Fortuna Official Policy Document

Fortuna Privacy Policy – Player Personal Data Protection

Fortuna takes your privacy seriously. We are committed to protecting every piece of personal information you share with us, and ensuring your data is managed transparently, securely and responsibly.

256-bit SSL Data Encryption
PDPA Act Compliance
24/7 Security Monitoring
0 Shares Data Sold to Third Parties
Commitment Our Privacy

Six core data protection principles that Fortuna practises to ensure the security of every player's information

256-bit SSL Encryption

All data transmitted between your device and fortuna's servers is protected with bank-grade 256-bit SSL encryption. No sensitive information moves without a robust layer of security.

Secure Data Storage

Your personal data is stored on servers protected by multi-layered firewalls and audited regularly. Only authorised personnel may access that data for legitimate operational purposes.

Strict Access Control

A role-based access control (RBAC) system ensures that only individuals who genuinely need your data to perform their duties can access it. Every access is logged and monitored.

No Data Selling

Fortuna has never and will never sell, rent or trade your personal data to any third party for advertising or marketing purposes without your explicit consent.

PDPA Compliance

Fortuna's Privacy Policy fully complies with Malaysia's Personal Data Protection Act 2010 (PDPA). Your rights as a data subject are recognised and respected in every aspect of our operations.

Periodic Review

This Privacy Policy is reviewed and updated periodically to ensure it remains relevant to technological developments and the latest data protection law changes in Malaysia.

Updated: 1 January 2026 Version 2.4 Bahasa Melayu (Malaysia)
1

Introduction

Fortuna ("we", "our platform") respects the privacy of every individual who uses our services. This Privacy Policy transparently explains how we collect, use, store and protect your personal information when you use the Fortuna platform, accessible at fortuna.ad.

By registering or continuing to use the Fortuna platform, you confirm that you have read and fully understood this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of our platform.

Our Commitment: Fortuna has never sold your personal data. We only use your information for platform operations, service improvement and compliance with applicable laws in Malaysia.

This policy applies to all users of the Fortuna platform, including visitors without an account, registered members, and anyone who interacts with our customer support services through any official communication channel.

2

Data Collected

Fortuna collects various types of information depending on how you interact with our platform. The following are the categories of data we collect:

Registration & Identity Information

  • Full name as it appears on your identity document
  • Date of birth for age verification
  • Active email address and mobile phone number
  • Current residential address
  • Identity card (MyKad) or passport details for the KYC process

Financial Information

  • Payment method details used (bank account number, digital wallet phone number)
  • Deposit and withdrawal transaction history
  • Records of bonuses claimed and wagering requirements completed

Platform Activity Data

  • Records of games played, bets placed, wins, and losses
  • Game session times and durations
  • Game preferences and usage patterns
  • Interactions with the customer support team

Technical Data

  • IP address and estimated location based on IP
  • Device type, operating system and browser version
  • Cookie data and session identifiers
  • Access logs and technical error records

Fortuna only collects data that is strictly necessary to operate the platform safely and comply with legal requirements. We practise the principle of data minimisation — no more, no less.

3

How Your Data Is Used

The information we collect is used solely for lawful and transparent purposes. Here are the primary ways we use your data:

Purpose of Use Legal Basis Data Used
Player account management Contract performance Identity, email, phone number
Deposit & withdrawal processing Contract performance Financial information, KYC
Age verification & KYC Legal obligation Date of birth, identity documents
Fraud prevention & anti-money laundering Legal obligation Transactions, activity patterns, IP
Customer Support Legitimate interest All account-related data
Platform improvement Legitimate interest Technical data, usage patterns
Promotional communications (with consent) Consent Email, phone number

We will not use your data for any purpose other than those stated above without obtaining your consent first. If you do not wish to receive promotional communications, you may withdraw that consent at any time through your account settings.

4

Data Sharing

Fortuna does not share, sell or disclose your personal data to third parties except in the following limited and controlled situations:

  • Payment service providers — to process your deposits and withdrawals via DuitNow, FPX, Touch 'n Go, GrabPay, and Boost. These providers receive only the minimum data necessary to complete the transaction.
  • Cloud computing service providers — servers and infrastructure used to operate the fortuna platform, subject to strict confidentiality agreements.
  • Authorities and law enforcement bodies — where required by Malaysian law or a valid court order.
  • Independent third-party auditors — for compliance audit purposes and game integrity verification, using only relevant and anonymised data.

Important: All third parties working with fortuna are required to sign a strict Data Processing Agreement and comply with privacy policies that meet at least the same standard as fortuna's. They are prohibited from using your data for their own purposes.

