Last updated: 24 September 2026

1. Agreement

These Terms govern your access to DuitMe and the Aurum website and app (the “Service”). By creating an account, purchasing or receiving access, or using the Service, you agree to these Terms. If you do not agree, do not use the Service.

2. Eligibility and accounts

You must be at least 18 years old and legally able to enter into a contract. You must provide accurate information, protect your login credentials, and promptly notify us of suspected unauthorised access. You are responsible for activity performed through your account. Accounts and access are personal and may not be shared, resold, copied, scraped, or redistributed.

3. Nature of the Service

The Service provides market information, economic-news data, automated predictions, alerts and XAUUSD trading signals for general educational and informational purposes. Content is not personalised to your financial position, objectives, experience or risk tolerance. We do not hold client money, execute trades, operate a brokerage account, or guarantee that any signal will be available, timely or accurate.

4. No guarantee or reliance

Signals, forecasts, AI labels such as “bullish” or “bearish”, news times, prices and results may be delayed, incomplete, inaccurate, changed or unavailable. “Profit”, “loss” or similar labels may be based on recorded signal levels and do not represent every user’s actual execution, spread, slippage, fees or outcome. You remain solely responsible for independently checking information and deciding whether, when and how to trade. Obtain advice from an appropriately licensed professional where required.

5. Access, payments and cancellation

Verified access may require administrator approval and may be time-limited. Any price, billing cycle, renewal, refund or cancellation term shown to you at purchase forms part of these Terms. Unless a mandatory law requires otherwise, access already supplied or consumed is non-refundable. We may correct pricing errors, reject an order, suspend renewal, or change future pricing with reasonable notice.

6. Acceptable use

You must not misuse the Service, bypass access restrictions, interfere with security, introduce malicious code, impersonate another person, use automated extraction tools, reverse engineer the Service where prohibited, infringe rights, or use the Service for unlawful, deceptive or market-manipulative activity.

7. Intellectual property

The Service, branding, software, layout and original content are owned by or licensed to us. We grant you a limited, personal, revocable, non-exclusive and non-transferable right to use the Service in accordance with these Terms. Third-party names, economic data and trademarks remain the property of their respective owners.

8. Third-party services

The Service may depend on third-party data sources, Google sign-in, notification providers, hosting services, device platforms and external links. Their own terms and privacy practices apply. We do not control and are not responsible for third-party availability, content or conduct.

9. Suspension and termination

We may suspend or terminate access where reasonably necessary for security, maintenance, suspected fraud, non-payment, breach of these Terms, legal compliance, or protection of users and the Service. You may stop using the Service at any time and may request account deletion through support.

10. Disclaimers

To the maximum extent permitted by law, the Service is supplied on an “as is” and “as available” basis. We do not promise uninterrupted operation, fitness for a particular purpose, profitability, accuracy or freedom from every error or security threat. Nothing in these Terms excludes a warranty or right that cannot legally be excluded.

11. Limitation of liability

To the maximum extent permitted by law, we are not liable for indirect, incidental, special, exemplary or consequential loss, loss of profits, trading loss, loss of opportunity, loss of data, or losses caused by market movement, execution delay, device failure, third-party data or unauthorised account use. Where liability cannot be excluded, it is limited to the amount you paid us for the Service during the three months before the event giving rise to the claim. This limitation does not apply where liability cannot legally be limited.

12. Indemnity

To the extent permitted by law, you agree to compensate us for third-party claims and reasonable costs arising from your unlawful use of the Service, infringement of another person’s rights, or material breach of these Terms.

13. Changes and availability

We may update features and these Terms. Material changes will be communicated through the Service or the contact details linked to your account. Continued use after the effective date means you accept the revised Terms. We may discontinue all or part of the Service, subject to mandatory law.

14. Governing law

These Terms are governed by the laws of Malaysia. Subject to any mandatory consumer rights, disputes are subject to the courts of Malaysia. Before filing a claim, please contact us and allow 30 days for a good-faith attempt to resolve it.

15. General

If a provision is unenforceable, the remaining provisions continue. Delay in enforcing a right is not a waiver. You may not transfer your rights without our consent. These Terms, the Privacy Notice and any purchase terms shown to you form the agreement relating to the Service.

