trade members' personal data to any third party for marketing or commercial gain. Your data belongs to you.

Transaction Privacy

All your financial transaction records — including deposits, withdrawals, and betting history — are handled with the highest level of confidentiality and cannot be accessed by external parties without a court order.

Legal Compliance

Duel21 fully complies with the provisions of the Malaysia Personal Data Protection Act 2010 (PDPA) and relevant international data protection regulations in handling members' personal information.

1 Introduction

Welcome to the duel21 Privacy Policy page. We understand that your trust is our most valuable asset. As a trusted online sports betting and casino platform in Malaysia, duel21 is committed to protecting every piece of personal information you share with us throughout your use of this platform.

This Privacy Policy is prepared in compliance with the Malaysia Personal Data Protection Act 2010 (PDPA) and clearly outlines our practices regarding the collection, processing, storage, disclosure, and protection of members' personal data. We encourage you to read this policy carefully in full so that you fully understand your rights as a duel21 user.

This policy applies to all users who register, browse, or use any part of the duel21 platform — including the website, mobile app, and any related services we offer.

Important Note: By registering an account or using the duel21 platform, you confirm that you have read, understood, and agreed to this Privacy Policy. If you do not agree, please stop using our platform.

2 Types of Personal Data We Collect

Duel21 only collects data that is genuinely necessary to provide our services safely and efficiently. The following are the categories of information we collect:

Data Category Example Information Primary Purpose
Identity Information Full name, date of birth, identification card number (MyKad) KYC Verification & Age Verification
Contact Information Email address, phone number, residential address Communication & Account Verification
Financial Information Bank account number, bank name, transaction records Deposit & Withdrawal Processing
Technical Data IP address, device type, operating system, browser Security & Fraud Prevention
Usage Data Betting history, games played, activity logs Service Improvement & Compliance
Communication Data Support chat records, emails sent Customer support & audit records

Some information is collected directly from you during registration or KYC verification. Technical and usage data is collected automatically through standard tracking technologies such as cookies and server logs when you use our platform.

3 How We Use Your Data

Every piece of data we collect has a clear and lawful purpose. duel21 uses your personal information for the following purposes:

  • Account Management: Creating, verifying, and maintaining your member account, including the required KYC review process.
  • Transaction Processing: Processing deposits, withdrawals, and all financial transactions securely and accurately.
  • Customer Support: Responding to inquiries, resolving complaints, and providing the technical assistance you need.
  • Platform Security: Detecting and preventing fraud, money laundering, unauthorized access, and activities that violate our terms of use.
  • Legal Compliance: Meeting compliance obligations related to anti-money laundering (AML) laws, data protection, and applicable financial regulations.
  • Service Improvement: Analyzing usage patterns to improve platform features, user experience, and product offerings.
  • Marketing Communications: Sending promotional information, exclusive offers, and platform updates — subject to your consent preferences.
  • Responsible Gaming: Monitoring wagering patterns to identify signs of problem gambling and provide the necessary support.

Marketing: You may withdraw consent to receive marketing communications at any time by updating your preferences in your account settings or contacting our support team. Withdrawing marketing consent will not affect your account's core services.

4 Data Sharing With Third Parties

Duel21 takes a highly cautious approach to data sharing. We do not disclose your personal information to third parties except in the following necessary and legally valid situations:

  • Payment Service Providers: To process deposits and withdrawals, the required transaction information will be shared with approved payment processors and banking institutions. These providers are subject to strict confidentiality agreements.
  • Technology Providers: Technology companies that provide platform infrastructure, gaming software, and related technical services may have limited access to the data required to deliver their services.
  • Statutory Authority: duel21 will disclose information to government authorities, regulatory bodies, or law enforcement when required by court order or applicable law.
  • Anti-Fraud Agency: To prevent fraud and money laundering, some data may be shared with approved security verification agencies.
  • Business Transfer: In the event of a company merger, acquisition, or asset transfer, user data may be transferred to the new entity — with prior notice given to members.

All third parties that receive personal data from duel21 are required to protect that information to a data protection standard no lower than the one we uphold ourselves.

5 Cookies and Tracking Technologies

Duel21 uses cookies and similar tracking technologies to enhance your experience, maintain session security, and understand how our platform is used. The following are the types of cookies we use:

  • Essential Cookies: Required for core platform functions such as login, session management, and security. These cookies cannot be disabled as they affect the platform's basic operations.
  • Performance Cookies: Collecting information on how pages are visited and any errors that may occur. This data is used to improve platform performance and stability.
  • Functional Cookies: Storing your preferences such as preferred language, account settings, and display preferences to deliver a more personalized experience.
  • Analytics Cookies: Helping us understand usage patterns in aggregate and anonymous form for service improvement purposes.