5

Cookie Policy

The fortuna platform uses cookies and similar tracking technologies to enhance the user experience and ensure the platform runs smoothly. Below are the types of cookies we use:

Mandatory Cookies

These cookies are required for the platform's core functions such as login authentication, session management, and security. Without them, the platform cannot operate properly. You cannot disable cookies in this category.

Performance Cookies

These cookies collect information about how you use the platform — which pages are visited most frequently, how long you spend on each page, and any error messages that appear. This information helps us improve how the platform functions.

Functional Cookies

These cookies remember your preferences such as selected language, display theme, and other personal settings to provide a more personalised experience on every visit.

Analytics Cookies

We use internal analytics tools to understand overall platform usage patterns. This data is used in aggregate form and cannot be identified at an individual level.

Cookie Controls: You can manage cookie settings through your browser preferences at any time. Disabling certain cookies may affect the functionality of some parts of the platform.

6

Data Security

Fortuna continually invests in the latest cybersecurity infrastructure to ensure your personal data is always protected. Key security measures we employ include:

  • 256-bit SSL/TLS Encryption for all data in transit between your device and our servers
  • Encryption of data at rest using AES-256 standards for all sensitive information stored in our databases
  • 24/7 security monitoring by the fortuna information security team using real-time threat detection systems
  • Penetration testing conducted periodically by independent security firms to identify and patch any vulnerabilities
  • Two-factor authentication (2FA) available to all player accounts as an additional layer of protection
  • Periodic data backups with tested disaster recovery procedures to ensure continuity of service

In the Event of a Data Breach: While we take all reasonable precautions, no system can guarantee 100% absolute security. In the event of a data breach affecting your information, fortuna will notify you within 72 hours via your registered email.

7

Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by Fortuna:

Right of Access

You have the right to request a copy of the personal data we hold about you at any time.

Right to Rectification

You may request that we correct any inaccurate or incomplete personal data.

Right to Erasure

You may request the deletion of your data, subject to applicable legal obligations.

Right to Object

You may object to the processing of your data for specific purposes such as marketing communications.

Right to Data Portability

You may request your data in a machine-readable format for portability.

Right to Restrict Processing

You may request that we restrict how we process your data under certain circumstances.

To exercise any of the above rights, contact the fortuna Privacy team by email [email protected] or Live Chat within the platform. We will process your request within 14 business days.

8

Data Retention Period

Fortuna retains your personal data only for as long as it is necessary for the purposes stated in this Privacy Policy or as required by Malaysian law. The following are our data retention guidelines:

  • Active account data — retained for the duration your account is active and for an additional 7 years after account closure for legal compliance purposes
  • Financial transaction records — retained for a minimum of 7 years in accordance with Malaysia's anti-money laundering (AML) legal requirements
  • KYC Documents — retained for 5 years from the date of verification or account closure, whichever is later
  • Support communication logs — retained for 3 years for service reference and dispute resolution
  • Technical data and access logs — retained for 12 months for security and troubleshooting purposes
  • Cookie data — retained according to each cookie's expiry period, typically between 30 days and 12 months

Once the retention period expires, your data will be permanently deleted or anonymised in a manner that ensures it can no longer be linked to your identity.

9

Cross-Border Data Transfer

In the course of operating the platform, your personal data may be processed or stored outside Malaysia by the cloud infrastructure providers we use. Fortuna ensures that any international data transfers are carried out with adequate safeguards:

  • Only countries or entities with data protection standards equivalent to or higher than Malaysia's are permitted to process your data
  • Comprehensive data processing agreements (DPA) are signed with all involved providers
  • Recognised data transfer mechanisms such as Standard Contractual Clauses (SCC) are applied where required
  • Regular audits are conducted on all third-party providers to ensure ongoing compliance

Fortuna prioritises infrastructure providers with data centres in the Asia Pacific region to minimise the need for cross-border data transfers and ensure optimal platform performance for users in Malaysia.

10

Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please contact us through the following channels:

Our Privacy Team will respond to all enquiries within 3 working days and resolve more complex complaints within 14 business days. If you are not satisfied with our response, you have the right to file a complaint with the Department of Personal Data Protection (JPDP) Malaysia.

Policy Updates: This Privacy Policy may be amended from time to time. Any significant changes will be communicated to you via in-platform notifications and your registered email at least 7 days before the changes take effect. The latest update date is always displayed at the top of this document.

Your Data Is Safe with Fortuna

Join millions of Malaysian players who trust Fortuna — the online entertainment platform that puts your safety and privacy first.

Bahasa Melayu