16. Contact

Questions, complaints and legal notices: support@duitme.my.

Last updated: 24 September 2026

1. About this notice

This Privacy Notice explains how the operator of DuitMe and the Aurum website and app (“we”, “us” or “our”) collects, uses, discloses, stores and protects personal data when you use the Service. We process personal data in connection with commercial transactions in accordance with applicable Malaysian data-protection law, including the Personal Data Protection Act 2010.

2. Data we collect

• Account data, including your name, email address, account role, access plan, verification status and preferences.
• Authentication data, including a protected password hash, Google account identifier where used, one-time-code records and login-session tokens. We do not store your plain-text password.
• Device and technical data, including IP address, browser, device type, operating mode, approximate location derived from technical information, timestamps, security logs and push-notification subscription identifiers.
• Usage and transaction data, including features used, signal or notification preferences, account actions, support messages, access dates, and billing or entitlement records where applicable.
• Information you voluntarily send to support or an administrator.

3. How we collect data

We collect data directly from you, automatically from your browser or device, from Google when you choose Google sign-in, and from service providers that support authentication, hosting, notifications, security or payments.

4. Why we process data

• To create, authenticate and administer accounts.
• To provide signals, news, reminders, preferences and device notifications.
• To verify and manage access, billing and support requests.
• To secure the Service, prevent abuse, investigate incidents and maintain audit records.
• To monitor and improve reliability, performance and user experience.
• To comply with law, enforce our Terms and establish or defend legal claims.
• To send service messages and, where permitted, promotional communications that you may opt out of.

5. Disclosure

We may disclose only the data reasonably necessary to hosting, email, authentication, push-notification, analytics, security, payment and professional-service providers acting for us; regulators, courts or law-enforcement bodies where legally required; a buyer or successor in a genuine business transfer; and other parties with your direction or consent. We do not sell your personal data.

6. International transfers

Some service providers may process data outside Malaysia. Where this occurs, we take reasonable steps to use appropriate safeguards and require protection consistent with applicable law.

7. Retention

We keep personal data only as long as reasonably required for the purposes above, legal obligations, security, dispute resolution and enforcement. Active account and session data is retained while needed to provide the Service. After account deletion, data is deleted or anonymised within a reasonable period unless law, fraud prevention, backup cycles or a legal claim requires longer retention.

8. Security

We use reasonable administrative and technical measures such as transport encryption, access controls, protected password hashing and session management. No internet service is completely secure, so absolute security cannot be guaranteed. Please use a strong unique password and contact us immediately if you suspect misuse.

9. Cookies and local storage

We use essential cookies or similar browser storage for sign-in sessions, security, preferences, application caching and functionality. Disabling essential storage may prevent parts of the Service from working. If non-essential analytics or advertising technologies are introduced, this notice and any required consent controls should be updated.

10. Notifications

If you enable push notifications, your device supplies a subscription identifier used to deliver signal, result and news alerts according to your preferences. You can disable alerts in Profile settings or through your device or browser settings.

11. Your choices and rights

Subject to applicable law and permitted exceptions, you may request access to or correction of your personal data, withdraw consent where processing relies on consent, object to direct marketing, request account deletion, or ask questions about processing. We may need to verify your identity before fulfilling a request. Withdrawal or deletion may prevent us from providing some features.

12. Required information

Account and authentication data marked or reasonably understood as required is necessary to provide secure access. If you do not provide it, we may be unable to create or operate your account. Optional preferences may be changed at any time.

13. Children

The Service is intended only for persons aged 18 or older. We do not knowingly collect personal data from children. Contact us if you believe a child has provided data.

14. Data breaches

We will investigate suspected personal-data breaches and make notifications to affected individuals or the relevant authority where required by applicable law.

15. Changes to this notice

We may update this notice to reflect changes to the Service, providers or law. The revised date will appear at the top, and material changes may be notified through the Service or your registered contact details.

16. Contact and complaints

To exercise a privacy right or make a complaint, email support@duitme.my. Please describe your request and the account email concerned. You may also contact the Personal Data Protection Commissioner of Malaysia if you are dissatisfied with our response.