You can manage cookie settings through your internet browser settings. However, disabling certain cookies may affect the functionality and your experience when using the duel21 platform.

Reminder: Session cookies used for login are essential to your account security. We recommend that you do not disable this type of cookie while using the duel21 platform.

6 Data Storage and Security

Duel21 implements comprehensive technical and organisational security measures to protect your personal data from unauthorised access, loss, destruction, or accidental disclosure.

  • Data encryption in transit using the latest TLS 1.3 protocol.
  • Data encryption at rest using the AES-256 standard.
  • 24/7 continuous system security monitoring by our cybersecurity team.
  • Regular penetration testing by independent third parties.
  • Regular data backup procedures to ensure service continuity.
  • Mandatory cybersecurity training for all staff who handle user data.

Data Retention Period: Your personal data is retained for as long as your account is active or as long as necessary to provide our services. Following account closure, certain data may be retained for the period required by law — typically between 5 and 7 years — for audit and regulatory compliance purposes.

Once the retention period expires, your personal data will be securely deleted or anonymised so that it can no longer be linked to you personally.

7 Your Rights Regarding Personal Data

As a duel21 member and as a Malaysian citizen or resident, you have certain rights regarding the personal data we handle. duel21 fully respects these rights:

Right of Access

You have the right to request a copy of the personal data we hold relating to your account.

Right to Rectification

You may request that we correct any inaccurate or incomplete information.

Right to Erasure

In certain circumstances, you may request that we delete your personal data.

Right to Object

You may object to the processing of your data for direct marketing purposes at any time.

Right to Data Portability

You have the right to receive your data in a machine-readable format for transfer.

Right to Restriction

You may request that we restrict the processing of your data in certain circumstances.

To submit any request relating to the rights above, please contact our data protection team via email at [email protected]. We will respond to your request within 14 business days. In some circumstances, we may need to verify your identity before processing the request.

8 Child Data Protection

The duel21 platform is exclusively for individuals aged 18 and above. We do not knowingly collect, store, or process any personal data from children under the age of 18.

If we determine that a child's personal data has been collected without proper age verification, we will take immediate action to delete that data and terminate the account in question. Any deposits made through that account will be frozen pending investigation.

Parents or guardians who become aware that their child or dependent has registered at duel21 without authorisation are requested to contact our support team immediately at [email protected].

9 Amendments to This Privacy Policy

Duel21 reserves the right to update or amend this Privacy Policy from time to time in response to legal changes, shifts in business practices, or improvements to our services. Any significant amendments will be communicated to you via:

  • Notifications prominently displayed on the duel21 platform home page.
  • A notification email sent to the address registered to your account.
  • In-account notices when you are logged in to the platform.

The "Updated" date shown at the top of this page indicates when this Privacy Policy was last reviewed. You are encouraged to check this page periodically. Your continued use of the duel21 platform after any amendments take effect constitutes your acceptance of those changes.

10 Contact Us About Privacy

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, we are here to help. The duel21 data protection team can be reached via:

  • Email: [email protected] — for written enquiries requiring an official record.
  • Live Chat: Available 24/7 via the chat icon in the corner of the duel21 platform for instant responses.

We aim to respond to all privacy-related enquiries within 3 to 5 business days. For more complex requests such as data access requests or account deletion, processing may take up to 14 business days.

Complaints to Authorities: If you are unsatisfied with how we have handled your privacy complaint, you have the right to file a complaint with the Malaysia Personal Data Protection Commissioner or the relevant regulatory authority in your jurisdiction.

Privacy-Related FAQ

Absolutely not. duel21 has never and will never sell, rent, or trade your personal data to advertisers or any third party for commercial purposes. Your data is used solely for the purposes stated in this Privacy Policy.

You may submit a data access request by contacting the duel21 support team via email at [email protected]. Please include your account number and identity verification details. We will process your request within 14 business days.

Yes. All financial transactions are protected by 256-bit SSL encryption. Your financial information is transmitted through secure channels and shared only with approved payment processors subject to strict confidentiality agreements.

Yes, you may request account closure and data deletion through our support team. However, some data may need to be retained to fulfil legal obligations such as financial record-keeping and audit requirements for 5 to 7 years in accordance with Malaysian law.

In the event of a security breach affecting your personal data, duel21 will notify you within the timeframe required by applicable law. We will also take immediate steps to mitigate the impact and prevent any further harm to your account.
Trusted Platform

Join duel21 with Complete Confidence

Your privacy and security are our priority. Register today and enjoy a safe, fair, and responsible gaming experience alongside thousands of duel21 members across Malaysia.

SSL 256-bit Encryption
24/7 Security Monitoring
PDPA Full Compliance
0% Personal Data Sales
Bahasa Melayu