Kaki21 Privacy Policy – Our Commitment to Protecting Malaysian Players' Personal Data

Kaki21 ("we", "the kaki21 platform") is an online entertainment service provider operating through kaki21.biz. We understand that your trust is our most valuable asset, and protecting your personal information is the foundation of that trust.

This Privacy Policy describes our privacy practices regarding information we collect through the kaki21 platform — including the website, mobile application (where applicable), and all related communication channels. It applies to all users, including visitors, registered members, and active players on the kaki21 platform in Malaysia.

This Policy is drafted in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and international industry best practices in data protection. We are committed to continually updating and improving our privacy practices in line with technological developments and applicable legal changes.

Kaki21 collects personal information from you in several ways — during registration, during platform use, and through your interactions with our support team. Below is a detailed breakdown of the data we collect:

We may also collect information you provide voluntarily, such as game preferences, satisfaction feedback, and additional profile details you choose to share.

Kaki21 uses your personal data only for legitimate and necessary purposes. We do not use your data for any unrelated purpose without obtaining your consent first. The following are the primary purposes for which your data is used:

• Account Management: Creating and maintaining your kaki21 account, processing your registration, and verifying your identity through the KYC process.
• Transaction Processing: Processing deposits and withdrawals via Malaysian payment methods such as Touch 'n Go eWallet, GrabPay, DuitNow, and FPX including Maybank2u and CIMB Clicks.
• Service Delivery: Giving you access to all games and features on the kaki21 platform, including slots, baccarat, blackjack, Live Casino, and Sports Betting.
• Platform Security: Detecting and preventing fraud, money laundering, unauthorised access, and other suspicious activity that could compromise your account security or the integrity of the platform.
• Customer Support: Responding to your enquiries, complaints, and support requests more efficiently and accurately.
• Platform Communications: Sending important account notifications, updates to Terms & Conditions, and security information. These are mandatory communications that cannot be disabled.
• Marketing (with consent): Sending promotional information, bonuses, and exclusive kaki21 offers, only where you have given consent to receive marketing communications.
• Product Improvement: Analyzing aggregated usage patterns (not individual) to improve platform design, user experience, and game selection.
• Legal Compliance: To fulfil legal and regulatory obligations applicable in Malaysia.

Kaki21 follows a strict policy on data sharing. In summary: we do not sell, rent, or trade your personal data. However, there are limited circumstances in which we may need to share your data with selected third parties:

• Payment Service Providers: To process your financial transactions via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX, the necessary transaction details will be shared with the respective service providers. These providers are bound by their own privacy policies and security standards.
• Game Providers: To enable you to play games from providers such as Evolution Gaming and Pragmatic Play, the minimum technical data required for game operation will be shared. These providers do not have access to your financial information or full identity details.
• Legal Authorities: kaki21 will disclose information when required by Malaysian law, court order, or directive from a competent enforcement authority.
• Fraud Prevention: In cases involving suspected fraud or money laundering, we may share relevant information with financial crime prevention agencies.

All third parties receiving data from kaki21 are bound by strict data protection agreements and may only use that data for the purposes specified.

Protecting your personal data is kaki21's highest technical priority. We continuously invest in state-of-the-art security infrastructure to keep your information safe at all times. The security measures we have in place include:

• 256-Bit SSL Encryption: All communication between your browser and kaki21's servers is encrypted using Transport Layer Security (TLS) with 256-bit keys — the same standard used by leading Malaysian banks such as Maybank and CIMB.
• Stored Data Encryption: Sensitive personal data such as passwords and financial information is stored in encrypted format using the latest hashing algorithms. Even kaki21's internal staff cannot view your original password.
• Internal Access Controls: Only authorised personnel with a legitimate business need may access users' personal data. All internal access is logged and actively monitored.
• Two-Factor Authentication (2FA): kaki21 supports and encourages the use of 2FA on all user accounts as an additional layer of protection.
• Regular Security Audits: The kaki21 platform undergoes regular internal and external security audits to identify and address any potential vulnerabilities.
• Incident Response Plan: kaki21 has clear procedures in place to handle any data breaches. In the event of a breach affecting your data, we will notify you within the timeframe required by law.

Kaki21 uses cookies and similar tracking technologies to enhance your experience on the platform. Cookies are small text files stored on your device when you visit our website.

Below are the cookie categories we use, along with your control options:

* The cookie settings above are a demonstration of available options. To manage your actual cookies, please access the cookie settings via your kaki21 account settings page or through your web browser settings. Disabling certain cookies may affect your platform experience.

As a data subject under Malaysia's Personal Data Protection Act 2010 (PDPA), you hold the following rights, which kaki21 is fully committed to upholding:

To submit any request relating to your data rights, please contact the kaki21 support team by email at support@kaki21.biz, clearly stating the nature of your request. kaki21 is committed to responding to and processing requests within 30 business days.

Kaki21 retains your personal data only for as long as necessary for the purposes stated in this Privacy Policy, or as required by applicable Malaysian law.

• Active Account Data: Retained for the duration your account remains active and in operation on the kaki21 platform.
• Financial & Transaction Data: Retained for a minimum of 7 years from the transaction date, in compliance with Malaysian legal requirements on financial records and anti-money laundering.
• KYC Data (Identity Verification): Retained for 5 years after account closure or the date of the last transaction, whichever is later.
• Communication Logs: Support chat logs are retained for 2 years for quality control and reference purposes.
• Cookie Data: Depending on the type of cookie — session cookies are deleted when the browser is closed, while persistent cookies have varying expiry periods.

Once the relevant retention period has expired, your data will be securely deleted or anonymised in accordance with kaki21's security procedures.

The kaki21 platform is an adult service available only to individuals aged 18 and above. kaki21 does not knowingly collect or process personal data from minors under the age of 18.

If we discover that we have inadvertently collected information from underage children, we will take immediate steps to delete that information and close the account in question. Parents or guardians who become aware that their child has registered on the kaki21 platform are urged to contact us promptly at support@kaki21.biz so that appropriate action can be taken.

Kaki21 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our privacy practices, legal requirements, or technological developments. Any changes will take effect immediately upon publication of the updated version on kaki21.biz.

For changes considered material or significant to the way we handle your personal data, kaki21 will endeavour to notify you via email or in-platform notification at least 14 days before such changes take effect, giving you sufficient time to review and understand them.

The latest update date is always displayed at the top of this document. You may request version history by contacting the kaki21 support team. Continued use of the platform after any amendment is published constitutes acceptance of those changes.

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please contact kaki21's Privacy Officer through the following channels:

• Privacy Email: privacy@kaki21.biz (dedicated to data and privacy enquiries)
• General Support Email: support@kaki21.biz
• Live Chat: Available 24/7 directly on the kaki21 platform
• Support Languages: Bahasa Malaysia and English

We are committed to responding to privacy-related enquiries within 48 business hours. For formal data rights requests (access, correction, deletion), we will process and respond within 30 business days in accordance with Malaysia's PDPA requirements.